Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/eb/571ef4-af5a-4cbe-8910-d87f32d198b6/1/Cb3CNZuK0vDGDvd00HHWcc7YBFY.mft
File:                     Cb3CNZuK0vDGDvd00HHWcc7YBFY.mft (raw, json)
Hash identifier:          E7qlBoEo0UtxV6PVIX4qKCy0HZ62kWfBiAnYR/pIw1U=
Subject key identifier:   05:C8:62:EB:E2:43:27:CE:29:31:16:87:47:FA:5D:14:51:4C:64:DE
Authority key identifier: 09:BD:C2:35:9B:8A:D2:F0:C6:0E:F7:74:D0:71:D6:71:CE:D8:04:56
Certificate issuer:       /CN=09bdc2359b8ad2f0c60ef774d071d671ced80456
Certificate serial:       01840D2510D35F295EBD7CF46EF0011AA221
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/Cb3CNZuK0vDGDvd00HHWcc7YBFY.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/eb/571ef4-af5a-4cbe-8910-d87f32d198b6/1/Cb3CNZuK0vDGDvd00HHWcc7YBFY.mft
Manifest number:          0649
Signing time:             Tue 25 Oct 2022 03:17:23 +0000
Manifest this update:     Tue 25 Oct 2022 03:17:23 +0000
Manifest next update:     Wed 26 Oct 2022 03:17:23 +0000
Files and hashes:         1: 1XUc9G2SwzlmdoaauoikjnNXKEg.roa (hash: EKBm3Yal/dRHqHUvPURyOTG57Oe6jB9bPRmbIbURjQQ=)
                          2: Cb3CNZuK0vDGDvd00HHWcc7YBFY.crl (hash: XLn0O/zflHQRzc+nQAXjfE7Pq/ONq2ji6TKSbqYpzNE=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:84:0d:25:10:d3:5f:29:5e:bd:7c:f4:6e:f0:01:1a:a2:21
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=09bdc2359b8ad2f0c60ef774d071d671ced80456
        Validity
            Not Before: Oct 25 03:17:23 2022 GMT
            Not After : Oct 26 03:17:23 2022 GMT
        Subject: CN=05c862ebe24327ce2931168747fa5d14514c64de
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ca:99:a2:f2:4a:77:37:56:0f:e0:8a:2c:38:a7:
                    52:bb:c2:a7:9c:a1:fb:85:dd:c8:25:da:ad:d6:a1:
                    67:01:23:9f:2e:b0:7e:f6:04:e7:58:89:e0:7b:21:
                    2c:89:71:f2:bc:5c:13:c5:1a:63:f3:43:e1:46:fb:
                    4e:1d:6b:01:82:54:b6:76:ca:3b:74:39:00:f6:1a:
                    9c:5a:cc:ee:43:4d:4b:40:0a:01:8a:b9:d2:38:a7:
                    8f:53:3a:ee:f0:d3:02:39:7b:a8:86:6c:40:a4:85:
                    83:cf:6d:6e:99:c7:44:77:68:3f:f5:75:02:32:1a:
                    92:10:74:74:f0:c3:61:32:df:46:dd:d3:5b:8b:12:
                    92:2c:48:2a:15:5b:84:94:dd:07:9e:17:1e:09:87:
                    92:f4:ba:ef:ec:07:54:ec:d0:1e:3e:b7:50:f6:a1:
                    e4:3d:5f:84:29:87:1e:ce:29:46:27:46:d7:5f:e1:
                    95:f8:51:af:cc:c4:f0:f2:ea:4a:22:d5:d0:19:70:
                    88:de:73:e9:66:92:dc:80:60:b3:bf:cf:1e:5b:15:
                    14:31:e1:34:f6:da:ce:91:7c:30:a2:77:23:2e:b3:
                    80:86:e5:3d:84:80:65:05:cf:44:00:43:9c:d1:3c:
                    ff:20:4f:9a:45:c3:de:7d:e0:55:1d:b3:d3:7b:34:
                    29:13
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                05:C8:62:EB:E2:43:27:CE:29:31:16:87:47:FA:5D:14:51:4C:64:DE
            X509v3 Authority Key Identifier:
                keyid:09:BD:C2:35:9B:8A:D2:F0:C6:0E:F7:74:D0:71:D6:71:CE:D8:04:56

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Cb3CNZuK0vDGDvd00HHWcc7YBFY.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/eb/571ef4-af5a-4cbe-8910-d87f32d198b6/1/Cb3CNZuK0vDGDvd00HHWcc7YBFY.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/eb/571ef4-af5a-4cbe-8910-d87f32d198b6/1/Cb3CNZuK0vDGDvd00HHWcc7YBFY.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         95:74:bc:be:38:f4:52:ee:af:7f:99:56:1a:8d:9c:7b:ca:6c:
         e8:5c:fb:9a:06:b0:02:6b:5c:ba:d4:80:cf:64:61:65:82:1e:
         66:7a:af:93:31:7e:7e:f8:07:a0:9a:41:27:64:f0:e8:9a:d3:
         54:72:71:60:31:e3:bc:45:a7:24:9d:20:7a:fb:4c:70:90:43:
         95:98:92:49:12:c1:be:9a:b3:15:ec:12:b0:aa:a1:33:ce:ae:
         81:aa:38:73:e2:45:77:59:a6:6a:9f:5d:bb:7f:53:a4:c9:75:
         c6:98:8a:13:45:09:0d:0e:b6:54:e0:35:cd:9c:bb:65:9b:57:
         f9:7f:f5:92:6b:07:fb:ec:e4:0b:5b:80:82:c9:43:29:e0:46:
         7d:a4:34:d2:de:f4:e7:4a:d4:e9:9c:52:41:9e:4e:ba:64:40:
         3a:b9:9a:90:4b:b1:ad:37:66:c0:aa:f1:a0:ee:3c:e2:05:ea:
         fe:d8:23:20:26:c1:2f:ff:82:08:dd:63:73:a8:04:5e:55:cb:
         f0:f1:de:66:d0:c4:92:cc:26:f1:32:f1:e0:41:71:49:18:ad:
         54:f3:a0:b5:c1:fe:32:79:23:62:b9:f2:1a:0e:fd:96:d4:82:
         a0:37:a1:1f:46:ed:97:56:0f:1e:2e:7e:31:54:4f:66:f2:bb:
         ef:b2:05:46
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:50:52 2024 by rpki-client on console-ams.rpki-client.org