Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/91/6378bb-52ce-46af-959c-a9054928b544/1/9kUNLQIT7kyfMYHv7rLWY_4NNls.mft
File:                     9kUNLQIT7kyfMYHv7rLWY_4NNls.mft (raw, json)
Hash identifier:          vKIzrlvhbRSddOKqg7F7WlrXCR3AOe1Egorsr2naWhs=
Subject key identifier:   C4:8C:41:B4:0A:73:F4:B7:14:29:E2:67:53:AE:91:B5:80:88:BE:C7
Authority key identifier: F6:45:0D:2D:02:13:EE:4C:9F:31:81:EF:EE:B2:D6:63:FE:0D:36:5B
Certificate issuer:       /CN=f6450d2d0213ee4c9f3181efeeb2d663fe0d365b
Certificate serial:       018F0087C241E5AB0A10EC4B5477ACA309B6
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/9kUNLQIT7kyfMYHv7rLWY_4NNls.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/91/6378bb-52ce-46af-959c-a9054928b544/1/9kUNLQIT7kyfMYHv7rLWY_4NNls.mft
Manifest number:          0832
Signing time:             Sun 21 Apr 2024 12:00:48 +0000
Manifest this update:     Sun 21 Apr 2024 12:00:48 +0000
Manifest next update:     Mon 22 Apr 2024 12:00:48 +0000
Files and hashes:         1: 9kUNLQIT7kyfMYHv7rLWY_4NNls.crl (hash: z42SkdkGaUPTKebGYon+xHQJ+RvK3BdKl59QhWv7qmM=)
                          2: SC2U3RjtOTEevPflXlMHUn0bkD4.roa (hash: JbmqT1i1wjLtGBzmy4bfghjunV4N2wGXbbBzPyasfwE=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:8f:00:87:c2:41:e5:ab:0a:10:ec:4b:54:77:ac:a3:09:b6
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=f6450d2d0213ee4c9f3181efeeb2d663fe0d365b
        Validity
            Not Before: Apr 21 12:00:48 2024 GMT
            Not After : Apr 22 12:00:48 2024 GMT
        Subject: CN=c48c41b40a73f4b71429e26753ae91b58088bec7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8c:b2:a7:49:dc:ed:89:7d:51:71:6d:4f:e2:20:
                    a3:32:0b:59:38:61:e6:df:74:e4:fa:6f:b0:89:f5:
                    52:9b:5c:ef:86:21:80:b2:c3:94:0b:86:31:72:69:
                    f4:49:57:95:c6:58:2e:7d:c4:6f:de:e5:55:e3:87:
                    01:7f:ad:8c:c5:2e:53:d9:77:d7:00:a6:6b:00:c0:
                    aa:6a:d8:63:ef:18:46:ef:ea:1d:f1:68:2a:d2:33:
                    6b:be:34:73:cf:1a:5b:93:9c:d1:6f:d6:d7:ca:74:
                    00:32:d2:18:06:15:9a:07:04:a1:65:15:e7:fa:c6:
                    ff:43:76:7e:c0:0b:5b:60:8b:c9:11:e2:b7:c7:e0:
                    cf:a1:f8:f0:28:ab:fd:23:92:d5:fc:40:c7:ea:46:
                    54:85:1b:45:d0:da:27:32:26:4a:26:0f:b9:c2:ca:
                    eb:aa:6b:b9:40:59:91:7d:c4:26:95:d9:fe:5e:29:
                    22:43:37:02:60:2e:7d:04:e6:01:8a:7d:82:4d:ad:
                    7a:4a:2f:88:36:c4:0c:15:b0:62:91:71:36:52:d4:
                    30:cf:5c:77:88:d5:32:4d:bb:fe:e8:4e:d1:5a:15:
                    6c:80:1d:02:df:ca:9d:7d:5d:f1:d8:3d:a2:24:a9:
                    cc:52:d5:bf:8d:12:82:31:7a:75:12:d6:f2:05:5d:
                    56:b3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C4:8C:41:B4:0A:73:F4:B7:14:29:E2:67:53:AE:91:B5:80:88:BE:C7
            X509v3 Authority Key Identifier:
                keyid:F6:45:0D:2D:02:13:EE:4C:9F:31:81:EF:EE:B2:D6:63:FE:0D:36:5B

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/9kUNLQIT7kyfMYHv7rLWY_4NNls.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/91/6378bb-52ce-46af-959c-a9054928b544/1/9kUNLQIT7kyfMYHv7rLWY_4NNls.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/91/6378bb-52ce-46af-959c-a9054928b544/1/9kUNLQIT7kyfMYHv7rLWY_4NNls.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         36:ae:2c:60:36:9e:27:f7:07:60:7d:c5:e2:a8:1a:6a:61:83:
         b2:28:8e:bb:1e:72:92:db:79:05:0b:2f:e0:d4:96:3d:92:ff:
         24:c4:41:78:58:b8:98:25:4c:56:27:20:4f:34:98:6f:f1:85:
         ce:7c:ed:7e:31:b2:38:55:ab:6a:9b:44:21:95:fd:f7:2a:f7:
         71:8c:fb:8c:dc:5b:9d:f7:2b:ce:fc:00:04:4a:fb:e9:02:70:
         e6:ad:f6:b4:e7:6f:5a:10:61:b4:ea:cf:1c:09:9d:b3:f6:d8:
         e7:1f:2d:a5:95:84:2b:19:e0:6a:d4:c8:49:99:78:1e:c5:ec:
         3a:f4:85:8e:9b:d6:16:7d:7f:8a:d2:cf:69:f9:1c:0f:06:b1:
         00:ab:f2:64:e0:94:bc:2d:a2:86:d0:dd:29:28:c8:32:a9:5b:
         62:2a:03:2e:3c:30:7c:73:a7:9e:ad:58:c1:94:10:66:ec:1c:
         90:c6:55:d8:3b:cd:3f:e6:d5:fd:34:fd:98:06:da:74:fe:80:
         35:38:10:15:9a:77:64:3b:9d:f4:eb:1b:7f:5b:02:37:22:12:
         24:2a:01:49:34:3a:59:19:14:d0:5f:9f:5d:51:50:af:e9:92:
         41:34:e1:5e:7b:40:4e:64:85:3c:8b:c7:34:69:86:f4:f1:2c:
         46:83:52:4f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 24 03:17:44 2024 by rpki-client on console.sobornost.net