Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1e/42e981-5556-46b8-89cf-87c3868f161e/1/FrONMAlX-hWzqALTj_BZyrJ5bFo.mft
File:                     FrONMAlX-hWzqALTj_BZyrJ5bFo.mft (raw, json)
Hash identifier:          hC+tNAp5iFG1ZCsG3Xzqcnp167qp+DErFj1Tugmxx98=
Subject key identifier:   31:C9:6D:B6:7F:EA:50:0D:0A:59:AA:92:B1:8E:46:59:C9:EF:AA:31
Authority key identifier: 16:B3:8D:30:09:57:FA:15:B3:A8:02:D3:8F:F0:59:CA:B2:79:6C:5A
Certificate issuer:       /CN=16b38d300957fa15b3a802d38ff059cab2796c5a
Certificate serial:       018CECCF73431416C2DF1F50AB0BCFCCF683
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/FrONMAlX-hWzqALTj_BZyrJ5bFo.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/1e/42e981-5556-46b8-89cf-87c3868f161e/1/FrONMAlX-hWzqALTj_BZyrJ5bFo.mft
Manifest number:          08C4
Signing time:             Tue 09 Jan 2024 06:01:07 +0000
Manifest this update:     Tue 09 Jan 2024 06:01:07 +0000
Manifest next update:     Wed 10 Jan 2024 06:01:07 +0000
Files and hashes:         1: FrONMAlX-hWzqALTj_BZyrJ5bFo.crl (hash: E+Jyk6YrxtUi8JPvfqFHfI1bvAzt3kffKbDqfvatbIM=)
                          2: abG89RC27Esi4XqOEO3uNPqCQmk.roa (hash: GyDToUzK9XEFFJawY9ZvEnVUuUbT9jgXLL13okDoXKM=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:8c:ec:cf:73:43:14:16:c2:df:1f:50:ab:0b:cf:cc:f6:83
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=16b38d300957fa15b3a802d38ff059cab2796c5a
        Validity
            Not Before: Jan  9 06:01:07 2024 GMT
            Not After : Jan 10 06:01:07 2024 GMT
        Subject: CN=31c96db67fea500d0a59aa92b18e4659c9efaa31
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:95:d2:fe:31:61:fc:8d:b4:eb:c1:0b:14:77:ee:
                    39:1b:26:a2:17:ff:f9:f5:8a:27:86:0a:a5:1c:6a:
                    0a:7c:e3:9b:61:69:08:e1:20:93:35:82:71:96:d5:
                    10:4f:99:2a:14:37:2e:12:e9:e8:0e:03:5f:d3:d2:
                    3d:bc:fc:a8:8d:ba:b1:f6:8f:54:0f:37:f1:4d:ab:
                    da:d8:91:35:2a:5a:cf:e0:b9:df:5a:4c:9a:33:b1:
                    8f:b0:b5:ea:00:59:9d:b7:85:01:69:38:d5:03:f6:
                    b1:f2:f2:30:30:b9:78:17:0f:18:f1:b9:ae:fd:df:
                    7a:82:33:ac:5b:7a:a4:54:42:4c:f5:07:c4:39:c2:
                    c3:be:3a:39:e5:03:04:52:12:f9:1f:57:1b:f4:ed:
                    47:aa:a9:1b:2a:db:d0:14:24:46:f1:ec:b7:6e:c3:
                    30:c9:6e:2b:1a:73:8a:da:cd:8a:aa:0a:02:06:37:
                    d1:e5:6c:22:30:41:53:b3:70:0e:40:f5:78:e9:2d:
                    bd:72:87:eb:ea:96:12:ea:39:4b:3b:c0:d9:c4:3d:
                    ec:91:7d:1d:bb:c9:61:ed:de:14:ba:a2:58:3b:d3:
                    f7:a2:2b:18:06:07:ec:eb:f9:31:14:f4:8f:65:84:
                    aa:cd:98:a3:64:d0:a3:49:e3:14:a0:8d:9d:3c:b9:
                    ef:6b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                31:C9:6D:B6:7F:EA:50:0D:0A:59:AA:92:B1:8E:46:59:C9:EF:AA:31
            X509v3 Authority Key Identifier:
                keyid:16:B3:8D:30:09:57:FA:15:B3:A8:02:D3:8F:F0:59:CA:B2:79:6C:5A

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/FrONMAlX-hWzqALTj_BZyrJ5bFo.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1e/42e981-5556-46b8-89cf-87c3868f161e/1/FrONMAlX-hWzqALTj_BZyrJ5bFo.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/1e/42e981-5556-46b8-89cf-87c3868f161e/1/FrONMAlX-hWzqALTj_BZyrJ5bFo.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         b4:32:c0:41:e2:e9:a5:e3:b9:83:39:e2:f3:cb:09:46:f4:54:
         2e:d7:ca:f5:ff:b8:ff:85:c2:e6:45:b2:7c:49:74:79:54:65:
         6c:57:d0:22:a2:15:7a:5a:ed:da:1f:3c:88:64:d6:ab:78:0f:
         96:0d:8a:33:51:0d:eb:f7:04:d6:e9:85:b9:2d:62:22:4c:74:
         21:2c:02:e6:6a:b5:1c:08:5d:1c:12:ff:76:d4:fe:d3:63:f3:
         2f:84:9a:61:c4:63:c6:7b:f8:34:1a:cc:96:d7:7a:ec:7a:53:
         a4:f6:3d:6f:18:60:06:c0:b0:96:fd:7c:bb:73:26:17:ba:da:
         02:53:c0:03:ac:2a:1f:e9:1f:de:81:2d:69:d6:00:a9:2f:1f:
         81:31:33:82:a7:69:76:d4:d2:45:9d:e0:c8:51:83:f6:3d:7f:
         f3:1b:04:78:7e:75:28:ae:da:b9:f1:fa:99:3a:c9:e6:cb:81:
         f3:85:97:f6:c6:60:4f:35:af:1f:27:34:7e:3b:9f:89:0a:a5:
         af:3b:b6:8b:da:ee:f0:ef:a4:a8:83:5c:4e:2c:d8:8a:cd:53:
         d7:92:32:15:09:c7:09:61:f7:c8:b6:81:09:4e:55:47:ae:08:
         eb:30:eb:e3:5b:04:d9:d4:62:47:0e:ee:8f:e8:a7:74:52:04:
         f4:10:a6:23
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Feb 27 00:58:37 2024 by rpki-client on console.sobornost.net