Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/61/d2cfc0-566d-425e-8c2f-dcffcd3e94d5/1/7jslD113vKUhB7PWlBvjzWV__h8.mft
File:                     7jslD113vKUhB7PWlBvjzWV__h8.mft (raw, json)
Hash identifier:          /jb89+rCH2ihWXNX8Lvsqj0Ojp8A+CSkr0qjx4YkC00=
Subject key identifier:   1A:EC:D3:9D:8C:45:8B:C9:60:C2:4D:3C:5B:BB:F1:00:F0:5D:20:02
Authority key identifier: EE:3B:25:0F:5D:77:BC:A5:21:07:B3:D6:94:1B:E3:CD:65:7F:FE:1F
Certificate issuer:       /CN=ee3b250f5d77bca52107b3d6941be3cd657ffe1f
Certificate serial:       018CEE4FBC4DE5488654C59328F4CDF65FC7
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/7jslD113vKUhB7PWlBvjzWV__h8.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/61/d2cfc0-566d-425e-8c2f-dcffcd3e94d5/1/7jslD113vKUhB7PWlBvjzWV__h8.mft
Manifest number:          A9
Signing time:             Tue 09 Jan 2024 13:00:52 +0000
Manifest this update:     Tue 09 Jan 2024 13:00:52 +0000
Manifest next update:     Wed 10 Jan 2024 13:00:52 +0000
Files and hashes:         1: 7jslD113vKUhB7PWlBvjzWV__h8.crl (hash: q5tTIrfyOEPNDMq8oCrnvQ8SO3ZheWMdfPaoUihU9WA=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:8c:ee:4f:bc:4d:e5:48:86:54:c5:93:28:f4:cd:f6:5f:c7
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=ee3b250f5d77bca52107b3d6941be3cd657ffe1f
        Validity
            Not Before: Jan  9 13:00:52 2024 GMT
            Not After : Jan 10 13:00:52 2024 GMT
        Subject: CN=1aecd39d8c458bc960c24d3c5bbbf100f05d2002
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b7:a4:eb:b1:04:ba:6c:c4:9a:90:af:dd:fd:85:
                    ac:bd:94:b6:4f:d7:01:2e:cd:25:b1:6e:f9:7e:01:
                    74:20:b9:b5:b1:23:17:34:50:f6:b8:4b:92:34:e0:
                    aa:31:2b:64:35:3c:a5:f7:fd:3b:0c:72:1c:bf:c1:
                    7b:9b:16:06:f1:cf:97:cc:37:51:9d:2a:48:f9:32:
                    eb:7b:3e:7b:0b:93:76:1c:8e:ba:5e:60:d7:1b:60:
                    da:cf:e8:d3:4c:d3:49:ee:20:ba:a2:b0:e3:c7:06:
                    9f:80:ff:c8:dd:92:74:af:ea:5d:80:3a:10:06:ef:
                    eb:e1:11:c1:6b:3f:07:c9:e8:78:d1:36:63:e2:36:
                    f4:a2:69:a0:7d:78:93:98:45:e2:e0:21:23:ac:11:
                    f8:da:0e:5e:62:c6:2f:ee:d6:4e:03:d9:d4:f6:f2:
                    38:c2:49:59:7f:f9:1b:7d:a6:df:90:25:fc:15:36:
                    de:9f:fc:de:43:29:58:73:c8:7f:69:10:39:60:e8:
                    20:b7:5a:93:20:50:cc:37:8f:db:c2:8e:f8:93:76:
                    5f:b4:83:a9:31:63:fa:ee:a8:76:54:b4:ed:02:1a:
                    63:47:91:11:e8:6f:40:df:50:22:78:f5:f3:ba:a2:
                    11:3a:ee:82:9c:3b:a8:0a:ef:87:b5:78:5a:2f:00:
                    7c:05
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1A:EC:D3:9D:8C:45:8B:C9:60:C2:4D:3C:5B:BB:F1:00:F0:5D:20:02
            X509v3 Authority Key Identifier:
                keyid:EE:3B:25:0F:5D:77:BC:A5:21:07:B3:D6:94:1B:E3:CD:65:7F:FE:1F

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/7jslD113vKUhB7PWlBvjzWV__h8.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/61/d2cfc0-566d-425e-8c2f-dcffcd3e94d5/1/7jslD113vKUhB7PWlBvjzWV__h8.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/61/d2cfc0-566d-425e-8c2f-dcffcd3e94d5/1/7jslD113vKUhB7PWlBvjzWV__h8.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         54:dd:32:47:93:95:8b:0b:15:b9:f9:8e:54:e2:30:27:92:5b:
         d1:5b:09:72:9e:d9:8d:b1:3f:5a:b1:32:f3:83:48:0d:8e:5e:
         0b:2c:a1:4c:08:21:ec:0f:4f:56:a5:8b:c7:e0:8e:38:94:32:
         a5:2d:4a:78:e0:b5:de:60:f7:6f:47:5e:7e:d4:62:4d:e3:27:
         8a:ae:84:f9:e1:f3:06:2d:ef:7b:6e:19:22:11:39:ff:93:eb:
         7d:e6:16:8c:40:b1:c3:20:df:f8:6d:4c:a9:09:42:38:e6:4b:
         80:b6:0d:5b:10:1f:ac:9f:f8:94:c3:e8:e9:74:c3:00:eb:30:
         de:ff:5a:ab:12:bc:b2:1f:8d:2e:c9:e0:a7:fb:9d:40:53:a6:
         78:bb:02:a6:f4:b1:76:29:fa:e1:06:6c:d1:74:61:ae:22:6a:
         18:f3:98:e9:29:d0:fa:ce:b8:36:67:0b:b8:14:e2:6e:20:1b:
         e9:37:83:51:e1:ba:d0:50:71:31:03:65:49:44:9e:4e:59:1f:
         08:34:e1:be:e7:b7:8f:92:bc:22:eb:cb:33:82:1f:29:ff:90:
         88:96:52:b9:78:d4:e6:d4:25:8f:08:fe:77:5b:b5:f5:d8:a6:
         d5:53:1e:3b:98:1f:dd:34:51:a7:6e:2e:d4:ff:df:80:9a:bf:
         f6:dd:7b:8c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Feb 27 00:59:26 2024 by rpki-client on console.sobornost.net