Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/32/ed2715-7f1e-4427-8b7a-834085663eb8/1/A2FKcaGXnywep61ZoxvqKhNKlIE.mft
File:                     A2FKcaGXnywep61ZoxvqKhNKlIE.mft (raw, json)
Hash identifier:          M9CWWTfwrr0UXo9F6QzZXfkpCvRprYWOf13AbuRWsMI=
Subject key identifier:   78:0A:DB:A4:0A:F6:EA:58:A1:D6:F8:82:3A:D1:2F:C9:B6:6D:15:B7
Authority key identifier: 03:61:4A:71:A1:97:9F:2C:1E:A7:AD:59:A3:1B:EA:2A:13:4A:94:81
Certificate issuer:       /CN=03614a71a1979f2c1ea7ad59a31bea2a134a9481
Certificate serial:       0192AFCF456DD5F9C1A61AF495A0A90C9520
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/A2FKcaGXnywep61ZoxvqKhNKlIE.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/32/ed2715-7f1e-4427-8b7a-834085663eb8/1/A2FKcaGXnywep61ZoxvqKhNKlIE.mft
Manifest number:          02B9
Signing time:             Mon 21 Oct 2024 16:00:49 +0000
Manifest this update:     Mon 21 Oct 2024 16:00:49 +0000
Manifest next update:     Tue 22 Oct 2024 16:00:49 +0000
Files and hashes:         1: A2FKcaGXnywep61ZoxvqKhNKlIE.crl (hash: rvGcTnIC0ln+hLOwxqQHp0Q7D6m1iD0P9/D8S60TdCI=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:92:af:cf:45:6d:d5:f9:c1:a6:1a:f4:95:a0:a9:0c:95:20
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=03614a71a1979f2c1ea7ad59a31bea2a134a9481
        Validity
            Not Before: Oct 21 16:00:49 2024 GMT
            Not After : Oct 22 16:00:49 2024 GMT
        Subject: CN=780adba40af6ea58a1d6f8823ad12fc9b66d15b7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:96:f2:45:36:6d:ec:5b:39:a1:24:e6:2e:51:7a:
                    17:53:7d:77:99:1a:cc:1c:4e:d8:ba:a6:d0:ca:1d:
                    5f:ed:aa:2e:b8:09:59:28:f6:31:14:1d:66:fb:d7:
                    4f:30:1e:15:1a:bf:6b:76:d5:b6:4d:15:38:f8:ba:
                    ab:63:fe:48:61:ec:4c:6c:23:90:2e:18:c0:5e:ba:
                    59:74:be:b9:cf:c3:11:ed:72:24:25:55:89:a2:ac:
                    74:bd:fd:a8:8e:4f:37:6f:13:c9:08:ad:94:42:58:
                    b5:31:36:a7:03:6c:ba:68:f7:95:ce:66:38:16:4a:
                    a8:14:20:cf:b6:24:76:d6:76:5f:9f:02:55:26:78:
                    a8:e1:6e:9d:17:e9:4f:05:11:13:91:3b:be:ab:53:
                    c2:76:6c:4c:5b:4f:8f:f1:76:96:d1:d5:11:b3:b8:
                    93:2b:de:19:c0:11:66:11:eb:57:e9:f2:e5:4e:6a:
                    b6:cb:1d:f2:fd:26:72:0b:8b:18:7d:79:47:41:f0:
                    38:c8:a4:eb:cf:c2:09:38:9b:43:b6:bb:0a:b6:60:
                    92:00:f3:d0:5f:71:1f:4f:29:e7:80:79:a5:24:9c:
                    72:b7:c3:dd:cd:ab:57:fa:a4:0f:c4:b2:47:a7:3e:
                    99:64:d8:95:60:9f:d0:e9:da:4a:9c:ee:c9:28:6e:
                    5c:8d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                78:0A:DB:A4:0A:F6:EA:58:A1:D6:F8:82:3A:D1:2F:C9:B6:6D:15:B7
            X509v3 Authority Key Identifier:
                keyid:03:61:4A:71:A1:97:9F:2C:1E:A7:AD:59:A3:1B:EA:2A:13:4A:94:81

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/A2FKcaGXnywep61ZoxvqKhNKlIE.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/32/ed2715-7f1e-4427-8b7a-834085663eb8/1/A2FKcaGXnywep61ZoxvqKhNKlIE.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/32/ed2715-7f1e-4427-8b7a-834085663eb8/1/A2FKcaGXnywep61ZoxvqKhNKlIE.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         05:2c:0a:fc:29:03:05:b5:c0:60:e6:d0:f6:94:5a:c0:75:41:
         91:45:14:93:1a:91:53:e9:93:a3:57:e2:4d:8a:e2:55:fc:04:
         e7:76:04:c3:f5:ab:63:38:ed:c5:cb:cc:ee:be:d9:e1:36:1d:
         18:58:5d:77:fe:e6:e4:b7:ec:4d:96:90:92:60:fb:e0:1c:20:
         df:92:f6:96:17:97:1e:82:b6:24:d4:5b:04:47:52:a1:14:4c:
         dc:30:78:c3:ce:ea:75:ec:04:c0:70:11:6b:e8:3e:81:29:31:
         b5:4f:90:a3:26:09:3d:9b:00:ab:2c:51:72:c7:87:f4:7c:74:
         1d:38:c9:a3:7c:70:e7:dd:96:92:8b:93:8b:ed:90:69:d8:17:
         32:87:7a:b5:29:54:91:56:9f:08:5a:60:24:f1:af:a7:02:f3:
         95:a3:54:02:00:3d:a1:bc:15:65:84:0a:9f:de:f7:95:9a:5f:
         af:8f:49:79:5b:a0:62:5d:55:02:c8:aa:9a:58:e0:65:1c:72:
         6c:02:8b:b8:98:3e:a1:f5:9b:dd:02:45:81:88:97:33:70:f3:
         6d:9f:3d:fc:d4:92:ed:4f:d4:49:3e:ac:d6:76:db:68:f3:33:
         2a:93:29:67:76:80:fa:dd:ea:f4:82:b6:89:fb:d0:4d:6b:b5:
         48:58:a2:7f
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZKvz0Vt1fnBphr0laCpDJUgMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDAzNjE0YTcxYTE5NzlmMmMxZWE3YWQ1OWEzMWJlYTJhMTM0
YTk0ODEwHhcNMjQxMDIxMTYwMDQ5WhcNMjQxMDIyMTYwMDQ5WjAzMTEwLwYDVQQD
Eyg3ODBhZGJhNDBhZjZlYTU4YTFkNmY4ODIzYWQxMmZjOWI2NmQxNWI3MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlvJFNm3sWzmhJOYuUXoXU313mRrM
HE7YuqbQyh1f7aouuAlZKPYxFB1m+9dPMB4VGr9rdtW2TRU4+LqrY/5IYexMbCOQ
LhjAXrpZdL65z8MR7XIkJVWJoqx0vf2ojk83bxPJCK2UQli1MTanA2y6aPeVzmY4
FkqoFCDPtiR21nZfnwJVJnio4W6dF+lPBRETkTu+q1PCdmxMW0+P8XaW0dURs7iT
K94ZwBFmEetX6fLlTmq2yx3y/SZyC4sYfXlHQfA4yKTrz8IJOJtDtrsKtmCSAPPQ
X3EfTynngHmlJJxyt8PdzatX+qQPxLJHpz6ZZNiVYJ/Q6dpKnO7JKG5cjQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFHgK26QK9upYodb4gjrRL8m2bRW3MB8GA1UdIwQY
MBaAFANhSnGhl58sHqetWaMb6ioTSpSBMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvQTJGS2NhR1hueXdlcDYxWm94dnFLaE5LbElFLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zMi9lZDI3MTUtN2YxZS00NDI3LThiN2Et
ODM0MDg1NjYzZWI4LzEvQTJGS2NhR1hueXdlcDYxWm94dnFLaE5LbElFLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8zMi9lZDI3MTUtN2YxZS00NDI3LThiN2EtODM0MDg1NjYzZWI4
LzEvQTJGS2NhR1hueXdlcDYxWm94dnFLaE5LbElFLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEABSwK/CkD
BbXAYObQ9pRawHVBkUUUkxqRU+mTo1fiTYriVfwE53YEw/WrYzjtxcvM7r7Z4TYd
GFhdd/7m5LfsTZaQkmD74Bwg35L2lheXHoK2JNRbBEdSoRRM3DB4w87qdewEwHAR
a+g+gSkxtU+QoyYJPZsAqyxRcseH9Hx0HTjJo3xw592WkouTi+2QadgXMod6tSlU
kVafCFpgJPGvpwLzlaNUAgA9obwVZYQKn973lZpfr49JeVugYl1VAsiqmljgZRxy
bAKLuJg+ofWb3QJFgYiXM3DzbZ89/NSS7U/UST6s1nbbaPMzKpMpZ3aA+t3q9IK2
ifvQTWu1SFiifw==
-----END CERTIFICATE-----
Generated at Tue Oct 22 19:18:00 2024 by rpki-client on console.sobornost.net