Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f3/74228e-110c-46aa-8dea-0d145255fbb0/1/h3Nn_vmi-G5FxkJpcjD8DrrZt6g.mft
File:                     h3Nn_vmi-G5FxkJpcjD8DrrZt6g.mft (raw, json)
Hash identifier:          70/ei5VJZrWQMzHwyucKP4l76kH6MLdwCmbSqSw/O+8=
Subject key identifier:   57:4C:E2:5F:36:CA:9B:44:5D:AD:DB:52:DB:D3:BD:28:93:53:5A:F4
Authority key identifier: 87:73:67:FE:F9:A2:F8:6E:45:C6:42:69:72:30:FC:0E:BA:D9:B7:A8
Certificate issuer:       /CN=877367fef9a2f86e45c642697230fc0ebad9b7a8
Certificate serial:       01932E690195F21BC014801ECBB1E7521446
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/h3Nn_vmi-G5FxkJpcjD8DrrZt6g.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/f3/74228e-110c-46aa-8dea-0d145255fbb0/1/h3Nn_vmi-G5FxkJpcjD8DrrZt6g.mft
Manifest number:          135C
Signing time:             Fri 15 Nov 2024 06:00:53 +0000
Manifest this update:     Fri 15 Nov 2024 06:00:53 +0000
Manifest next update:     Sat 16 Nov 2024 06:00:53 +0000
Files and hashes:         1: 3vZq4hUVcMiBAY85NaOcEyuKf6A.roa (hash: WEK2U+uZ6iDRs13yjXwzeCDzV7E90Rdmx74htopKK30=)
                          2: h3Nn_vmi-G5FxkJpcjD8DrrZt6g.crl (hash: WnP1Azxl94UpSglPxrJE0KbWjaMo85nTefApilMtFw0=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:93:2e:69:01:95:f2:1b:c0:14:80:1e:cb:b1:e7:52:14:46
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=877367fef9a2f86e45c642697230fc0ebad9b7a8
        Validity
            Not Before: Nov 15 06:00:53 2024 GMT
            Not After : Nov 16 06:00:53 2024 GMT
        Subject: CN=574ce25f36ca9b445daddb52dbd3bd2893535af4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a4:d4:20:5e:51:6a:71:65:41:19:8a:29:d5:4a:
                    2f:08:56:d1:38:9c:fc:1e:a6:6b:32:e4:53:97:5a:
                    26:49:f6:01:c0:b9:bb:4b:6f:9f:0d:f7:74:c3:14:
                    f1:99:96:33:15:33:b5:b4:b2:24:20:09:99:f2:41:
                    68:14:fe:ed:0c:ff:74:dd:ec:34:52:01:b4:8a:e1:
                    18:e8:14:e6:be:2e:09:30:2a:8f:35:69:06:90:68:
                    57:bc:f7:e0:bd:4b:d9:01:0b:b5:d7:71:7b:a4:23:
                    0c:1e:d3:35:0e:09:cc:af:86:c1:6e:b9:b7:b5:bb:
                    94:4d:cc:d2:fd:a4:ba:b1:9b:c3:d2:24:35:08:ed:
                    1d:36:a9:18:a5:83:07:52:31:9b:06:11:16:8d:16:
                    f5:f8:56:c7:98:c3:f3:99:d4:e7:70:f8:c4:33:6c:
                    d0:6f:9d:3c:1e:1f:60:bc:c6:7f:30:48:60:ae:47:
                    7e:dd:95:20:27:d0:ec:1c:50:52:e2:9b:33:d5:1e:
                    30:ee:a1:a0:88:d2:46:1c:05:a1:46:98:ef:a5:8a:
                    13:d0:8d:ab:5c:32:75:83:c2:ff:82:4c:12:7c:0b:
                    e9:91:54:c6:89:f1:cf:6e:70:d2:cc:7b:d3:cf:e8:
                    1d:95:cb:c6:eb:ce:6a:f2:73:94:00:89:11:61:d1:
                    02:19
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                57:4C:E2:5F:36:CA:9B:44:5D:AD:DB:52:DB:D3:BD:28:93:53:5A:F4
            X509v3 Authority Key Identifier:
                keyid:87:73:67:FE:F9:A2:F8:6E:45:C6:42:69:72:30:FC:0E:BA:D9:B7:A8

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/h3Nn_vmi-G5FxkJpcjD8DrrZt6g.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f3/74228e-110c-46aa-8dea-0d145255fbb0/1/h3Nn_vmi-G5FxkJpcjD8DrrZt6g.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/f3/74228e-110c-46aa-8dea-0d145255fbb0/1/h3Nn_vmi-G5FxkJpcjD8DrrZt6g.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         9a:83:fb:bf:b0:7e:7d:a8:65:b8:5e:d5:09:09:a7:26:15:16:
         2f:65:10:33:fa:9c:37:51:e2:ac:a5:88:49:42:08:16:bf:4a:
         ac:e2:e0:15:8c:73:c7:31:c0:99:1e:e0:77:c8:36:06:2d:7f:
         ec:94:18:32:77:2f:c1:38:2a:38:f8:fc:b8:36:85:86:c4:fa:
         e6:84:32:14:94:4c:a2:2b:9a:51:bd:60:99:8c:59:a0:ed:02:
         01:8f:03:f7:94:b4:93:d5:7c:d1:15:17:ff:41:ce:20:9e:47:
         98:89:e5:a6:1c:da:4f:17:e5:82:ca:52:c8:fd:dd:e0:cf:f3:
         f3:f0:30:20:29:56:b6:86:25:b5:ea:e4:5c:38:ae:5d:3d:6b:
         dd:07:2f:49:f9:0b:c5:0e:c0:13:3f:00:41:ff:7c:d0:e7:2f:
         9b:43:f3:b1:60:ec:99:ce:07:ec:a0:4b:af:eb:32:fd:26:08:
         06:49:80:5d:b8:31:2a:86:05:64:bf:4f:2e:a5:ae:81:88:44:
         fb:20:04:74:21:e8:50:74:1b:21:76:9c:7f:51:30:c1:a2:b8:
         16:66:31:47:40:94:58:e0:3c:37:fc:d3:67:7f:99:fd:d3:25:
         33:65:da:e1:fb:1c:6a:db:9b:d7:70:6d:5d:fe:9a:f1:10:03:
         9f:7c:1e:46
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 15 17:21:26 2024 by rpki-client on console-ams.rpki-client.org