Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/da/5a2f80-cad4-495e-b6b7-dc3c7c3823db/1/pBDf2UdskqFKN3oRwmg7WPyyHb0.mft
File:                     pBDf2UdskqFKN3oRwmg7WPyyHb0.mft (raw, json)
Hash identifier:          BeXN5yKrezRlWqoPE3s4mOxpqPw4gJLP27U53MYBoSs=
Subject key identifier:   95:6D:89:5D:C0:4A:21:97:58:54:7B:62:EC:38:6F:2D:68:78:FE:26
Authority key identifier: A4:10:DF:D9:47:6C:92:A1:4A:37:7A:11:C2:68:3B:58:FC:B2:1D:BD
Certificate issuer:       /CN=a410dfd9476c92a14a377a11c2683b58fcb21dbd
Certificate serial:       01847B23E94F6D445C3EC726F4EF1C0735B4
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/pBDf2UdskqFKN3oRwmg7WPyyHb0.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/da/5a2f80-cad4-495e-b6b7-dc3c7c3823db/1/pBDf2UdskqFKN3oRwmg7WPyyHb0.mft
Manifest number:          08D5
Signing time:             Tue 15 Nov 2022 11:54:21 +0000
Manifest this update:     Tue 15 Nov 2022 11:54:21 +0000
Manifest next update:     Wed 16 Nov 2022 11:54:21 +0000
Files and hashes:         1: hPal2zoW2cowQ4QrKU5T2g7dO54.roa (hash: gJuNL/9y6bNca7Myv+VaBRFO3DVV52/w2SyPnvA9YUI=)
                          2: pBDf2UdskqFKN3oRwmg7WPyyHb0.crl (hash: +XT3qZD2TePecEXt+0u9BYGONgoLTrKFJ4/bCYJsZ54=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:84:7b:23:e9:4f:6d:44:5c:3e:c7:26:f4:ef:1c:07:35:b4
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=a410dfd9476c92a14a377a11c2683b58fcb21dbd
        Validity
            Not Before: Nov 15 11:54:21 2022 GMT
            Not After : Nov 16 11:54:21 2022 GMT
        Subject: CN=956d895dc04a219758547b62ec386f2d6878fe26
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:83:95:ff:16:7b:59:8f:2e:6d:c4:0f:27:52:08:
                    24:2c:da:7f:dc:e1:79:14:4c:46:2e:1f:fc:2e:7a:
                    ef:41:fb:1b:3a:a3:aa:f0:57:ec:7f:46:9a:ca:fd:
                    fb:f2:e7:56:52:6f:fc:71:79:38:c1:70:5c:3d:c7:
                    02:8d:ba:4b:72:64:1f:eb:53:17:d7:e9:a4:65:a6:
                    c4:7c:4e:cc:c9:7a:ad:57:df:92:6c:e3:bb:f8:8c:
                    84:89:41:88:c7:39:91:b9:34:43:b7:e5:ac:06:84:
                    44:16:bf:61:11:5a:1b:a7:d3:95:ac:d0:8a:9d:80:
                    28:f2:64:cf:0c:af:6f:39:da:ab:81:02:f1:f2:2f:
                    47:31:78:1e:01:d2:58:94:53:eb:89:a0:66:5d:0d:
                    d2:1e:82:32:38:57:7b:6d:67:0b:20:d8:fe:aa:d4:
                    4f:e5:3a:72:6c:60:f6:7a:25:99:8c:73:b3:aa:a6:
                    fb:2a:3d:16:d2:a7:8e:95:c7:a5:65:d5:30:49:4c:
                    5b:58:d8:21:f7:db:29:79:38:66:af:69:f3:94:e1:
                    e2:25:a3:67:6b:84:59:15:d1:a9:31:d0:b1:84:25:
                    2e:91:96:c1:93:0b:bf:00:82:fb:69:16:ee:80:c7:
                    a9:e2:a5:98:a5:9b:d9:8a:d0:8b:8d:ea:7d:90:95:
                    bc:9f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                95:6D:89:5D:C0:4A:21:97:58:54:7B:62:EC:38:6F:2D:68:78:FE:26
            X509v3 Authority Key Identifier:
                keyid:A4:10:DF:D9:47:6C:92:A1:4A:37:7A:11:C2:68:3B:58:FC:B2:1D:BD

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/pBDf2UdskqFKN3oRwmg7WPyyHb0.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/da/5a2f80-cad4-495e-b6b7-dc3c7c3823db/1/pBDf2UdskqFKN3oRwmg7WPyyHb0.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/da/5a2f80-cad4-495e-b6b7-dc3c7c3823db/1/pBDf2UdskqFKN3oRwmg7WPyyHb0.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         a4:94:5c:c7:54:c7:1a:a7:80:d0:1d:58:fd:c1:a2:be:f4:fb:
         2e:69:6e:ec:7a:aa:1b:e9:89:03:b8:d7:bf:dc:da:8c:e5:93:
         4e:2c:38:1e:3b:3f:fd:84:c7:11:0c:be:cb:eb:0c:9d:8e:12:
         1b:da:f0:73:c5:7f:96:77:91:11:6b:8a:e5:4a:35:6b:69:2f:
         cc:0c:4a:4d:eb:f1:5f:25:64:ab:d7:bc:d2:e3:90:cb:1a:89:
         2d:a4:bb:27:96:77:a1:36:a4:99:d9:a3:dc:6f:77:1b:b7:5c:
         1b:d5:4b:38:24:34:ae:5a:22:a0:60:61:fd:4a:fc:74:11:0e:
         00:f3:ba:12:3e:ae:00:4f:58:04:f6:2a:52:68:5c:58:4a:44:
         65:be:80:85:eb:50:cd:86:d0:c2:3b:27:40:fa:6a:04:5c:9e:
         d7:ca:02:a2:e7:22:96:5a:4f:49:a9:b6:94:dc:d9:7b:dd:55:
         cc:48:1e:f1:30:16:a5:40:7c:4f:11:43:ea:fd:db:52:0d:ce:
         a9:ef:92:59:04:f6:40:c9:53:c0:df:69:e7:8a:98:f1:6b:07:
         b8:fc:32:ae:f9:bf:98:e9:68:4c:4b:ab:01:82:db:c2:66:51:
         65:56:e1:b1:31:fa:a4:7f:ee:b5:4f:fc:82:31:e9:f4:be:6e:
         3e:ad:dd:68
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:56:04 2024 by rpki-client on console-fra.rpki-client.org