Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/04/2fbf83-b28b-4d36-b118-eb1086075167/1/aCfcIhVE_HQhURKlgS3hlqKHLoY.mft
File:                     aCfcIhVE_HQhURKlgS3hlqKHLoY.mft (raw, json)
Hash identifier:          6y39BDAdRInp6RpHQKqComFvdEBZCIiLTx3LeSQqUoc=
Subject key identifier:   13:AC:81:02:64:92:A0:9D:E1:D5:FE:90:DC:8C:64:24:5B:8E:51:8D
Authority key identifier: 68:27:DC:22:15:44:FC:74:21:51:12:A5:81:2D:E1:96:A2:87:2E:86
Certificate issuer:       /CN=6827dc221544fc74215112a5812de196a2872e86
Certificate serial:       0191B3406E911BEF934765C60CA428E0215E
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/aCfcIhVE_HQhURKlgS3hlqKHLoY.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/04/2fbf83-b28b-4d36-b118-eb1086075167/1/aCfcIhVE_HQhURKlgS3hlqKHLoY.mft
Manifest number:          1298
Signing time:             Mon 02 Sep 2024 15:00:29 +0000
Manifest this update:     Mon 02 Sep 2024 15:00:29 +0000
Manifest next update:     Tue 03 Sep 2024 15:00:29 +0000
Files and hashes:         1: QrmyC4CIx2vv7Z-lUNdnjNCZypc.roa (hash: IKXQv/kemTMUqLb8i87zPHnPLw6tP7Q9dpNF+PZ6HJ0=)
                          2: aCfcIhVE_HQhURKlgS3hlqKHLoY.crl (hash: tHghdt1dOKBu0VazfZ5HJd2HhcgMK1pBzGtVxHtCOko=)
                          3: uy4NeolDT3Z_TYfK4AqPHVghs80.roa (hash: NdtFxp/Qje0dV01Y2OmTYdMEdvNMs8FGTfM5ZLNP5mg=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:91:b3:40:6e:91:1b:ef:93:47:65:c6:0c:a4:28:e0:21:5e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6827dc221544fc74215112a5812de196a2872e86
        Validity
            Not Before: Sep  2 15:00:29 2024 GMT
            Not After : Sep  3 15:00:29 2024 GMT
        Subject: CN=13ac81026492a09de1d5fe90dc8c64245b8e518d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cb:a6:9c:7c:46:36:a0:91:cb:e3:bb:24:1d:c5:
                    69:8e:2e:bb:64:f7:0a:92:e1:b8:ad:8a:09:25:81:
                    98:37:65:12:68:f4:47:ca:df:4b:7b:7d:1f:14:52:
                    bc:16:51:1e:ff:e6:da:fe:f9:44:0e:c2:6e:c9:05:
                    d5:df:34:d4:42:13:49:6f:72:da:2e:a2:44:45:63:
                    be:51:77:ce:f1:c6:a5:66:2a:0e:ae:97:16:ac:43:
                    54:c8:a3:74:fd:43:97:c3:23:98:a5:f6:cb:4e:a8:
                    2e:e6:70:25:d4:11:c7:fb:5d:70:ec:d2:d4:27:78:
                    d4:76:8b:d1:e5:1b:0c:08:89:9e:d6:c9:b6:63:5f:
                    58:b3:9d:f7:e2:a9:38:4b:5c:90:95:64:0e:31:7d:
                    91:bc:76:82:ba:fc:ba:45:fc:cb:8a:f3:1b:04:03:
                    c0:a9:e9:94:28:7e:d8:0b:30:c3:48:88:bc:8a:ae:
                    f9:62:ff:a2:32:44:88:ab:f0:e9:81:99:7f:5e:11:
                    51:02:25:4e:f2:2b:f7:21:83:c3:41:56:d8:ed:4b:
                    8c:61:ad:d9:71:5c:d4:02:e9:31:00:c4:53:91:1a:
                    ae:e9:2f:e5:98:ce:59:51:c4:a5:9f:35:88:26:3c:
                    46:1a:26:08:8e:f8:26:31:83:6c:f7:d9:7b:d4:6b:
                    3c:b9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                13:AC:81:02:64:92:A0:9D:E1:D5:FE:90:DC:8C:64:24:5B:8E:51:8D
            X509v3 Authority Key Identifier:
                keyid:68:27:DC:22:15:44:FC:74:21:51:12:A5:81:2D:E1:96:A2:87:2E:86

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/aCfcIhVE_HQhURKlgS3hlqKHLoY.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/04/2fbf83-b28b-4d36-b118-eb1086075167/1/aCfcIhVE_HQhURKlgS3hlqKHLoY.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/04/2fbf83-b28b-4d36-b118-eb1086075167/1/aCfcIhVE_HQhURKlgS3hlqKHLoY.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         36:cb:21:28:19:be:ed:fc:13:d6:de:d6:e1:0e:a4:3a:05:0d:
         8b:59:40:6f:9c:1a:c8:c9:b1:c9:0d:2f:f0:ed:79:e9:24:d1:
         b3:27:b2:56:50:19:55:0a:39:09:72:77:0c:ca:96:de:ce:8b:
         49:f5:88:c6:84:91:1f:6d:b2:2c:dd:7d:70:bf:73:d7:76:5f:
         d3:af:a5:f8:18:5a:26:cc:23:db:8d:6a:6e:a5:ca:b2:80:0f:
         75:58:84:86:ec:bc:c0:d9:39:75:9d:e7:d8:20:77:03:ce:53:
         9a:ae:99:2d:2f:56:70:40:3d:cd:8e:41:4e:99:28:05:24:36:
         4f:11:b3:d2:c5:f2:fe:84:d5:db:a2:ca:c9:fa:04:12:12:13:
         04:35:b6:47:b8:df:19:54:5c:69:b3:5a:ad:a2:f2:bb:b6:c5:
         89:90:f0:6e:e7:15:74:49:f5:21:fe:27:c7:65:62:9d:ae:90:
         e7:54:73:47:33:16:60:ed:a9:af:27:db:4a:8b:ba:21:5b:29:
         4c:8b:f6:23:d2:a0:36:db:39:bd:02:78:6e:66:46:cb:97:43:
         b5:b9:5b:da:4d:d0:5a:2f:94:31:34:7a:19:1c:11:49:a3:bb:
         0b:69:1b:df:67:a5:3c:66:5a:01:9c:7b:a2:aa:52:b4:fc:18:
         fd:c9:61:e9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Sep 3 22:39:58 2024 by rpki-client on console.sobornost.net