Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/71/1801b6-cf49-4405-970d-cf9e8c6a412e/1/CvN4z3Pejw4nKlX3XbAJgDbsVoA.mft
File:                     CvN4z3Pejw4nKlX3XbAJgDbsVoA.mft (raw, json)
Hash identifier:          iFAJLX4jGtRj2rjcFK+gfYVWCCX5iOo/hC4lamFaf0Q=
Subject key identifier:   02:E4:FB:D7:90:62:30:F7:83:6C:24:DE:DD:F3:BB:07:66:59:5E:38
Authority key identifier: 0A:F3:78:CF:73:DE:8F:0E:27:2A:55:F7:5D:B0:09:80:36:EC:56:80
Certificate issuer:       /CN=0af378cf73de8f0e272a55f75db0098036ec5680
Certificate serial:       018B85795E55423D727A625494FE74DE4BEF
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/CvN4z3Pejw4nKlX3XbAJgDbsVoA.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/71/1801b6-cf49-4405-970d-cf9e8c6a412e/1/CvN4z3Pejw4nKlX3XbAJgDbsVoA.mft
Manifest number:          0E61
Signing time:             Tue 31 Oct 2023 11:23:25 +0000
Manifest this update:     Tue 31 Oct 2023 11:23:25 +0000
Manifest next update:     Wed 01 Nov 2023 11:23:25 +0000
Files and hashes:         1: CvN4z3Pejw4nKlX3XbAJgDbsVoA.crl (hash: 1wLco7FljjUaVrc68QcA8VE3uKqBjKE904kqoMS82Qg=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:8b:85:79:5e:55:42:3d:72:7a:62:54:94:fe:74:de:4b:ef
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0af378cf73de8f0e272a55f75db0098036ec5680
        Validity
            Not Before: Oct 31 11:23:25 2023 GMT
            Not After : Nov  1 11:23:25 2023 GMT
        Subject: CN=02e4fbd7906230f7836c24deddf3bb0766595e38
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a2:45:bb:b5:13:a1:1d:ba:e4:bf:11:c4:b3:42:
                    81:cb:12:ba:d8:6e:0d:fe:73:8e:98:62:3d:36:44:
                    a9:91:2e:f9:65:81:22:c4:58:e1:0d:ea:28:e3:ec:
                    65:50:47:ab:24:19:47:00:53:12:07:fd:a5:f7:c4:
                    88:2c:12:43:27:f6:50:9c:e4:70:3a:e0:26:c8:22:
                    fc:ea:a6:50:f2:be:49:d0:02:0d:3d:57:65:79:d0:
                    ca:a1:f3:ce:76:22:29:6d:01:76:c5:4b:81:8a:86:
                    8d:94:ee:bf:7c:a3:7a:af:a0:09:87:a4:55:86:9a:
                    6a:ec:99:b7:39:af:af:da:df:d0:73:44:fd:30:1f:
                    ab:6a:34:e5:62:18:20:36:58:ea:48:05:01:49:d0:
                    00:b6:82:2b:2f:ac:ce:1c:68:4b:c2:5f:1d:90:ba:
                    45:23:a6:97:3b:31:2c:2e:ca:7c:c9:e4:71:62:0f:
                    7d:84:2c:3a:49:ed:b3:ef:3f:99:2d:79:05:79:61:
                    02:27:ef:d6:44:f3:79:bb:21:44:91:73:93:7a:6d:
                    68:36:12:db:8e:a9:3f:f4:ca:2a:2b:fc:56:84:95:
                    0a:67:da:ef:eb:79:ed:6a:94:af:4b:7d:10:df:07:
                    75:76:75:0b:1c:16:ff:b0:79:90:c3:be:c3:97:0b:
                    c1:2d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                02:E4:FB:D7:90:62:30:F7:83:6C:24:DE:DD:F3:BB:07:66:59:5E:38
            X509v3 Authority Key Identifier:
                keyid:0A:F3:78:CF:73:DE:8F:0E:27:2A:55:F7:5D:B0:09:80:36:EC:56:80

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CvN4z3Pejw4nKlX3XbAJgDbsVoA.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/71/1801b6-cf49-4405-970d-cf9e8c6a412e/1/CvN4z3Pejw4nKlX3XbAJgDbsVoA.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/71/1801b6-cf49-4405-970d-cf9e8c6a412e/1/CvN4z3Pejw4nKlX3XbAJgDbsVoA.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         9b:89:fc:55:37:27:43:41:64:80:d1:5d:a6:49:06:3d:cc:20:
         01:75:bd:0d:1d:05:c8:d0:fe:ed:d9:ee:e3:23:6e:34:0e:94:
         fd:80:b4:c6:6a:01:aa:57:a4:45:4a:10:a9:ad:99:67:6a:64:
         b9:72:02:65:1a:bc:6b:65:1f:26:c9:8a:78:3a:2d:ad:e4:49:
         2f:52:8f:2d:55:42:b2:aa:aa:99:f3:47:4e:41:1d:68:f4:15:
         01:64:74:96:24:49:42:a8:fd:5c:e3:73:f8:c5:81:83:8f:1a:
         b9:7e:5d:19:d5:89:e1:85:0f:8c:0c:d2:27:16:18:93:f6:ad:
         81:d9:31:94:a9:fe:2f:6a:56:8c:ea:64:38:b5:ac:c9:0f:a5:
         c5:22:1c:26:18:37:ac:e7:85:ca:80:e5:81:f1:c4:9d:6c:8f:
         77:b4:5d:64:61:40:97:26:f1:18:d2:ac:45:39:af:49:4c:34:
         16:df:b2:bb:b9:9c:c0:38:7c:1a:90:54:ef:45:d9:46:b6:3e:
         05:27:88:a3:5c:b8:06:e6:7e:cb:da:c1:02:78:82:b5:51:97:
         4d:f6:ec:b2:79:31:8d:1c:e4:67:cd:8b:28:63:5b:b6:5f:ab:
         3d:7d:8b:e8:e8:01:ae:0d:b9:77:00:62:50:23:fa:1c:bf:ed:
         c5:49:56:83
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Dec 27 18:41:31 2023 by rpki-client on console.sobornost.net