Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a4/bfc4e2-d7f4-4cf7-92f4-31f2742af2de/1/wq6rUi8EO4jAUH8F-GSzvV7ELFc.mft
File:                     wq6rUi8EO4jAUH8F-GSzvV7ELFc.mft (raw, json)
Hash identifier:          5sMAu6Hwj/a0UMRzVDQdSvpNCTU2d9nx+GxGc1NvJ+o=
Subject key identifier:   3F:F9:F3:06:1B:8C:6E:FB:F4:94:0E:D3:4B:F5:8E:1C:28:7C:49:38
Authority key identifier: C2:AE:AB:52:2F:04:3B:88:C0:50:7F:05:F8:64:B3:BD:5E:C4:2C:57
Certificate issuer:       /CN=c2aeab522f043b88c0507f05f864b3bd5ec42c57
Certificate serial:       019367EC13AF087AA496E6B1AB271D4E2A4D
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/wq6rUi8EO4jAUH8F-GSzvV7ELFc.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/a4/bfc4e2-d7f4-4cf7-92f4-31f2742af2de/1/wq6rUi8EO4jAUH8F-GSzvV7ELFc.mft
Manifest number:          1379
Signing time:             Tue 26 Nov 2024 10:02:24 +0000
Manifest this update:     Tue 26 Nov 2024 10:02:24 +0000
Manifest next update:     Wed 27 Nov 2024 10:02:24 +0000
Files and hashes:         1: RaJeMyJ17K-0c8bz6_IAt-TCq9k.roa (hash: tX4sWvDL6tqhr+9xX2ZviaShC2Yq0Ho5olzZwI02zKA=)
                          2: wq6rUi8EO4jAUH8F-GSzvV7ELFc.crl (hash: yC+5PUZQFrgMWsbaC077vf7gAokMnwlIQb5ISNxguIU=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:93:67:ec:13:af:08:7a:a4:96:e6:b1:ab:27:1d:4e:2a:4d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c2aeab522f043b88c0507f05f864b3bd5ec42c57
        Validity
            Not Before: Nov 26 10:02:24 2024 GMT
            Not After : Nov 27 10:02:24 2024 GMT
        Subject: CN=3ff9f3061b8c6efbf4940ed34bf58e1c287c4938
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:f0:e0:56:ec:96:b0:5e:2d:ec:07:56:8e:27:3b:
                    c1:5c:ba:c6:f1:85:fd:fa:22:52:63:33:8d:14:f6:
                    a9:38:d9:3f:53:01:3e:fd:97:c2:6c:27:a4:8c:86:
                    c6:6f:cc:d3:3e:11:74:b0:71:1a:21:5e:75:8b:60:
                    d2:2b:93:6e:14:bf:e3:85:72:0a:a8:38:1b:88:dc:
                    a2:a9:c9:1a:0e:93:2c:ec:73:0d:aa:a8:c1:83:07:
                    c0:74:82:25:a7:82:18:aa:11:6d:8d:4a:68:3a:b4:
                    c2:15:27:a9:6a:18:8b:dd:d3:7a:35:54:6d:e5:9a:
                    13:98:fc:8c:73:a1:4e:a4:ae:2e:37:f4:fa:13:81:
                    64:12:5f:b2:e8:9e:70:10:48:c4:4c:71:56:2d:84:
                    80:30:49:b2:14:4d:0f:2c:16:91:6e:e3:a0:46:60:
                    1b:ff:70:73:2a:95:2d:1d:5d:4d:65:97:23:e4:95:
                    82:ed:9b:20:07:b7:00:e5:fb:7e:4e:72:4a:57:9a:
                    34:1d:06:3e:33:ff:b7:97:c7:18:18:bd:6d:bb:e0:
                    a7:10:a4:ad:7a:79:d2:5f:f2:70:c5:c6:a5:84:5f:
                    71:6c:da:45:ae:68:aa:0d:45:66:ff:4b:3b:33:b3:
                    cd:32:41:bc:af:b1:2e:6d:fc:8a:f8:1f:2d:e8:ed:
                    de:ad
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3F:F9:F3:06:1B:8C:6E:FB:F4:94:0E:D3:4B:F5:8E:1C:28:7C:49:38
            X509v3 Authority Key Identifier:
                keyid:C2:AE:AB:52:2F:04:3B:88:C0:50:7F:05:F8:64:B3:BD:5E:C4:2C:57

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/wq6rUi8EO4jAUH8F-GSzvV7ELFc.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a4/bfc4e2-d7f4-4cf7-92f4-31f2742af2de/1/wq6rUi8EO4jAUH8F-GSzvV7ELFc.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/a4/bfc4e2-d7f4-4cf7-92f4-31f2742af2de/1/wq6rUi8EO4jAUH8F-GSzvV7ELFc.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         0c:90:b0:87:e5:f9:b4:6c:c0:ac:36:9d:36:f5:86:ef:06:63:
         ae:1d:81:39:60:58:1d:23:12:68:c7:4e:76:bb:bf:5f:c8:dd:
         db:92:a6:bb:23:3e:7e:10:18:f8:02:81:87:7d:b4:ab:89:ca:
         af:32:30:f5:20:e3:4d:39:c5:d3:b7:5d:f7:73:4c:31:2e:dc:
         92:26:a1:63:72:9f:21:24:0a:54:06:58:75:41:b0:18:29:33:
         fb:88:05:56:01:35:4b:c0:7e:2a:e7:9c:df:ab:a9:4c:7f:ca:
         b4:cb:5c:62:40:6c:fb:d9:43:fe:71:65:5b:21:18:18:ce:6c:
         0e:db:00:af:68:13:68:af:97:51:fe:cf:a5:95:89:d2:c9:e0:
         57:e8:1a:72:5e:c1:c2:7d:79:03:be:85:62:f7:5c:0d:ee:75:
         51:34:45:5e:0e:ba:51:65:69:e5:5d:96:64:de:e2:ab:31:2f:
         9a:e2:2e:a6:7e:77:bf:d2:55:56:43:5c:be:d4:64:b1:da:ad:
         48:ce:92:6b:91:fd:30:5c:27:80:20:99:47:f0:66:59:e2:cf:
         6b:fe:82:e3:2e:de:17:14:1e:e5:93:e8:67:db:dc:8d:5f:de:
         72:5d:c1:f0:0e:e7:8d:b6:21:bb:e9:8e:1d:ba:f4:fc:f6:e8:
         0b:65:9f:8f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 26 13:35:56 2024 by rpki-client on console-fra.rpki-client.org