Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a8/63a610-3306-462e-8899-10630e74f174/1/BSnk3kvBH-2RAaUIJKqk4mOKumo.mft
File:                     BSnk3kvBH-2RAaUIJKqk4mOKumo.mft (raw, json)
Hash identifier:          w47kVvcmaesZRrmBU3TPDuTTrtgsqO4mS4bBVbVPd+I=
Subject key identifier:   B0:48:91:2D:CE:30:30:83:1B:51:1E:29:65:70:2A:FB:E2:FC:36:3B
Authority key identifier: 05:29:E4:DE:4B:C1:1F:ED:91:01:A5:08:24:AA:A4:E2:63:8A:BA:6A
Certificate issuer:       /CN=0529e4de4bc11fed9101a50824aaa4e2638aba6a
Certificate serial:       018C3F6EF405954B10A209450D23A690EBC1
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/BSnk3kvBH-2RAaUIJKqk4mOKumo.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/a8/63a610-3306-462e-8899-10630e74f174/1/BSnk3kvBH-2RAaUIJKqk4mOKumo.mft
Manifest number:          0D44
Signing time:             Wed 06 Dec 2023 14:01:25 +0000
Manifest this update:     Wed 06 Dec 2023 14:01:25 +0000
Manifest next update:     Thu 07 Dec 2023 14:01:25 +0000
Files and hashes:         1: BSnk3kvBH-2RAaUIJKqk4mOKumo.crl (hash: msJ5GrOMVc4nlZBcFBLtdJUoMqM2LScPxfzF8/hgQyQ=)
                          2: yNd0ffShqgA3gWe8cB620KXY--o.roa (hash: jxFAiMRCggXvZNuwKjVs//dDMVm77IxsaQQFW8dSFF4=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:8c:3f:6e:f4:05:95:4b:10:a2:09:45:0d:23:a6:90:eb:c1
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0529e4de4bc11fed9101a50824aaa4e2638aba6a
        Validity
            Not Before: Dec  6 14:01:25 2023 GMT
            Not After : Dec  7 14:01:25 2023 GMT
        Subject: CN=b048912dce3030831b511e2965702afbe2fc363b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:93:9a:22:48:17:15:4c:c3:00:9c:74:83:b8:26:
                    ec:ca:b9:46:2e:49:b0:5a:70:59:a3:98:2f:87:9d:
                    0f:b0:96:1c:7b:d4:c1:5c:4f:c1:63:81:a1:d4:0f:
                    b9:a0:4e:dc:ad:62:61:bc:87:69:d2:60:96:cb:0d:
                    34:1d:2f:82:e8:82:1a:fc:18:05:df:32:9d:41:3d:
                    ef:bf:65:31:63:20:ee:48:87:47:22:14:b5:05:c7:
                    14:43:df:3d:b4:b3:c3:bd:f4:7c:c3:58:c6:51:c5:
                    31:bd:be:cc:08:bb:ae:05:0e:5c:c4:63:aa:95:c9:
                    7e:b5:a1:a2:c2:78:47:d5:0a:ad:7a:40:8b:65:8e:
                    fc:4f:ef:56:34:79:6c:67:47:7e:d7:08:bd:7a:96:
                    fd:6e:67:e2:e5:eb:b1:13:4d:d8:d8:e0:5b:82:29:
                    b3:b6:99:72:83:bf:da:e7:04:38:df:4c:d7:d0:9c:
                    95:0b:ca:aa:4c:ea:e2:69:73:32:d5:d0:af:cd:7c:
                    53:85:05:a5:dd:a0:03:02:a8:5c:f1:65:f5:8a:99:
                    07:fb:80:6d:ae:89:cb:22:c5:b4:7e:df:51:9a:2a:
                    a4:af:3b:95:ac:5c:1e:37:09:64:ae:9d:f5:4b:49:
                    b2:0b:c6:e5:20:bf:de:53:d3:31:07:dd:82:f9:88:
                    6c:83
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B0:48:91:2D:CE:30:30:83:1B:51:1E:29:65:70:2A:FB:E2:FC:36:3B
            X509v3 Authority Key Identifier:
                keyid:05:29:E4:DE:4B:C1:1F:ED:91:01:A5:08:24:AA:A4:E2:63:8A:BA:6A

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/BSnk3kvBH-2RAaUIJKqk4mOKumo.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a8/63a610-3306-462e-8899-10630e74f174/1/BSnk3kvBH-2RAaUIJKqk4mOKumo.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/a8/63a610-3306-462e-8899-10630e74f174/1/BSnk3kvBH-2RAaUIJKqk4mOKumo.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         64:16:6e:84:ab:0e:7b:80:21:92:f9:92:0e:af:ee:1e:22:4a:
         05:02:8e:f7:10:ff:2e:fc:a4:46:43:58:a6:8e:06:e0:92:92:
         dd:12:ec:8b:77:7f:68:90:27:05:2f:97:4b:d0:67:be:cd:48:
         cd:d1:28:78:0b:c5:dc:2e:57:a7:1c:9f:6d:a3:62:a2:d9:30:
         89:ca:da:75:09:1b:f6:84:75:ab:37:33:c8:1d:ea:ec:ef:1c:
         19:58:4d:9f:64:b4:99:ff:e2:09:8d:f7:a9:fd:58:2f:99:23:
         92:76:28:7e:12:4a:d5:53:9f:7f:34:a8:fd:59:1b:a8:19:8c:
         5b:04:45:3b:42:dd:4c:3e:10:f2:44:20:dc:69:a8:1f:33:7e:
         19:73:2a:f5:88:22:8f:b5:8a:70:44:6c:b0:a4:3d:e5:3a:e6:
         06:03:c4:aa:b4:3d:03:3e:eb:5c:c1:90:f2:da:70:85:39:da:
         99:d3:82:82:8a:5d:df:62:73:40:1c:0a:78:c0:dc:7b:b7:c7:
         5b:a7:12:cb:bd:de:af:f2:25:46:ec:08:fd:45:f1:ef:d5:22:
         87:fb:b1:61:08:21:ad:85:78:33:c3:76:ac:64:e2:10:86:96:
         14:cd:c5:e0:0b:a8:68:ae:c6:72:8b:59:e7:1d:d8:08:32:eb:
         01:39:a5:76
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Dec 6 15:45:01 2023 by rpki-client on console-fra.rpki-client.org