Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d8/cc1041-e57d-4703-974b-cd2d8865edc5/1/zbTXp5KNgfDl9sSR6l8rfFh7nZ0.mft
File:                     zbTXp5KNgfDl9sSR6l8rfFh7nZ0.mft (raw, json)
Hash identifier:          ve0Ueva8FqQWHuOft9kIul/gx72BGai8Rto6Zu7ll5M=
Subject key identifier:   B6:3E:81:F3:30:AE:E4:22:92:DB:EE:6A:E6:28:C8:49:A4:09:38:3B
Authority key identifier: CD:B4:D7:A7:92:8D:81:F0:E5:F6:C4:91:EA:5F:2B:7C:58:7B:9D:9D
Certificate issuer:       /CN=cdb4d7a7928d81f0e5f6c491ea5f2b7c587b9d9d
Certificate serial:       018D874E1C1E21E1B481A0CB5EA9B38B1A97
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/zbTXp5KNgfDl9sSR6l8rfFh7nZ0.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/d8/cc1041-e57d-4703-974b-cd2d8865edc5/1/zbTXp5KNgfDl9sSR6l8rfFh7nZ0.mft
Manifest number:          0865
Signing time:             Thu 08 Feb 2024 06:00:59 +0000
Manifest this update:     Thu 08 Feb 2024 06:00:59 +0000
Manifest next update:     Fri 09 Feb 2024 06:00:59 +0000
Files and hashes:         1: W0qLRHOE5k24kl98ujtEhbjHGLw.roa (hash: wVFLEE+htopApzZykaDFo8mO0zMpvnT5Q/dNg5W9xsE=)
                          2: nHv4qEVzNqdaRlspY6PdI5CNZ1I.roa (hash: FH5OwOR2G/9uNVAs7JPM2Tgs2I6umwMWDcZyp4AbBj0=)
                          3: zbTXp5KNgfDl9sSR6l8rfFh7nZ0.crl (hash: WhA6eO1cuOL6VqbrMj4OI+w9CT5QttYwzmTDPpGWqzs=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:8d:87:4e:1c:1e:21:e1:b4:81:a0:cb:5e:a9:b3:8b:1a:97
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=cdb4d7a7928d81f0e5f6c491ea5f2b7c587b9d9d
        Validity
            Not Before: Feb  8 06:00:59 2024 GMT
            Not After : Feb  9 06:00:59 2024 GMT
        Subject: CN=b63e81f330aee42292dbee6ae628c849a409383b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bf:ec:21:69:bc:39:5e:a7:d4:51:b9:74:45:46:
                    26:a6:4b:29:4a:34:47:00:2f:53:52:0b:ff:12:1d:
                    02:35:a2:cf:a9:49:0d:7c:68:27:5f:a8:4d:92:d6:
                    d0:50:d6:90:7c:a8:c9:fb:25:14:56:b8:33:02:96:
                    86:d0:ff:fd:5f:8e:c2:e8:94:be:6c:75:f5:0c:99:
                    a0:b8:6d:63:fb:69:5d:be:97:e4:cf:bd:73:73:47:
                    9b:2a:fd:4a:b2:cf:d9:02:7d:0c:cd:55:0e:ff:a6:
                    c3:c1:10:83:5b:39:3b:1f:0f:d2:de:94:2e:2d:36:
                    5b:a4:bc:5f:b1:e5:de:49:53:d5:05:af:c1:41:85:
                    79:e4:5b:2d:da:a7:72:79:1d:1e:9e:76:59:d2:1f:
                    76:1a:d2:aa:de:d1:fd:33:8c:85:9c:38:48:e4:4e:
                    b7:60:32:49:5b:27:39:16:84:bc:97:10:0a:08:8f:
                    31:70:7b:f1:53:82:4e:1d:d1:26:f0:a4:8f:46:d4:
                    44:ef:e5:19:45:67:41:cf:cf:89:e8:64:7f:63:2a:
                    2d:7d:05:69:76:b1:a8:65:12:fb:31:38:65:9d:8a:
                    89:20:ca:41:ca:a9:1a:06:9a:e2:74:b7:85:95:7b:
                    c2:63:22:31:21:05:b6:29:ee:f0:f8:96:4f:53:a6:
                    21:25
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B6:3E:81:F3:30:AE:E4:22:92:DB:EE:6A:E6:28:C8:49:A4:09:38:3B
            X509v3 Authority Key Identifier:
                keyid:CD:B4:D7:A7:92:8D:81:F0:E5:F6:C4:91:EA:5F:2B:7C:58:7B:9D:9D

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/zbTXp5KNgfDl9sSR6l8rfFh7nZ0.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d8/cc1041-e57d-4703-974b-cd2d8865edc5/1/zbTXp5KNgfDl9sSR6l8rfFh7nZ0.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/d8/cc1041-e57d-4703-974b-cd2d8865edc5/1/zbTXp5KNgfDl9sSR6l8rfFh7nZ0.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         89:88:3b:77:42:57:c9:0a:65:ae:6a:28:56:06:fc:56:23:fd:
         ce:18:3c:6b:75:09:d9:1f:cc:8e:0a:4d:b5:9b:ed:c1:94:d9:
         c6:72:ae:b1:9d:2c:d9:fd:28:fc:b0:85:42:d2:57:9b:e7:d1:
         c8:89:89:0e:ed:7a:8f:55:04:ce:d3:d1:f7:ec:df:f3:6b:45:
         b3:ec:f6:1b:45:16:cb:51:b6:87:41:96:c9:0a:2c:a8:e0:f6:
         e3:86:77:b1:5e:4f:79:79:3e:c3:a1:b2:a1:ec:7a:57:34:61:
         d4:29:25:a3:80:8c:fe:fd:02:6b:73:79:9a:a3:6e:b5:ae:75:
         ec:39:10:ba:e5:ed:f0:8b:a6:f5:91:63:1a:c5:a3:ca:36:99:
         b3:5c:5e:65:5c:2c:46:8f:29:ba:4d:5f:9e:87:f2:8d:bb:e9:
         eb:24:06:92:f3:38:a5:fd:d6:47:e2:32:a8:46:04:18:00:b8:
         b2:0b:48:45:c5:bf:de:a8:ea:a4:a0:d0:52:06:9b:28:98:f1:
         78:16:70:47:22:05:34:f5:ef:30:c1:02:32:78:51:91:7f:bf:
         9c:ce:13:70:5e:ea:5e:60:a0:1e:b0:a3:5e:db:f5:68:e6:d9:
         15:dd:de:0f:54:9a:39:18:09:d5:7c:ab:a4:88:8f:ee:c5:44:
         a9:e7:86:6b
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAY2HThweIeG0gaDLXqmzixqXMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGNkYjRkN2E3OTI4ZDgxZjBlNWY2YzQ5MWVhNWYyYjdjNTg3
YjlkOWQwHhcNMjQwMjA4MDYwMDU5WhcNMjQwMjA5MDYwMDU5WjAzMTEwLwYDVQQD
EyhiNjNlODFmMzMwYWVlNDIyOTJkYmVlNmFlNjI4Yzg0OWE0MDkzODNiMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAv+whabw5XqfUUbl0RUYmpkspSjRH
AC9TUgv/Eh0CNaLPqUkNfGgnX6hNktbQUNaQfKjJ+yUUVrgzApaG0P/9X47C6JS+
bHX1DJmguG1j+2ldvpfkz71zc0ebKv1Kss/ZAn0MzVUO/6bDwRCDWzk7Hw/S3pQu
LTZbpLxfseXeSVPVBa/BQYV55Fst2qdyeR0ennZZ0h92GtKq3tH9M4yFnDhI5E63
YDJJWyc5FoS8lxAKCI8xcHvxU4JOHdEm8KSPRtRE7+UZRWdBz8+J6GR/YyotfQVp
drGoZRL7MThlnYqJIMpByqkaBpridLeFlXvCYyIxIQW2Ke7w+JZPU6YhJQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFLY+gfMwruQiktvuauYoyEmkCTg7MB8GA1UdIwQY
MBaAFM2016eSjYHw5fbEkepfK3xYe52dMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvemJUWHA1S05nZkRsOXNTUjZsOHJmRmg3blowLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kOC9jYzEwNDEtZTU3ZC00NzAzLTk3NGIt
Y2QyZDg4NjVlZGM1LzEvemJUWHA1S05nZkRsOXNTUjZsOHJmRmg3blowLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9kOC9jYzEwNDEtZTU3ZC00NzAzLTk3NGItY2QyZDg4NjVlZGM1
LzEvemJUWHA1S05nZkRsOXNTUjZsOHJmRmg3blowLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAiYg7d0JX
yQplrmooVgb8ViP9zhg8a3UJ2R/MjgpNtZvtwZTZxnKusZ0s2f0o/LCFQtJXm+fR
yImJDu16j1UEztPR9+zf82tFs+z2G0UWy1G2h0GWyQosqOD244Z3sV5PeXk+w6Gy
oex6VzRh1Cklo4CM/v0Ca3N5mqNuta517DkQuuXt8Ium9ZFjGsWjyjaZs1xeZVws
Ro8puk1fnofyjbvp6yQGkvM4pf3WR+IyqEYEGAC4sgtIRcW/3qjqpKDQUgabKJjx
eBZwRyIFNPXvMMECMnhRkX+/nM4TcF7qXmCgHrCjXtv1aObZFd3eD1SaORgJ1Xyr
pIiP7sVEqeeGaw==
-----END CERTIFICATE-----
Generated at Thu Jun 6 19:47:02 2024 by rpki-client on console-ams.rpki-client.org