Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ca/ac7b15-c695-4bf3-bdc8-63a68e9473e1/1/BDBt7gKdidTTh8gNgYi7BMgvEsU.mft
File:                     BDBt7gKdidTTh8gNgYi7BMgvEsU.mft (raw, json)
Hash identifier:          eQ3QOxe2XFqvuDVWsKQRtIuJPINWSBAppHY8Rmv8l9E=
Subject key identifier:   E5:6C:F2:07:DE:DC:C8:54:38:2B:5F:65:D0:44:35:A6:FE:50:4A:54
Authority key identifier: 04:30:6D:EE:02:9D:89:D4:D3:87:C8:0D:81:88:BB:04:C8:2F:12:C5
Certificate issuer:       /CN=04306dee029d89d4d387c80d8188bb04c82f12c5
Certificate serial:       018CEDE245183F4D0306C57A277897BE7C0C
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/BDBt7gKdidTTh8gNgYi7BMgvEsU.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/ca/ac7b15-c695-4bf3-bdc8-63a68e9473e1/1/BDBt7gKdidTTh8gNgYi7BMgvEsU.mft
Manifest number:          033F
Signing time:             Tue 09 Jan 2024 11:01:18 +0000
Manifest this update:     Tue 09 Jan 2024 11:01:18 +0000
Manifest next update:     Wed 10 Jan 2024 11:01:18 +0000
Files and hashes:         1: BDBt7gKdidTTh8gNgYi7BMgvEsU.crl (hash: 1ap6wTshidywuk055DwbptBrp8Snfc/M2Szw+zGR6Cc=)
                          2: kuksTqxIg2OEdua46JUW1ib85iI.roa (hash: YR1rcqUcgzTsj0/DeVQjhSydBckovKqOyMcuXIP4bL8=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:8c:ed:e2:45:18:3f:4d:03:06:c5:7a:27:78:97:be:7c:0c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=04306dee029d89d4d387c80d8188bb04c82f12c5
        Validity
            Not Before: Jan  9 11:01:18 2024 GMT
            Not After : Jan 10 11:01:18 2024 GMT
        Subject: CN=e56cf207dedcc854382b5f65d04435a6fe504a54
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:90:ab:72:d2:7b:85:87:1a:5c:69:1a:01:80:cb:
                    e4:a9:e6:5f:c3:2b:04:1f:60:88:b1:55:5b:5a:bd:
                    6b:2a:59:4a:70:5d:b0:bd:7e:8f:f6:3c:9f:2a:8e:
                    2f:e4:3e:c6:a4:b2:fd:92:cb:fb:50:2a:1f:1e:53:
                    34:40:2f:d3:64:04:eb:b5:24:9e:9c:a2:f7:76:70:
                    4b:cd:47:db:1b:d9:97:98:90:da:ff:3d:6f:34:35:
                    a2:8a:92:f6:2c:76:85:df:4b:d8:63:f7:bc:a3:aa:
                    6c:45:b7:53:9f:08:85:ad:3a:ad:6b:bb:48:3b:40:
                    b1:ef:3d:e6:9c:cf:e0:2e:4b:54:74:88:2d:0a:8e:
                    83:7e:a7:a8:3c:e6:12:a5:c0:7d:e5:c7:7e:72:d0:
                    bc:d8:39:aa:54:3b:26:e8:a8:7a:7f:b3:9d:27:d9:
                    06:4e:1f:a5:40:5e:44:45:eb:9e:2a:34:8c:13:6c:
                    54:95:ab:1f:15:8c:7b:1e:af:b3:dd:56:b1:5b:a4:
                    25:49:51:6c:ec:bf:93:62:7d:67:37:df:5d:82:3d:
                    48:90:01:af:ff:07:74:c5:9a:8b:90:aa:e8:83:41:
                    e5:50:3a:7c:b0:9e:ca:06:37:06:69:a4:f6:8f:b1:
                    9b:2f:8e:a2:8c:27:45:d6:70:8a:6a:15:b3:a4:7f:
                    d1:3b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E5:6C:F2:07:DE:DC:C8:54:38:2B:5F:65:D0:44:35:A6:FE:50:4A:54
            X509v3 Authority Key Identifier:
                keyid:04:30:6D:EE:02:9D:89:D4:D3:87:C8:0D:81:88:BB:04:C8:2F:12:C5

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/BDBt7gKdidTTh8gNgYi7BMgvEsU.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ca/ac7b15-c695-4bf3-bdc8-63a68e9473e1/1/BDBt7gKdidTTh8gNgYi7BMgvEsU.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/ca/ac7b15-c695-4bf3-bdc8-63a68e9473e1/1/BDBt7gKdidTTh8gNgYi7BMgvEsU.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         a5:b2:cf:14:41:ba:a6:2f:6b:27:b1:0f:82:4a:fb:98:bb:8a:
         ed:8b:3a:df:91:2f:91:b3:70:82:1e:15:ab:b6:83:52:cc:6f:
         ab:da:17:03:eb:0c:7d:2e:af:96:ae:07:cb:32:99:78:d8:56:
         bf:a6:f3:60:65:9f:6d:2c:22:f7:e8:2a:a8:1e:f3:35:74:40:
         a7:d6:f3:1f:9b:8d:5c:f8:fe:c7:6d:41:6f:55:9d:60:5d:8c:
         a5:06:29:9a:85:77:f3:65:83:83:ee:5b:34:74:1c:2e:63:59:
         76:75:68:45:ca:85:cc:c9:ab:51:7f:51:e7:76:98:4a:a2:f6:
         e1:d4:aa:7a:a9:22:bc:44:10:e4:26:5e:b9:05:b1:81:14:19:
         ad:f8:ed:80:f3:29:4b:56:51:ef:5a:59:f6:51:ee:dc:c3:dc:
         85:87:ee:38:b6:be:2c:24:54:07:b3:99:05:c2:51:37:45:57:
         04:81:df:79:6e:27:d7:ee:fb:04:7f:89:d8:0e:9e:68:d7:11:
         96:2c:bc:7d:e8:31:d9:6e:23:b8:cf:19:61:90:8a:27:26:94:
         ac:24:89:10:22:c7:c2:ab:6e:f6:34:c7:61:ec:92:cf:d0:62:
         b4:d2:ef:6f:98:28:95:a2:14:89:2c:09:7e:42:ab:ed:bd:47:
         59:55:ce:e9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jan 9 19:43:21 2024 by rpki-client on console-ams.rpki-client.org