Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/14/1f3d88-1c95-4f30-99be-4129dc694b7d/1/7AuTeBrohD5RCj4cLQgxOyWdFps.mft
File:                     7AuTeBrohD5RCj4cLQgxOyWdFps.mft (raw, json)
Hash identifier:          gxLzcfOdj6pxyz2ksc+NwTKpwiP/zyr2im1VhDssEyc=
Subject key identifier:   96:AC:6B:09:CC:8F:83:A4:27:56:EA:18:B4:31:70:AC:B2:65:32:47
Authority key identifier: EC:0B:93:78:1A:E8:84:3E:51:0A:3E:1C:2D:08:31:3B:25:9D:16:9B
Certificate issuer:       /CN=ec0b93781ae8843e510a3e1c2d08313b259d169b
Certificate serial:       01853E364B66ED0DB1881E1BBDE25C93FBF4
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/7AuTeBrohD5RCj4cLQgxOyWdFps.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/14/1f3d88-1c95-4f30-99be-4129dc694b7d/1/7AuTeBrohD5RCj4cLQgxOyWdFps.mft
Manifest number:          01DD
Signing time:             Fri 23 Dec 2022 09:00:23 +0000
Manifest this update:     Fri 23 Dec 2022 09:00:23 +0000
Manifest next update:     Sat 24 Dec 2022 09:00:23 +0000
Files and hashes:         1: 7AuTeBrohD5RCj4cLQgxOyWdFps.crl (hash: sX6TtfsXB3A+K/KzEcuXzNdyj6egBz6iMitfQ5CF2Y8=)
                          2: zhNiVaWYELczVjp9Nub7d9AeUBA.roa (hash: aPjidiQWsnV4STYPlA4uDbNE5M9RY2LDSpA196dQMOA=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:85:3e:36:4b:66:ed:0d:b1:88:1e:1b:bd:e2:5c:93:fb:f4
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=ec0b93781ae8843e510a3e1c2d08313b259d169b
        Validity
            Not Before: Dec 23 09:00:23 2022 GMT
            Not After : Dec 24 09:00:23 2022 GMT
        Subject: CN=96ac6b09cc8f83a42756ea18b43170acb2653247
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d2:d9:c3:51:ac:be:9e:e1:e0:31:14:56:09:86:
                    b7:51:be:0a:bd:bc:ad:6d:0a:32:ea:4a:1a:50:5a:
                    65:21:db:d4:01:2d:87:04:e7:9d:7a:93:f1:3a:e8:
                    de:46:58:af:68:ac:81:4c:68:c7:f4:20:c8:a0:4d:
                    a9:3d:1e:73:4c:40:52:d4:57:91:05:60:94:36:7c:
                    69:70:27:d8:9b:12:47:08:10:c4:f6:86:88:ad:d0:
                    92:84:be:5f:27:ad:a8:5d:04:4a:df:57:02:4f:07:
                    81:a5:bc:16:ea:48:6c:53:6e:e3:99:f1:71:b3:09:
                    46:5b:aa:5f:d3:eb:15:0b:c5:b2:97:32:23:6b:24:
                    24:95:f3:7c:b2:36:f3:83:a8:f4:23:29:7b:07:b2:
                    56:3e:70:50:7d:82:cf:43:bc:13:b4:f6:bd:34:13:
                    e5:7a:cb:09:e8:8b:c1:5e:e6:d5:74:d8:10:c4:07:
                    67:ce:4a:da:e4:73:4a:6a:25:33:32:22:26:51:5a:
                    c7:b3:57:07:e1:06:f5:be:14:86:74:7a:ce:42:3e:
                    44:dc:74:6e:42:25:82:e3:64:b5:99:00:68:47:db:
                    c4:16:74:fe:13:8b:9e:cf:77:80:b1:85:71:a0:14:
                    70:21:5c:d4:b1:06:e4:1a:c9:02:90:dc:ee:b3:72:
                    42:2d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                96:AC:6B:09:CC:8F:83:A4:27:56:EA:18:B4:31:70:AC:B2:65:32:47
            X509v3 Authority Key Identifier:
                keyid:EC:0B:93:78:1A:E8:84:3E:51:0A:3E:1C:2D:08:31:3B:25:9D:16:9B

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/7AuTeBrohD5RCj4cLQgxOyWdFps.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/14/1f3d88-1c95-4f30-99be-4129dc694b7d/1/7AuTeBrohD5RCj4cLQgxOyWdFps.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/14/1f3d88-1c95-4f30-99be-4129dc694b7d/1/7AuTeBrohD5RCj4cLQgxOyWdFps.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         59:2d:78:7c:df:e8:f9:b7:5b:01:08:35:b7:e9:92:6c:ac:b7:
         60:e4:52:26:0f:eb:3d:14:60:f2:9b:ab:e4:ad:ee:ae:2e:36:
         c8:3c:a4:c5:3a:51:14:c1:5d:fd:55:d0:ce:18:dd:94:d5:4c:
         28:ef:69:ea:09:13:60:1e:90:13:c5:a6:10:0a:9a:09:92:0b:
         61:48:a7:b4:08:9c:f5:3e:7f:b8:fe:cc:43:5d:9a:0d:50:a3:
         a2:71:42:d5:35:32:14:49:e0:c4:00:f1:c5:ca:86:89:2d:62:
         38:02:44:96:d5:79:86:6c:82:c7:e5:95:fb:cf:f9:76:ef:74:
         34:72:58:cc:8c:09:b8:bb:ac:3a:23:fa:c6:38:44:dd:1b:11:
         07:dd:9b:45:83:be:4f:0a:8c:14:a7:80:f5:95:bf:11:e0:4f:
         f7:10:7b:28:f5:13:6f:0b:70:1d:59:f4:6c:49:6b:0e:c8:5a:
         3e:d1:c2:5a:bb:37:83:6b:6b:34:e8:79:ac:14:be:8a:2c:a5:
         77:c8:ec:f1:f9:e7:d6:a2:3f:48:50:be:cf:63:03:2a:b7:fc:
         d7:01:43:d3:56:e5:8d:41:84:cb:a1:44:38:23:f7:d2:57:3e:
         b1:70:da:1a:b4:50:f8:d2:da:cc:c5:53:a5:13:74:74:d5:09:
         a9:63:5a:d3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Dec 27 18:40:19 2023 by rpki-client on console.sobornost.net