Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/17/a146c7-81e9-4862-974f-e0ecd5342ed8/1/36aNFIY6RUuJVHtZtcw0Fc0tjzc.mft
File:                     36aNFIY6RUuJVHtZtcw0Fc0tjzc.mft (raw, json)
Hash identifier:          auxje/uowlyxJYra7qV+OYZIta5V/YCXypNZ6wAFmEI=
Subject key identifier:   EC:D0:4B:E1:44:6A:DC:B0:37:FA:30:90:70:F2:30:80:FF:3A:4D:3F
Authority key identifier: DF:A6:8D:14:86:3A:45:4B:89:54:7B:59:B5:CC:34:15:CD:2D:8F:37
Certificate issuer:       /CN=dfa68d14863a454b89547b59b5cc3415cd2d8f37
Certificate serial:       019347173FE60DCCB25DDA95920E9161B3E7
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/36aNFIY6RUuJVHtZtcw0Fc0tjzc.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/17/a146c7-81e9-4862-974f-e0ecd5342ed8/1/36aNFIY6RUuJVHtZtcw0Fc0tjzc.mft
Manifest number:          1367
Signing time:             Wed 20 Nov 2024 01:02:06 +0000
Manifest this update:     Wed 20 Nov 2024 01:02:06 +0000
Manifest next update:     Thu 21 Nov 2024 01:02:06 +0000
Files and hashes:         1: 36aNFIY6RUuJVHtZtcw0Fc0tjzc.crl (hash: Z5BJjtMfjVp6H9dqEckQqBizFuHrniPocXHF+nadtnk=)
                          2: bSBaZbXyGK6s-45ETJbR2_RRyog.roa (hash: AE9bc+6rfxb8joZMQ0FdtiMtcQNUyac0ka4fvtDIFk0=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:93:47:17:3f:e6:0d:cc:b2:5d:da:95:92:0e:91:61:b3:e7
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=dfa68d14863a454b89547b59b5cc3415cd2d8f37
        Validity
            Not Before: Nov 20 01:02:06 2024 GMT
            Not After : Nov 21 01:02:06 2024 GMT
        Subject: CN=ecd04be1446adcb037fa309070f23080ff3a4d3f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a7:09:a3:ef:00:d3:5d:3a:8c:3f:7e:0f:71:f3:
                    61:d7:33:84:e4:43:8e:9f:5a:f9:08:0b:9a:b0:98:
                    9b:01:46:54:74:a1:29:02:e6:02:4d:06:70:6c:93:
                    86:db:fb:c2:18:6b:9e:29:07:c5:f5:c5:b8:10:f8:
                    8d:89:8a:12:47:25:a8:20:69:47:8c:3d:72:24:e0:
                    82:1a:2b:70:ed:47:30:31:01:0f:c4:ba:14:de:89:
                    0c:0e:17:94:fe:80:f9:74:ea:a6:92:15:d7:2d:d8:
                    fc:01:e9:02:4a:69:b2:ee:db:97:b3:bd:db:a1:e8:
                    8f:3d:0e:6d:e3:eb:bd:2e:47:a3:30:02:b6:f4:76:
                    38:ca:62:08:39:f3:bb:92:9e:4a:a7:c1:dd:12:2c:
                    12:02:a7:5f:b4:58:0c:fc:08:f1:8c:ff:d1:f2:3f:
                    ef:fc:60:e5:04:7b:6a:17:4f:b1:81:86:51:cd:42:
                    09:c5:83:d0:8d:8d:ac:00:43:a6:f3:23:ba:9e:fb:
                    bf:6f:17:24:08:81:fa:1b:38:0f:cd:10:73:77:9d:
                    1a:f0:04:f2:8e:2c:e5:eb:62:f0:df:0d:ed:a5:37:
                    86:a0:a7:08:34:07:59:55:5e:fe:ef:d6:0e:26:95:
                    ac:82:ac:e3:be:86:22:98:83:77:22:9e:72:19:a2:
                    59:9b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                EC:D0:4B:E1:44:6A:DC:B0:37:FA:30:90:70:F2:30:80:FF:3A:4D:3F
            X509v3 Authority Key Identifier:
                keyid:DF:A6:8D:14:86:3A:45:4B:89:54:7B:59:B5:CC:34:15:CD:2D:8F:37

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/36aNFIY6RUuJVHtZtcw0Fc0tjzc.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/17/a146c7-81e9-4862-974f-e0ecd5342ed8/1/36aNFIY6RUuJVHtZtcw0Fc0tjzc.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/17/a146c7-81e9-4862-974f-e0ecd5342ed8/1/36aNFIY6RUuJVHtZtcw0Fc0tjzc.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         2c:92:ae:78:23:58:65:5b:b6:c4:0f:95:de:f6:36:be:1d:28:
         75:af:fd:7a:2d:c1:e0:34:b5:83:3f:7f:c6:b8:dd:a9:9c:0f:
         c1:a0:38:92:67:24:6a:f7:a9:62:df:82:82:af:b0:65:b3:61:
         dd:0d:ef:f3:f3:ad:c3:69:c2:ad:24:35:e8:4b:a3:a3:22:4e:
         1b:2e:fd:c1:f9:50:64:4b:1f:11:0c:2d:8d:b2:51:ef:1f:68:
         c4:f9:93:b6:c8:42:b9:fe:37:70:c7:01:c0:8b:c7:6a:b6:eb:
         fd:f7:34:ca:21:de:66:2f:78:12:02:2c:72:94:70:bf:67:e6:
         f3:52:96:5e:c7:11:9a:3e:a9:82:5a:67:71:94:3c:fa:27:c2:
         27:fb:9a:50:90:bf:59:ce:33:f8:14:15:f2:3c:d9:6c:06:f3:
         83:59:14:81:0c:bb:05:26:7e:79:2f:70:15:6d:67:2f:e2:06:
         b5:60:54:6e:56:aa:72:0f:be:cf:cf:0a:92:26:40:30:b1:2d:
         a4:1c:31:63:3a:1c:b6:ec:9f:6f:ac:3c:b4:ee:73:81:35:d5:
         78:0c:d8:ce:6e:de:a7:c1:d1:0f:56:ac:54:e4:11:9a:b9:81:
         ae:77:63:f8:e5:94:a4:f9:84:ba:59:7a:d2:91:8e:c4:f5:f4:
         b3:7b:f6:81
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZNHFz/mDcyyXdqVkg6RYbPnMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGRmYTY4ZDE0ODYzYTQ1NGI4OTU0N2I1OWI1Y2MzNDE1Y2Qy
ZDhmMzcwHhcNMjQxMTIwMDEwMjA2WhcNMjQxMTIxMDEwMjA2WjAzMTEwLwYDVQQD
EyhlY2QwNGJlMTQ0NmFkY2IwMzdmYTMwOTA3MGYyMzA4MGZmM2E0ZDNmMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEApwmj7wDTXTqMP34PcfNh1zOE5EOO
n1r5CAuasJibAUZUdKEpAuYCTQZwbJOG2/vCGGueKQfF9cW4EPiNiYoSRyWoIGlH
jD1yJOCCGitw7UcwMQEPxLoU3okMDheU/oD5dOqmkhXXLdj8AekCSmmy7tuXs73b
oeiPPQ5t4+u9LkejMAK29HY4ymIIOfO7kp5Kp8HdEiwSAqdftFgM/AjxjP/R8j/v
/GDlBHtqF0+xgYZRzUIJxYPQjY2sAEOm8yO6nvu/bxckCIH6GzgPzRBzd50a8ATy
jizl62Lw3w3tpTeGoKcINAdZVV7+79YOJpWsgqzjvoYimIN3Ip5yGaJZmwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFOzQS+FEatywN/owkHDyMID/Ok0/MB8GA1UdIwQY
MBaAFN+mjRSGOkVLiVR7WbXMNBXNLY83MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvMzZhTkZJWTZSVXVKVkh0WnRjdzBGYzB0anpjLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xNy9hMTQ2YzctODFlOS00ODYyLTk3NGYt
ZTBlY2Q1MzQyZWQ4LzEvMzZhTkZJWTZSVXVKVkh0WnRjdzBGYzB0anpjLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8xNy9hMTQ2YzctODFlOS00ODYyLTk3NGYtZTBlY2Q1MzQyZWQ4
LzEvMzZhTkZJWTZSVXVKVkh0WnRjdzBGYzB0anpjLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEALJKueCNY
ZVu2xA+V3vY2vh0oda/9ei3B4DS1gz9/xrjdqZwPwaA4kmckavepYt+Cgq+wZbNh
3Q3v8/Otw2nCrSQ16EujoyJOGy79wflQZEsfEQwtjbJR7x9oxPmTtshCuf43cMcB
wIvHarbr/fc0yiHeZi94EgIscpRwv2fm81KWXscRmj6pglpncZQ8+ifCJ/uaUJC/
Wc4z+BQV8jzZbAbzg1kUgQy7BSZ+eS9wFW1nL+IGtWBUblaqcg++z88KkiZAMLEt
pBwxYzoctuyfb6w8tO5zgTXVeAzYzm7ep8HRD1asVOQRmrmBrndj+OWUpPmEull6
0pGOxPX0s3v2gQ==
-----END CERTIFICATE-----
Generated at Thu Nov 21 02:12:32 2024 by rpki-client on console.sobornost.net