Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/62/dea778-09c8-4572-b3bb-c6059a3aa340/1/usVex8_w71ZQclrfOu_mBRoQy2o.mft
File:                     usVex8_w71ZQclrfOu_mBRoQy2o.mft (raw, json)
Hash identifier:          TGiZRjXPQXIOJyUUto4hWa1W6eZPvN76XVGh3h0IbXo=
Subject key identifier:   B3:1E:02:C3:F8:33:5B:31:B4:58:30:9B:41:45:9E:45:C4:27:78:CC
Authority key identifier: BA:C5:5E:C7:CF:F0:EF:56:50:72:5A:DF:3A:EF:E6:05:1A:10:CB:6A
Certificate issuer:       /CN=bac55ec7cff0ef5650725adf3aefe6051a10cb6a
Certificate serial:       018CED74134BA32E2E3D673777E605B8932F
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/usVex8_w71ZQclrfOu_mBRoQy2o.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/62/dea778-09c8-4572-b3bb-c6059a3aa340/1/usVex8_w71ZQclrfOu_mBRoQy2o.mft
Manifest number:          07CE
Signing time:             Tue 09 Jan 2024 09:00:56 +0000
Manifest this update:     Tue 09 Jan 2024 09:00:56 +0000
Manifest next update:     Wed 10 Jan 2024 09:00:56 +0000
Files and hashes:         1: sAyCjoWdjSA4IaVe_tRqX2ZAyF8.roa (hash: l8G1CMxzXOaxe6EQ49EuIAWQOnjzgd+63BxZFc8/MbA=)
                          2: usVex8_w71ZQclrfOu_mBRoQy2o.crl (hash: OKdQD2uu2Wd6UjCUnlS0evjUd+tVkcAMnuP6mi098Y8=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:8c:ed:74:13:4b:a3:2e:2e:3d:67:37:77:e6:05:b8:93:2f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=bac55ec7cff0ef5650725adf3aefe6051a10cb6a
        Validity
            Not Before: Jan  9 09:00:56 2024 GMT
            Not After : Jan 10 09:00:56 2024 GMT
        Subject: CN=b31e02c3f8335b31b458309b41459e45c42778cc
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ac:54:e9:5b:ff:e9:bc:33:eb:25:54:f6:e1:6b:
                    fa:b8:4a:98:68:cc:44:ec:9e:f6:a8:43:00:d8:0b:
                    62:d9:1f:9b:bf:2a:ec:e5:48:7e:af:bf:15:13:bc:
                    bc:c9:4d:67:0e:d0:19:d8:85:e8:2a:de:64:38:2a:
                    de:07:96:d7:44:f8:af:15:e9:74:24:fa:7f:0e:b4:
                    f7:9f:aa:29:ac:e8:ce:d5:43:d6:39:e9:fb:9d:d0:
                    25:ab:dd:d6:0f:1f:0a:95:dd:f5:b2:9b:bb:da:10:
                    dd:33:84:3a:9a:fa:44:11:c3:fe:82:c2:c8:a0:fb:
                    31:c0:5c:e0:a0:82:0b:2a:d3:c3:b0:a7:1c:24:f1:
                    c7:5d:3e:e9:0a:44:e5:d4:4d:18:46:c5:71:df:24:
                    9a:cf:b0:a6:8f:80:24:e9:3c:ce:90:d2:6c:34:12:
                    aa:d5:b3:ad:3d:ec:59:2d:a2:ea:a5:29:98:44:7a:
                    07:74:11:47:5c:e9:9a:a4:46:c6:79:50:3b:32:9d:
                    7d:08:6c:64:52:4d:be:f6:57:07:02:e8:ce:8e:50:
                    59:ef:44:01:72:19:9a:60:8f:e0:31:cb:79:1b:82:
                    8a:55:1b:6b:64:76:c7:ab:83:a7:d0:47:7e:bc:e8:
                    c6:ed:36:f5:e9:04:5e:51:ca:5a:1a:6a:d6:62:e7:
                    96:63
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B3:1E:02:C3:F8:33:5B:31:B4:58:30:9B:41:45:9E:45:C4:27:78:CC
            X509v3 Authority Key Identifier:
                keyid:BA:C5:5E:C7:CF:F0:EF:56:50:72:5A:DF:3A:EF:E6:05:1A:10:CB:6A

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/usVex8_w71ZQclrfOu_mBRoQy2o.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/62/dea778-09c8-4572-b3bb-c6059a3aa340/1/usVex8_w71ZQclrfOu_mBRoQy2o.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/62/dea778-09c8-4572-b3bb-c6059a3aa340/1/usVex8_w71ZQclrfOu_mBRoQy2o.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         af:04:89:29:07:f7:01:9c:23:42:cc:3f:bc:78:d1:e6:a7:c9:
         54:35:88:64:44:21:6b:3f:1b:9c:6f:b9:69:89:cc:fc:07:55:
         cb:6f:42:76:a0:78:b1:1b:88:86:0b:64:57:3f:be:6c:1e:22:
         29:c1:fa:06:de:fc:f1:18:24:43:ee:2c:7d:6f:e1:c7:86:9e:
         45:ce:ac:94:a3:2f:d6:8f:77:70:ff:9d:85:a9:d5:f5:e4:da:
         ec:ad:02:3c:c1:97:63:0b:d5:fd:a1:fe:31:56:35:31:32:b9:
         49:52:02:85:ab:e5:b3:ce:fa:4d:bb:f0:39:f9:7a:17:4c:be:
         2b:5d:e4:9a:0e:f7:4a:31:87:9b:72:64:63:54:71:3c:c6:e8:
         71:3b:79:a0:c0:63:b4:43:37:c7:a3:e6:6e:e3:b0:41:ca:e6:
         d0:77:99:24:37:70:3d:3a:8b:3f:22:65:d3:0b:98:4e:83:b7:
         f7:53:a8:d1:91:8f:f4:02:e9:e5:1d:83:90:21:ae:7a:b6:ac:
         14:29:d0:01:65:7b:07:01:12:cf:4a:7e:c5:bb:07:9d:a8:8e:
         c9:4b:95:be:c0:d3:29:a8:d0:5c:ac:8b:68:7d:4a:ae:62:98:
         1c:cc:86:72:a0:4b:d8:00:c0:b9:fd:29:ac:6c:f4:55:e1:eb:
         47:be:8a:71
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Feb 27 00:59:27 2024 by rpki-client on console.sobornost.net