Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ff/4b7620-1dce-409c-be7e-8d563fe44158/1/vZpNEhdA9aM4eTJ9sjrCh_LhE6E.mft
File:                     vZpNEhdA9aM4eTJ9sjrCh_LhE6E.mft (raw, json)
Hash identifier:          YJ9oA6B3s5wxWLFU/4eAuLs4K+cpP+yXY5LiejmNDu0=
Subject key identifier:   D3:54:90:1A:34:E1:BD:58:0B:83:E4:FD:9E:C6:A4:F6:F6:0F:E6:59
Authority key identifier: BD:9A:4D:12:17:40:F5:A3:38:79:32:7D:B2:3A:C2:87:F2:E1:13:A1
Certificate issuer:       /CN=bd9a4d121740f5a33879327db23ac287f2e113a1
Certificate serial:       018505E2BA839295704A824557001E9AD035
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/vZpNEhdA9aM4eTJ9sjrCh_LhE6E.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/ff/4b7620-1dce-409c-be7e-8d563fe44158/1/vZpNEhdA9aM4eTJ9sjrCh_LhE6E.mft
Manifest number:          0169
Signing time:             Mon 12 Dec 2022 10:30:22 +0000
Manifest this update:     Mon 12 Dec 2022 10:30:22 +0000
Manifest next update:     Tue 13 Dec 2022 10:30:22 +0000
Files and hashes:         1: SSi3c9G59RxF0AqZxlKnM04r5Zc.roa (hash: JijAtoEtVbNjdlp2kniJZWr+Nf0U+JmM+FkqNcbPc1A=)
                          2: vZpNEhdA9aM4eTJ9sjrCh_LhE6E.crl (hash: 2DII5gvzfzRqhYX89eS9yvOi0QOF187r/SsSMZK3HVQ=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:85:05:e2:ba:83:92:95:70:4a:82:45:57:00:1e:9a:d0:35
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=bd9a4d121740f5a33879327db23ac287f2e113a1
        Validity
            Not Before: Dec 12 10:30:22 2022 GMT
            Not After : Dec 13 10:30:22 2022 GMT
        Subject: CN=d354901a34e1bd580b83e4fd9ec6a4f6f60fe659
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9d:79:81:96:43:2c:28:31:85:89:49:ae:5c:dc:
                    71:aa:8c:1d:12:a8:50:2a:27:a3:1a:4d:8c:d4:f3:
                    00:8d:b6:10:a0:55:b8:dd:e3:45:47:c5:8f:dd:d6:
                    35:d7:4d:41:38:55:4d:17:f5:bf:51:30:5a:65:44:
                    7e:ee:74:48:00:5f:52:dc:aa:af:9c:d5:cc:cc:1c:
                    d5:6b:b2:b1:ef:7e:3d:71:ed:6e:d2:35:bf:f7:2e:
                    6e:f2:35:e2:b7:67:80:7a:be:aa:2a:8f:22:e4:48:
                    95:52:d4:4a:fb:7f:d4:4f:9a:e3:56:26:9d:33:8f:
                    1d:62:50:26:d9:c2:89:ce:b0:82:33:e9:47:38:79:
                    32:d2:9f:0a:07:b0:c9:46:de:e7:de:c9:88:e5:7e:
                    56:d8:fc:4f:90:07:47:9e:cf:23:06:18:57:4e:73:
                    eb:2d:a3:ad:0f:e5:a3:08:bd:27:29:af:73:5f:41:
                    2d:cd:3a:b3:f8:91:f3:13:fc:75:ad:b8:d8:ab:dc:
                    e1:e4:a0:47:ad:0a:8c:4c:4c:31:d7:08:26:44:03:
                    93:e7:16:8c:4a:e4:79:d6:27:96:3f:36:fe:90:ea:
                    c1:d1:e0:1f:4a:7f:8f:a5:61:43:88:0e:bf:22:6a:
                    7e:82:a5:a8:2c:b0:ff:de:28:11:ea:c0:2e:59:e6:
                    22:81
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D3:54:90:1A:34:E1:BD:58:0B:83:E4:FD:9E:C6:A4:F6:F6:0F:E6:59
            X509v3 Authority Key Identifier:
                keyid:BD:9A:4D:12:17:40:F5:A3:38:79:32:7D:B2:3A:C2:87:F2:E1:13:A1

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/vZpNEhdA9aM4eTJ9sjrCh_LhE6E.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ff/4b7620-1dce-409c-be7e-8d563fe44158/1/vZpNEhdA9aM4eTJ9sjrCh_LhE6E.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/ff/4b7620-1dce-409c-be7e-8d563fe44158/1/vZpNEhdA9aM4eTJ9sjrCh_LhE6E.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         c6:45:ce:b6:54:0d:ee:62:ba:00:ce:17:ab:b2:14:a3:31:79:
         73:88:33:8f:6c:f2:f1:3a:10:7b:06:73:2e:ab:d2:07:55:c6:
         c3:6d:1f:7a:75:6d:9f:5c:36:f3:33:d6:69:2c:a7:46:e2:0d:
         d0:62:0b:c3:6a:cd:f1:ea:8c:36:0d:44:55:a6:96:35:0d:4f:
         dd:62:c5:60:a6:e0:58:cf:1f:ba:b1:98:99:4c:7a:b9:2c:49:
         fb:16:ad:cb:be:ef:69:11:7e:97:7f:f1:b8:9d:22:e0:1b:2c:
         c8:4a:4a:6e:35:70:8d:08:1b:64:fd:58:41:ff:da:a3:7f:bc:
         96:d0:bf:4a:73:b7:84:ae:29:52:51:d5:88:e8:e7:81:50:67:
         94:61:da:4f:51:89:ce:38:9b:10:69:dc:16:6b:11:d8:07:b1:
         f4:ba:c6:47:59:54:e5:06:f1:ac:01:df:87:54:39:50:8f:36:
         d6:08:62:d4:b4:5d:cf:51:53:54:b0:06:14:41:1f:f2:c5:f6:
         f3:36:b8:6b:de:3e:19:ff:85:22:92:27:1b:09:59:33:42:ca:
         dd:7e:94:92:9e:60:fd:40:8c:58:13:29:6f:f9:4a:e9:72:39:
         75:67:89:1b:2d:28:25:a6:39:b1:9b:a3:fc:ea:83:86:73:aa:
         29:d6:9d:ac
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:54:46 2024 by rpki-client on console-ams.rpki-client.org