Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e1/3ec59e-ea85-40cb-a285-07ded20e3c63/1/hz7BW5jibospu33PSmBSys5tJoM.mft
File:                     hz7BW5jibospu33PSmBSys5tJoM.mft (raw, json)
Hash identifier:          0Rm8j+SBsTSeFCPbmZzFGOmaj5Pd8fDFEFt6Uunfk5w=
Subject key identifier:   DD:8A:A2:35:D0:1E:27:FF:56:A4:E8:34:0B:7D:C8:74:3E:A7:2D:96
Authority key identifier: 87:3E:C1:5B:98:E2:6E:8B:29:BB:7D:CF:4A:60:52:CA:CE:6D:26:83
Certificate issuer:       /CN=873ec15b98e26e8b29bb7dcf4a6052cace6d2683
Certificate serial:       018D83720ABF90B821225A543D960F3C7E50
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/hz7BW5jibospu33PSmBSys5tJoM.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/e1/3ec59e-ea85-40cb-a285-07ded20e3c63/1/hz7BW5jibospu33PSmBSys5tJoM.mft
Manifest number:          0849
Signing time:             Wed 07 Feb 2024 12:01:45 +0000
Manifest this update:     Wed 07 Feb 2024 12:01:45 +0000
Manifest next update:     Thu 08 Feb 2024 12:01:45 +0000
Files and hashes:         1: hz7BW5jibospu33PSmBSys5tJoM.crl (hash: Ru+HfbGKadQibCppS0a11QB/6bghqJzzgdxde1ovLEA=)
                          2: wzbb2zGEu4hFon3LvZoHz0P_YQs.roa (hash: D+qc74ALqdEhkQMcXXKCiEsyDiNvHhzDHWXcDZQU5XA=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:8d:83:72:0a:bf:90:b8:21:22:5a:54:3d:96:0f:3c:7e:50
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=873ec15b98e26e8b29bb7dcf4a6052cace6d2683
        Validity
            Not Before: Feb  7 12:01:45 2024 GMT
            Not After : Feb  8 12:01:45 2024 GMT
        Subject: CN=dd8aa235d01e27ff56a4e8340b7dc8743ea72d96
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bd:04:78:9f:1c:90:52:28:ea:a9:2d:8f:af:7a:
                    47:59:1a:93:6c:cd:c3:ef:64:e7:35:4c:01:6f:46:
                    9b:33:d8:63:bf:9b:74:fb:e9:ff:19:7e:1e:02:47:
                    26:90:d6:20:ca:8d:89:86:6b:62:24:93:d5:be:e0:
                    79:7a:81:11:a9:35:e7:63:0f:a5:11:1b:31:91:8d:
                    c2:9b:a0:23:56:56:54:67:3c:0e:ac:cf:0e:71:ca:
                    73:8c:ce:44:da:31:d2:b1:ed:e0:32:44:b5:6a:82:
                    ea:ef:2f:28:dc:06:a9:0f:46:d9:49:9c:e2:f6:e2:
                    3b:50:98:6f:db:59:a7:ae:14:9c:72:da:bb:e4:97:
                    a4:57:42:26:10:f0:09:24:0b:f3:d3:af:e9:90:f6:
                    6e:65:c2:4d:5f:19:ee:eb:85:2a:09:4d:51:51:78:
                    34:01:f9:e4:4f:a8:65:88:3e:17:6d:eb:84:2c:c9:
                    06:12:3c:a2:c4:f1:0a:62:39:b3:a3:e1:19:30:19:
                    6c:eb:02:2f:54:ef:67:13:41:1f:20:96:2c:25:82:
                    df:01:2e:b5:03:51:76:88:00:9c:d2:dc:a2:67:3b:
                    bc:29:f2:9d:17:6a:7a:26:10:4b:ad:1d:e9:53:76:
                    f1:79:16:31:3f:8f:82:cf:f7:65:0a:df:61:35:d9:
                    97:a3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DD:8A:A2:35:D0:1E:27:FF:56:A4:E8:34:0B:7D:C8:74:3E:A7:2D:96
            X509v3 Authority Key Identifier:
                keyid:87:3E:C1:5B:98:E2:6E:8B:29:BB:7D:CF:4A:60:52:CA:CE:6D:26:83

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/hz7BW5jibospu33PSmBSys5tJoM.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e1/3ec59e-ea85-40cb-a285-07ded20e3c63/1/hz7BW5jibospu33PSmBSys5tJoM.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/e1/3ec59e-ea85-40cb-a285-07ded20e3c63/1/hz7BW5jibospu33PSmBSys5tJoM.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         08:3a:2a:44:f8:de:ff:31:f7:0a:33:75:66:18:c3:9e:3d:34:
         47:04:7f:27:fb:aa:77:85:42:a2:d4:ed:3f:93:a6:23:35:ef:
         48:4e:de:81:f2:d1:b7:5c:69:96:7b:a9:77:48:3f:b3:79:4e:
         6b:c9:b1:53:a7:88:21:49:d4:f4:10:72:7a:df:81:b2:70:e7:
         08:70:be:0f:41:a0:42:6c:4c:c2:48:85:ed:32:5e:1a:38:f7:
         24:83:c8:b2:0a:7f:5e:9a:80:24:a3:27:56:07:3b:3b:76:a2:
         03:ab:9e:e9:ee:d4:14:5f:02:ba:4c:91:a5:21:ca:95:54:df:
         d4:5b:fd:20:bc:61:a5:a1:ed:84:ca:a3:15:10:90:09:c9:db:
         20:2a:50:c1:6c:9e:86:08:14:1d:3f:be:e6:66:4c:4e:e1:80:
         5f:7f:c8:05:d2:d4:f9:79:58:24:8e:cb:62:c1:18:c0:ec:34:
         2a:be:bb:c6:9e:49:b0:a1:f5:61:b5:07:88:ca:a8:f6:17:63:
         1c:dd:c0:38:fb:c8:ae:2b:f2:ed:0f:29:e1:fb:48:dc:78:47:
         df:01:13:7e:5e:72:a2:ad:a4:43:ef:4c:02:68:48:a4:61:3d:
         01:90:fd:0f:8b:a1:23:d3:c7:36:b7:b2:b4:bb:57:d4:06:4e:
         67:ff:d7:8c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:48:48 2024 by rpki-client on console-ams.rpki-client.org