Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/bf/81db49-fb83-4219-9f89-619d31b554b3/1/sMxKBD0_RfP-q_fsBiBjf0Ya5_g.mft
File:                     sMxKBD0_RfP-q_fsBiBjf0Ya5_g.mft (raw, json)
Hash identifier:          CmSLwSyTFU2sn3o6nVAjQtAjfBfWZrksxrk6U2KUnK4=
Subject key identifier:   B9:7B:57:72:20:E0:03:1A:B5:22:82:05:41:B2:5C:B4:B2:08:F8:B9
Authority key identifier: B0:CC:4A:04:3D:3F:45:F3:FE:AB:F7:EC:06:20:63:7F:46:1A:E7:F8
Certificate issuer:       /CN=b0cc4a043d3f45f3feabf7ec0620637f461ae7f8
Certificate serial:       018BCE2322A8DADFEBE44ED769A225491939
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/sMxKBD0_RfP-q_fsBiBjf0Ya5_g.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/bf/81db49-fb83-4219-9f89-619d31b554b3/1/sMxKBD0_RfP-q_fsBiBjf0Ya5_g.mft
Manifest number:          07EB
Signing time:             Tue 14 Nov 2023 14:01:30 +0000
Manifest this update:     Tue 14 Nov 2023 14:01:30 +0000
Manifest next update:     Wed 15 Nov 2023 14:01:30 +0000
Files and hashes:         1: ZG84Zxn9HQBX4W0xpz9u7wnwlrc.roa (hash: IGGGytLO3rj4U2UUFTmzexvbHKQZnITx2c5wA5LbkPk=)
                          2: sMxKBD0_RfP-q_fsBiBjf0Ya5_g.crl (hash: A/+qH1DoDhx4nIP3uxGbAnzI/HY+2rXZzSyRYn3rSpg=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:8b:ce:23:22:a8:da:df:eb:e4:4e:d7:69:a2:25:49:19:39
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b0cc4a043d3f45f3feabf7ec0620637f461ae7f8
        Validity
            Not Before: Nov 14 14:01:30 2023 GMT
            Not After : Nov 15 14:01:30 2023 GMT
        Subject: CN=b97b577220e0031ab522820541b25cb4b208f8b9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:81:03:74:75:4a:78:cf:1c:8f:b8:18:6a:ff:1a:
                    ba:29:65:92:f6:05:ae:2c:1d:da:e3:0b:a0:35:b9:
                    e0:7f:42:ce:53:0f:ff:a0:2d:d5:3c:7b:60:aa:af:
                    28:f4:d9:23:74:a5:44:cc:e7:b4:99:74:92:a6:28:
                    9d:40:9d:8f:96:33:42:e8:02:71:d7:1f:72:c1:bb:
                    4b:36:48:a3:ad:72:da:99:48:18:ae:25:54:0b:69:
                    a7:ab:b5:a1:ec:c5:a1:c2:17:49:d1:cc:33:e9:e5:
                    85:6e:41:f9:27:ed:7e:7c:b8:4d:80:e5:85:d2:e0:
                    8c:cb:6a:13:27:1a:6b:22:fa:21:85:8f:fa:1b:3b:
                    77:39:38:36:0d:a4:41:72:6d:1f:7e:54:45:07:b0:
                    54:14:bc:fd:cd:3f:89:85:1d:11:84:ea:18:d4:e9:
                    b1:63:8b:49:3b:ea:20:47:ed:72:af:be:79:f1:6a:
                    bb:1c:3c:82:e7:5b:e5:01:a3:ec:14:fd:fd:cf:fd:
                    47:40:3a:fc:58:7a:e8:40:82:5f:e4:b4:24:e6:92:
                    d7:b8:43:3b:91:88:e6:57:f1:42:02:ec:cc:39:af:
                    d5:7b:19:a8:48:c0:1c:49:1f:e0:08:8e:2c:69:2d:
                    64:b4:85:da:08:60:91:ba:bd:d1:61:60:aa:c5:55:
                    7c:27
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B9:7B:57:72:20:E0:03:1A:B5:22:82:05:41:B2:5C:B4:B2:08:F8:B9
            X509v3 Authority Key Identifier:
                keyid:B0:CC:4A:04:3D:3F:45:F3:FE:AB:F7:EC:06:20:63:7F:46:1A:E7:F8

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/sMxKBD0_RfP-q_fsBiBjf0Ya5_g.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/bf/81db49-fb83-4219-9f89-619d31b554b3/1/sMxKBD0_RfP-q_fsBiBjf0Ya5_g.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/bf/81db49-fb83-4219-9f89-619d31b554b3/1/sMxKBD0_RfP-q_fsBiBjf0Ya5_g.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         bf:5d:00:15:f0:14:1f:57:fc:87:d7:90:67:1b:e5:e8:38:47:
         e0:07:22:bc:53:4a:fa:9c:f3:81:d5:4f:77:88:a9:9c:55:08:
         d7:22:d0:60:8f:aa:35:90:0c:f1:32:e0:a4:02:7f:da:45:34:
         a5:fa:08:cb:82:ee:3f:1e:fb:a0:72:09:4f:60:32:5d:44:a0:
         66:19:f4:21:60:f3:97:81:52:e8:95:11:03:62:b9:39:5b:dc:
         b6:5c:49:07:a0:4f:cc:d0:bc:38:6c:09:db:e0:91:39:fd:a0:
         7c:98:40:00:62:4e:e6:b7:db:eb:fc:a0:ad:d5:a2:22:14:8f:
         a7:20:1b:5b:ec:ac:f3:76:09:dc:a5:01:39:46:ef:6c:b8:a5:
         80:5a:a4:ad:0e:1a:a3:47:78:f2:d3:dd:40:d3:20:76:f8:49:
         9d:c8:b3:1f:46:ec:d3:4b:39:2a:03:16:b2:91:41:12:e8:cb:
         50:43:c9:54:99:6f:c9:38:3f:57:34:13:d5:f4:cc:45:47:01:
         61:06:10:fc:51:7b:5e:33:ea:11:37:aa:7a:ed:2e:fd:fa:ee:
         6b:36:41:e4:ee:f8:3d:e9:75:9c:1b:9b:60:30:df:d1:b3:e1:
         9c:36:dc:b3:80:7b:ef:53:c7:49:92:59:0c:75:4f:ec:0e:6f:
         b3:71:7e:4a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:41:50 2024 by rpki-client on console-ams.rpki-client.org