Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6c/a5e04d-487f-45ba-acab-f6e8fe3ef9ae/1/a2VUSgt2kuQAmWmjdRfA6z5JAfQ.mft
File:                     a2VUSgt2kuQAmWmjdRfA6z5JAfQ.mft (raw, json)
Hash identifier:          9dKanrV8GY/oaAcHjSvocehu9/MrMXeCqLmGtEpVuMI=
Subject key identifier:   8B:CC:CC:E9:B4:4B:06:59:F9:7A:FA:35:D2:7D:0C:63:80:35:F4:78
Authority key identifier: 6B:65:54:4A:0B:76:92:E4:00:99:69:A3:75:17:C0:EB:3E:49:01:F4
Certificate issuer:       /CN=6b65544a0b7692e4009969a37517c0eb3e4901f4
Certificate serial:       019139289BBCD7AAA451565B85CE4D6A6678
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/a2VUSgt2kuQAmWmjdRfA6z5JAfQ.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/6c/a5e04d-487f-45ba-acab-f6e8fe3ef9ae/1/a2VUSgt2kuQAmWmjdRfA6z5JAfQ.mft
Manifest number:          089C
Signing time:             Fri 09 Aug 2024 22:00:48 +0000
Manifest this update:     Fri 09 Aug 2024 22:00:48 +0000
Manifest next update:     Sat 10 Aug 2024 22:00:48 +0000
Files and hashes:         1: a2VUSgt2kuQAmWmjdRfA6z5JAfQ.crl (hash: pxPk/PGD/t3wuwXQHVE+XWL2e8uMGIYqpadQTrkAneE=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:91:39:28:9b:bc:d7:aa:a4:51:56:5b:85:ce:4d:6a:66:78
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6b65544a0b7692e4009969a37517c0eb3e4901f4
        Validity
            Not Before: Aug  9 22:00:48 2024 GMT
            Not After : Aug 10 22:00:48 2024 GMT
        Subject: CN=8bcccce9b44b0659f97afa35d27d0c638035f478
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:90:4e:23:49:5a:75:8c:87:c5:17:6a:9b:15:5f:
                    59:e4:d6:9f:25:ec:9f:09:af:ab:b9:b1:43:d1:3f:
                    54:0f:8d:89:af:9a:7c:64:ad:3f:4c:d9:65:e0:e5:
                    01:d9:76:f5:e9:b4:b5:f7:09:26:fa:bb:6e:b1:80:
                    c7:90:73:59:48:19:87:7d:d3:b3:a9:81:0d:cf:a2:
                    31:d3:ea:87:b3:3d:96:a0:8c:a1:13:0d:77:77:e7:
                    12:18:37:0f:bf:d9:90:83:3d:a2:28:c6:b5:85:b3:
                    89:f7:d2:8f:13:bc:2d:8a:3d:84:9e:c1:65:95:f2:
                    2a:33:22:55:91:6f:7e:d3:e1:17:58:84:51:e6:bb:
                    13:25:46:60:11:96:59:26:e9:c1:96:5b:f2:ab:a4:
                    21:88:8d:9f:be:bc:8c:87:7f:78:4a:f1:72:0a:7f:
                    38:4d:5c:11:3d:d7:ff:11:06:5a:a3:b4:4a:05:b5:
                    f6:5e:dd:48:c9:d1:88:8a:e8:37:91:b4:77:6f:8f:
                    be:94:48:27:4a:ba:29:6f:06:f4:2c:a0:83:b8:5f:
                    36:a4:24:fa:2f:a6:c6:16:dd:c2:b3:6a:12:9e:29:
                    ce:23:73:5e:20:cb:88:5e:c2:e9:6c:55:79:53:49:
                    a9:d5:62:3f:fb:57:f7:27:0b:24:ae:f2:0c:94:04:
                    7d:79
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8B:CC:CC:E9:B4:4B:06:59:F9:7A:FA:35:D2:7D:0C:63:80:35:F4:78
            X509v3 Authority Key Identifier:
                keyid:6B:65:54:4A:0B:76:92:E4:00:99:69:A3:75:17:C0:EB:3E:49:01:F4

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/a2VUSgt2kuQAmWmjdRfA6z5JAfQ.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6c/a5e04d-487f-45ba-acab-f6e8fe3ef9ae/1/a2VUSgt2kuQAmWmjdRfA6z5JAfQ.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/6c/a5e04d-487f-45ba-acab-f6e8fe3ef9ae/1/a2VUSgt2kuQAmWmjdRfA6z5JAfQ.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         31:1b:03:fb:fe:72:45:cf:65:81:36:68:2c:3b:df:ad:d0:c3:
         29:b8:9d:f0:66:ef:c6:6b:bd:5f:0a:69:b8:c0:10:80:06:4a:
         41:8c:49:aa:0e:eb:b7:e2:02:71:b2:c1:e4:9b:58:08:19:be:
         39:4b:92:e5:42:b0:ea:7a:be:ea:87:cc:3a:25:67:01:48:2f:
         cf:2f:ad:7e:d7:39:af:87:61:58:3f:c4:fd:e5:75:bf:65:45:
         8f:95:4f:63:4b:9d:62:ce:85:32:85:6d:63:6b:75:84:d0:1c:
         47:fa:7e:ea:76:82:9c:45:2c:ee:5c:4b:4c:0b:3c:6c:68:24:
         f4:64:58:52:51:e5:fc:28:fb:0a:cc:18:3a:5a:96:39:d7:ba:
         c9:b1:60:3b:cb:c2:3a:60:b3:81:c6:e6:a6:d3:13:c2:05:bc:
         84:54:21:dc:06:a0:28:fc:16:c0:1d:b2:a9:e9:46:2f:1e:ce:
         10:f0:f6:40:a9:12:54:fd:58:a3:fc:52:38:ae:6b:ea:30:81:
         77:01:5b:65:23:27:7f:a5:0f:09:c2:28:e5:4d:1f:7e:49:26:
         b2:75:d0:3f:cd:ac:2a:f4:98:95:2a:9a:f9:07:86:17:e0:0e:
         3a:95:3b:d5:07:1f:b8:d4:c6:89:0f:60:5a:fb:9e:5a:6f:22:
         2e:10:a2:cc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Aug 15 03:08:52 2024 by rpki-client on console.sobornost.net