Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f2/a22660-38ef-4768-af43-e94122087b3f/1/q_YKqZSjTNStPdumW5r00wqjTOc.mft
File:                     q_YKqZSjTNStPdumW5r00wqjTOc.mft (raw, json)
Hash identifier:          losr42X5CBdKmCidPXQPQlIBb0Y2DYPkfGh7tkf4Rw4=
Subject key identifier:   56:C9:70:9F:7A:B6:79:87:1D:22:86:49:27:5A:DB:8D:53:19:C0:3B
Authority key identifier: AB:F6:0A:A9:94:A3:4C:D4:AD:3D:DB:A6:5B:9A:F4:D3:0A:A3:4C:E7
Certificate issuer:       /CN=abf60aa994a34cd4ad3ddba65b9af4d30aa34ce7
Certificate serial:       018EC06068C3C33A335CCC3F76B498D7B078
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/q_YKqZSjTNStPdumW5r00wqjTOc.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/f2/a22660-38ef-4768-af43-e94122087b3f/1/q_YKqZSjTNStPdumW5r00wqjTOc.mft
Manifest number:          060D
Signing time:             Tue 09 Apr 2024 01:02:07 +0000
Manifest this update:     Tue 09 Apr 2024 01:02:07 +0000
Manifest next update:     Wed 10 Apr 2024 01:02:07 +0000
Files and hashes:         1: lXobpKbb_8yCcCTdgTcQhH1jimw.roa (hash: nUIk93cqhV4hF3FKPgX+RIVOUgqscA8KjDf+1ZHzXA8=)
                          2: q_YKqZSjTNStPdumW5r00wqjTOc.crl (hash: ZMjx+VKeMpCcz6RlvuxicX3HHyNJNiCHImFJvJoAusc=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:8e:c0:60:68:c3:c3:3a:33:5c:cc:3f:76:b4:98:d7:b0:78
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=abf60aa994a34cd4ad3ddba65b9af4d30aa34ce7
        Validity
            Not Before: Apr  9 01:02:07 2024 GMT
            Not After : Apr 10 01:02:07 2024 GMT
        Subject: CN=56c9709f7ab679871d228649275adb8d5319c03b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c2:32:66:05:5e:c2:74:ca:35:c3:ce:c7:f7:2d:
                    e4:55:cf:d2:62:e4:5f:ab:d9:6c:3c:5b:e4:95:d2:
                    5f:f7:e1:b0:0b:3f:65:f6:6d:e2:2a:7f:be:60:7b:
                    67:18:61:44:1a:81:bc:e7:23:c0:44:f5:a4:25:4f:
                    c9:86:af:cb:46:40:e0:7d:cb:0c:ba:e7:bb:dd:86:
                    0f:c2:5c:1f:d2:47:54:1b:34:c8:bf:f1:dc:de:d0:
                    1a:d6:fc:fb:eb:09:51:b9:c1:f6:06:da:81:6f:a8:
                    75:f4:58:b9:84:66:2c:24:28:ec:24:19:8f:14:81:
                    28:65:82:41:35:4d:ab:d9:75:d1:e8:c3:92:0a:4d:
                    c8:2a:43:1f:4f:9c:9b:22:71:82:81:44:e2:7d:62:
                    bf:ed:75:ea:52:84:f9:f6:ca:ea:30:d0:d8:9d:d2:
                    e6:fc:a9:44:dc:f3:de:25:79:29:05:2e:8f:50:dd:
                    0f:8c:25:2a:00:65:cf:43:ba:c4:5c:d2:4d:e3:9c:
                    84:a1:e7:27:37:13:3f:63:c5:ee:4d:6f:22:29:3c:
                    f2:eb:de:d2:f5:9a:e7:42:d0:59:8c:2a:ef:c0:94:
                    e2:67:57:62:04:ca:fc:dc:bb:ae:fe:8f:08:48:a6:
                    91:1a:e7:ee:14:49:1a:35:32:93:c3:46:d2:5b:7c:
                    f4:cb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                56:C9:70:9F:7A:B6:79:87:1D:22:86:49:27:5A:DB:8D:53:19:C0:3B
            X509v3 Authority Key Identifier:
                keyid:AB:F6:0A:A9:94:A3:4C:D4:AD:3D:DB:A6:5B:9A:F4:D3:0A:A3:4C:E7

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/q_YKqZSjTNStPdumW5r00wqjTOc.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f2/a22660-38ef-4768-af43-e94122087b3f/1/q_YKqZSjTNStPdumW5r00wqjTOc.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/f2/a22660-38ef-4768-af43-e94122087b3f/1/q_YKqZSjTNStPdumW5r00wqjTOc.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         8b:28:64:45:7f:d3:c1:81:16:dc:83:79:63:c9:fa:65:11:84:
         92:50:26:d6:d7:8b:2a:d4:36:9b:16:29:9e:0a:14:4e:b1:72:
         4a:9a:89:aa:ed:df:49:0c:ba:fc:85:13:b4:3d:71:f0:2a:42:
         a4:68:6f:88:53:0f:e3:6c:25:df:aa:66:a2:a3:d9:26:84:57:
         03:1a:22:e3:d4:59:54:fa:90:3a:70:4f:d5:ef:2f:fc:08:e0:
         76:11:e1:42:a7:7e:b1:a7:f4:ee:2f:a1:9f:0d:bb:58:aa:a4:
         48:97:09:ca:55:80:08:05:10:69:12:7f:a0:a3:e3:d0:ac:72:
         de:4c:a2:03:37:65:7e:c4:6e:d9:fd:a7:2e:94:f6:d8:6c:4f:
         17:82:a4:f5:19:d1:be:4d:2a:43:95:25:e6:d3:52:b0:80:ff:
         b1:32:be:b6:85:e5:fc:79:e9:0b:4b:67:14:1c:d4:aa:4f:01:
         6e:8c:7e:8a:c2:1b:21:5a:b3:20:b8:3b:cc:7e:9e:e6:03:79:
         fd:b6:52:54:b1:13:84:64:48:35:06:f5:7d:0f:a1:0a:18:92:
         ad:7c:c1:2f:e8:ab:15:c6:b5:92:59:49:89:15:d0:13:6b:ee:
         76:bf:07:f1:ea:b0:65:2b:15:2d:7a:c6:9e:f3:08:b1:92:36:
         26:8e:6a:38
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:59:25 2024 by rpki-client on console-fra.rpki-client.org