Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/cf/894db9-488a-4b14-980e-df8536531711/1/BKrqPvYZN523HUdrO5C74qbv0DY.mft
File:                     BKrqPvYZN523HUdrO5C74qbv0DY.mft (raw, json)
Hash identifier:          G0MveQUgB8FgZ0Y1TL/KRfqE+l1yOGWljzzySSJHjs8=
Subject key identifier:   21:66:CB:A9:85:69:39:AF:EF:25:32:5D:55:BE:A2:D8:82:91:3C:1A
Authority key identifier: 04:AA:EA:3E:F6:19:37:9D:B7:1D:47:6B:3B:90:BB:E2:A6:EF:D0:36
Certificate issuer:       /CN=04aaea3ef619379db71d476b3b90bbe2a6efd036
Certificate serial:       0186304F6A2D357A0A97FF4388FA34A525F0
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/BKrqPvYZN523HUdrO5C74qbv0DY.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/cf/894db9-488a-4b14-980e-df8536531711/1/BKrqPvYZN523HUdrO5C74qbv0DY.mft
Manifest number:          01E1
Signing time:             Wed 08 Feb 2023 09:15:56 +0000
Manifest this update:     Wed 08 Feb 2023 09:15:56 +0000
Manifest next update:     Thu 09 Feb 2023 09:15:56 +0000
Files and hashes:         1: 0_QXPpaJw7C2ZxuYrtoLTQ2dqRk.roa (hash: XTrn14KbsngPjhXOhqBPlrZAVoqKjFr77rx5GueUSXU=)
                          2: BKrqPvYZN523HUdrO5C74qbv0DY.crl (hash: FfnGuCrfp1hW8HRWWBMiNJabh/zIbXtoTkTJSDhOScU=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:86:30:4f:6a:2d:35:7a:0a:97:ff:43:88:fa:34:a5:25:f0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=04aaea3ef619379db71d476b3b90bbe2a6efd036
        Validity
            Not Before: Feb  8 09:15:56 2023 GMT
            Not After : Feb  9 09:15:56 2023 GMT
        Subject: CN=2166cba9856939afef25325d55bea2d882913c1a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c0:d1:9d:66:94:4b:59:8a:29:e3:d4:33:a0:88:
                    10:57:09:cd:52:d0:95:04:0d:30:19:f8:94:93:49:
                    3a:4c:33:86:72:1d:27:64:21:fe:dc:fa:02:29:b6:
                    bb:2d:39:04:fd:ca:e5:9b:8d:f8:7c:db:76:69:32:
                    c8:ef:f0:7b:ac:f0:20:5f:f2:98:dc:cd:2a:f6:34:
                    3e:05:15:73:7c:96:48:9f:5c:58:1a:f6:55:4a:ac:
                    09:09:8a:f6:93:2f:11:4f:f4:b0:ab:d4:12:6c:10:
                    3d:11:49:74:aa:4e:12:7d:80:36:28:32:e9:c1:56:
                    c0:29:c8:89:80:d3:f0:8f:25:51:0a:e1:dd:33:7e:
                    f7:8e:c9:86:c9:97:96:a9:e5:ef:d9:78:51:10:c4:
                    5b:6c:ac:f0:66:33:6f:f3:5e:4b:74:eb:d0:1f:32:
                    7f:6c:79:48:3b:15:4e:b7:27:5e:be:93:68:e1:ba:
                    82:e4:0d:50:93:01:7e:3a:b4:47:a2:85:1b:cb:9c:
                    49:65:84:ed:24:e4:bf:59:fc:9d:88:83:df:45:55:
                    ab:e9:d1:88:54:38:9c:ec:53:76:c5:e4:b3:bc:b6:
                    3a:39:3d:7b:88:91:07:1b:b1:83:1b:df:b2:d9:1f:
                    6c:df:bc:98:fb:62:83:75:e7:58:37:33:8c:4e:b6:
                    7b:53
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                21:66:CB:A9:85:69:39:AF:EF:25:32:5D:55:BE:A2:D8:82:91:3C:1A
            X509v3 Authority Key Identifier:
                keyid:04:AA:EA:3E:F6:19:37:9D:B7:1D:47:6B:3B:90:BB:E2:A6:EF:D0:36

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/BKrqPvYZN523HUdrO5C74qbv0DY.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/cf/894db9-488a-4b14-980e-df8536531711/1/BKrqPvYZN523HUdrO5C74qbv0DY.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/cf/894db9-488a-4b14-980e-df8536531711/1/BKrqPvYZN523HUdrO5C74qbv0DY.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         5c:ba:74:8f:17:c5:a6:80:18:39:6c:87:1b:2d:2f:b6:73:68:
         bb:9e:e4:82:f3:d2:62:4d:b2:80:fc:00:12:0b:e6:d0:22:81:
         4e:b8:c4:8c:b4:43:47:e8:a2:e3:1a:85:8c:66:16:55:f2:30:
         4d:3d:ad:56:1f:26:80:c2:99:9b:a7:3a:32:e3:3c:67:f8:4f:
         a3:50:71:53:bc:ab:bc:c1:d4:55:0b:4c:46:b1:87:0c:13:24:
         e2:8a:b7:7a:af:1b:50:94:e4:cf:05:b5:45:b2:db:6d:cb:f4:
         66:01:8d:5d:75:2b:7e:3b:1e:3c:05:c5:bc:31:59:80:be:92:
         c4:d9:0d:7e:7a:3d:31:41:68:f1:3a:ab:42:4a:86:46:ec:07:
         5d:11:a0:34:1e:c3:c5:84:6d:69:82:34:a0:27:c8:ae:61:63:
         4a:a4:e7:c2:2c:94:23:2c:20:6a:43:b0:b1:44:67:d4:38:95:
         00:f0:9c:8c:81:49:10:07:91:92:13:2c:e2:a5:87:c5:b6:80:
         55:45:c4:78:54:83:81:c0:3d:c4:aa:9d:c7:20:e3:1e:e8:49:
         70:86:d7:f4:88:67:d7:33:86:35:95:3d:a2:9b:14:77:cb:3a:
         cb:f3:87:05:ad:b6:67:75:b8:86:03:59:cd:47:5b:89:b3:5e:
         88:52:99:30
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:54:31 2024 by rpki-client on console-fra.rpki-client.org