Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/20/44e2f8-abcf-43b7-8f0d-88d943fa92c5/1/Q5jCGYtyoovVWjTJWP7om60jk38.mft
File:                     Q5jCGYtyoovVWjTJWP7om60jk38.mft (raw, json)
Hash identifier:          k0LanwUZ7ycD+Fp5f1etfGS5CCJOq+lXdk3RfAybPKA=
Subject key identifier:   4D:51:E6:40:59:76:47:71:78:4A:2A:7C:00:7B:49:E1:C5:84:9C:1D
Authority key identifier: 43:98:C2:19:8B:72:A2:8B:D5:5A:34:C9:58:FE:E8:9B:AD:23:93:7F
Certificate issuer:       /CN=4398c2198b72a28bd55a34c958fee89bad23937f
Certificate serial:       018CECCF42AE1F8F9BD02A115A1D960791F0
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/Q5jCGYtyoovVWjTJWP7om60jk38.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/20/44e2f8-abcf-43b7-8f0d-88d943fa92c5/1/Q5jCGYtyoovVWjTJWP7om60jk38.mft
Manifest number:          0AA5
Signing time:             Tue 09 Jan 2024 06:00:54 +0000
Manifest this update:     Tue 09 Jan 2024 06:00:54 +0000
Manifest next update:     Wed 10 Jan 2024 06:00:54 +0000
Files and hashes:         1: Q5jCGYtyoovVWjTJWP7om60jk38.crl (hash: +q29eVfVfuyWXlWNuZ7PEsVxPU+HEvW+poW2Vdu1DG0=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:8c:ec:cf:42:ae:1f:8f:9b:d0:2a:11:5a:1d:96:07:91:f0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4398c2198b72a28bd55a34c958fee89bad23937f
        Validity
            Not Before: Jan  9 06:00:54 2024 GMT
            Not After : Jan 10 06:00:54 2024 GMT
        Subject: CN=4d51e64059764771784a2a7c007b49e1c5849c1d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:84:13:72:15:59:29:db:8b:11:9b:1f:85:52:f2:
                    c2:8d:f9:0a:ef:55:17:ed:ae:2f:f4:1a:dc:7a:d4:
                    f0:b9:fe:8f:d7:48:6f:2c:e0:cd:e1:9d:44:79:d2:
                    e4:e3:08:f5:3a:77:67:0d:24:b7:60:c7:6c:b0:33:
                    3a:5c:7b:71:d7:f9:c3:d2:3d:95:18:58:96:0f:95:
                    ec:66:be:91:6d:00:00:67:16:62:fc:99:31:ac:89:
                    75:d3:42:0b:c5:e0:fb:dc:24:e4:56:0d:93:62:5d:
                    1f:be:37:b6:ba:cb:41:a5:02:bd:4d:d1:ca:4b:65:
                    2c:f0:ad:a3:11:99:69:82:31:87:ea:37:28:bc:17:
                    0d:52:e4:5d:7f:3a:c9:9b:d4:dc:98:0d:9c:21:b0:
                    1e:98:ea:af:d4:36:fd:e4:ee:e4:a3:da:dc:62:ec:
                    05:fb:bb:dd:af:83:66:7e:dc:65:89:f2:d1:a9:4a:
                    7b:29:19:e8:64:f0:8f:05:5e:9f:7b:08:a5:d5:e7:
                    d0:11:18:9c:7f:5f:79:a1:6a:f1:1c:6a:99:09:01:
                    88:15:d8:a9:8f:d6:50:8d:17:e8:8e:cd:e3:d5:87:
                    c0:24:5c:62:30:3a:9b:da:5f:d7:bf:d2:20:03:7c:
                    5a:c9:88:1c:96:27:70:b8:a8:91:c2:3b:1e:3f:73:
                    28:fd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4D:51:E6:40:59:76:47:71:78:4A:2A:7C:00:7B:49:E1:C5:84:9C:1D
            X509v3 Authority Key Identifier:
                keyid:43:98:C2:19:8B:72:A2:8B:D5:5A:34:C9:58:FE:E8:9B:AD:23:93:7F

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Q5jCGYtyoovVWjTJWP7om60jk38.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/20/44e2f8-abcf-43b7-8f0d-88d943fa92c5/1/Q5jCGYtyoovVWjTJWP7om60jk38.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/20/44e2f8-abcf-43b7-8f0d-88d943fa92c5/1/Q5jCGYtyoovVWjTJWP7om60jk38.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         53:e9:b1:46:f1:d8:43:1a:04:71:0a:e8:fd:5e:5b:70:f8:e5:
         08:22:07:04:dd:f1:a1:a0:7e:79:5f:d2:eb:a3:0e:18:33:b1:
         6e:ce:3a:07:95:4e:02:a0:85:af:11:44:9d:64:98:a0:6c:b1:
         5f:d0:ac:1c:61:44:ad:50:26:f7:9c:79:6f:ed:f6:5e:47:d8:
         61:0a:2e:22:72:f1:29:e5:2d:10:97:d0:ec:af:bc:a9:b5:fc:
         85:9d:b8:20:e1:4c:4d:b6:2b:1a:2f:1f:de:ea:3f:54:23:fe:
         3b:df:30:4a:20:82:4f:18:be:76:91:3d:e0:fa:98:69:50:e5:
         1f:37:f2:aa:7d:e2:7e:1b:8d:36:c2:b6:4b:a4:95:b3:4a:cf:
         51:12:76:6d:5b:4a:bf:87:37:f3:d7:7a:dc:8f:ec:e2:44:b4:
         89:35:34:d5:67:28:5f:4e:9d:97:af:33:33:f9:7f:ce:84:a7:
         72:e3:2d:07:e7:a2:34:bb:6a:7d:d6:60:a5:fa:80:f0:e0:5b:
         97:fb:34:d3:36:b0:4d:82:28:55:5f:4f:22:56:eb:65:38:32:
         11:4e:6d:4e:9d:66:30:d9:cb:f6:af:d6:6b:ab:e0:de:71:19:
         76:6f:36:b2:12:5b:90:f3:f7:e8:e8:65:02:ca:d6:7a:47:52:
         3e:bb:e3:f8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Feb 27 00:58:38 2024 by rpki-client on console.sobornost.net