Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b4/ec2163-7d15-4746-8abb-6e367e7bf6db/1/BShRKaQc3HKRtI019vAzrdVZZQY.mft
File:                     BShRKaQc3HKRtI019vAzrdVZZQY.mft (raw, json)
Hash identifier:          YAeqUj8r0vIXIiB76CJO/QKEcPQ9OlzwGHUWPw/dA1g=
Subject key identifier:   01:34:95:B9:E8:5A:DC:1D:77:78:3B:0B:64:94:FF:7A:E6:7D:EB:D3
Authority key identifier: 05:28:51:29:A4:1C:DC:72:91:B4:8D:35:F6:F0:33:AD:D5:59:65:06
Certificate issuer:       /CN=05285129a41cdc7291b48d35f6f033add5596506
Certificate serial:       018C3F00CDA581DE5173D1770334C9CB797F
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/BShRKaQc3HKRtI019vAzrdVZZQY.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/b4/ec2163-7d15-4746-8abb-6e367e7bf6db/1/BShRKaQc3HKRtI019vAzrdVZZQY.mft
Manifest number:          0A53
Signing time:             Wed 06 Dec 2023 12:01:06 +0000
Manifest this update:     Wed 06 Dec 2023 12:01:06 +0000
Manifest next update:     Thu 07 Dec 2023 12:01:06 +0000
Files and hashes:         1: BShRKaQc3HKRtI019vAzrdVZZQY.crl (hash: 9BuxvT+1uRMHDSYMalRA6nrjmBEruSzveF6zzp0y/fw=)
                          2: slQeL4-BaFk8WkacZkN0LqLokFc.roa (hash: 5BLQlVzv1WKuK//niqOr/+SHb4siw6DcmvbQ9uFGYHA=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:8c:3f:00:cd:a5:81:de:51:73:d1:77:03:34:c9:cb:79:7f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=05285129a41cdc7291b48d35f6f033add5596506
        Validity
            Not Before: Dec  6 12:01:06 2023 GMT
            Not After : Dec  7 12:01:06 2023 GMT
        Subject: CN=013495b9e85adc1d77783b0b6494ff7ae67debd3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b5:84:01:d2:e8:04:20:23:73:9e:d1:00:74:62:
                    a4:0c:c6:60:99:f5:3c:c3:b0:6a:d4:bd:db:f1:98:
                    da:a8:23:9d:53:7f:fa:4f:2e:11:d2:bc:01:15:f5:
                    17:49:c1:93:c9:02:50:e8:fc:a2:7d:7b:e6:bb:1b:
                    cb:1d:15:b6:85:29:8b:c5:78:2f:95:19:c7:21:18:
                    71:4f:a9:2c:f6:b6:f5:b3:18:e2:ec:1a:0b:c1:1c:
                    fc:b4:11:65:98:af:51:2c:84:0d:12:32:a6:3a:25:
                    ba:5e:85:36:c9:5f:2d:b3:c6:e2:3a:57:dc:ae:6d:
                    f9:a2:af:08:41:7e:7a:cd:c4:66:aa:a3:c7:48:b4:
                    de:67:cc:0d:a2:42:6d:66:bb:10:5c:c9:d1:07:87:
                    98:9a:0b:fb:50:be:12:bd:2d:c2:4f:09:94:61:df:
                    1c:89:d8:0c:78:36:a7:93:fd:bc:38:b8:e6:da:49:
                    7f:8c:1a:40:87:64:0d:83:39:2c:20:c7:5f:19:24:
                    fa:02:eb:46:fc:06:6c:30:2b:3d:86:67:d4:3f:e2:
                    37:5e:b8:ae:18:a6:d0:ff:7c:13:89:42:e0:0c:27:
                    00:a4:f4:3a:fe:e1:6f:8e:95:99:89:45:a2:b9:ad:
                    51:76:02:90:ef:91:a9:59:4d:4c:98:6f:f7:fe:1c:
                    5c:5d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                01:34:95:B9:E8:5A:DC:1D:77:78:3B:0B:64:94:FF:7A:E6:7D:EB:D3
            X509v3 Authority Key Identifier:
                keyid:05:28:51:29:A4:1C:DC:72:91:B4:8D:35:F6:F0:33:AD:D5:59:65:06

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/BShRKaQc3HKRtI019vAzrdVZZQY.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b4/ec2163-7d15-4746-8abb-6e367e7bf6db/1/BShRKaQc3HKRtI019vAzrdVZZQY.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/b4/ec2163-7d15-4746-8abb-6e367e7bf6db/1/BShRKaQc3HKRtI019vAzrdVZZQY.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         72:26:4f:d6:36:47:5b:61:39:eb:61:43:03:bf:6e:a3:12:e0:
         d3:49:49:72:08:c3:25:c7:9f:25:23:c2:fa:ea:0f:c7:9d:93:
         6a:13:2f:0d:57:ff:9a:e4:01:96:c0:06:cb:03:be:6e:b6:68:
         e3:45:fa:19:9e:f1:26:7d:a1:ca:46:a1:c5:89:8e:20:e2:8c:
         87:e7:e4:05:b5:71:36:7a:85:f4:38:79:bd:81:6f:c6:bb:aa:
         d0:cc:df:c3:ae:ba:e5:0e:46:ae:5a:5a:67:6c:c7:b0:7e:80:
         5e:e1:e3:50:32:a4:8a:21:e1:3b:95:89:e8:e7:c8:48:67:be:
         f7:00:ad:2f:e5:56:60:f6:0c:b7:43:15:e4:c5:17:d5:dd:6d:
         a0:1c:58:99:88:1d:ff:16:14:93:dc:66:f0:08:9c:87:96:20:
         b1:4a:05:61:07:c6:2e:5b:d0:77:6c:0f:ae:6f:cc:87:73:c5:
         e1:eb:18:47:10:c9:be:89:3b:be:c5:4f:04:37:74:f9:c3:6f:
         77:1f:b7:6c:43:be:6b:6c:ff:e6:4d:46:b0:ae:9f:1c:69:f0:
         b8:4d:91:56:9f:b9:e9:11:66:5f:af:9e:c4:48:9f:a0:d8:7f:
         67:5d:43:a6:9d:0e:cf:b1:de:c6:7b:aa:5d:41:15:be:74:18:
         c4:c3:d8:48
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Dec 6 14:55:50 2023 by rpki-client on console-ams.rpki-client.org