Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f1/e3494d-e7aa-4d21-a8ad-7d4c0b7d7861/1/c1iJNKCw1kja-U3Z5inT3SLtWr8.mft
File:                     c1iJNKCw1kja-U3Z5inT3SLtWr8.mft (raw, json)
Hash identifier:          fZSIFW4uVzXklNkzk7wHM3aQcCA7Cf3r1dLZZdxqhZw=
Subject key identifier:   1C:A4:5C:24:BE:2D:84:85:5B:98:4C:39:49:60:E3:D7:60:BD:1F:DC
Authority key identifier: 73:58:89:34:A0:B0:D6:48:DA:F9:4D:D9:E6:29:D3:DD:22:ED:5A:BF
Certificate issuer:       /CN=73588934a0b0d648daf94dd9e629d3dd22ed5abf
Certificate serial:       018CCEC9855979EFD67D81F61A738F4E504A
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/c1iJNKCw1kja-U3Z5inT3SLtWr8.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/f1/e3494d-e7aa-4d21-a8ad-7d4c0b7d7861/1/c1iJNKCw1kja-U3Z5inT3SLtWr8.mft
Manifest number:          14
Signing time:             Wed 03 Jan 2024 10:06:02 +0000
Manifest this update:     Wed 03 Jan 2024 10:06:02 +0000
Manifest next update:     Thu 04 Jan 2024 10:06:02 +0000
Files and hashes:         1: 1-2QT139Ag04NHDU1sCd8FqfolUc.roa (hash: Yv+YCda+gdoJmWR21qlpHZiMztpKsj/T56uDsIOatgk=)
                          2: 1ShWDVysf642xcBXZTDPzcthNX4.roa (hash: bsdVq0QQ8yADlrh4U81yJ4r48fv2F8exnmuSkaViCKw=)
                          3: TELukCDtED3g3lJGl6WPtIlCWro.roa (hash: bEOWQ5+YyLUmP0syFMUsfSkKAhIFURUQiwzSW5hStIU=)
                          4: WfUIIQ0IzjiRQXmPcxFSjxMjcJ0.roa (hash: 8SBLfGyTobeNmsLC+X+/XiuyUGaLlGXitSMzoZKHThY=)
                          5: c1iJNKCw1kja-U3Z5inT3SLtWr8.crl (hash: 2jQnw4GpYW94JNDbW88Nsr5AYFDgZ+Q12qfPHZRf7Kw=)
                          6: l52siwAiJThofJ4AH5lp94K1qTg.roa (hash: yDuPq0Ny7SDkdSsDPSI+mSevgPUoE3P/o1H2frZLjiQ=)
                          7: ph_JIzmYnSfQuMhwiqdlJlSTF1E.roa (hash: I9uV4c0wPhVixTjY9ILDYGccUTiRCdxQZhbLt7G/+D8=)
                          8: qAnjWfUNugSFxCvKnzrGVyzgfjs.roa (hash: zAPCE4hQTgH3M6JBx18hWGTmtR0hxiNu/vqfoqxm0Vk=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:8c:ce:c9:85:59:79:ef:d6:7d:81:f6:1a:73:8f:4e:50:4a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=73588934a0b0d648daf94dd9e629d3dd22ed5abf
        Validity
            Not Before: Jan  3 10:06:02 2024 GMT
            Not After : Jan  4 10:06:02 2024 GMT
        Subject: CN=1ca45c24be2d84855b984c394960e3d760bd1fdc
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8b:cb:95:9c:51:95:38:f7:e8:52:6f:a1:f8:a2:
                    f1:36:d4:ce:05:9d:5b:55:71:bb:5f:7c:41:e8:ac:
                    62:76:6d:04:c6:b8:95:fb:23:9b:2c:82:8c:08:95:
                    d3:d3:86:0f:3f:51:48:dc:93:b5:02:1e:da:51:4f:
                    b7:44:44:53:34:1b:3b:e1:40:63:ec:b2:36:63:f6:
                    0d:a8:a4:3d:3a:44:04:b5:af:63:6f:ed:7d:c8:5e:
                    8d:42:ac:7f:8a:fe:62:e3:93:b9:da:46:50:d5:14:
                    76:16:43:1f:db:c8:4f:68:7d:52:48:c3:54:30:a7:
                    09:89:02:55:44:bc:75:4d:e3:83:19:f1:d0:87:9f:
                    65:ee:8e:a5:10:18:8b:e6:cd:12:67:36:1c:27:ae:
                    4b:fd:63:ef:70:9b:c6:72:fe:97:7c:55:3d:93:e9:
                    5f:1d:91:1c:60:43:30:f9:0d:41:33:5f:ae:67:a1:
                    f5:83:10:f9:84:db:f0:3a:0f:47:a0:66:34:8c:0b:
                    06:1d:43:72:02:9d:4d:3d:ce:3f:28:5b:31:76:61:
                    ba:21:88:58:dc:d0:b9:dc:f0:9b:de:61:0c:71:d8:
                    93:34:cc:40:fb:09:f8:4f:b5:33:4a:4a:53:3e:6d:
                    05:c5:10:45:f5:bf:13:77:40:c5:46:04:19:18:13:
                    64:f9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1C:A4:5C:24:BE:2D:84:85:5B:98:4C:39:49:60:E3:D7:60:BD:1F:DC
            X509v3 Authority Key Identifier:
                keyid:73:58:89:34:A0:B0:D6:48:DA:F9:4D:D9:E6:29:D3:DD:22:ED:5A:BF

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/c1iJNKCw1kja-U3Z5inT3SLtWr8.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f1/e3494d-e7aa-4d21-a8ad-7d4c0b7d7861/1/c1iJNKCw1kja-U3Z5inT3SLtWr8.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/f1/e3494d-e7aa-4d21-a8ad-7d4c0b7d7861/1/c1iJNKCw1kja-U3Z5inT3SLtWr8.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         03:b2:97:d2:6a:02:3b:83:a4:df:b5:bb:7d:57:43:6f:3b:a6:
         f8:08:02:34:94:20:1c:b3:65:33:a4:70:09:6d:a4:2d:6d:e4:
         ac:f7:1d:fd:4a:04:e0:70:25:cb:47:63:fd:c5:5d:a6:96:4b:
         25:88:31:c0:38:d3:b6:c6:59:c2:be:26:7b:92:b5:82:ed:ff:
         82:74:08:54:0a:07:fd:d8:d8:2b:5a:f3:f1:75:65:38:61:30:
         ac:4e:b2:63:c8:96:4c:47:3a:cb:c9:1d:a3:da:48:44:a8:d7:
         01:2f:63:fb:35:84:c3:5e:b5:95:fb:3c:3d:2f:82:39:a5:2f:
         8e:29:eb:ec:13:8c:f4:89:bc:a7:2a:22:b6:cf:10:0c:8e:c6:
         56:ed:70:49:46:8f:86:b4:75:ff:67:63:19:d2:a5:36:f0:e5:
         e4:6c:5d:87:89:6c:f7:f8:90:03:bf:bf:8f:a4:f1:84:9d:c1:
         2b:4b:d4:22:8d:16:20:4b:fc:00:05:ad:53:69:ee:bb:ae:b3:
         07:0c:15:1a:86:69:1c:e8:18:0b:22:a9:52:25:5a:b7:5d:21:
         c8:0b:18:75:77:c7:ef:9a:4c:20:6e:29:fc:8f:70:25:f0:3d:
         8e:ac:b9:c1:50:25:cf:c5:71:5e:27:04:9f:a2:98:9d:66:09:
         9d:a3:54:e7
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAYzOyYVZee/WfYH2GnOPTlBKMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDczNTg4OTM0YTBiMGQ2NDhkYWY5NGRkOWU2MjlkM2RkMjJl
ZDVhYmYwHhcNMjQwMTAzMTAwNjAyWhcNMjQwMTA0MTAwNjAyWjAzMTEwLwYDVQQD
EygxY2E0NWMyNGJlMmQ4NDg1NWI5ODRjMzk0OTYwZTNkNzYwYmQxZmRjMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAi8uVnFGVOPfoUm+h+KLxNtTOBZ1b
VXG7X3xB6Kxidm0ExriV+yObLIKMCJXT04YPP1FI3JO1Ah7aUU+3RERTNBs74UBj
7LI2Y/YNqKQ9OkQEta9jb+19yF6NQqx/iv5i45O52kZQ1RR2FkMf28hPaH1SSMNU
MKcJiQJVRLx1TeODGfHQh59l7o6lEBiL5s0SZzYcJ65L/WPvcJvGcv6XfFU9k+lf
HZEcYEMw+Q1BM1+uZ6H1gxD5hNvwOg9HoGY0jAsGHUNyAp1NPc4/KFsxdmG6IYhY
3NC53PCb3mEMcdiTNMxA+wn4T7UzSkpTPm0FxRBF9b8Td0DFRgQZGBNk+QIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFBykXCS+LYSFW5hMOUlg49dgvR/cMB8GA1UdIwQY
MBaAFHNYiTSgsNZI2vlN2eYp090i7Vq/MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvYzFpSk5LQ3cxa2phLVUzWjVpblQzU0x0V3I4LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mMS9lMzQ5NGQtZTdhYS00ZDIxLWE4YWQt
N2Q0YzBiN2Q3ODYxLzEvYzFpSk5LQ3cxa2phLVUzWjVpblQzU0x0V3I4Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9mMS9lMzQ5NGQtZTdhYS00ZDIxLWE4YWQtN2Q0YzBiN2Q3ODYx
LzEvYzFpSk5LQ3cxa2phLVUzWjVpblQzU0x0V3I4LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAA7KX0moC
O4Ok37W7fVdDbzum+AgCNJQgHLNlM6RwCW2kLW3krPcd/UoE4HAly0dj/cVdppZL
JYgxwDjTtsZZwr4me5K1gu3/gnQIVAoH/djYK1rz8XVlOGEwrE6yY8iWTEc6y8kd
o9pIRKjXAS9j+zWEw161lfs8PS+COaUvjinr7BOM9Im8pyoits8QDI7GVu1wSUaP
hrR1/2djGdKlNvDl5Gxdh4ls9/iQA7+/j6TxhJ3BK0vUIo0WIEv8AAWtU2nuu66z
BwwVGoZpHOgYCyKpUiVat10hyAsYdXfH75pMIG4p/I9wJfA9jqy5wVAlz8VxXicE
n6KYnWYJnaNU5w==
-----END CERTIFICATE-----
Generated at Thu Jun 6 19:52:10 2024 by rpki-client on console-ams.rpki-client.org