Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/72/8e135c-3a4a-44a6-a92a-09a9eef3f418/1/7KvwH2WmRGiFjn8Vd3lWOOUg6Vs.mft
File:                     7KvwH2WmRGiFjn8Vd3lWOOUg6Vs.mft (raw, json)
Hash identifier:          pvD0Tp9Evb1D8R5koOzRe2fzZDLGN9Y15/prhD6fcA4=
Subject key identifier:   52:AB:3B:BE:C0:7B:F6:E8:E3:8A:4B:BC:23:02:BF:63:83:48:3C:C2
Authority key identifier: EC:AB:F0:1F:65:A6:44:68:85:8E:7F:15:77:79:56:38:E5:20:E9:5B
Certificate issuer:       /CN=ecabf01f65a64468858e7f1577795638e520e95b
Certificate serial:       018CECCF87CE728170A1C1B80DD48F85C149
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/7KvwH2WmRGiFjn8Vd3lWOOUg6Vs.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/72/8e135c-3a4a-44a6-a92a-09a9eef3f418/1/7KvwH2WmRGiFjn8Vd3lWOOUg6Vs.mft
Manifest number:          0981
Signing time:             Tue 09 Jan 2024 06:01:12 +0000
Manifest this update:     Tue 09 Jan 2024 06:01:12 +0000
Manifest next update:     Wed 10 Jan 2024 06:01:12 +0000
Files and hashes:         1: 7KvwH2WmRGiFjn8Vd3lWOOUg6Vs.crl (hash: NTuREvRF0Dy3tccuBIFgdwrvhXepG+0fE/YJaMuoeUI=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:8c:ec:cf:87:ce:72:81:70:a1:c1:b8:0d:d4:8f:85:c1:49
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=ecabf01f65a64468858e7f1577795638e520e95b
        Validity
            Not Before: Jan  9 06:01:12 2024 GMT
            Not After : Jan 10 06:01:12 2024 GMT
        Subject: CN=52ab3bbec07bf6e8e38a4bbc2302bf6383483cc2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:aa:d1:aa:0d:13:44:fd:c0:e9:a4:33:ff:39:76:
                    c5:99:fd:df:1e:9d:41:9e:c2:08:27:15:5f:da:f6:
                    74:e2:64:ad:e9:a9:60:3f:af:09:f5:9b:d3:0a:b8:
                    ce:2d:c5:38:75:2f:6a:80:c9:ee:b6:e7:51:60:e3:
                    88:2a:ef:10:ad:d9:f5:f1:59:14:6b:01:35:43:e5:
                    b1:77:4a:d6:03:8d:db:39:cd:9b:66:f7:34:44:56:
                    2f:fc:d5:14:59:f3:6e:dd:83:f3:f7:f6:49:ef:77:
                    eb:14:b1:6f:bb:c1:e1:35:f7:73:8b:0a:9b:0b:61:
                    a9:b0:d7:b9:ed:80:b8:86:23:7b:e0:c3:ba:88:15:
                    09:de:a2:9a:42:58:0e:9a:d9:1c:f8:e8:14:5e:1b:
                    10:2f:45:29:bd:7c:e5:ae:f1:3d:8a:dd:e7:50:b7:
                    dc:ba:cb:26:3e:fa:de:8c:de:13:d4:9c:0c:37:9d:
                    e5:bc:b5:bd:64:c3:81:a4:c1:1e:de:aa:cc:d5:c9:
                    1e:62:0e:59:43:99:e4:e8:a5:45:6d:a5:5e:e3:26:
                    be:9f:fa:97:71:a9:95:48:71:93:10:d7:a5:30:3e:
                    8f:56:2a:b5:55:3e:e7:0b:44:80:e0:ad:80:99:5b:
                    62:9e:21:95:c6:3c:3f:f4:e0:85:27:73:4b:a0:b0:
                    02:e9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                52:AB:3B:BE:C0:7B:F6:E8:E3:8A:4B:BC:23:02:BF:63:83:48:3C:C2
            X509v3 Authority Key Identifier:
                keyid:EC:AB:F0:1F:65:A6:44:68:85:8E:7F:15:77:79:56:38:E5:20:E9:5B

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/7KvwH2WmRGiFjn8Vd3lWOOUg6Vs.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/72/8e135c-3a4a-44a6-a92a-09a9eef3f418/1/7KvwH2WmRGiFjn8Vd3lWOOUg6Vs.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/72/8e135c-3a4a-44a6-a92a-09a9eef3f418/1/7KvwH2WmRGiFjn8Vd3lWOOUg6Vs.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         56:0e:e9:c1:d2:b3:a0:0a:bb:3e:34:50:b3:41:0c:d1:81:ae:
         29:33:33:7f:91:d3:46:86:d2:eb:6a:d8:fa:74:ad:f6:d6:06:
         dc:4a:63:6c:10:96:dd:2e:0e:cf:dd:e5:b8:62:65:65:25:2a:
         2d:06:00:a7:60:58:97:c6:52:98:ba:3f:f4:25:a1:76:fc:aa:
         bb:49:48:83:fc:66:59:db:94:41:7a:ef:54:d3:84:22:b8:ef:
         54:34:45:f9:fd:24:fe:3c:67:ba:d7:2e:69:fe:e4:6e:58:32:
         ab:c0:db:30:07:7e:0d:22:91:ca:2e:22:30:0e:ef:0f:31:58:
         34:be:5c:ed:e7:74:10:fa:4d:34:ca:c8:3b:2e:44:e1:aa:44:
         c7:10:66:11:69:48:4b:dd:d1:28:c7:37:ee:e2:6e:58:5e:49:
         a5:34:ba:f3:09:42:de:a5:4e:31:a0:1e:53:c2:11:8a:25:6d:
         b0:98:1c:51:c3:f2:1b:c6:c4:8e:22:dd:75:0f:f8:59:c4:90:
         9c:78:ae:97:d0:c4:45:c4:09:24:f7:93:8d:80:cb:83:77:42:
         e5:42:76:5d:aa:59:eb:17:a8:99:0a:f1:8a:ac:d2:99:09:42:
         67:b5:c6:e8:11:23:36:05:80:15:69:db:0c:10:26:25:ee:22:
         cf:7f:c4:a7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Feb 27 00:59:39 2024 by rpki-client on console.sobornost.net