Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/87/8251b2-4764-43bd-9b8e-fa7d6e5f6703/1/ZysMYNf7Xt6mxeCyrszv2PX7wNo.mft
File:                     ZysMYNf7Xt6mxeCyrszv2PX7wNo.mft (raw, json)
Hash identifier:          6oCHJB600BK5a497WpqoBaG64IuGFVGCHVKD84aAWXg=
Subject key identifier:   5A:52:8D:E1:73:8E:3A:4E:1A:03:54:0D:94:BE:53:C9:64:7C:B0:E6
Authority key identifier: 67:2B:0C:60:D7:FB:5E:DE:A6:C5:E0:B2:AE:CC:EF:D8:F5:FB:C0:DA
Certificate issuer:       /CN=672b0c60d7fb5edea6c5e0b2aeccefd8f5fbc0da
Certificate serial:       018DF7F5140F24BBDA359091C5C014623B2A
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/ZysMYNf7Xt6mxeCyrszv2PX7wNo.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/87/8251b2-4764-43bd-9b8e-fa7d6e5f6703/1/ZysMYNf7Xt6mxeCyrszv2PX7wNo.mft
Manifest number:          0372
Signing time:             Fri 01 Mar 2024 03:00:50 +0000
Manifest this update:     Fri 01 Mar 2024 03:00:50 +0000
Manifest next update:     Sat 02 Mar 2024 03:00:50 +0000
Files and hashes:         1: ZysMYNf7Xt6mxeCyrszv2PX7wNo.crl (hash: UxbP0YxOP6p2ehES6vaeZ2NY1ZJRPjdZNqTV7ags+Vk=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:8d:f7:f5:14:0f:24:bb:da:35:90:91:c5:c0:14:62:3b:2a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=672b0c60d7fb5edea6c5e0b2aeccefd8f5fbc0da
        Validity
            Not Before: Mar  1 03:00:50 2024 GMT
            Not After : Mar  2 03:00:50 2024 GMT
        Subject: CN=5a528de1738e3a4e1a03540d94be53c9647cb0e6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d1:74:65:3a:e4:e0:8a:e1:ca:9f:c0:6b:c2:95:
                    f7:42:0e:75:8d:af:72:61:77:77:2f:ef:0d:02:33:
                    8b:ae:aa:12:33:41:7a:ea:b1:59:eb:bc:e8:95:1a:
                    4f:d5:40:8d:9e:bf:91:06:cd:49:b3:76:3d:5f:e4:
                    80:36:17:d8:c7:02:1b:5f:b5:b9:df:36:ce:49:90:
                    83:85:15:07:ac:01:16:76:03:af:d4:a8:f0:98:10:
                    98:3d:47:eb:b0:41:4d:97:9a:a1:cd:9d:ba:e8:84:
                    ba:56:a4:c3:bd:4f:d4:68:d1:8d:5d:4e:41:ce:dd:
                    c9:30:70:21:fb:3a:15:f5:62:e3:f5:3d:a6:86:d1:
                    a5:ce:05:30:09:e9:3e:2f:04:06:10:d2:58:dd:59:
                    7b:ed:b4:90:80:99:46:0d:fe:78:a9:a2:c8:73:ea:
                    5a:7d:e3:c8:d6:7b:81:f1:01:3f:06:cc:9c:a4:4e:
                    28:6e:ba:04:30:ce:6b:98:df:f3:0c:1a:31:51:cf:
                    b7:73:1f:93:f5:e5:9b:5c:d1:27:b9:46:7e:80:a5:
                    20:92:d3:d1:4c:66:78:2d:2d:b5:e7:ee:48:7d:84:
                    81:30:03:f6:4b:09:09:ed:c7:88:64:5e:52:42:27:
                    6b:85:01:32:28:4c:10:96:24:5c:a1:df:1b:11:40:
                    b4:ab
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5A:52:8D:E1:73:8E:3A:4E:1A:03:54:0D:94:BE:53:C9:64:7C:B0:E6
            X509v3 Authority Key Identifier:
                keyid:67:2B:0C:60:D7:FB:5E:DE:A6:C5:E0:B2:AE:CC:EF:D8:F5:FB:C0:DA

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ZysMYNf7Xt6mxeCyrszv2PX7wNo.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/87/8251b2-4764-43bd-9b8e-fa7d6e5f6703/1/ZysMYNf7Xt6mxeCyrszv2PX7wNo.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/87/8251b2-4764-43bd-9b8e-fa7d6e5f6703/1/ZysMYNf7Xt6mxeCyrszv2PX7wNo.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         3f:1a:83:55:bf:61:6e:89:c9:cf:8d:64:f4:6f:54:07:2a:63:
         7e:ce:32:ab:fa:dc:d3:ff:47:bf:a6:a5:d8:bd:e6:19:39:82:
         9e:91:0a:06:3e:25:d5:de:36:72:ec:cc:e2:71:c1:28:77:b3:
         89:91:af:30:db:1e:68:0d:34:f9:60:fa:6a:c2:b8:a5:ff:31:
         d3:11:4d:ce:04:d3:ab:0f:9e:f6:36:54:66:31:98:0e:85:31:
         7e:a9:1c:13:a3:9d:17:9c:67:a8:a6:d2:09:c9:be:5c:f6:41:
         a5:f2:b9:ad:c6:21:5b:28:5e:cb:91:82:25:8f:79:47:60:be:
         89:8d:9c:11:2a:50:5c:01:c1:d9:a5:7f:08:9f:ed:76:38:23:
         10:84:eb:a9:e0:3b:1c:82:80:48:5b:9e:fc:a6:d5:75:ce:46:
         ab:e3:fd:d7:76:2f:81:13:33:82:af:15:ac:d8:53:62:7f:f8:
         16:97:ae:01:63:52:f1:be:a9:af:3c:29:13:84:55:b7:71:0f:
         4f:f4:9d:72:40:1c:2f:1f:ab:93:7d:64:69:57:77:6f:8e:78:
         ed:05:80:05:ef:77:24:77:d3:8e:42:19:ff:1f:fe:f5:8e:ad:
         31:e6:13:6a:7d:84:cc:03:17:90:d8:fe:1c:2a:92:2a:56:3d:
         e7:f0:f4:38
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Mar 1 20:24:23 2024 by rpki-client on console.sobornost.net