Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ae/bab489-8a4e-4602-84b4-a1368eecb82b/1/rIlYIiC1hBejqUWfVcW5R8w1fCU.mft
File:                     rIlYIiC1hBejqUWfVcW5R8w1fCU.mft (raw, json)
Hash identifier:          0UUVd0A5tcE3Lb8F3FTSiqKypTiCd6w4RhqCyoPD08k=
Subject key identifier:   C5:C0:23:86:23:C9:C9:D3:66:1D:58:7F:91:DC:AC:95:5B:36:86:6F
Authority key identifier: AC:89:58:22:20:B5:84:17:A3:A9:45:9F:55:C5:B9:47:CC:35:7C:25
Certificate issuer:       /CN=ac89582220b58417a3a9459f55c5b947cc357c25
Certificate serial:       34697D30
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/rIlYIiC1hBejqUWfVcW5R8w1fCU.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/ae/bab489-8a4e-4602-84b4-a1368eecb82b/1/rIlYIiC1hBejqUWfVcW5R8w1fCU.mft
Manifest number:          09D5
Signing time:             Tue 28 Jun 2022 19:47:04 +0000
Manifest this update:     Tue 28 Jun 2022 19:47:04 +0000
Manifest next update:     Wed 29 Jun 2022 19:47:04 +0000
Files and hashes:         1: 9X-pqN3r-xC8GH7Wu8DSJSJUPA0.roa (hash: OT004gxOihnkrzbEbX7CQVGrCa2pcDEHoVXniJHqn+0=)
                          2: AjM2cO9pBCzu1kQLffRZXhnYEpM.roa (hash: WmndjbtJSi8s6Hu/zCAud/J7Ii0vndkLot4A47GJcRc=)
                          3: BIgYAECqtmWWLZfDmKq4q2zIVKI.roa (hash: S73I5SKc/viVTu46f6Gbh7gtU4IYFPDpdzdkYzZn9jo=)
                          4: F_-tNRuBQPAC4wd6pgfTPIsJqos.roa (hash: no2Z7X26MWCKze0srx2+YchCVE6ztWGlJ/QGvSTLIE0=)
                          5: JvV7r3PHPXz4YMON03U7WWLA8Ac.roa (hash: wgxGF4tf3LSbdwNBh6MfEVUPLgdeahaRpE/du84oJEw=)
                          6: Ls0kCSZbLt5ppnX9UB1JaDXFjcw.roa (hash: hbhICpoBZr/G8iBJYWLiSRC8dnAwBMdQCPVNE9+0OB8=)
                          7: Or_LNd2uIggCWxls1wm_7Rw5mNI.roa (hash: LF4QMBFnZfDma3/f8K3qlldFMewN6514RwFUIBWn47Q=)
                          8: QsuRCljwrELVA3e-QSPdfDWIcs4.roa (hash: IMO9zy/lLVIBmO/phdXNH+AWGVTPArTjpYBPJ0idJFk=)
                          9: Y-59U71h37TavAV5PnrCYHhETFQ.roa (hash: KijNKxToxFhig576f+jOIcorS0tqJxHVHS8y19uVSDI=)
                          10: e1n3zMQpFEt4Dk6msVeWUr4DgDE.roa (hash: KNX9qEQlnbh8p5wvZNuOrdDhGoan4/bwg6Qzuybxx3k=)
                          11: rIlYIiC1hBejqUWfVcW5R8w1fCU.crl (hash: 5b0SUzNmvVR/CJ0+oCsBZgJEp4MXoYOqEL/T5YmtzP4=)
                          12: yl65_yG8PI8B0mzgROgHxn61CbI.roa (hash: T/mRR7yARNHyxolF34M1UU2binRzYljT50NFVhgTuek=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 879328560 (0x34697d30)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=ac89582220b58417a3a9459f55c5b947cc357c25
        Validity
            Not Before: Jun 28 19:47:04 2022 GMT
            Not After : Jun 29 19:47:04 2022 GMT
        Subject: CN=c5c0238623c9c9d3661d587f91dcac955b36866f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ca:84:89:5e:5c:8f:d9:21:df:2b:bf:10:82:cb:
                    77:4e:0b:77:74:6a:71:9c:79:ac:40:7e:75:05:37:
                    60:40:88:3c:a5:a1:e8:27:5a:55:88:4a:12:30:ce:
                    7a:74:ca:58:b8:63:29:3a:0b:55:4c:25:33:55:7b:
                    14:5b:75:f0:cf:90:91:dc:25:00:6e:c2:cd:e2:67:
                    27:42:0d:f4:88:43:69:ff:8a:d8:75:75:af:2b:4d:
                    35:b5:4a:80:a5:24:59:26:5a:62:68:20:1b:95:98:
                    ce:f1:4a:24:86:ce:f9:dc:31:aa:a3:99:c1:6a:c9:
                    4e:30:6b:e3:77:21:fc:95:10:89:2a:c7:33:f3:53:
                    b2:88:55:b9:9c:4b:f1:95:bd:ed:0b:bb:4a:be:fa:
                    a0:78:5e:39:03:95:be:8f:0c:2c:89:53:66:4d:0c:
                    82:52:4a:27:3a:ba:c1:9b:75:f8:e2:ec:89:a6:1d:
                    c1:c0:ba:6c:f3:1b:5d:a3:3d:c2:b1:3e:63:9c:10:
                    2f:8b:07:0a:a5:a2:b2:1e:b7:18:f2:bb:4b:96:3d:
                    7b:3d:a5:2d:16:2f:dd:2f:5b:0c:33:6a:d4:33:cc:
                    c0:b9:de:19:b1:41:21:60:00:97:5a:06:e0:47:05:
                    98:d1:13:f2:b5:22:a3:12:c6:d9:fe:0e:40:a1:d9:
                    36:3f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C5:C0:23:86:23:C9:C9:D3:66:1D:58:7F:91:DC:AC:95:5B:36:86:6F
            X509v3 Authority Key Identifier:
                keyid:AC:89:58:22:20:B5:84:17:A3:A9:45:9F:55:C5:B9:47:CC:35:7C:25

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/rIlYIiC1hBejqUWfVcW5R8w1fCU.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ae/bab489-8a4e-4602-84b4-a1368eecb82b/1/rIlYIiC1hBejqUWfVcW5R8w1fCU.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/ae/bab489-8a4e-4602-84b4-a1368eecb82b/1/rIlYIiC1hBejqUWfVcW5R8w1fCU.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         03:df:2c:a5:c4:ae:ee:88:c8:c2:d3:4c:96:61:2a:93:32:fc:
         8a:7e:90:5c:ff:6f:b2:da:be:4b:4b:8a:a2:c9:1b:55:33:4a:
         43:c5:a2:2a:de:d5:09:7a:1d:55:f3:e9:e7:b1:25:70:dd:4d:
         9c:a9:45:63:71:a0:b2:77:40:78:b0:25:9d:2e:49:a0:0f:5d:
         8c:a0:cc:4f:a4:bb:92:72:00:ca:6a:06:4e:ce:d5:8b:b9:fe:
         97:a6:15:6b:fd:6d:af:8c:82:42:2d:b2:b9:fe:56:82:a7:71:
         4d:b4:e1:26:a1:68:0d:e3:5a:eb:3f:8c:36:11:0b:a7:9f:b6:
         fd:54:23:93:a6:7c:d7:08:53:47:0e:40:77:a8:4d:0e:96:7b:
         e7:ed:84:eb:80:71:ae:71:df:d2:ab:e6:99:8e:61:38:e1:4d:
         c9:70:22:af:0c:6f:15:e9:84:54:67:fd:f1:d7:ad:40:2d:59:
         b9:cb:02:10:2d:57:15:68:9a:df:b8:c5:82:82:0b:c7:17:b7:
         f1:04:a9:2d:54:67:d9:20:7c:72:ef:c8:49:a7:82:56:37:4a:
         ff:25:ba:a1:80:c6:0c:e8:c9:57:c1:1e:01:9a:ca:59:44:18:
         1f:26:fe:83:b5:93:ea:6a:e8:cf:e3:91:88:6c:c3:78:fd:06:
         d4:54:cc:1f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:38:24 2024 by rpki-client on console-ams.rpki-client.org