Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c4/bd2fdd-52d0-4b75-a2a1-d156490c16a0/1/GkkdyBZZNJjQ7PRDulzDsK7_cYU.mft
File:                     GkkdyBZZNJjQ7PRDulzDsK7_cYU.mft (raw, json)
Hash identifier:          8ON8ssDqUPcXrmg6CA87uykWNKsSaOKJeoi76TvV8Do=
Subject key identifier:   BF:23:99:F8:4E:2F:99:DC:CE:5C:A9:3E:2F:91:C2:B7:1E:22:44:35
Authority key identifier: 1A:49:1D:C8:16:59:34:98:D0:EC:F4:43:BA:5C:C3:B0:AE:FF:71:85
Certificate issuer:       /CN=1a491dc816593498d0ecf443ba5cc3b0aeff7185
Certificate serial:       018532A5EB0C388FCC11E48311C7B0587942
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/GkkdyBZZNJjQ7PRDulzDsK7_cYU.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/c4/bd2fdd-52d0-4b75-a2a1-d156490c16a0/1/GkkdyBZZNJjQ7PRDulzDsK7_cYU.mft
Manifest number:          099F
Signing time:             Wed 21 Dec 2022 03:06:52 +0000
Manifest this update:     Wed 21 Dec 2022 03:06:52 +0000
Manifest next update:     Thu 22 Dec 2022 03:06:52 +0000
Files and hashes:         1: GkkdyBZZNJjQ7PRDulzDsK7_cYU.crl (hash: eELOPZTdI0g/YwKviNFL0GHm4I3ky5nrKT/4WfSS83E=)
                          2: o7iCVg4tdn2NRsJ6Gp0SmdQwbSM.roa (hash: 07znLBa+DON9KcVBRaVn9k/lEXYsuUfLwfj5s6kdBAA=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:85:32:a5:eb:0c:38:8f:cc:11:e4:83:11:c7:b0:58:79:42
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1a491dc816593498d0ecf443ba5cc3b0aeff7185
        Validity
            Not Before: Dec 21 03:06:52 2022 GMT
            Not After : Dec 22 03:06:52 2022 GMT
        Subject: CN=bf2399f84e2f99dcce5ca93e2f91c2b71e224435
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cc:0e:08:69:27:dd:5b:3d:8b:c7:04:05:59:c2:
                    63:23:75:9d:d1:50:90:c7:6e:bf:70:12:b2:c7:06:
                    f2:20:c5:4a:0c:84:b0:37:25:e6:05:03:1f:77:95:
                    f7:f8:28:4f:25:fa:71:1f:c1:f1:9b:5c:7a:5c:72:
                    ca:88:e4:fa:6b:4b:f1:ca:72:e7:b8:0e:ad:c2:8f:
                    54:5a:eb:9d:6b:17:b7:66:cf:39:fe:a9:e4:d6:db:
                    f4:b6:09:0c:64:ee:5b:55:24:1e:6c:fd:b9:52:c0:
                    71:21:1b:7e:83:65:63:59:58:9f:47:29:92:9f:8f:
                    2a:db:0f:2a:3e:de:76:5e:65:35:31:00:46:a4:1e:
                    5b:28:87:02:6a:7f:6a:58:d9:b2:e7:a0:f6:29:0d:
                    52:fe:d5:d0:21:d3:f4:92:bb:9b:c2:9a:97:a7:21:
                    82:a7:78:dc:f2:79:c8:1d:17:d0:77:39:af:30:18:
                    95:4e:b0:22:6b:6b:c3:44:ea:04:a6:5b:24:c5:5c:
                    af:e5:b4:8c:48:8d:81:35:af:eb:03:48:7b:1d:cb:
                    f0:04:d3:1d:6a:f6:b5:23:15:24:fc:b5:1d:42:6d:
                    32:e9:83:b5:2d:d3:36:79:b3:78:7f:56:25:f6:4e:
                    16:e6:77:b5:9b:e2:a6:60:01:c5:d3:68:32:47:f9:
                    d5:1f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BF:23:99:F8:4E:2F:99:DC:CE:5C:A9:3E:2F:91:C2:B7:1E:22:44:35
            X509v3 Authority Key Identifier:
                keyid:1A:49:1D:C8:16:59:34:98:D0:EC:F4:43:BA:5C:C3:B0:AE:FF:71:85

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/GkkdyBZZNJjQ7PRDulzDsK7_cYU.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c4/bd2fdd-52d0-4b75-a2a1-d156490c16a0/1/GkkdyBZZNJjQ7PRDulzDsK7_cYU.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/c4/bd2fdd-52d0-4b75-a2a1-d156490c16a0/1/GkkdyBZZNJjQ7PRDulzDsK7_cYU.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         6b:ba:b4:72:49:9c:28:ef:76:ef:2f:ca:7d:4f:a9:83:4b:fd:
         63:98:b7:9c:6c:eb:06:48:e9:31:a7:4b:78:f5:4f:33:4a:cd:
         f3:a1:0f:a3:2c:61:26:b0:a0:06:42:12:da:6d:f5:59:99:ab:
         8e:9b:56:76:af:8b:52:46:c8:6a:a2:4f:4f:75:cb:bb:ec:03:
         03:bd:d8:bf:67:32:38:38:68:99:be:2b:1a:c5:62:b2:39:e2:
         cd:75:e5:58:6c:bf:46:cf:9a:2d:93:25:0b:78:6a:43:b9:69:
         e6:08:d8:3b:30:d0:c5:af:3e:43:d7:b5:8c:23:2f:c9:76:ce:
         03:c7:a1:49:bd:37:0d:0e:7f:67:97:0e:85:8f:ec:f6:43:4b:
         58:ab:61:cc:a7:b3:a6:25:f3:a6:5e:e1:4e:c4:72:50:14:51:
         77:d1:92:ab:ac:af:fe:be:b8:41:28:4e:63:6e:0d:28:bd:a3:
         86:3d:85:31:48:39:71:16:4f:b2:64:c8:d7:37:4c:7f:03:b9:
         ed:a6:a4:73:30:2e:d4:81:e6:65:4b:f2:46:88:4e:41:81:c1:
         64:d9:fa:f2:d3:8c:6f:07:f2:5c:4d:5c:01:e6:4b:58:93:c4:
         37:2c:ac:29:09:1b:2d:13:9a:61:14:71:71:9c:51:8c:09:a1:
         18:5d:6d:62
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:42:59 2024 by rpki-client on console-ams.rpki-client.org