Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a5/64829d-a344-44d2-9e9d-1dd67c32b06a/1/hbiyHk9fv963FNPhs4pTgXtXKe0.mft
File:                     hbiyHk9fv963FNPhs4pTgXtXKe0.mft (raw, json)
Hash identifier:          1VOUIagGU8SGFAkhOT9utIJyPngGWrce3IwbXlDk/vI=
Subject key identifier:   4E:91:64:CF:F2:51:A4:F0:17:FB:E2:33:F9:BE:19:91:5A:E2:94:A6
Authority key identifier: 85:B8:B2:1E:4F:5F:BF:DE:B7:14:D3:E1:B3:8A:53:81:7B:57:29:ED
Certificate issuer:       /CN=85b8b21e4f5fbfdeb714d3e1b38a53817b5729ed
Certificate serial:       018BD7CA71E4F5E691140CD129C8F7AADD07
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/hbiyHk9fv963FNPhs4pTgXtXKe0.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/a5/64829d-a344-44d2-9e9d-1dd67c32b06a/1/hbiyHk9fv963FNPhs4pTgXtXKe0.mft
Manifest number:          07F0
Signing time:             Thu 16 Nov 2023 11:00:50 +0000
Manifest this update:     Thu 16 Nov 2023 11:00:50 +0000
Manifest next update:     Fri 17 Nov 2023 11:00:50 +0000
Files and hashes:         1: hbiyHk9fv963FNPhs4pTgXtXKe0.crl (hash: btmOM54BPokVneyEPtHir2eiiJOIgYfKtpCaKfNp8gI=)
                          2: txWNx1DLAHjJTWcqfvKywgj95k4.roa (hash: 95feR42nfDxdfzRA/2FgMoOD3FcN0UFHBhOlD2WHfRE=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:8b:d7:ca:71:e4:f5:e6:91:14:0c:d1:29:c8:f7:aa:dd:07
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=85b8b21e4f5fbfdeb714d3e1b38a53817b5729ed
        Validity
            Not Before: Nov 16 11:00:50 2023 GMT
            Not After : Nov 17 11:00:50 2023 GMT
        Subject: CN=4e9164cff251a4f017fbe233f9be19915ae294a6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:98:a7:11:3a:28:9e:0d:2c:d4:df:e8:a4:d7:78:
                    ae:fa:26:b5:b9:a3:93:25:af:10:f7:69:b9:b2:8c:
                    7e:21:10:93:83:fe:56:bb:de:72:ec:34:ae:5d:c6:
                    6b:c8:b9:e4:43:d3:80:9d:3b:bc:7b:92:f4:f4:1a:
                    2f:3d:ca:23:8a:65:97:a5:56:c6:d7:86:79:de:5b:
                    37:6c:99:ba:15:a5:be:38:ad:47:ab:3b:00:3d:18:
                    55:2b:31:bf:33:28:94:01:96:c8:f6:66:ee:22:48:
                    bf:d6:90:78:78:dd:9e:1a:17:2b:9e:58:f5:2f:e4:
                    ac:28:63:1a:ec:43:b9:ff:60:a3:3d:9d:90:c9:35:
                    b7:75:24:a7:d7:e5:0c:04:5d:10:b1:4d:ca:8d:ea:
                    03:f4:4a:8e:98:a2:26:42:14:47:e2:12:d0:3f:20:
                    cd:60:d6:de:61:94:ef:ab:64:4d:e1:54:54:87:4c:
                    e2:84:9a:13:ca:3e:cd:20:d0:d3:f4:31:90:73:6c:
                    fc:a2:f1:93:bb:6a:b9:2f:80:4a:87:82:4f:ee:bb:
                    e6:26:26:81:2c:83:8c:5e:84:db:39:be:c6:d3:61:
                    3a:0a:22:b3:fd:b6:74:66:d1:19:73:f6:71:59:1b:
                    0b:30:17:ae:ef:fe:e7:ce:dd:51:46:e9:a7:3d:77:
                    1f:97
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4E:91:64:CF:F2:51:A4:F0:17:FB:E2:33:F9:BE:19:91:5A:E2:94:A6
            X509v3 Authority Key Identifier:
                keyid:85:B8:B2:1E:4F:5F:BF:DE:B7:14:D3:E1:B3:8A:53:81:7B:57:29:ED

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/hbiyHk9fv963FNPhs4pTgXtXKe0.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a5/64829d-a344-44d2-9e9d-1dd67c32b06a/1/hbiyHk9fv963FNPhs4pTgXtXKe0.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/a5/64829d-a344-44d2-9e9d-1dd67c32b06a/1/hbiyHk9fv963FNPhs4pTgXtXKe0.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         25:ab:3c:bb:1f:67:a8:25:bd:20:e8:43:da:39:41:cb:fd:43:
         03:4a:72:3f:20:bc:69:0f:a9:1f:e8:fc:14:71:48:5e:80:2a:
         da:19:1a:9e:c4:ad:09:0c:e0:15:c6:80:aa:89:61:a4:37:01:
         1e:c5:f3:9c:a1:f6:22:13:ea:41:2a:aa:3d:fc:f6:fc:3e:0c:
         0c:7b:cc:70:06:95:a4:70:0e:6c:7a:6b:d7:27:63:97:bd:a9:
         7b:1e:97:10:eb:b3:ae:4c:a5:ec:6b:d2:b6:dd:83:b8:06:d4:
         a5:9e:24:3d:54:ee:83:9a:18:79:2b:c9:78:e2:f6:f5:e8:11:
         ef:c4:58:c3:50:1b:19:a9:07:2f:14:4e:ac:b5:f7:d2:d8:77:
         b0:7e:ee:b2:18:47:e5:ea:df:a6:01:5a:c6:03:d4:bb:fd:92:
         30:86:e5:ce:31:19:ee:f8:8a:b6:6f:8e:80:e5:85:62:1f:b0:
         4e:21:a1:aa:5a:ef:64:38:ce:19:39:91:93:93:30:8c:c0:ab:
         f1:bf:6e:a1:65:b2:71:c7:d6:62:03:2f:55:41:ba:39:56:8e:
         28:13:26:df:bd:79:72:52:70:8e:bf:b2:3c:43:3c:13:d0:46:
         08:cb:59:1d:71:43:41:da:0a:0a:f2:9d:09:c6:fa:a0:64:62:
         32:a7:a5:6a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:48:26 2024 by rpki-client on console-fra.rpki-client.org