Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1f/a416e2-9431-46e1-acb9-4305cce2cf8d/1/Nq0zjIDhDJ8OVI1UM1VzL05FddQ.mft
File:                     Nq0zjIDhDJ8OVI1UM1VzL05FddQ.mft (raw, json)
Hash identifier:          FmhTkjJWNu3dLyHtQLrB4XfK1spFPyHDBSxTWMaAWCU=
Subject key identifier:   1B:A4:D5:71:37:7E:6B:29:77:D9:BC:C8:A0:E8:A2:1C:6F:73:76:53
Authority key identifier: 36:AD:33:8C:80:E1:0C:9F:0E:54:8D:54:33:55:73:2F:4E:45:75:D4
Certificate issuer:       /CN=36ad338c80e10c9f0e548d543355732f4e4575d4
Certificate serial:       0192AE85B910CAE12250214B4AA896059D5C
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/Nq0zjIDhDJ8OVI1UM1VzL05FddQ.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/1f/a416e2-9431-46e1-acb9-4305cce2cf8d/1/Nq0zjIDhDJ8OVI1UM1VzL05FddQ.mft
Manifest number:          1317
Signing time:             Mon 21 Oct 2024 10:00:52 +0000
Manifest this update:     Mon 21 Oct 2024 10:00:52 +0000
Manifest next update:     Tue 22 Oct 2024 10:00:52 +0000
Files and hashes:         1: Nq0zjIDhDJ8OVI1UM1VzL05FddQ.crl (hash: pbd0e1SBIW2UyxgfnJWu8i1IiPHChdHQrOB04PLvtjA=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:92:ae:85:b9:10:ca:e1:22:50:21:4b:4a:a8:96:05:9d:5c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=36ad338c80e10c9f0e548d543355732f4e4575d4
        Validity
            Not Before: Oct 21 10:00:52 2024 GMT
            Not After : Oct 22 10:00:52 2024 GMT
        Subject: CN=1ba4d571377e6b2977d9bcc8a0e8a21c6f737653
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c9:eb:2d:aa:0d:a3:a5:f3:43:28:1c:a5:2b:98:
                    e1:4d:0f:74:78:b1:8a:3d:9d:60:18:5a:68:a3:32:
                    63:41:d2:9d:d5:93:4d:1a:da:5d:3b:66:b3:12:90:
                    cd:92:43:c2:c0:e4:db:0c:48:3c:ae:f9:b8:2c:77:
                    23:9f:25:ac:c8:74:0a:a5:ee:21:09:6c:62:34:95:
                    18:0e:a6:32:75:05:1d:d9:1e:94:a7:60:8d:eb:ff:
                    e6:37:a5:85:b6:1a:ec:d2:a5:01:bf:ec:41:e8:18:
                    89:fc:2e:22:43:ae:f8:86:08:ec:5f:45:25:d8:bf:
                    c4:7a:0c:e1:d3:f4:99:25:77:aa:07:a1:ce:19:6f:
                    50:0c:01:7e:c3:ee:7f:ff:3b:0a:19:0a:83:c9:43:
                    87:39:fc:09:78:cc:18:1c:d2:08:f6:8e:5e:51:fe:
                    83:5f:6c:15:51:8c:0d:b3:03:3e:45:80:79:57:03:
                    a0:d6:ed:36:c9:bf:3c:78:e1:69:d3:69:e1:b3:c1:
                    7f:14:ef:df:6d:e9:f2:63:85:f0:ee:ec:f0:66:63:
                    91:cc:64:96:2e:d7:80:bb:03:e2:37:67:25:31:db:
                    68:3d:ec:55:9f:45:08:8b:9c:16:1e:41:cc:22:f5:
                    da:b0:4a:ba:58:c7:83:24:05:2f:f5:39:6f:0a:68:
                    33:29
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1B:A4:D5:71:37:7E:6B:29:77:D9:BC:C8:A0:E8:A2:1C:6F:73:76:53
            X509v3 Authority Key Identifier:
                keyid:36:AD:33:8C:80:E1:0C:9F:0E:54:8D:54:33:55:73:2F:4E:45:75:D4

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Nq0zjIDhDJ8OVI1UM1VzL05FddQ.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1f/a416e2-9431-46e1-acb9-4305cce2cf8d/1/Nq0zjIDhDJ8OVI1UM1VzL05FddQ.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/1f/a416e2-9431-46e1-acb9-4305cce2cf8d/1/Nq0zjIDhDJ8OVI1UM1VzL05FddQ.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         bb:4c:be:20:31:18:f5:1f:d5:fc:ce:30:d0:4e:c6:68:3d:73:
         35:3a:38:b5:fb:f0:83:d1:73:f3:02:2e:a1:84:82:fd:f8:8c:
         e5:db:48:4f:bf:1a:c0:17:bc:b3:d2:5d:83:95:5d:77:20:23:
         05:d3:13:ab:dc:6b:46:53:8a:27:2b:9d:24:86:f3:b4:d2:ea:
         dd:f2:3d:b5:c2:43:21:7a:8f:6d:1f:86:ad:0b:c5:12:95:9c:
         be:f6:a4:8b:8b:ce:d5:52:e5:fb:54:54:8c:6f:84:f0:4e:c7:
         0e:5e:5f:e7:5d:05:4d:a5:07:7d:00:9f:b0:e2:30:cb:08:d9:
         6d:2d:1f:fc:9e:08:b5:25:02:ca:b5:aa:02:7f:d2:7a:c2:ef:
         ab:48:1a:9e:26:66:dd:04:5d:0a:ef:49:f8:99:c2:47:7f:c5:
         44:fc:2e:3b:8f:fe:28:52:6e:1b:b8:da:f6:01:5f:b4:23:86:
         b2:ed:69:fe:fa:fd:bc:13:d0:cc:2e:40:5f:57:a8:84:91:8d:
         0c:79:99:81:6d:c6:4b:ba:e2:80:e2:20:7f:45:29:c4:d0:ad:
         43:31:dc:f8:5f:35:b5:0d:8f:d4:d5:42:b4:46:f9:85:1e:6a:
         b2:82:23:23:73:0e:b0:0b:98:1f:df:c6:74:af:6d:5d:65:cb:
         1d:bb:ac:0f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Oct 22 19:17:34 2024 by rpki-client on console.sobornost.net