Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d1/0a3b9c-6178-42e8-99fc-131880c3df2e/1/h3orgAvqJw7RBiOQ0xGzOCNCWUI.mft
File:                     h3orgAvqJw7RBiOQ0xGzOCNCWUI.mft (raw, json)
Hash identifier:          GLeo7gmW+Rye9QpF7rT4OCnz3ohlIUQMRoxyRMOE6ZM=
Subject key identifier:   3B:FD:51:D4:DA:3A:E9:FB:BF:BD:A7:02:74:B3:88:E2:4A:AF:CF:A8
Authority key identifier: 87:7A:2B:80:0B:EA:27:0E:D1:06:23:90:D3:11:B3:38:23:42:59:42
Certificate issuer:       /CN=877a2b800bea270ed1062390d311b33823425942
Certificate serial:       018C3F3828ABE056DAEDB998A423FE62732E
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/h3orgAvqJw7RBiOQ0xGzOCNCWUI.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/d1/0a3b9c-6178-42e8-99fc-131880c3df2e/1/h3orgAvqJw7RBiOQ0xGzOCNCWUI.mft
Manifest number:          0A0C
Signing time:             Wed 06 Dec 2023 13:01:34 +0000
Manifest this update:     Wed 06 Dec 2023 13:01:34 +0000
Manifest next update:     Thu 07 Dec 2023 13:01:34 +0000
Files and hashes:         1: 5w6_hs9JPC0RfFVask-YbBThNjQ.roa (hash: hbsek17mlf3LrpEWfuAQjdBskofX0y/XwcuE4HgWiQ4=)
                          2: h3orgAvqJw7RBiOQ0xGzOCNCWUI.crl (hash: vw0ihLBMPOkCTV5/ns4dofUmuCrrHvokp38pVRw1mxk=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:8c:3f:38:28:ab:e0:56:da:ed:b9:98:a4:23:fe:62:73:2e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=877a2b800bea270ed1062390d311b33823425942
        Validity
            Not Before: Dec  6 13:01:34 2023 GMT
            Not After : Dec  7 13:01:34 2023 GMT
        Subject: CN=3bfd51d4da3ae9fbbfbda70274b388e24aafcfa8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b8:ab:84:a9:a8:31:5a:c0:df:2e:9d:27:69:6d:
                    18:43:69:a9:16:b0:34:6b:45:b2:e1:b5:43:20:89:
                    69:34:e1:d7:6c:80:4d:fe:73:37:b3:df:72:a2:3a:
                    a3:7b:d9:92:cf:29:50:64:03:97:b7:52:5e:02:d9:
                    57:c3:78:e7:a5:eb:87:96:45:17:fc:92:58:b2:b3:
                    27:48:40:01:cb:56:bd:be:7a:10:f1:01:08:56:03:
                    61:67:38:4f:6f:80:4f:55:e3:c8:ec:66:fa:9e:f7:
                    29:f4:a1:ec:cd:12:3f:01:c9:71:5a:6b:79:13:2f:
                    fb:94:fd:43:a6:46:c2:20:6d:8b:96:39:54:f9:23:
                    3d:96:82:70:8e:79:ac:31:23:f4:b7:82:07:3b:e9:
                    f0:11:49:e5:4b:e9:51:13:66:4e:9b:08:89:69:82:
                    15:72:66:77:22:3b:f2:c2:69:30:6e:e1:92:45:1b:
                    58:45:02:2b:a1:22:06:a1:21:20:3d:ff:af:13:94:
                    8a:e8:62:c0:29:2a:1b:72:76:a0:b7:fc:18:c0:31:
                    4d:1b:1f:58:2b:bc:ef:58:a8:de:d1:2d:59:94:ee:
                    21:06:47:9b:93:15:5c:d9:7d:ca:7f:ca:bb:cb:42:
                    f5:68:f6:22:2e:cd:8d:ba:7f:7f:79:c8:ba:32:b8:
                    4d:c5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3B:FD:51:D4:DA:3A:E9:FB:BF:BD:A7:02:74:B3:88:E2:4A:AF:CF:A8
            X509v3 Authority Key Identifier:
                keyid:87:7A:2B:80:0B:EA:27:0E:D1:06:23:90:D3:11:B3:38:23:42:59:42

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/h3orgAvqJw7RBiOQ0xGzOCNCWUI.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d1/0a3b9c-6178-42e8-99fc-131880c3df2e/1/h3orgAvqJw7RBiOQ0xGzOCNCWUI.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/d1/0a3b9c-6178-42e8-99fc-131880c3df2e/1/h3orgAvqJw7RBiOQ0xGzOCNCWUI.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         ac:1b:b9:ed:c3:d8:be:f3:96:9d:ce:1a:47:a7:7d:d7:02:ec:
         a7:75:f0:66:15:97:e9:97:ad:eb:28:42:ad:c0:53:e6:c1:f7:
         52:67:f1:ec:c5:75:92:6a:68:78:48:3d:78:84:4b:1d:98:c3:
         f7:bd:ec:5a:4d:1f:47:0c:12:1c:59:e6:4d:1d:6d:5a:e8:df:
         fb:f2:a1:db:8a:34:f2:9a:42:07:04:23:da:a8:5b:84:2e:f7:
         d6:c0:10:51:d8:e4:e3:84:92:cc:3c:b1:59:fb:d1:79:0f:99:
         ac:c0:f8:e8:a8:53:89:97:53:48:3d:0f:20:22:f8:af:af:0f:
         71:4d:be:71:16:b8:2b:88:8f:d7:35:4e:6d:bf:f8:a7:77:f1:
         eb:83:6b:3f:50:ba:e7:30:d1:9f:50:ee:bc:1a:1c:ad:b9:a7:
         06:6d:f5:20:b4:ac:5c:12:10:b0:21:f7:6c:ba:be:9f:6c:de:
         f4:cf:4b:1b:b6:b0:39:de:8a:40:15:05:de:f6:bc:30:b8:26:
         82:c7:2e:0b:db:59:59:fd:7c:69:55:da:ca:e8:e7:21:cb:6e:
         dd:f6:9a:e4:5d:35:51:e7:32:4a:d1:cc:55:3c:4e:80:90:71:
         a5:e2:cf:a2:2c:fb:1f:1e:0f:dc:1e:df:7e:ab:5f:6c:c8:62:
         bb:e4:18:d4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:54:51 2024 by rpki-client on console-fra.rpki-client.org