Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/87/bda9d2-2228-4806-85d0-ee06b6612ce4/1/PVRg-FZ-6Y-BxW-k-NsDzlzdrZw.mft
File:                     PVRg-FZ-6Y-BxW-k-NsDzlzdrZw.mft (raw, json)
Hash identifier:          1OuEXZQH4rr87cfBFi3fM9H+fkl3oACgfHRitndj9Wc=
Subject key identifier:   0C:FB:07:05:40:D3:B5:D6:1E:E4:20:79:71:75:F5:63:34:58:05:F6
Authority key identifier: 3D:54:60:F8:56:7E:E9:8F:81:C5:6F:A4:F8:DB:03:CE:5C:DD:AD:9C
Certificate issuer:       /CN=3d5460f8567ee98f81c56fa4f8db03ce5cddad9c
Certificate serial:       018F25DDF9033157EE2937C15621041D9C94
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/PVRg-FZ-6Y-BxW-k-NsDzlzdrZw.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/87/bda9d2-2228-4806-85d0-ee06b6612ce4/1/PVRg-FZ-6Y-BxW-k-NsDzlzdrZw.mft
Manifest number:          0198
Signing time:             Sun 28 Apr 2024 18:00:55 +0000
Manifest this update:     Sun 28 Apr 2024 18:00:55 +0000
Manifest next update:     Mon 29 Apr 2024 18:00:55 +0000
Files and hashes:         1: PVRg-FZ-6Y-BxW-k-NsDzlzdrZw.crl (hash: X7NANSXAS+qySvg13/NABK+bP4oOn7UCh8TFOVpCRvU=)
                          2: iZApycXNPz9vxgT5eEvKW98LDqg.roa (hash: ExUgP2Z7Z9IJtGwzJro9UmsLakOf/TAs087UopR5KzM=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:8f:25:dd:f9:03:31:57:ee:29:37:c1:56:21:04:1d:9c:94
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3d5460f8567ee98f81c56fa4f8db03ce5cddad9c
        Validity
            Not Before: Apr 28 18:00:55 2024 GMT
            Not After : Apr 29 18:00:55 2024 GMT
        Subject: CN=0cfb070540d3b5d61ee420797175f563345805f6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bc:1d:d8:c5:f6:ba:4f:02:54:63:6a:a4:17:91:
                    b9:79:08:2d:da:97:bb:b5:4a:18:f6:56:63:48:6e:
                    e8:30:11:05:c1:8f:2a:94:5f:70:ef:e9:9b:90:a1:
                    d5:03:73:b4:76:7d:04:ff:90:08:af:08:64:5a:af:
                    4f:96:58:71:cf:22:02:97:15:cf:4c:24:c1:49:02:
                    69:3a:95:a1:b3:a0:ad:82:63:d4:62:b3:91:5a:18:
                    ae:99:32:c6:66:be:7f:cf:2a:cc:87:08:29:60:2d:
                    86:b3:b0:4f:38:7b:6c:18:12:2a:37:c2:16:e0:c4:
                    75:f1:21:ca:f3:ce:4d:6c:de:39:d1:a8:6a:9a:d0:
                    a9:1f:e3:76:ed:b2:21:f1:de:85:0f:e7:95:ba:8c:
                    78:56:69:cb:f3:6d:f2:34:a8:9d:b5:25:ab:ae:21:
                    1a:2f:e1:e7:79:74:56:e4:6f:70:27:ff:39:be:f5:
                    0f:37:a0:a3:74:49:09:f4:3a:75:58:45:2f:db:a7:
                    2a:b5:90:e8:3d:52:9c:16:dd:b8:bf:00:59:96:e8:
                    36:a7:af:6d:b7:43:64:a0:5b:62:7c:20:26:26:58:
                    ef:8d:c5:83:3a:9b:e6:43:09:10:24:5d:c6:a5:df:
                    15:60:a0:0b:7c:b3:db:1b:98:6f:3a:4b:e6:67:52:
                    7f:b3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0C:FB:07:05:40:D3:B5:D6:1E:E4:20:79:71:75:F5:63:34:58:05:F6
            X509v3 Authority Key Identifier:
                keyid:3D:54:60:F8:56:7E:E9:8F:81:C5:6F:A4:F8:DB:03:CE:5C:DD:AD:9C

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/PVRg-FZ-6Y-BxW-k-NsDzlzdrZw.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/87/bda9d2-2228-4806-85d0-ee06b6612ce4/1/PVRg-FZ-6Y-BxW-k-NsDzlzdrZw.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/87/bda9d2-2228-4806-85d0-ee06b6612ce4/1/PVRg-FZ-6Y-BxW-k-NsDzlzdrZw.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         54:7c:40:87:1d:0c:95:44:50:3e:7d:57:c9:01:a7:c9:bf:8b:
         11:a7:91:d7:00:6b:70:7d:97:cd:76:72:f5:2f:7c:42:e5:f7:
         b6:49:64:12:44:8e:44:fe:67:09:34:3a:e2:6d:cc:d9:e4:e5:
         57:e4:40:b9:45:02:8c:4c:5c:3d:e8:f1:8e:95:08:a1:ce:85:
         77:98:a9:6a:98:78:fa:42:90:fd:84:4c:ab:2c:04:20:e0:14:
         42:f4:ad:6b:49:ff:91:22:9b:78:b0:60:50:42:48:3c:51:45:
         aa:f6:37:36:fe:ff:35:2a:25:5b:73:12:d8:9d:e6:29:a3:ff:
         4f:3f:a9:1e:d1:9d:b3:0f:e0:6e:9c:ad:49:0f:61:bb:0f:51:
         3a:78:3e:e6:28:25:1e:a6:35:f9:e1:84:48:f1:b2:46:bd:52:
         17:63:4b:53:2d:c4:f5:68:21:68:26:d1:7b:fe:28:34:a4:d2:
         69:39:09:af:00:55:a9:02:b6:0e:14:e1:3d:53:34:3d:fe:2f:
         08:3d:dd:8a:e7:5a:3e:7d:db:84:0a:9f:2f:7a:3a:3b:3e:0f:
         f5:3d:29:4c:d4:3f:97:2b:cc:b3:8c:55:35:22:69:0d:a3:47:
         4e:64:d4:56:78:d9:e9:53:90:75:72:13:b6:c5:be:e9:8f:6f:
         27:77:b9:97
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 29 19:13:41 2024 by rpki-client on console.sobornost.net