Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/78/488805-38c1-4dde-ae3e-0e5bb8164b63/1/a5NU1otv9Ml-UAr8LUKTdbSQsLc.mft
File:                     a5NU1otv9Ml-UAr8LUKTdbSQsLc.mft (raw, json)
Hash identifier:          Kms/kEnaj580ltfkzJ75M5RIOkfy/hiFK8E+JYXnXg4=
Subject key identifier:   78:A3:8C:B2:E9:AB:D6:87:E7:02:D0:13:89:04:8E:B1:0B:F2:72:D7
Authority key identifier: 6B:93:54:D6:8B:6F:F4:C9:7E:50:0A:FC:2D:42:93:75:B4:90:B0:B7
Certificate issuer:       /CN=6b9354d68b6ff4c97e500afc2d429375b490b0b7
Certificate serial:       018CEE4FFBD70B72E63FD91450CC7971B1DA
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/a5NU1otv9Ml-UAr8LUKTdbSQsLc.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/78/488805-38c1-4dde-ae3e-0e5bb8164b63/1/a5NU1otv9Ml-UAr8LUKTdbSQsLc.mft
Manifest number:          08C4
Signing time:             Tue 09 Jan 2024 13:01:08 +0000
Manifest this update:     Tue 09 Jan 2024 13:01:08 +0000
Manifest next update:     Wed 10 Jan 2024 13:01:08 +0000
Files and hashes:         1: SRa_h_GHkpclvmuJwl5Lnoa0Zrg.roa (hash: MxkPCOOy41lMeNPPg2WG8Cf4fzTOh5MBJu6sszzrJRQ=)
                          2: a5NU1otv9Ml-UAr8LUKTdbSQsLc.crl (hash: uc19NQLirvCmsdolrMA82Es+q9dWnvB9TU0CnEp9UaI=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:8c:ee:4f:fb:d7:0b:72:e6:3f:d9:14:50:cc:79:71:b1:da
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6b9354d68b6ff4c97e500afc2d429375b490b0b7
        Validity
            Not Before: Jan  9 13:01:08 2024 GMT
            Not After : Jan 10 13:01:08 2024 GMT
        Subject: CN=78a38cb2e9abd687e702d01389048eb10bf272d7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c2:0a:12:85:26:c6:95:9a:30:46:7c:75:63:cf:
                    1b:77:d1:5b:2a:c6:01:08:8f:70:69:11:ef:f8:33:
                    82:65:a2:56:ca:38:bc:d9:fd:77:0b:4f:97:40:01:
                    5c:f1:3b:24:65:dd:73:b9:94:d8:b7:ef:ca:ad:f6:
                    3a:6e:6c:3a:e3:33:bd:67:26:96:8d:1d:41:d9:a4:
                    ca:e9:72:a9:e9:58:74:57:c6:46:5c:ad:e9:85:74:
                    4a:3d:3a:ce:96:37:e9:18:de:eb:64:34:76:3f:7b:
                    f4:fc:08:3f:46:b1:d0:cd:19:4e:c7:70:5e:f8:1e:
                    66:a7:9a:70:68:a3:f3:5e:5f:52:32:61:ed:76:59:
                    b6:08:76:24:dd:93:70:40:c6:62:a9:29:1e:81:a2:
                    d8:fa:15:0d:ce:96:d7:53:75:55:3a:43:cd:1a:45:
                    63:21:8a:cd:df:d1:7f:b2:bc:33:90:62:f9:9a:47:
                    69:60:d0:2a:f3:c9:52:28:e9:10:75:6d:57:1d:08:
                    f7:71:36:3b:31:0b:4e:6f:ba:d0:dd:33:0e:d8:44:
                    64:8e:88:86:cf:60:8d:be:cb:0c:d5:31:2d:3b:14:
                    ee:52:a3:2a:f1:ad:25:36:e8:9b:f5:81:7f:b4:d7:
                    e5:cd:63:50:bf:62:f2:f5:58:27:34:fe:86:3b:21:
                    7e:4f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                78:A3:8C:B2:E9:AB:D6:87:E7:02:D0:13:89:04:8E:B1:0B:F2:72:D7
            X509v3 Authority Key Identifier:
                keyid:6B:93:54:D6:8B:6F:F4:C9:7E:50:0A:FC:2D:42:93:75:B4:90:B0:B7

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/a5NU1otv9Ml-UAr8LUKTdbSQsLc.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/78/488805-38c1-4dde-ae3e-0e5bb8164b63/1/a5NU1otv9Ml-UAr8LUKTdbSQsLc.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/78/488805-38c1-4dde-ae3e-0e5bb8164b63/1/a5NU1otv9Ml-UAr8LUKTdbSQsLc.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         8c:20:6e:a4:e5:ea:db:94:5e:7a:b0:c5:2e:f3:83:e0:07:12:
         6d:0c:a4:f1:fa:46:32:cb:2f:38:88:ea:1c:93:8f:27:8f:0a:
         6e:4d:69:b2:a9:37:0c:01:65:7c:cf:b2:20:89:e5:3e:5f:bd:
         bf:69:30:41:01:8d:03:e2:66:1c:a0:61:6f:1e:9d:a7:3a:12:
         ad:04:d0:89:be:3c:a9:e1:7b:68:49:84:51:0a:a4:6e:87:cc:
         8e:d2:ca:6b:3d:e7:bc:1c:0a:c6:9b:9b:94:76:c0:0a:e7:b8:
         f5:d2:4d:5b:62:74:85:85:25:cf:00:11:fc:3e:92:0c:71:33:
         f0:71:12:aa:87:fc:b2:ec:db:5d:70:40:75:15:ce:12:cc:d9:
         af:94:36:3f:5f:23:a0:f5:64:8c:13:b4:f2:ca:d7:b7:66:77:
         17:57:82:9c:31:9f:34:04:21:62:ea:3e:da:a9:35:77:9b:c5:
         93:3f:c1:37:83:da:00:e3:4f:a1:2e:b1:68:e0:06:5f:18:b3:
         73:86:5b:b6:05:50:62:4e:4e:2e:0f:77:c2:3f:bd:2d:5a:72:
         59:93:03:90:53:98:2e:7d:e0:e7:37:53:7a:b1:ee:c4:ba:44:
         66:a0:4e:ca:e9:7a:77:3c:49:bd:f8:96:7f:55:aa:3e:29:60:
         ee:e4:8a:6f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Feb 27 00:59:43 2024 by rpki-client on console.sobornost.net