Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/25/866bc7-5703-4760-b9d4-2e4ef6879238/1/jJszq_XD6U1IQ1eScD7tcaTimZU.mft
File:                     jJszq_XD6U1IQ1eScD7tcaTimZU.mft (raw, json)
Hash identifier:          prZtGxRPpLrFrOi5K/XqsNbd+ujU2HMygrhMxK7Z1jQ=
Subject key identifier:   49:3B:95:BD:F6:A4:B1:33:C5:72:52:97:8C:1C:0C:73:A9:20:12:B4
Authority key identifier: 8C:9B:33:AB:F5:C3:E9:4D:48:43:57:92:70:3E:ED:71:A4:E2:99:95
Certificate issuer:       /CN=8c9b33abf5c3e94d48435792703eed71a4e29995
Certificate serial:       018C396C8CDD2FDEE2C33C78A2671FC4CADC
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/jJszq_XD6U1IQ1eScD7tcaTimZU.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/25/866bc7-5703-4760-b9d4-2e4ef6879238/1/jJszq_XD6U1IQ1eScD7tcaTimZU.mft
Manifest number:          0869
Signing time:             Tue 05 Dec 2023 10:01:04 +0000
Manifest this update:     Tue 05 Dec 2023 10:01:04 +0000
Manifest next update:     Wed 06 Dec 2023 10:01:04 +0000
Files and hashes:         1: Lbptm5rV1roqZ5Fhc4YhOupRvTo.roa (hash: /iA/2GIwv9KJgxo+XWwjdPuXbq3iLnnwB1nVwd/yZig=)
                          2: jJszq_XD6U1IQ1eScD7tcaTimZU.crl (hash: 13EV4D1wY/7UM9opeO3kEj/gQy1zvDgCpIws7IUgUYw=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:8c:39:6c:8c:dd:2f:de:e2:c3:3c:78:a2:67:1f:c4:ca:dc
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8c9b33abf5c3e94d48435792703eed71a4e29995
        Validity
            Not Before: Dec  5 10:01:04 2023 GMT
            Not After : Dec  6 10:01:04 2023 GMT
        Subject: CN=493b95bdf6a4b133c57252978c1c0c73a92012b4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:86:d1:31:98:05:b4:a2:08:45:11:8d:86:4a:d4:
                    39:66:7f:94:11:97:45:c4:75:09:05:cb:16:7c:f1:
                    b4:73:ca:22:a4:6c:98:af:a2:ce:c7:0c:f6:af:31:
                    c3:e2:61:4b:2f:f4:6a:1c:6e:aa:1b:fe:aa:f8:57:
                    35:6d:a9:7c:db:93:82:11:b8:28:95:13:2c:c4:66:
                    a2:39:36:12:26:1a:05:5d:10:c1:3d:fb:63:0f:74:
                    3b:d9:72:6c:df:f1:3a:a1:70:7d:ec:35:e3:b4:04:
                    75:d2:af:de:79:02:32:26:df:da:35:c8:0b:a6:24:
                    f1:8e:16:e1:24:3c:a1:00:aa:e0:cf:fe:cd:b3:60:
                    4e:04:5c:83:71:0f:99:03:a1:44:39:b5:e9:d3:fa:
                    90:4c:94:df:29:e3:d3:eb:0c:66:62:35:b6:44:05:
                    4b:50:e9:63:44:75:48:da:ff:7b:09:20:8d:0f:5f:
                    be:27:b6:13:b6:0a:de:e9:c3:d2:68:16:0a:59:34:
                    0d:2d:af:9b:6c:ae:9e:63:fc:a3:9e:c9:ef:93:67:
                    34:79:ee:06:18:49:e9:4e:c4:31:e2:00:ea:88:93:
                    e8:9a:bb:4f:5a:f8:65:0c:97:d5:af:eb:be:6f:21:
                    93:e8:c1:7b:30:bd:6d:7c:db:70:be:0b:0a:1a:35:
                    b2:e3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                49:3B:95:BD:F6:A4:B1:33:C5:72:52:97:8C:1C:0C:73:A9:20:12:B4
            X509v3 Authority Key Identifier:
                keyid:8C:9B:33:AB:F5:C3:E9:4D:48:43:57:92:70:3E:ED:71:A4:E2:99:95

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/jJszq_XD6U1IQ1eScD7tcaTimZU.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/25/866bc7-5703-4760-b9d4-2e4ef6879238/1/jJszq_XD6U1IQ1eScD7tcaTimZU.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/25/866bc7-5703-4760-b9d4-2e4ef6879238/1/jJszq_XD6U1IQ1eScD7tcaTimZU.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         00:d8:a6:78:22:e6:21:4a:60:d5:f2:b9:bc:c6:de:c8:c7:bc:
         7a:7f:73:8e:57:a4:0c:c8:2d:ce:77:4e:03:0c:57:0a:89:3a:
         f6:ab:03:79:98:f9:cf:6f:92:e7:42:f8:c2:7b:88:ce:ce:e7:
         e5:3e:f9:65:ad:82:0e:8a:6b:74:64:43:4a:77:7c:e5:09:12:
         47:aa:e7:4e:fa:2f:b7:a8:0e:17:1c:13:26:5b:3c:85:a1:e2:
         d0:e7:86:fc:9b:c3:65:e5:5a:f5:0b:41:35:74:a8:06:48:86:
         bf:ca:00:21:d5:5a:54:fe:77:05:31:1a:7f:fd:d9:0b:c2:12:
         1c:68:05:4c:81:46:2e:63:00:9c:cd:f6:fb:72:92:b8:7e:12:
         58:2e:bc:47:c6:87:ed:79:cb:4e:4d:6b:41:86:ce:11:76:9c:
         c7:a0:ff:f9:9e:24:e6:ba:23:b1:44:92:64:e6:a8:5d:3b:ae:
         84:e4:17:0e:f1:3f:00:db:94:0e:8a:c8:e2:6f:21:0c:f7:a0:
         61:9f:e3:49:ed:03:24:2f:13:4b:52:af:11:8a:b1:1f:b5:93:
         aa:7f:54:68:05:bb:43:f9:1d:cb:3d:3c:ac:04:e7:43:80:4c:
         df:10:c9:1f:fb:9e:9c:e6:80:e5:ee:0e:10:03:09:55:5a:53:
         9a:c8:c0:55
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Dec 27 18:40:27 2023 by rpki-client on console.sobornost.net