Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b7/b3125a-4c1b-4059-a03d-25ed18a71605/1/lSQe0LSbLQfj6JS2GpCwrOXpC58.mft
File:                     lSQe0LSbLQfj6JS2GpCwrOXpC58.mft (raw, json)
Hash identifier:          ZwZ+vugUzjmuMVdddfI0tgHOfEOTNqokvb+CSRM5zB4=
Subject key identifier:   12:12:B6:68:F0:99:A1:6B:DB:CC:08:34:0A:3B:3B:4A:7F:FB:96:B1
Authority key identifier: 95:24:1E:D0:B4:9B:2D:07:E3:E8:94:B6:1A:90:B0:AC:E5:E9:0B:9F
Certificate issuer:       /CN=95241ed0b49b2d07e3e894b61a90b0ace5e90b9f
Certificate serial:       01886C5DDF039C3CC3E32179FCE3E3B2B0EC
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/lSQe0LSbLQfj6JS2GpCwrOXpC58.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/b7/b3125a-4c1b-4059-a03d-25ed18a71605/1/lSQe0LSbLQfj6JS2GpCwrOXpC58.mft
Manifest number:          037C
Signing time:             Tue 30 May 2023 11:14:31 +0000
Manifest this update:     Tue 30 May 2023 11:14:31 +0000
Manifest next update:     Wed 31 May 2023 11:14:31 +0000
Files and hashes:         1: 1-RX4HyonA7Ivqy-KVjjrE98c560.roa (hash: RAP7+npvczsYhscC6ThJ2t0AbK2ED+CxGmurVZot3WQ=)
                          2: lSQe0LSbLQfj6JS2GpCwrOXpC58.crl (hash: ZQOYspyvq7WnvVjCTvURqNEO7/wpLwJjlLsS5uTIF6E=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:88:6c:5d:df:03:9c:3c:c3:e3:21:79:fc:e3:e3:b2:b0:ec
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=95241ed0b49b2d07e3e894b61a90b0ace5e90b9f
        Validity
            Not Before: May 30 11:14:31 2023 GMT
            Not After : May 31 11:14:31 2023 GMT
        Subject: CN=1212b668f099a16bdbcc08340a3b3b4a7ffb96b1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:91:41:f5:0e:9a:b2:da:05:a7:cd:3c:3c:9d:69:
                    15:0d:ea:97:d1:77:18:cb:49:c2:83:38:4c:ef:64:
                    b9:bc:78:ac:9c:c0:68:09:7e:94:35:a2:a6:4d:0f:
                    d1:69:63:70:ee:35:da:ae:63:29:39:0b:a6:13:81:
                    28:20:ee:ce:42:d8:cb:8a:bb:3c:5b:ef:e2:2f:29:
                    93:78:ac:a6:87:50:7e:fb:9b:a4:33:16:1d:5b:64:
                    ee:ca:93:7c:f8:3c:82:f5:1f:36:c0:50:96:d7:3c:
                    d3:5c:e5:a6:2f:27:49:07:9e:48:b2:6f:73:2f:91:
                    b6:15:e1:4c:19:83:59:05:78:11:37:e5:27:df:21:
                    bb:19:b1:2b:d4:6f:d5:3a:de:f5:c5:07:4a:c9:50:
                    f3:ac:1e:05:f3:07:04:46:e8:7e:f2:44:03:b1:1e:
                    4f:a6:d2:bf:55:41:56:00:e7:10:72:98:7f:79:6f:
                    82:4b:16:2e:ac:e0:48:f4:d6:20:99:db:8c:7c:fc:
                    2c:c3:7a:bb:2a:44:13:19:df:29:ab:69:f1:55:dd:
                    7c:ba:27:59:6e:4f:9a:80:db:99:aa:14:11:7a:2c:
                    8c:cd:55:27:66:35:86:b3:55:08:5a:f2:6b:bf:5c:
                    06:1e:5b:6e:18:b5:ef:2b:cf:a9:63:4c:09:75:e8:
                    71:a5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                12:12:B6:68:F0:99:A1:6B:DB:CC:08:34:0A:3B:3B:4A:7F:FB:96:B1
            X509v3 Authority Key Identifier:
                keyid:95:24:1E:D0:B4:9B:2D:07:E3:E8:94:B6:1A:90:B0:AC:E5:E9:0B:9F

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/lSQe0LSbLQfj6JS2GpCwrOXpC58.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b7/b3125a-4c1b-4059-a03d-25ed18a71605/1/lSQe0LSbLQfj6JS2GpCwrOXpC58.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/b7/b3125a-4c1b-4059-a03d-25ed18a71605/1/lSQe0LSbLQfj6JS2GpCwrOXpC58.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         2d:1f:fb:ec:6c:d0:79:3a:49:5d:7b:08:21:9a:87:e4:c9:77:
         61:7e:44:44:2e:e4:25:b5:a3:be:fe:60:fc:f0:57:92:7d:7b:
         df:d5:5a:15:28:6b:a7:1f:37:5e:af:5a:29:c5:b2:e1:81:5d:
         76:f1:ff:83:dd:62:39:80:2b:89:89:f9:ea:77:f9:95:38:d2:
         79:81:3b:5b:a2:e9:4c:1b:ac:2d:62:f1:d1:8f:c6:9d:ce:a9:
         64:f2:76:53:4b:1f:0e:34:2f:13:52:fb:aa:61:45:bc:f8:e3:
         3d:95:c4:f2:65:fc:5a:75:8e:65:41:5d:55:3e:3f:16:47:0f:
         b2:84:6f:2b:66:90:15:fc:b0:de:04:ef:35:59:fe:b7:65:3d:
         b9:51:ca:a3:c9:b5:a4:28:80:3e:2f:dc:b8:60:10:dd:8e:76:
         97:a9:48:55:61:ac:96:ff:bc:85:06:e1:a2:f5:e0:f8:01:60:
         5f:7e:be:fd:3a:68:8d:9a:e7:85:bb:09:90:6d:91:8c:e1:47:
         09:c3:fb:d3:b8:e6:93:c9:dc:e1:38:e9:93:f0:02:e1:c0:e2:
         47:ae:56:e3:a5:d5:5a:b7:20:71:3a:4b:e3:8c:b8:b9:f7:e2:
         ca:5b:5e:f0:4b:90:04:70:07:d6:45:39:36:68:b0:95:fd:2d:
         5b:d2:64:fa
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:51:04 2024 by rpki-client on console-fra.rpki-client.org