Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c3/6cf2e6-b083-4afd-8cc7-20a1173589df/1/nji8LhQvvr5b1Vdequ77n3iQ3Ws.mft
File:                     nji8LhQvvr5b1Vdequ77n3iQ3Ws.mft (raw, json)
Hash identifier:          ryeOyaW1v/pquEUEfgF9vMuzMnYXjdlPZjoP53gRoa8=
Subject key identifier:   DE:6B:99:1F:9C:74:6B:58:A8:85:18:BE:CF:A9:E2:8B:D2:57:2B:00
Authority key identifier: 9E:38:BC:2E:14:2F:BE:BE:5B:D5:57:5E:AA:EE:FB:9F:78:90:DD:6B
Certificate issuer:       /CN=9e38bc2e142fbebe5bd5575eaaeefb9f7890dd6b
Certificate serial:       0187A2B0CF186455EB5F1C7A2CB1A97366E2
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/nji8LhQvvr5b1Vdequ77n3iQ3Ws.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/c3/6cf2e6-b083-4afd-8cc7-20a1173589df/1/nji8LhQvvr5b1Vdequ77n3iQ3Ws.mft
Manifest number:          0926
Signing time:             Fri 21 Apr 2023 07:21:48 +0000
Manifest this update:     Fri 21 Apr 2023 07:21:48 +0000
Manifest next update:     Sat 22 Apr 2023 07:21:48 +0000
Files and hashes:         1: B4VZUfm-LxiRNY7xnjqCNLQLdRE.roa (hash: kNCSNEU0658ldUGsQKOUgCITyaEuXTlBl/b7GbgMi/I=)
                          2: nji8LhQvvr5b1Vdequ77n3iQ3Ws.crl (hash: T1RDd3QQyL1INc3qa+KJ/IDCm1+onf/O8OBX/CqSP0o=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:87:a2:b0:cf:18:64:55:eb:5f:1c:7a:2c:b1:a9:73:66:e2
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9e38bc2e142fbebe5bd5575eaaeefb9f7890dd6b
        Validity
            Not Before: Apr 21 07:21:48 2023 GMT
            Not After : Apr 22 07:21:48 2023 GMT
        Subject: CN=de6b991f9c746b58a88518becfa9e28bd2572b00
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8b:62:63:df:69:92:fc:45:0e:4f:c6:b6:b0:2e:
                    e3:8a:cd:f3:86:c6:94:2a:c2:95:3a:5a:b7:e8:ff:
                    fa:eb:f7:92:5e:dc:aa:9d:86:e8:40:c5:01:eb:af:
                    12:f4:e6:3d:2c:41:e9:88:41:47:11:1a:6d:a8:26:
                    a7:52:f3:b2:63:20:b8:23:37:35:c1:96:75:a4:d0:
                    4e:74:0b:53:e9:ab:33:c3:40:9f:f8:ea:12:e4:56:
                    7a:8a:ca:a9:2f:15:f9:1b:d3:83:2d:3a:3b:bc:50:
                    3f:09:b7:5e:fa:42:8a:38:d1:9a:64:f2:b4:fa:73:
                    2f:0f:92:8a:61:41:61:b8:f4:f8:a6:04:de:4c:66:
                    c7:52:e6:e9:7e:98:1d:65:b6:5a:b9:e0:78:25:bc:
                    2e:3a:b6:08:60:47:f4:47:ad:5b:16:86:c0:30:5f:
                    5d:83:c2:4c:11:e7:dc:cb:fc:c4:c7:b6:38:bf:7c:
                    c9:bf:72:17:f0:f9:6b:36:cd:e1:0f:d0:b8:d0:dd:
                    46:b3:99:87:bc:58:cc:5d:ab:f4:af:06:ab:b7:ed:
                    95:34:f8:7c:c7:a0:35:d6:70:eb:a1:eb:8e:2c:88:
                    ce:66:4d:c9:1b:8e:f3:08:57:cb:59:2c:b4:c3:cd:
                    3c:93:24:30:f8:93:e3:28:6d:ae:17:12:26:7a:3c:
                    40:37
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DE:6B:99:1F:9C:74:6B:58:A8:85:18:BE:CF:A9:E2:8B:D2:57:2B:00
            X509v3 Authority Key Identifier:
                keyid:9E:38:BC:2E:14:2F:BE:BE:5B:D5:57:5E:AA:EE:FB:9F:78:90:DD:6B

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/nji8LhQvvr5b1Vdequ77n3iQ3Ws.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c3/6cf2e6-b083-4afd-8cc7-20a1173589df/1/nji8LhQvvr5b1Vdequ77n3iQ3Ws.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/c3/6cf2e6-b083-4afd-8cc7-20a1173589df/1/nji8LhQvvr5b1Vdequ77n3iQ3Ws.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         88:f4:0f:55:ef:71:e8:4e:80:26:6b:a4:e5:9e:d9:7a:f3:4f:
         30:bc:be:fd:cf:b5:a6:35:61:67:4a:f3:a3:89:59:ec:c0:2a:
         14:a1:4d:ec:23:84:04:a7:b6:15:59:35:62:b1:f2:ec:3f:ef:
         5d:08:ef:0a:72:f9:19:82:c8:41:49:08:e2:8f:76:35:a5:e9:
         70:89:07:a5:39:b6:cd:34:de:d0:b6:80:40:2c:5d:5f:53:a7:
         af:d0:15:51:81:1a:7e:f1:ce:30:a7:15:6d:76:62:e5:97:30:
         dc:7e:a4:c7:5c:79:b2:9d:b5:8e:98:b0:05:59:38:d4:f1:c4:
         ff:05:0e:d5:5b:e0:19:cc:2f:6d:6b:d1:1a:02:40:91:d3:15:
         af:33:81:d5:5c:4a:ca:0f:b3:4e:e5:b0:fd:d3:6f:28:52:26:
         81:7b:b2:97:15:10:a4:8d:a7:dc:29:ff:8a:13:e7:1a:2e:0f:
         7b:b7:aa:51:e7:56:e9:35:cf:be:34:ea:8d:a8:f5:6f:70:47:
         c6:cd:be:e9:cd:4e:78:f8:79:5c:e1:3a:4d:03:1a:08:33:78:
         1f:d1:0d:86:13:87:de:b8:e5:6a:19:f7:c9:b1:56:fb:6e:3e:
         6f:96:4d:7a:36:95:f3:78:99:81:82:d0:52:98:90:2f:4f:36:
         e9:12:75:6a
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAYeisM8YZFXrXxx6LLGpc2biMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDllMzhiYzJlMTQyZmJlYmU1YmQ1NTc1ZWFhZWVmYjlmNzg5
MGRkNmIwHhcNMjMwNDIxMDcyMTQ4WhcNMjMwNDIyMDcyMTQ4WjAzMTEwLwYDVQQD
EyhkZTZiOTkxZjljNzQ2YjU4YTg4NTE4YmVjZmE5ZTI4YmQyNTcyYjAwMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAi2Jj32mS/EUOT8a2sC7jis3zhsaU
KsKVOlq36P/66/eSXtyqnYboQMUB668S9OY9LEHpiEFHERptqCanUvOyYyC4Izc1
wZZ1pNBOdAtT6aszw0Cf+OoS5FZ6isqpLxX5G9ODLTo7vFA/Cbde+kKKONGaZPK0
+nMvD5KKYUFhuPT4pgTeTGbHUubpfpgdZbZaueB4JbwuOrYIYEf0R61bFobAMF9d
g8JMEefcy/zEx7Y4v3zJv3IX8PlrNs3hD9C40N1Gs5mHvFjMXav0rwart+2VNPh8
x6A11nDroeuOLIjOZk3JG47zCFfLWSy0w808kyQw+JPjKG2uFxImejxANwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFN5rmR+cdGtYqIUYvs+p4ovSVysAMB8GA1UdIwQY
MBaAFJ44vC4UL76+W9VXXqru+594kN1rMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvbmppOExoUXZ2cjViMVZkZXF1NzduM2lRM1dzLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jMy82Y2YyZTYtYjA4My00YWZkLThjYzct
MjBhMTE3MzU4OWRmLzEvbmppOExoUXZ2cjViMVZkZXF1NzduM2lRM1dzLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9jMy82Y2YyZTYtYjA4My00YWZkLThjYzctMjBhMTE3MzU4OWRm
LzEvbmppOExoUXZ2cjViMVZkZXF1NzduM2lRM1dzLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAiPQPVe9x
6E6AJmuk5Z7ZevNPMLy+/c+1pjVhZ0rzo4lZ7MAqFKFN7COEBKe2FVk1YrHy7D/v
XQjvCnL5GYLIQUkI4o92NaXpcIkHpTm2zTTe0LaAQCxdX1Onr9AVUYEafvHOMKcV
bXZi5Zcw3H6kx1x5sp21jpiwBVk41PHE/wUO1VvgGcwvbWvRGgJAkdMVrzOB1VxK
yg+zTuWw/dNvKFImgXuylxUQpI2n3Cn/ihPnGi4Pe7eqUedW6TXPvjTqjaj1b3BH
xs2+6c1OePh5XOE6TQMaCDN4H9ENhhOH3rjlahn3ybFW+24+b5ZNejaV83iZgYLQ
UpiQL0826RJ1ag==
-----END CERTIFICATE-----
Generated at Thu Jun 6 17:52:50 2024 by rpki-client on console-fra.rpki-client.org