Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/39/6c9ced-462e-4910-b247-15b0706c1a76/1/QS1QZoDd--HB7BbnmWJo5SZPwCY.mft
File:                     QS1QZoDd--HB7BbnmWJo5SZPwCY.mft (raw, json)
Hash identifier:          qGaVD3bBW01Vg/IqREDtEPMfTS21nAPGrPr9r3lKMss=
Subject key identifier:   B9:BE:B1:CB:E0:DD:75:E7:19:E5:3F:A6:5A:D9:F6:20:74:30:DC:96
Authority key identifier: 41:2D:50:66:80:DD:FB:E1:C1:EC:16:E7:99:62:68:E5:26:4F:C0:26
Certificate issuer:       /CN=412d506680ddfbe1c1ec16e7996268e5264fc026
Certificate serial:       0191B29BCF49DAF5DCE64777732D245F2A93
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/QS1QZoDd--HB7BbnmWJo5SZPwCY.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/39/6c9ced-462e-4910-b247-15b0706c1a76/1/QS1QZoDd--HB7BbnmWJo5SZPwCY.mft
Manifest number:          017D
Signing time:             Mon 02 Sep 2024 12:00:41 +0000
Manifest this update:     Mon 02 Sep 2024 12:00:41 +0000
Manifest next update:     Tue 03 Sep 2024 12:00:41 +0000
Files and hashes:         1: QS1QZoDd--HB7BbnmWJo5SZPwCY.crl (hash: C54uZKL2z9KVQ1Z56iNLOz924sOKWa+VmvF2FLEIhDQ=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:91:b2:9b:cf:49:da:f5:dc:e6:47:77:73:2d:24:5f:2a:93
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=412d506680ddfbe1c1ec16e7996268e5264fc026
        Validity
            Not Before: Sep  2 12:00:41 2024 GMT
            Not After : Sep  3 12:00:41 2024 GMT
        Subject: CN=b9beb1cbe0dd75e719e53fa65ad9f6207430dc96
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:af:60:70:de:ae:47:81:dc:77:c8:91:b2:d5:66:
                    11:3b:1c:2d:69:16:b3:a5:eb:7e:7d:c3:18:aa:a6:
                    42:73:d9:cf:ae:98:2d:64:82:e3:20:7f:6f:f4:fb:
                    49:6c:bf:ad:3f:95:de:0d:95:c6:cc:c2:8a:8d:b2:
                    ab:30:20:64:cf:7e:06:de:c9:31:6e:64:36:3e:d7:
                    00:b4:a6:44:f2:72:e1:83:ab:74:16:62:c7:67:a1:
                    34:8b:de:b8:c8:76:ac:c2:a4:3f:32:5b:e7:45:bd:
                    a3:ba:68:64:20:a7:eb:72:c5:5b:bf:50:f3:a9:96:
                    37:da:f3:c5:e8:4b:a6:81:8d:9c:73:f9:fc:27:59:
                    49:3e:0f:38:ce:20:0d:b9:67:cf:31:0b:b0:d3:19:
                    45:23:ec:dd:b6:fb:d1:c6:58:0f:c2:52:7e:16:4b:
                    1e:c2:7b:4f:23:59:77:9e:23:7f:ce:a5:d6:73:da:
                    43:c9:5f:b6:f6:1c:d2:5b:96:6e:e2:8d:58:32:1b:
                    90:c0:58:e9:26:0b:78:e0:99:00:63:f9:db:0a:12:
                    a1:6f:f6:f9:32:64:de:16:8e:cc:7d:c4:f0:ca:21:
                    45:58:91:a7:88:4a:60:fe:1d:e6:a5:2f:2e:3f:ae:
                    e7:24:bc:e1:28:fe:27:5b:ea:74:69:b1:e6:ab:8d:
                    f2:e1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B9:BE:B1:CB:E0:DD:75:E7:19:E5:3F:A6:5A:D9:F6:20:74:30:DC:96
            X509v3 Authority Key Identifier:
                keyid:41:2D:50:66:80:DD:FB:E1:C1:EC:16:E7:99:62:68:E5:26:4F:C0:26

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/QS1QZoDd--HB7BbnmWJo5SZPwCY.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/39/6c9ced-462e-4910-b247-15b0706c1a76/1/QS1QZoDd--HB7BbnmWJo5SZPwCY.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/39/6c9ced-462e-4910-b247-15b0706c1a76/1/QS1QZoDd--HB7BbnmWJo5SZPwCY.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         82:9a:be:c0:1f:10:1f:27:1b:4d:c9:27:3a:ed:e8:8a:71:92:
         6e:a7:6a:34:ff:9d:d4:07:82:a9:d7:93:63:c8:f7:a7:2b:a2:
         dc:cd:62:01:d8:4b:56:44:7b:b2:a6:65:73:45:e5:63:75:52:
         aa:57:b3:38:d3:94:87:a2:50:87:9b:40:5b:1c:c0:8e:74:27:
         7a:84:0b:8c:e4:95:12:75:f8:93:19:f7:37:ac:89:81:0e:83:
         a4:88:5b:72:0b:87:43:22:61:56:6f:9e:9e:85:2e:6f:4a:36:
         6c:c9:6a:a8:19:00:be:ff:c8:d7:4b:f9:72:94:18:b8:12:1b:
         66:1e:5e:d2:ad:89:e5:98:4e:ae:4c:bb:3b:ec:1e:56:86:03:
         ab:e1:87:c1:81:7f:d7:a1:f8:22:4f:ec:f3:2d:65:dd:0d:db:
         1f:8c:00:2d:96:f8:be:ef:df:c8:37:bb:a9:ac:b0:c5:15:f6:
         06:55:b8:ae:10:ee:2d:f4:12:7e:d2:82:da:72:ca:42:60:14:
         a7:e1:b2:38:ae:50:5f:2c:a6:c4:67:97:bc:cd:05:d7:3e:6c:
         e7:0e:7d:38:7f:29:18:0b:b3:5b:5f:a7:81:e2:5d:dc:80:f4:
         c2:17:4a:0f:0e:c3:af:5b:04:5d:b9:52:c2:90:2a:e5:0d:89:
         a6:72:74:f9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Sep 11 05:43:32 2024 by rpki-client on console.sobornost.net