Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d8/c86177-714a-487e-8985-cbe95139b9a6/1/9lCFQ2i9OqC-5Jv37cAxG5DfNxc.mft
File:                     9lCFQ2i9OqC-5Jv37cAxG5DfNxc.mft (raw, json)
Hash identifier:          XDHuspisxsuDWPMwaqE1jw0CwvK9pNjfZ/UvXc4fmqo=
Subject key identifier:   71:82:4E:FA:E8:C0:85:66:1E:3C:E2:74:10:DE:72:01:F7:29:7E:DA
Authority key identifier: F6:50:85:43:68:BD:3A:A0:BE:E4:9B:F7:ED:C0:31:1B:90:DF:37:17
Certificate issuer:       /CN=f650854368bd3aa0bee49bf7edc0311b90df3717
Certificate serial:       018D689F66CCB191366E664AC7DE14487B99
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/9lCFQ2i9OqC-5Jv37cAxG5DfNxc.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/d8/c86177-714a-487e-8985-cbe95139b9a6/1/9lCFQ2i9OqC-5Jv37cAxG5DfNxc.mft
Manifest number:          0A6B
Signing time:             Fri 02 Feb 2024 07:01:33 +0000
Manifest this update:     Fri 02 Feb 2024 07:01:33 +0000
Manifest next update:     Sat 03 Feb 2024 07:01:33 +0000
Files and hashes:         1: 9lCFQ2i9OqC-5Jv37cAxG5DfNxc.crl (hash: gZEGoMFgYel6tbvHwM92q+1dMKqz+kl82EhXmGvGiv8=)
                          2: hK3IXqAod9p2sJVZvcOmfYnJq4Q.roa (hash: hB4bg/RNkMnjB05Rug2GEYcoWabUjy/vDPdnau0MqcQ=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:8d:68:9f:66:cc:b1:91:36:6e:66:4a:c7:de:14:48:7b:99
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=f650854368bd3aa0bee49bf7edc0311b90df3717
        Validity
            Not Before: Feb  2 07:01:33 2024 GMT
            Not After : Feb  3 07:01:33 2024 GMT
        Subject: CN=71824efae8c085661e3ce27410de7201f7297eda
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:91:78:98:cc:05:a6:a2:cc:34:62:36:8c:a6:8f:
                    a5:d1:b2:10:42:c9:aa:d9:a6:e5:d6:d4:75:8b:94:
                    7a:4e:a0:40:d2:11:8b:25:77:7e:be:f7:5c:60:73:
                    9b:7a:5f:ec:ee:60:28:66:e7:92:e7:15:2e:13:32:
                    d3:97:83:60:f0:00:95:54:30:d5:26:e9:b8:0c:0d:
                    02:b0:31:ab:f1:1b:55:2d:df:74:51:6c:33:32:71:
                    89:38:12:ed:45:cd:ef:17:d1:94:90:e2:92:08:9e:
                    e5:7c:cb:5b:a7:76:8d:65:fc:fa:26:bd:d2:50:7a:
                    5b:96:f1:0d:14:45:9e:81:f4:57:1f:97:a0:19:b6:
                    19:de:20:27:b0:05:57:97:bb:43:72:01:9d:fa:a2:
                    94:1c:2b:db:cc:2f:e5:10:d9:db:06:81:88:88:3e:
                    81:2e:34:db:42:8d:ee:ce:6e:f9:0a:e7:53:64:c6:
                    c0:36:2e:9e:ce:a0:09:7e:ab:ac:ea:6b:c7:4a:80:
                    8a:5f:e5:a3:6e:b8:f2:86:49:1e:7c:42:32:4f:61:
                    8f:ca:b5:38:b7:d3:ca:42:22:f8:d8:5c:8f:8e:af:
                    a9:2b:e7:72:da:71:10:d0:30:ca:d5:0a:1a:74:ad:
                    79:85:d7:16:98:61:76:6b:87:73:c3:fb:f0:35:e9:
                    01:77
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                71:82:4E:FA:E8:C0:85:66:1E:3C:E2:74:10:DE:72:01:F7:29:7E:DA
            X509v3 Authority Key Identifier:
                keyid:F6:50:85:43:68:BD:3A:A0:BE:E4:9B:F7:ED:C0:31:1B:90:DF:37:17

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/9lCFQ2i9OqC-5Jv37cAxG5DfNxc.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d8/c86177-714a-487e-8985-cbe95139b9a6/1/9lCFQ2i9OqC-5Jv37cAxG5DfNxc.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/d8/c86177-714a-487e-8985-cbe95139b9a6/1/9lCFQ2i9OqC-5Jv37cAxG5DfNxc.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         43:d6:7e:21:4d:62:0f:88:fe:8e:37:db:53:2f:fa:6c:5f:f0:
         1f:df:7f:f9:79:7e:46:0a:bf:f2:41:98:fd:6e:d5:d1:9c:cf:
         a6:86:67:32:4e:3c:0d:cd:31:ab:e6:c7:44:7c:9a:4b:be:fa:
         62:e6:5e:81:92:f7:66:03:ba:ba:31:10:17:65:9c:ad:ed:fa:
         1b:c7:a6:c1:3f:31:1a:c2:29:a4:cf:1d:f3:0b:68:53:82:9b:
         b0:38:5e:2b:ac:e3:27:91:82:a8:06:a5:29:37:b1:17:af:32:
         65:73:a1:33:ff:83:f1:20:df:65:0c:8f:ad:35:e7:30:ed:33:
         9e:d0:e5:e3:73:5e:68:6b:85:5d:7f:13:c5:fa:25:1c:f0:70:
         f2:96:5b:4c:43:50:a7:5d:d8:94:61:87:3a:cb:f5:58:f0:68:
         d4:d1:a4:4e:53:4b:cd:3a:54:33:73:b0:da:58:a3:cf:66:44:
         c4:a4:f5:cd:fb:b7:4b:01:e7:12:12:a9:76:33:95:4a:42:a9:
         44:69:4e:7a:23:a4:60:25:17:e9:4d:9a:e9:fb:97:a0:a1:3e:
         a6:55:16:50:00:7a:b4:3b:3e:26:80:28:b8:0e:39:6e:29:04:
         f6:40:f5:e5:e8:93:6e:4d:d6:2a:ce:49:80:c6:08:7d:a7:4c:
         c8:d3:8c:c7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:55:48 2024 by rpki-client on console-fra.rpki-client.org