Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/38/158743-3851-4a3c-adbd-0a4ffb4892ff/1/zJklGlcsQEbgrVWgTmt7bkZkOGw.mft
File:                     zJklGlcsQEbgrVWgTmt7bkZkOGw.mft (raw, json)
Hash identifier:          E99Zsrr9XPuseHAmR5z2HO5do9tRbOaxtI/aaUoan48=
Subject key identifier:   23:36:2F:DE:AF:08:66:CA:AF:18:D3:61:D0:53:79:B5:F6:CC:C7:19
Authority key identifier: CC:99:25:1A:57:2C:40:46:E0:AD:55:A0:4E:6B:7B:6E:46:64:38:6C
Certificate issuer:       /CN=cc99251a572c4046e0ad55a04e6b7b6e4664386c
Certificate serial:       018BD56EF924794167A2C90D284C493D3BE4
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/zJklGlcsQEbgrVWgTmt7bkZkOGw.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/38/158743-3851-4a3c-adbd-0a4ffb4892ff/1/zJklGlcsQEbgrVWgTmt7bkZkOGw.mft
Manifest number:          084D
Signing time:             Thu 16 Nov 2023 00:01:41 +0000
Manifest this update:     Thu 16 Nov 2023 00:01:41 +0000
Manifest next update:     Fri 17 Nov 2023 00:01:41 +0000
Files and hashes:         1: 3u_IbOzqEP00_DPC-6_PJmX-RBM.roa (hash: yuc8NRtORdDuq/mk1zq/dt/1FI2KzYZ4qJ8AuTpBuWo=)
                          2: zJklGlcsQEbgrVWgTmt7bkZkOGw.crl (hash: gMD7jX/JnppY3pM6igm1sPElumE4JKWGkDDmxA4bLvI=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:8b:d5:6e:f9:24:79:41:67:a2:c9:0d:28:4c:49:3d:3b:e4
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=cc99251a572c4046e0ad55a04e6b7b6e4664386c
        Validity
            Not Before: Nov 16 00:01:41 2023 GMT
            Not After : Nov 17 00:01:41 2023 GMT
        Subject: CN=23362fdeaf0866caaf18d361d05379b5f6ccc719
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a5:8d:19:a8:77:d5:4a:c5:63:99:64:48:bd:89:
                    89:0b:29:d0:d8:c0:52:05:98:91:0b:e2:55:23:bf:
                    ab:49:60:28:e7:61:f8:02:3c:f5:11:46:10:bc:de:
                    14:53:dc:d1:2a:63:63:b7:a1:48:89:a7:42:47:2e:
                    5a:1b:67:8f:60:c8:1d:d8:03:cf:73:3b:89:65:4b:
                    cc:b7:72:45:2c:d2:f9:bb:be:7b:46:0d:6d:b5:17:
                    a9:01:88:a1:ba:a9:72:76:17:fa:ef:20:7f:db:ff:
                    3d:ed:04:a6:27:04:72:87:24:6a:08:c8:db:89:1c:
                    b4:ed:fc:3b:fb:08:85:c7:1d:68:68:24:5d:03:c9:
                    e1:4b:7c:27:c9:48:0c:bb:dc:a6:e0:57:dd:ec:85:
                    af:a8:a8:dc:c0:43:97:66:2b:97:f3:91:02:61:0e:
                    28:09:5e:ac:d7:72:be:5a:2e:25:8c:3a:73:11:a6:
                    41:e2:e4:ce:c1:48:22:40:42:36:54:53:c9:14:56:
                    bb:30:45:bc:d4:bd:64:4b:6d:47:0b:68:6a:67:75:
                    9c:e6:22:ed:81:66:b1:b7:f8:6c:32:87:04:1a:f1:
                    27:0d:b1:97:cc:2a:7e:ab:a1:22:a6:2f:f6:62:69:
                    a0:a8:43:c1:56:45:45:56:87:9f:ae:b6:0b:de:ee:
                    34:c5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                23:36:2F:DE:AF:08:66:CA:AF:18:D3:61:D0:53:79:B5:F6:CC:C7:19
            X509v3 Authority Key Identifier:
                keyid:CC:99:25:1A:57:2C:40:46:E0:AD:55:A0:4E:6B:7B:6E:46:64:38:6C

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/zJklGlcsQEbgrVWgTmt7bkZkOGw.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/38/158743-3851-4a3c-adbd-0a4ffb4892ff/1/zJklGlcsQEbgrVWgTmt7bkZkOGw.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/38/158743-3851-4a3c-adbd-0a4ffb4892ff/1/zJklGlcsQEbgrVWgTmt7bkZkOGw.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         27:d1:11:1a:87:59:bf:68:31:e2:a9:85:54:1a:1e:c9:bf:96:
         94:12:02:2d:0c:0f:4b:69:b8:b2:9d:c9:ce:94:5a:1d:46:bd:
         9e:a5:eb:f4:90:9d:ed:9e:63:5a:57:c3:30:fa:5b:08:2a:aa:
         51:b2:6a:96:64:5e:44:53:51:6d:bf:9d:18:24:99:e5:e1:0f:
         5c:34:a4:3f:83:b8:92:44:32:88:ea:32:2f:2b:9b:d3:59:4d:
         e3:84:76:24:c0:30:ac:c0:d0:50:ac:26:65:a7:9e:c3:31:78:
         22:f4:f9:71:d2:f8:7e:55:17:8e:d5:c9:e8:23:ce:15:eb:8d:
         f0:7b:c1:d5:c1:85:f9:f9:0a:f8:a0:8a:8b:2d:82:c6:31:ce:
         7e:02:aa:ff:e6:fb:65:d0:52:d9:f4:87:1d:37:6a:b9:55:8b:
         82:46:cd:f7:9e:28:50:aa:81:dc:fb:b9:4c:8f:70:01:ae:9b:
         ae:81:a2:d9:ac:a8:ea:e5:02:d0:20:ce:13:bd:4c:77:82:70:
         4b:75:00:16:a2:74:f5:5f:56:4b:a6:db:7f:8d:f9:ec:d9:86:
         05:98:17:c9:1b:60:63:ad:10:46:51:b5:a4:f2:93:7b:2e:b3:
         b1:ca:64:ac:82:9d:d9:d8:50:d8:44:a4:72:8c:1a:95:58:21:
         e2:8a:da:08
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Dec 27 18:41:04 2023 by rpki-client on console.sobornost.net