Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/00/eb1cd5-c871-4d4f-ac3f-4b599d08ed1c/1/yv0xM99HziuwfEcvvmu06ReMYjM.mft
File:                     yv0xM99HziuwfEcvvmu06ReMYjM.mft (raw, json)
Hash identifier:          GTCpaN4LJL8hVaLsK/UAeFwdCtV2dd9dO3HW1SbPy4I=
Subject key identifier:   5B:B2:A7:2A:D2:DF:09:70:67:0D:BD:2A:00:FF:92:7C:2B:52:B5:72
Authority key identifier: CA:FD:31:33:DF:47:CE:2B:B0:7C:47:2F:BE:6B:B4:E9:17:8C:62:33
Certificate issuer:       /CN=cafd3133df47ce2bb07c472fbe6bb4e9178c6233
Certificate serial:       018CEE18B6705EB1AA9292B8DB06DB1CEA16
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/yv0xM99HziuwfEcvvmu06ReMYjM.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/00/eb1cd5-c871-4d4f-ac3f-4b599d08ed1c/1/yv0xM99HziuwfEcvvmu06ReMYjM.mft
Manifest number:          096A
Signing time:             Tue 09 Jan 2024 12:00:46 +0000
Manifest this update:     Tue 09 Jan 2024 12:00:46 +0000
Manifest next update:     Wed 10 Jan 2024 12:00:46 +0000
Files and hashes:         1: JCVVEoCuJqID3By5YoaCKDkKAp0.roa (hash: gMyhSCl4BNPGq8CGsrCCeio0OQ/XS360J779uZvHBXg=)
                          2: MZ5fy1-utGwSr-Lq7utA7gVKWh8.roa (hash: BREXJHkiCq6VwpqJ+jZLrGA1rBGRzRPJzMLTLjwz/sc=)
                          3: yv0xM99HziuwfEcvvmu06ReMYjM.crl (hash: eICER7rwEyX5vICIGfsTAh3qadVJ5/wojdntUvHrrLE=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:8c:ee:18:b6:70:5e:b1:aa:92:92:b8:db:06:db:1c:ea:16
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=cafd3133df47ce2bb07c472fbe6bb4e9178c6233
        Validity
            Not Before: Jan  9 12:00:46 2024 GMT
            Not After : Jan 10 12:00:46 2024 GMT
        Subject: CN=5bb2a72ad2df0970670dbd2a00ff927c2b52b572
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e0:49:bb:04:2c:13:01:e2:9f:36:6d:51:78:ce:
                    33:8e:58:74:e5:ab:15:e5:e8:f3:6c:23:6a:e9:e3:
                    20:35:67:00:72:25:46:ac:c6:d9:8f:9d:96:73:45:
                    15:92:27:1d:43:1c:e8:44:10:69:22:8c:da:cd:4a:
                    97:36:1b:ae:43:4f:f0:86:24:fe:81:72:ee:c2:23:
                    cb:79:a3:f5:79:eb:be:b9:b2:db:ee:c8:e7:42:2a:
                    0d:38:01:f0:f2:1d:e9:f1:42:03:cb:e4:a8:69:ba:
                    08:53:f8:77:a4:a2:da:1b:4b:3f:b2:69:c7:05:6d:
                    74:bc:a7:14:97:7d:e1:e3:9f:7e:f9:87:9e:ce:11:
                    e3:5f:a5:ab:21:22:7c:a4:b4:23:2c:73:b1:2a:4f:
                    a1:a1:f1:3f:e4:31:47:c9:fe:91:96:7f:80:57:4d:
                    80:c2:a9:07:b7:3e:3f:98:37:02:0f:03:f9:0f:7b:
                    01:2a:0e:50:67:6b:b0:44:8d:c2:da:5f:ee:27:05:
                    2c:fd:8f:7d:94:a7:6e:2a:ba:bb:06:45:ec:76:53:
                    0b:34:a8:dd:b8:d1:36:6f:dc:e0:0a:42:bc:9d:2f:
                    19:a7:53:6a:93:f2:da:be:9e:7b:6a:05:e0:f1:0c:
                    17:28:43:d1:4c:d9:48:db:94:87:00:a7:77:81:73:
                    39:63
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5B:B2:A7:2A:D2:DF:09:70:67:0D:BD:2A:00:FF:92:7C:2B:52:B5:72
            X509v3 Authority Key Identifier:
                keyid:CA:FD:31:33:DF:47:CE:2B:B0:7C:47:2F:BE:6B:B4:E9:17:8C:62:33

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/yv0xM99HziuwfEcvvmu06ReMYjM.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/00/eb1cd5-c871-4d4f-ac3f-4b599d08ed1c/1/yv0xM99HziuwfEcvvmu06ReMYjM.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/00/eb1cd5-c871-4d4f-ac3f-4b599d08ed1c/1/yv0xM99HziuwfEcvvmu06ReMYjM.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         42:0d:4e:92:d7:01:4c:30:50:9f:f1:3f:eb:c8:33:43:bc:e3:
         2d:4b:8f:62:28:dd:0d:2d:4e:1c:6d:85:3a:6d:5d:d4:20:bc:
         6d:a1:2a:01:e0:05:d2:12:fb:9b:af:bf:7c:01:6a:5d:63:c1:
         be:19:fe:19:8c:b7:1d:2c:0c:83:c8:d4:af:77:28:1d:c7:fa:
         35:02:4c:21:3b:85:b4:09:ce:3f:61:ed:55:bd:b3:5c:fb:b1:
         53:7e:21:d9:47:eb:9a:c3:a3:7e:21:4a:06:6a:8f:86:78:46:
         10:ac:71:fc:91:6c:bb:55:d6:d4:7d:45:bb:68:70:e6:14:22:
         01:35:2a:0a:29:4b:fb:9b:b7:1e:b4:99:d9:60:8e:fc:c9:9b:
         97:db:9e:53:9c:7a:8b:e3:50:19:2e:fa:96:bb:ad:66:45:9b:
         fc:88:3b:56:36:0d:5a:63:6e:8e:34:5a:69:38:ff:8f:dd:6b:
         0e:b1:43:c0:9c:d1:de:90:79:78:52:ee:a0:e8:08:99:e5:62:
         87:e0:f3:ed:aa:6c:1f:e9:a9:90:e3:4d:db:3b:b9:42:58:39:
         f4:22:50:a2:dd:00:7e:b2:24:60:77:1f:3c:19:d8:ee:56:43:
         f5:c8:47:96:44:0c:43:ba:a2:fe:e2:09:3a:a3:68:9a:0f:22:
         62:fa:51:25
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Feb 27 00:58:16 2024 by rpki-client on console.sobornost.net