Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/20/bc3c68-d550-4f09-a151-5b03dc8f7c0e/1/pnknI_UOcyw4kgiUBnCl4KiWzzE.mft
File:                     pnknI_UOcyw4kgiUBnCl4KiWzzE.mft (raw, json)
Hash identifier:          zofgehKS6yG6N+VG1Hrf/Z/HOqzZrCbvu2+O05b8OjQ=
Subject key identifier:   38:7D:28:E3:87:F6:23:88:0E:09:64:01:A1:D3:A6:CD:F7:EC:4E:81
Authority key identifier: A6:79:27:23:F5:0E:73:2C:38:92:08:94:06:70:A5:E0:A8:96:CF:31
Certificate issuer:       /CN=a6792723f50e732c389208940670a5e0a896cf31
Certificate serial:       0191B2651B76B4C9D216B4C9079B22D07406
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/pnknI_UOcyw4kgiUBnCl4KiWzzE.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/20/bc3c68-d550-4f09-a151-5b03dc8f7c0e/1/pnknI_UOcyw4kgiUBnCl4KiWzzE.mft
Manifest number:          02C2
Signing time:             Mon 02 Sep 2024 11:00:55 +0000
Manifest this update:     Mon 02 Sep 2024 11:00:55 +0000
Manifest next update:     Tue 03 Sep 2024 11:00:55 +0000
Files and hashes:         1: pnknI_UOcyw4kgiUBnCl4KiWzzE.crl (hash: ZAVFxTnWD1ABbGJqKVadaDYzt/1Kgsrs89O7+whxiII=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:91:b2:65:1b:76:b4:c9:d2:16:b4:c9:07:9b:22:d0:74:06
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=a6792723f50e732c389208940670a5e0a896cf31
        Validity
            Not Before: Sep  2 11:00:55 2024 GMT
            Not After : Sep  3 11:00:55 2024 GMT
        Subject: CN=387d28e387f623880e096401a1d3a6cdf7ec4e81
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ae:e0:b3:e0:bc:86:3d:64:5f:5a:0d:07:b5:a4:
                    45:3b:43:24:cf:84:4c:05:1e:98:f1:47:69:6b:00:
                    45:48:a1:8a:14:2d:58:d7:01:a4:09:10:1a:35:22:
                    2f:6b:54:67:6a:e3:fa:c3:c9:bd:00:4c:9b:b0:b9:
                    2e:d3:04:12:c3:92:ab:71:fb:e5:00:d6:06:da:5c:
                    c6:d0:03:fd:e9:79:1f:5f:2b:5c:61:5c:81:06:0f:
                    23:fe:93:73:60:a7:a7:3b:34:ff:3f:80:8d:cf:9c:
                    12:dc:59:18:c8:5c:7c:17:50:7d:7a:ac:25:cf:a0:
                    39:3b:07:07:d1:24:38:76:07:db:ec:f1:14:1a:e9:
                    ea:ce:39:20:14:fb:8d:fc:01:a2:63:83:f9:58:57:
                    a8:fb:f7:a0:7c:b0:d7:48:8d:fb:e0:c7:bd:65:d2:
                    9a:11:fd:25:77:4b:f6:ce:9d:c3:ad:4f:91:3a:f3:
                    b7:ec:8e:2a:71:ec:f8:28:ae:41:fc:76:79:1d:84:
                    d3:9e:f4:3b:c5:b7:52:29:53:30:5e:79:69:08:5b:
                    a2:9c:b5:1a:c4:b0:f1:19:1a:24:e3:02:6d:ad:af:
                    bb:c6:80:d7:a0:f8:ef:c0:92:f0:19:33:0f:a6:81:
                    18:29:36:cf:d5:32:96:e8:48:06:8f:2b:b5:f2:17:
                    d2:a7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                38:7D:28:E3:87:F6:23:88:0E:09:64:01:A1:D3:A6:CD:F7:EC:4E:81
            X509v3 Authority Key Identifier:
                keyid:A6:79:27:23:F5:0E:73:2C:38:92:08:94:06:70:A5:E0:A8:96:CF:31

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/pnknI_UOcyw4kgiUBnCl4KiWzzE.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/20/bc3c68-d550-4f09-a151-5b03dc8f7c0e/1/pnknI_UOcyw4kgiUBnCl4KiWzzE.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/20/bc3c68-d550-4f09-a151-5b03dc8f7c0e/1/pnknI_UOcyw4kgiUBnCl4KiWzzE.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         57:e8:c7:86:47:e5:1e:00:d7:5c:32:15:88:60:08:e6:28:79:
         1d:ea:12:06:5b:36:57:43:2e:d2:17:16:01:e9:b2:b8:92:86:
         27:a5:66:6f:20:97:fa:15:81:d7:e6:32:f1:dd:1b:2a:b4:8d:
         d1:ff:13:32:0b:42:6a:07:26:43:bd:ef:d9:c2:f0:9e:90:8c:
         f0:27:8e:99:ea:95:4d:88:a8:d2:18:1f:bf:d8:ae:75:b9:2e:
         a2:7a:17:9c:2f:54:fd:76:1e:1c:a2:1f:0f:a4:99:12:f2:c5:
         6c:84:5f:e9:f4:7d:ea:c1:1f:99:e7:c9:00:c6:d5:bb:4f:4d:
         c0:0d:1f:96:fd:8c:53:9c:6b:8a:69:2d:70:2b:5e:4f:26:cf:
         06:40:6e:2e:cd:4b:5e:1e:59:57:ee:eb:95:ee:a5:ba:15:21:
         4c:10:af:e5:83:c0:f4:41:0c:bd:bd:1c:c1:7c:33:3f:91:ab:
         f0:b6:17:54:73:fb:a7:c5:47:b3:54:9f:31:f9:a1:67:8c:ee:
         89:7f:58:e7:c8:86:91:c7:f5:c7:99:a2:f6:12:a8:ab:69:f8:
         1a:ba:54:b1:57:bb:c9:bc:c8:38:de:74:e6:02:5d:a2:d4:c2:
         50:ee:ee:a6:62:1d:51:1e:1b:cf:de:b9:ab:08:2b:d9:c6:fb:
         66:48:8c:0c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Sep 11 05:42:25 2024 by rpki-client on console.sobornost.net