Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9d/42686e-9a13-4c1a-ab93-ba3d8e1f7d27/1/ulhntjrKz3CUDrYtJlPVkyd_bcc.mft
File:                     ulhntjrKz3CUDrYtJlPVkyd_bcc.mft (raw, json)
Hash identifier:          RvxRNfUp2T/OEJC6iUjIrRfmAMtKr4vPyarIUSod+OU=
Subject key identifier:   47:52:69:3B:3C:0A:DE:7A:AD:1E:D4:15:25:AF:CF:04:61:C9:74:08
Authority key identifier: BA:58:67:B6:3A:CA:CF:70:94:0E:B6:2D:26:53:D5:93:27:7F:6D:C7
Certificate issuer:       /CN=ba5867b63acacf70940eb62d2653d593277f6dc7
Certificate serial:       0188906587D4CE230B9D2336E361EFA46262
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/ulhntjrKz3CUDrYtJlPVkyd_bcc.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/9d/42686e-9a13-4c1a-ab93-ba3d8e1f7d27/1/ulhntjrKz3CUDrYtJlPVkyd_bcc.mft
Manifest number:          0DC5
Signing time:             Tue 06 Jun 2023 11:09:12 +0000
Manifest this update:     Tue 06 Jun 2023 11:09:12 +0000
Manifest next update:     Wed 07 Jun 2023 11:09:12 +0000
Files and hashes:         1: a3xKRNKo6MPk0fC1b_5KriiX3zQ.roa (hash: Xazl7rGn2R6XwVlc3yOsvdQtJ8uHfINwdizUYYBk1jE=)
                          2: ulhntjrKz3CUDrYtJlPVkyd_bcc.crl (hash: +H05wcreCqFUO53M2RAaH6VOcAxbxUGrcgDHDN5DXUo=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:88:90:65:87:d4:ce:23:0b:9d:23:36:e3:61:ef:a4:62:62
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=ba5867b63acacf70940eb62d2653d593277f6dc7
        Validity
            Not Before: Jun  6 11:09:12 2023 GMT
            Not After : Jun  7 11:09:12 2023 GMT
        Subject: CN=4752693b3c0ade7aad1ed41525afcf0461c97408
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8e:c3:d0:d6:d1:4c:cc:9d:c3:50:1b:c8:0f:27:
                    18:79:b8:4f:e9:39:64:6a:a5:84:5f:8c:54:0c:0d:
                    14:1f:58:dc:f2:1d:57:fa:8e:c2:86:35:90:16:cd:
                    7f:43:7b:9d:d5:32:0d:50:35:51:49:ff:20:ad:e5:
                    5c:a3:63:a0:6b:86:0c:4f:99:9f:11:63:2b:77:0b:
                    29:a0:6c:6a:e9:49:99:7b:17:b0:d4:4b:a5:6b:76:
                    db:04:bc:e6:cb:c1:e1:d0:dc:f3:38:cb:20:be:fd:
                    30:52:5a:98:8d:38:f8:f8:25:74:be:c2:29:98:6f:
                    1d:28:0b:c6:6b:ed:15:70:59:5a:3f:3a:c7:53:fb:
                    cb:8d:f2:c4:30:ce:61:78:d8:3d:69:e2:23:53:52:
                    81:5a:88:2b:b2:d3:9f:08:65:d4:7e:9a:9c:6c:24:
                    e3:ff:2f:e9:9f:10:dc:f7:cc:bf:c8:37:f9:ea:19:
                    48:ff:cf:b8:35:50:67:3a:c8:a9:ac:47:69:f0:79:
                    b1:fd:21:80:83:ef:c6:0a:a2:ea:d3:12:9e:1f:be:
                    fb:16:26:19:71:5c:02:8c:c4:99:08:e2:08:43:81:
                    15:d1:30:49:61:bd:d9:5b:b7:65:0a:3f:31:7b:dd:
                    af:83:d6:7f:c8:33:56:f0:0f:c4:f6:25:82:da:5b:
                    c5:43
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                47:52:69:3B:3C:0A:DE:7A:AD:1E:D4:15:25:AF:CF:04:61:C9:74:08
            X509v3 Authority Key Identifier:
                keyid:BA:58:67:B6:3A:CA:CF:70:94:0E:B6:2D:26:53:D5:93:27:7F:6D:C7

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ulhntjrKz3CUDrYtJlPVkyd_bcc.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9d/42686e-9a13-4c1a-ab93-ba3d8e1f7d27/1/ulhntjrKz3CUDrYtJlPVkyd_bcc.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/9d/42686e-9a13-4c1a-ab93-ba3d8e1f7d27/1/ulhntjrKz3CUDrYtJlPVkyd_bcc.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         8e:12:96:c5:dc:53:75:4b:bb:78:95:18:a9:d7:9f:c8:14:14:
         83:d7:d6:c0:7e:a7:1f:cb:70:70:2e:05:58:8d:44:ad:4f:06:
         cb:af:6f:e7:33:9f:5b:68:d1:94:05:71:c8:c5:01:41:cb:81:
         7b:52:b1:d4:87:f5:a6:f5:03:e3:e9:2c:69:50:3a:1d:a3:32:
         f7:7b:ff:2e:5e:c3:d3:f5:de:cb:c3:2e:81:30:22:c4:3e:a3:
         a2:1e:8f:04:c4:68:91:8c:f3:9a:88:f9:45:ec:34:cb:34:95:
         05:99:25:a6:f0:f9:93:01:aa:36:14:23:c2:7c:a3:c8:52:e2:
         62:96:43:f7:b4:c8:1e:5d:8b:a0:0d:a4:18:68:bd:53:59:f3:
         2d:07:f1:59:30:c9:81:72:c3:10:9b:08:17:0a:74:a3:ea:96:
         5e:ea:94:de:39:88:b2:83:4a:2c:a5:63:63:86:d8:0e:fc:3f:
         aa:af:c7:91:c2:2a:ee:77:4c:fc:dc:c4:67:f2:93:2d:33:0c:
         05:f4:45:d4:f0:4e:cb:32:05:3a:71:b9:87:26:44:09:ab:5e:
         54:74:fb:ee:bc:88:c0:f3:8b:5b:df:2c:81:5f:97:4f:58:1d:
         aa:d5:01:6b:d0:39:5f:bc:7f:04:f6:49:f4:e8:1b:97:52:4b:
         22:54:7a:42
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:26:13 2024 by rpki-client on console-ams.rpki-client.org