Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ff/b0a72d-c7a5-4add-9ec2-4be99f65dad4/1/YzGimgm5i4WsSUShSLmvCMJ1RaE.mft
File:                     YzGimgm5i4WsSUShSLmvCMJ1RaE.mft (raw, json)
Hash identifier:          hO2+8pfKSj2ChwvyvlMPl+1gtH1LjAri6tN7KPobRiw=
Subject key identifier:   6E:7F:AB:0A:F8:C5:97:CB:98:85:83:56:85:A2:B2:08:E7:35:91:85
Authority key identifier: 63:31:A2:9A:09:B9:8B:85:AC:49:44:A1:48:B9:AF:08:C2:75:45:A1
Certificate issuer:       /CN=6331a29a09b98b85ac4944a148b9af08c27545a1
Certificate serial:       0184C151BC4E783EF831DA5DF1CF83525D3A
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/YzGimgm5i4WsSUShSLmvCMJ1RaE.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/ff/b0a72d-c7a5-4add-9ec2-4be99f65dad4/1/YzGimgm5i4WsSUShSLmvCMJ1RaE.mft
Manifest number:          0B99
Signing time:             Tue 29 Nov 2022 02:57:49 +0000
Manifest this update:     Tue 29 Nov 2022 02:57:49 +0000
Manifest next update:     Wed 30 Nov 2022 02:57:49 +0000
Files and hashes:         1: JZMstIvEqi96Qis1DLyhc54gH0Q.roa (hash: gz9eJ9RFYV1xh3a6642Khdotd07rZfdDOofsKKz1f2g=)
                          2: YzGimgm5i4WsSUShSLmvCMJ1RaE.crl (hash: URX6v/88GvsAE9Ru7LdllBCmirQ5a+ANOjRspQNkC/4=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:84:c1:51:bc:4e:78:3e:f8:31:da:5d:f1:cf:83:52:5d:3a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6331a29a09b98b85ac4944a148b9af08c27545a1
        Validity
            Not Before: Nov 29 02:57:49 2022 GMT
            Not After : Nov 30 02:57:49 2022 GMT
        Subject: CN=6e7fab0af8c597cb9885835685a2b208e7359185
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9f:31:8b:3b:cc:d8:c3:4c:7c:f8:fc:35:7d:c4:
                    6e:42:44:a3:e2:e6:a6:d2:1d:75:38:61:50:76:32:
                    a4:9a:7d:2a:b8:5b:de:64:6c:be:2c:7d:f8:22:3e:
                    5e:27:fe:a2:b0:7f:f8:b9:6a:09:74:a3:9d:9c:09:
                    03:b7:54:0d:e9:b3:02:59:16:6a:04:12:ff:76:95:
                    8e:8a:c4:f4:05:04:69:cb:cc:6c:b3:44:c8:19:46:
                    4d:25:4a:1a:97:3e:b4:6b:2c:3e:cf:9e:dc:7c:35:
                    ad:39:f6:d7:49:4b:3d:fe:77:33:7c:99:b9:9b:c1:
                    33:a8:9b:4c:e3:49:87:5c:c7:a7:be:69:57:64:b6:
                    97:89:6b:e8:8e:da:10:1a:06:61:92:18:1f:a5:dd:
                    4c:28:2c:d6:e4:ff:99:d0:85:cf:cf:a3:98:67:90:
                    6b:86:1b:e0:00:aa:a5:6f:e5:08:14:f4:0c:f9:e1:
                    2a:f4:bc:76:7b:48:b1:4d:0d:76:33:bf:3b:33:c0:
                    74:b7:34:4a:bb:7f:ec:00:d2:fd:e1:09:6d:72:16:
                    a3:dd:3d:a2:d7:28:74:23:06:16:fb:56:ce:b2:c3:
                    af:b3:47:96:c7:92:8a:ea:2d:cd:73:c3:1d:5f:36:
                    2b:80:21:e3:1e:ba:01:df:75:e4:f3:61:b2:30:91:
                    0d:2d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6E:7F:AB:0A:F8:C5:97:CB:98:85:83:56:85:A2:B2:08:E7:35:91:85
            X509v3 Authority Key Identifier:
                keyid:63:31:A2:9A:09:B9:8B:85:AC:49:44:A1:48:B9:AF:08:C2:75:45:A1

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YzGimgm5i4WsSUShSLmvCMJ1RaE.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ff/b0a72d-c7a5-4add-9ec2-4be99f65dad4/1/YzGimgm5i4WsSUShSLmvCMJ1RaE.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/ff/b0a72d-c7a5-4add-9ec2-4be99f65dad4/1/YzGimgm5i4WsSUShSLmvCMJ1RaE.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         83:35:d9:81:2f:d7:47:75:34:14:a7:50:da:4d:bc:ae:c7:96:
         0e:13:5c:21:76:39:55:48:fc:e2:d6:dd:94:e6:80:5d:42:06:
         20:0d:a8:b3:a6:9e:b3:a9:fb:e3:97:e1:e7:11:74:86:bd:e2:
         d2:71:2b:69:4d:18:8d:c6:02:8a:a5:35:60:db:b9:d4:79:63:
         43:06:9b:91:89:61:af:d5:f0:a9:0e:dd:b9:e0:66:bf:77:79:
         ef:48:89:07:c1:bd:93:34:2b:1e:dc:a2:5c:63:fd:7a:72:1d:
         fa:69:50:7c:a7:d2:b3:b3:43:5b:90:ec:bd:d6:de:49:cf:ec:
         d0:a1:de:14:01:b4:b0:9c:38:c6:18:0d:15:7a:10:39:30:e4:
         55:df:1f:87:f5:e8:8e:b7:6f:5a:89:b7:ca:1d:10:12:0a:48:
         91:6e:3e:1c:1c:9c:b0:b6:9d:c4:3d:f4:bf:1c:d6:83:af:b8:
         68:ce:c3:1b:be:c7:a0:08:6a:85:d2:40:6a:e7:62:ef:26:b2:
         33:a2:10:7d:66:07:b7:34:a5:cd:2f:98:c1:d7:f5:9f:7e:5b:
         b8:5e:7a:28:5f:a4:27:0c:d1:17:45:2f:b5:35:be:a1:ec:cd:
         ea:df:ed:7a:83:bd:70:1a:6b:89:56:bc:a5:c1:fa:5b:7e:da:
         a4:f4:47:c2
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAYTBUbxOeD74Mdpd8c+DUl06MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDYzMzFhMjlhMDliOThiODVhYzQ5NDRhMTQ4YjlhZjA4YzI3
NTQ1YTEwHhcNMjIxMTI5MDI1NzQ5WhcNMjIxMTMwMDI1NzQ5WjAzMTEwLwYDVQQD
Eyg2ZTdmYWIwYWY4YzU5N2NiOTg4NTgzNTY4NWEyYjIwOGU3MzU5MTg1MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnzGLO8zYw0x8+Pw1fcRuQkSj4uam
0h11OGFQdjKkmn0quFveZGy+LH34Ij5eJ/6isH/4uWoJdKOdnAkDt1QN6bMCWRZq
BBL/dpWOisT0BQRpy8xss0TIGUZNJUoalz60ayw+z57cfDWtOfbXSUs9/nczfJm5
m8EzqJtM40mHXMenvmlXZLaXiWvojtoQGgZhkhgfpd1MKCzW5P+Z0IXPz6OYZ5Br
hhvgAKqlb+UIFPQM+eEq9Lx2e0ixTQ12M787M8B0tzRKu3/sANL94Qltchaj3T2i
1yh0IwYW+1bOssOvs0eWx5KK6i3Nc8MdXzYrgCHjHroB33Xk82GyMJENLQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFG5/qwr4xZfLmIWDVoWisgjnNZGFMB8GA1UdIwQY
MBaAFGMxopoJuYuFrElEoUi5rwjCdUWhMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvWXpHaW1nbTVpNFdzU1VTaFNMbXZDTUoxUmFFLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mZi9iMGE3MmQtYzdhNS00YWRkLTllYzIt
NGJlOTlmNjVkYWQ0LzEvWXpHaW1nbTVpNFdzU1VTaFNMbXZDTUoxUmFFLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9mZi9iMGE3MmQtYzdhNS00YWRkLTllYzItNGJlOTlmNjVkYWQ0
LzEvWXpHaW1nbTVpNFdzU1VTaFNMbXZDTUoxUmFFLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAgzXZgS/X
R3U0FKdQ2k28rseWDhNcIXY5VUj84tbdlOaAXUIGIA2os6aes6n745fh5xF0hr3i
0nEraU0YjcYCiqU1YNu51HljQwabkYlhr9XwqQ7dueBmv3d570iJB8G9kzQrHtyi
XGP9enId+mlQfKfSs7NDW5DsvdbeSc/s0KHeFAG0sJw4xhgNFXoQOTDkVd8fh/Xo
jrdvWom3yh0QEgpIkW4+HBycsLadxD30vxzWg6+4aM7DG77HoAhqhdJAaudi7yay
M6IQfWYHtzSlzS+Ywdf1n35buF56KF+kJwzRF0UvtTW+oezN6t/teoO9cBpriVa8
pcH6W37apPRHwg==
-----END CERTIFICATE-----
Generated at Thu Jun 6 19:54:51 2024 by rpki-client on console-ams.rpki-client.org