Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/be/5be0bd-695b-453c-9bf4-a6ecb89918b4/1/neaMAoVPncZ4WRIklSKrdQmTfkg.mft
File:                     neaMAoVPncZ4WRIklSKrdQmTfkg.mft (raw, json)
Hash identifier:          1DpZgOqx4E7LW0h/w96mLGsknLPQ2pcE98RJaf5pCu0=
Subject key identifier:   03:28:AF:E9:6D:EB:AC:54:9B:01:C6:E1:AF:B3:9D:E6:9C:9F:69:8B
Authority key identifier: 9D:E6:8C:02:85:4F:9D:C6:78:59:12:24:95:22:AB:75:09:93:7E:48
Certificate issuer:       /CN=9de68c02854f9dc6785912249522ab7509937e48
Certificate serial:       018BA4B8A513086E9D0D63EDA15E31A59500
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/neaMAoVPncZ4WRIklSKrdQmTfkg.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/be/5be0bd-695b-453c-9bf4-a6ecb89918b4/1/neaMAoVPncZ4WRIklSKrdQmTfkg.mft
Manifest number:          085E
Signing time:             Mon 06 Nov 2023 13:00:46 +0000
Manifest this update:     Mon 06 Nov 2023 13:00:46 +0000
Manifest next update:     Tue 07 Nov 2023 13:00:46 +0000
Files and hashes:         1: TY1HYzYXnjTXfpQfJhcVfpo6mso.roa (hash: TlLy9wbNtCCm6xMOGCv9548F8r5TkcEB8O1cSFzzZfI=)
                          2: cKbMhW8KnklH3RhFX6dyfANHtvo.roa (hash: DV6na/ZhAR4OhHyP7EuV1zI9X6EaynT0j930pQX/cmY=)
                          3: neaMAoVPncZ4WRIklSKrdQmTfkg.crl (hash: LgAgQJY/zj2vCosVLYjybleOV8GeeO/wKWnofvMGI2I=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:8b:a4:b8:a5:13:08:6e:9d:0d:63:ed:a1:5e:31:a5:95:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9de68c02854f9dc6785912249522ab7509937e48
        Validity
            Not Before: Nov  6 13:00:46 2023 GMT
            Not After : Nov  7 13:00:46 2023 GMT
        Subject: CN=0328afe96debac549b01c6e1afb39de69c9f698b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a2:90:1f:0f:68:0d:c2:eb:24:d5:a6:d0:99:26:
                    eb:12:c0:64:3d:e1:7f:5e:75:93:5a:ca:94:c2:65:
                    1a:44:f2:ec:23:df:a4:ac:db:59:b1:09:25:c9:2a:
                    b3:f9:12:ff:cb:7e:b6:23:1c:07:f3:4c:99:1c:bc:
                    78:b5:57:54:e7:7a:fc:25:19:99:37:cf:f3:c2:81:
                    4f:fb:f6:48:a4:02:41:f0:b4:cc:e2:ad:45:73:01:
                    2d:e7:9b:93:49:7f:8c:cf:55:ba:3e:50:48:7f:bc:
                    e3:23:2f:86:2b:37:e5:95:75:d6:cd:d7:ad:49:3c:
                    b7:41:6c:ca:bd:1e:a2:1f:e4:76:27:89:7d:8f:d5:
                    af:e6:45:02:8e:1d:cd:3f:88:41:90:3a:2b:c8:36:
                    49:4c:19:44:c6:39:39:c3:e5:a3:3e:16:6e:d2:d7:
                    48:e8:9c:67:f7:48:69:d4:a0:c4:96:31:c2:12:11:
                    ae:ed:7f:51:57:2c:36:64:45:90:2b:04:d4:cc:dd:
                    c3:9b:b6:64:11:a4:b3:97:87:0e:f4:82:e1:df:de:
                    d3:69:5d:7e:b8:67:a0:14:44:3d:db:dc:0d:a3:2a:
                    f2:5f:ec:54:24:a1:d8:15:8c:23:c8:a1:35:c5:10:
                    95:2d:57:92:01:84:4b:00:f9:6d:4b:fe:c5:20:b3:
                    e0:55
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                03:28:AF:E9:6D:EB:AC:54:9B:01:C6:E1:AF:B3:9D:E6:9C:9F:69:8B
            X509v3 Authority Key Identifier:
                keyid:9D:E6:8C:02:85:4F:9D:C6:78:59:12:24:95:22:AB:75:09:93:7E:48

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/neaMAoVPncZ4WRIklSKrdQmTfkg.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/be/5be0bd-695b-453c-9bf4-a6ecb89918b4/1/neaMAoVPncZ4WRIklSKrdQmTfkg.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/be/5be0bd-695b-453c-9bf4-a6ecb89918b4/1/neaMAoVPncZ4WRIklSKrdQmTfkg.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         65:71:c5:7a:37:6f:0b:50:ef:43:b6:8f:3e:95:a7:b3:b8:b7:
         ac:63:fd:ce:b9:81:f2:44:f2:5a:15:22:a0:3b:7d:f6:3e:37:
         b1:3b:fe:2a:5d:21:af:3b:75:fe:0c:1d:5b:24:8b:22:01:d8:
         37:d5:93:60:b9:65:d1:83:84:6f:50:1e:84:18:2a:7d:f4:c8:
         ba:3c:e0:79:cd:71:ab:07:62:f7:02:55:c3:8c:7a:f5:d6:9f:
         e5:d2:2e:1e:54:7c:8d:0c:fc:34:14:75:44:88:01:b4:8c:cb:
         74:00:6d:14:29:c4:78:c0:bc:82:a5:10:b0:a3:fc:4e:38:65:
         f6:84:b8:dd:20:d9:5e:bf:ea:83:b2:d1:a9:01:ad:fd:16:93:
         7e:ed:52:ec:34:f8:a7:87:54:a0:b5:04:5b:4f:89:14:1e:64:
         15:6d:c2:86:e0:77:d0:08:fc:49:2c:46:16:bb:28:7e:5e:58:
         50:e6:fa:a2:2b:54:e3:93:e7:d6:7d:31:34:18:a5:ca:fc:69:
         b0:6d:4d:ed:23:c7:a7:21:2c:da:22:1d:79:24:45:e7:16:fa:
         c6:dc:9f:c0:62:26:38:18:e4:e5:fe:68:d6:2c:e9:e9:c1:8e:
         41:ca:d0:ad:20:9c:f1:11:7c:b6:1e:4c:17:c3:27:a1:8b:e8:
         06:d3:90:84
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:52:03 2024 by rpki-client on console-fra.rpki-client.org