Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1d/2f0fc7-1098-4253-a2aa-ceec3360d817/1/3JXMdjEwknpvvB6y_XRD-s-hGh8.mft
File:                     3JXMdjEwknpvvB6y_XRD-s-hGh8.mft (raw, json)
Hash identifier:          iSe+E+TKT8BNj/stqZaT5QN+S8J60EZlEzna02YjNUk=
Subject key identifier:   AD:C0:A2:28:ED:3C:97:7A:23:D9:1D:4D:3F:EB:D3:D8:6C:1C:10:93
Authority key identifier: DC:95:CC:76:31:30:92:7A:6F:BC:1E:B2:FD:74:43:FA:CF:A1:1A:1F
Certificate issuer:       /CN=dc95cc763130927a6fbc1eb2fd7443facfa11a1f
Certificate serial:       0193F99D03773CD5BB40C854B1FE8B08BBE1
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/3JXMdjEwknpvvB6y_XRD-s-hGh8.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/1d/2f0fc7-1098-4253-a2aa-ceec3360d817/1/3JXMdjEwknpvvB6y_XRD-s-hGh8.mft
Manifest number:          0267
Signing time:             Tue 24 Dec 2024 17:00:36 +0000
Manifest this update:     Tue 24 Dec 2024 17:00:36 +0000
Manifest next update:     Wed 25 Dec 2024 17:00:36 +0000
Files and hashes:         1: 3JXMdjEwknpvvB6y_XRD-s-hGh8.crl (hash: cNxPnLpW8KOZVqz4uHDh/xM8UOCuM/zQ+IbwUXktx8E=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:93:f9:9d:03:77:3c:d5:bb:40:c8:54:b1:fe:8b:08:bb:e1
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=dc95cc763130927a6fbc1eb2fd7443facfa11a1f
        Validity
            Not Before: Dec 24 17:00:36 2024 GMT
            Not After : Dec 25 17:00:36 2024 GMT
        Subject: CN=adc0a228ed3c977a23d91d4d3febd3d86c1c1093
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a9:ed:1c:3d:18:25:40:e7:c9:91:57:17:ed:45:
                    e2:60:9c:95:e9:83:7b:66:6a:8e:82:dd:96:a5:c7:
                    77:ca:ee:40:29:39:19:ec:e5:10:6e:2b:09:c1:81:
                    cb:a1:dd:15:c7:09:6a:c6:12:3b:85:14:f7:19:6b:
                    3d:a9:5b:8f:db:b6:03:47:05:c9:e9:12:8e:5b:50:
                    a5:3d:71:7f:77:18:1d:8a:36:d1:d0:02:83:f2:e1:
                    5d:55:42:45:5a:26:24:d2:f2:57:d0:b9:03:36:bc:
                    dd:ae:ac:f9:71:e3:1d:01:51:c2:86:59:9e:0c:97:
                    ef:fa:5a:32:15:26:14:7f:f5:03:40:29:57:6a:7b:
                    13:f3:6a:4d:6d:17:b8:c6:a0:89:9f:30:06:14:e9:
                    49:10:0c:83:f1:8e:86:4b:9b:64:92:9f:a4:01:e5:
                    c1:31:f2:44:b1:ae:c2:1b:b3:dd:b8:02:af:06:6f:
                    12:bb:cd:59:0b:33:ad:a3:ad:7e:01:b4:4d:ce:c1:
                    b8:b5:cb:19:cb:62:79:84:79:5e:66:17:d1:8b:74:
                    25:65:22:8b:78:ae:7a:1f:72:97:7e:a2:e7:da:18:
                    64:71:b7:c8:c2:8a:53:99:73:e9:a5:32:2f:4f:68:
                    06:5a:c8:70:75:da:d5:0c:16:d8:2e:79:c7:54:3a:
                    6b:15
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AD:C0:A2:28:ED:3C:97:7A:23:D9:1D:4D:3F:EB:D3:D8:6C:1C:10:93
            X509v3 Authority Key Identifier:
                keyid:DC:95:CC:76:31:30:92:7A:6F:BC:1E:B2:FD:74:43:FA:CF:A1:1A:1F

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/3JXMdjEwknpvvB6y_XRD-s-hGh8.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1d/2f0fc7-1098-4253-a2aa-ceec3360d817/1/3JXMdjEwknpvvB6y_XRD-s-hGh8.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/1d/2f0fc7-1098-4253-a2aa-ceec3360d817/1/3JXMdjEwknpvvB6y_XRD-s-hGh8.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         2a:fb:2c:e2:68:47:bd:f8:3b:b1:0b:1f:36:93:7e:be:68:7f:
         04:2a:b8:2d:11:9f:05:56:84:5b:89:14:f6:8a:5a:71:8f:3d:
         53:9a:f3:82:4c:64:11:bc:d8:ff:89:f6:98:82:9f:2c:73:92:
         3c:26:2c:57:ff:b8:8f:42:7a:45:31:b5:4b:e1:d8:44:5d:aa:
         04:b6:c0:5c:a2:52:c7:33:74:6c:a3:16:e7:82:c1:43:a4:81:
         d9:9d:b8:8f:14:69:06:d6:84:93:98:2a:eb:0c:80:7f:1c:9f:
         fd:ee:5c:ef:d6:f3:9d:e1:2b:4b:7e:f1:90:38:81:8f:16:30:
         5d:76:41:9f:46:22:ed:57:da:56:3e:5b:df:c8:34:58:a3:a4:
         f8:1e:f4:c0:a7:af:3f:33:e7:87:aa:5a:4b:77:96:ba:6f:5a:
         a9:7c:d3:57:88:97:cd:a9:8c:d4:2e:cd:b3:77:23:74:c0:76:
         c0:4b:b2:da:04:a4:b5:d2:ef:ab:a4:28:17:5e:0e:5f:09:ca:
         46:fe:28:e4:e0:90:ef:a4:02:95:a1:22:2e:21:b7:1b:c7:29:
         7a:70:cf:1b:70:a3:d1:7f:45:e3:4c:60:97:74:ea:ac:0e:89:
         54:8b:41:d5:75:b3:6d:e9:95:16:5f:18:d3:d7:e2:1c:2d:29:
         42:88:80:b8
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZP5nQN3PNW7QMhUsf6LCLvhMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGRjOTVjYzc2MzEzMDkyN2E2ZmJjMWViMmZkNzQ0M2ZhY2Zh
MTFhMWYwHhcNMjQxMjI0MTcwMDM2WhcNMjQxMjI1MTcwMDM2WjAzMTEwLwYDVQQD
EyhhZGMwYTIyOGVkM2M5NzdhMjNkOTFkNGQzZmViZDNkODZjMWMxMDkzMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqe0cPRglQOfJkVcX7UXiYJyV6YN7
ZmqOgt2Wpcd3yu5AKTkZ7OUQbisJwYHLod0VxwlqxhI7hRT3GWs9qVuP27YDRwXJ
6RKOW1ClPXF/dxgdijbR0AKD8uFdVUJFWiYk0vJX0LkDNrzdrqz5ceMdAVHChlme
DJfv+loyFSYUf/UDQClXansT82pNbRe4xqCJnzAGFOlJEAyD8Y6GS5tkkp+kAeXB
MfJEsa7CG7PduAKvBm8Su81ZCzOto61+AbRNzsG4tcsZy2J5hHleZhfRi3QlZSKL
eK56H3KXfqLn2hhkcbfIwopTmXPppTIvT2gGWshwddrVDBbYLnnHVDprFQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFK3AoijtPJd6I9kdTT/r09hsHBCTMB8GA1UdIwQY
MBaAFNyVzHYxMJJ6b7wesv10Q/rPoRofMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvM0pYTWRqRXdrbnB2dkI2eV9YUkQtcy1oR2g4LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xZC8yZjBmYzctMTA5OC00MjUzLWEyYWEt
Y2VlYzMzNjBkODE3LzEvM0pYTWRqRXdrbnB2dkI2eV9YUkQtcy1oR2g4Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8xZC8yZjBmYzctMTA5OC00MjUzLWEyYWEtY2VlYzMzNjBkODE3
LzEvM0pYTWRqRXdrbnB2dkI2eV9YUkQtcy1oR2g4LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAKvss4mhH
vfg7sQsfNpN+vmh/BCq4LRGfBVaEW4kU9opacY89U5rzgkxkEbzY/4n2mIKfLHOS
PCYsV/+4j0J6RTG1S+HYRF2qBLbAXKJSxzN0bKMW54LBQ6SB2Z24jxRpBtaEk5gq
6wyAfxyf/e5c79bzneErS37xkDiBjxYwXXZBn0Yi7VfaVj5b38g0WKOk+B70wKev
PzPnh6paS3eWum9aqXzTV4iXzamM1C7Ns3cjdMB2wEuy2gSktdLvq6QoF14OXwnK
Rv4o5OCQ76QClaEiLiG3G8cpenDPG3Cj0X9F40xgl3TqrA6JVItB1XWzbemVFl8Y
09fiHC0pQoiAuA==
-----END CERTIFICATE-----
Generated at Wed Dec 25 21:25:47 2024 by rpki-client on console.sobornost.net