Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5f/6bbf55-4d87-4e42-ba5e-e2f93533d6e4/1/1LOfyKU74dxnS22nVehhEJUhdOQ.mft
File:                     1LOfyKU74dxnS22nVehhEJUhdOQ.mft (raw, json)
Hash identifier:          5Rr3E0GZxGIPHr4woqxyblx41uXOoFDFI/O18FCAMBo=
Subject key identifier:   9F:9D:E0:B8:6A:56:BC:56:3E:80:BD:F7:F3:C3:A1:1A:AD:4E:D3:9D
Authority key identifier: D4:B3:9F:C8:A5:3B:E1:DC:67:4B:6D:A7:55:E8:61:10:95:21:74:E4
Certificate issuer:       /CN=d4b39fc8a53be1dc674b6da755e86110952174e4
Certificate serial:       018F24CC10BA2A02A3B003B5C70F19F6C31F
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/1LOfyKU74dxnS22nVehhEJUhdOQ.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/5f/6bbf55-4d87-4e42-ba5e-e2f93533d6e4/1/1LOfyKU74dxnS22nVehhEJUhdOQ.mft
Manifest number:          1152
Signing time:             Sun 28 Apr 2024 13:01:44 +0000
Manifest this update:     Sun 28 Apr 2024 13:01:44 +0000
Manifest next update:     Mon 29 Apr 2024 13:01:44 +0000
Files and hashes:         1: 1LOfyKU74dxnS22nVehhEJUhdOQ.crl (hash: kDCM4fQW1ok14wEO/GKSPAmDA/AhUz5fkNEAQjV3Rjg=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:8f:24:cc:10:ba:2a:02:a3:b0:03:b5:c7:0f:19:f6:c3:1f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d4b39fc8a53be1dc674b6da755e86110952174e4
        Validity
            Not Before: Apr 28 13:01:44 2024 GMT
            Not After : Apr 29 13:01:44 2024 GMT
        Subject: CN=9f9de0b86a56bc563e80bdf7f3c3a11aad4ed39d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:aa:49:52:20:39:c4:ed:50:35:2f:4e:e2:6a:62:
                    50:2f:32:07:17:a0:b4:f4:b3:ae:bb:2e:96:13:f5:
                    0d:3c:7b:c9:27:bf:37:52:16:ff:bb:c6:99:0d:c4:
                    cb:bc:3b:ae:67:d4:16:cf:df:8c:de:b3:b7:05:2b:
                    b0:4a:b9:6c:7e:80:b1:f9:e3:db:e1:1f:4f:7b:1b:
                    a9:91:e2:5c:ad:94:fa:7f:40:af:25:4e:61:c0:7a:
                    52:8f:b2:ed:7b:83:53:e5:3e:b0:b7:08:9c:70:26:
                    ce:80:40:f6:f4:59:81:b0:25:1d:db:cd:5e:f8:ad:
                    a2:72:93:42:7d:87:40:63:15:51:bc:c8:69:fd:c6:
                    fd:b4:1a:bb:d8:19:d4:99:d3:d8:57:85:fe:97:f1:
                    ed:21:51:3d:36:89:1f:64:1c:4a:1a:9c:4c:bf:ef:
                    39:80:e5:bd:ae:a8:39:92:d4:68:90:98:5a:a8:8a:
                    7a:00:78:59:7e:d3:61:a3:be:44:e8:cc:71:e4:3c:
                    7a:a0:c1:12:7b:8d:ca:bd:d6:bf:42:46:67:ce:74:
                    28:90:91:2c:b9:ef:9b:c7:84:3e:b2:56:be:ff:af:
                    1b:bf:cf:30:77:10:72:c9:6b:67:cc:83:20:47:ef:
                    97:16:42:41:d7:30:67:b0:05:e5:21:41:3e:a1:8c:
                    03:77
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9F:9D:E0:B8:6A:56:BC:56:3E:80:BD:F7:F3:C3:A1:1A:AD:4E:D3:9D
            X509v3 Authority Key Identifier:
                keyid:D4:B3:9F:C8:A5:3B:E1:DC:67:4B:6D:A7:55:E8:61:10:95:21:74:E4

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1LOfyKU74dxnS22nVehhEJUhdOQ.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5f/6bbf55-4d87-4e42-ba5e-e2f93533d6e4/1/1LOfyKU74dxnS22nVehhEJUhdOQ.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/5f/6bbf55-4d87-4e42-ba5e-e2f93533d6e4/1/1LOfyKU74dxnS22nVehhEJUhdOQ.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         a5:00:f9:40:d9:69:7a:a5:02:0b:03:61:53:17:82:21:88:5b:
         a7:14:f0:c1:0a:7d:5f:48:88:ee:ef:36:3b:9b:31:d9:96:13:
         cb:32:5e:29:b8:9c:d5:3f:03:e9:d3:61:16:e2:60:a4:8f:0a:
         d1:39:c9:be:13:90:7e:c2:bc:78:ec:42:f9:3e:47:d9:1b:3f:
         38:20:fd:a1:95:00:c3:3b:3f:d5:d7:32:45:f4:38:d8:87:52:
         3f:57:52:44:18:1c:da:dd:02:86:7b:f0:00:d4:02:f3:6d:76:
         fa:9d:7c:4a:b2:84:00:4d:f4:9f:0c:8c:f0:66:9d:ce:d9:0b:
         9b:ec:a4:68:9e:83:74:63:9e:ed:55:38:d5:7a:1f:b0:a6:4d:
         f0:ca:db:29:22:53:e8:3f:25:59:9a:3a:6f:00:03:62:10:c5:
         ec:44:c8:1b:68:f1:9a:61:35:55:93:f2:fb:15:53:b7:2c:69:
         c2:64:ac:a0:7c:13:73:8f:f3:a8:33:18:c8:fc:4c:3d:4c:a8:
         f2:a3:44:4b:bd:0d:d9:86:e6:78:37:d4:81:75:d7:82:de:69:
         75:f1:39:ff:44:51:9a:03:ea:78:f4:98:93:62:50:fb:07:9d:
         31:03:ae:d1:8c:59:56:53:dd:33:19:9a:3c:40:4f:a0:7f:6d:
         6f:b0:3a:17
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 29 19:13:40 2024 by rpki-client on console.sobornost.net