Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/95/0f6ddc-21b7-44d7-b984-73aea6eaca85/1/cW2obFNsYhV0g7YzwYU2K6f30fI.mft
File:                     cW2obFNsYhV0g7YzwYU2K6f30fI.mft (raw, json)
Hash identifier:          QDY28jKWnrVJ2hrxKUqywrucHUk02M6rpG48lgQUE2g=
Subject key identifier:   28:FF:D7:64:28:FB:12:15:0B:6C:47:49:AA:C0:36:91:51:0D:79:43
Authority key identifier: 71:6D:A8:6C:53:6C:62:15:74:83:B6:33:C1:85:36:2B:A7:F7:D1:F2
Certificate issuer:       /CN=716da86c536c62157483b633c185362ba7f7d1f2
Certificate serial:       019138F1AB02723D40C99450B89A4556D24C
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/cW2obFNsYhV0g7YzwYU2K6f30fI.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/95/0f6ddc-21b7-44d7-b984-73aea6eaca85/1/cW2obFNsYhV0g7YzwYU2K6f30fI.mft
Manifest number:          0648
Signing time:             Fri 09 Aug 2024 21:00:47 +0000
Manifest this update:     Fri 09 Aug 2024 21:00:47 +0000
Manifest next update:     Sat 10 Aug 2024 21:00:47 +0000
Files and hashes:         1: ZVYRbJJDnIOABqPsvgBAHqspQAc.roa (hash: Aq1yloicDjE/I9POAvmPmzTGnCe1EwgfH9FRhHqLVw4=)
                          2: cW2obFNsYhV0g7YzwYU2K6f30fI.crl (hash: pPfnnPCxVS5gfgZ1lEgaeHAOjfnKCOMIzn458DAC9EM=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:91:38:f1:ab:02:72:3d:40:c9:94:50:b8:9a:45:56:d2:4c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=716da86c536c62157483b633c185362ba7f7d1f2
        Validity
            Not Before: Aug  9 21:00:47 2024 GMT
            Not After : Aug 10 21:00:47 2024 GMT
        Subject: CN=28ffd76428fb12150b6c4749aac03691510d7943
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d6:de:f4:f4:8b:44:4a:23:64:9d:c2:ec:0d:4b:
                    26:d3:a1:f5:54:c0:84:17:0b:e1:e9:e9:83:0f:6d:
                    72:24:fe:27:c3:bc:db:21:89:f7:dd:02:a2:7e:55:
                    b6:d6:c5:27:a4:7f:f8:20:ee:d0:b5:99:50:52:8a:
                    d3:9e:f0:af:95:0a:7c:91:49:c4:5c:3d:83:15:dd:
                    60:25:2e:65:e7:4b:48:30:74:26:18:76:c5:d8:99:
                    00:dd:da:0c:49:7d:11:44:d7:ef:24:d9:79:25:9a:
                    cd:0b:ff:0d:ab:e9:a1:7c:88:7b:b5:0f:d4:dd:98:
                    81:38:fa:bc:2f:15:cf:5a:f7:a9:a0:2f:41:b7:77:
                    1a:87:ee:2f:89:b5:24:5a:89:f0:24:1e:3e:a0:cf:
                    d8:00:9a:98:c1:a7:6c:70:92:ae:44:0f:f6:6f:fc:
                    37:24:78:c5:d0:49:d8:ec:3b:1e:eb:8b:67:14:96:
                    4c:e3:cf:12:e3:38:c7:c1:2c:4b:dd:f1:35:eb:60:
                    b8:dd:2c:66:e8:bd:df:6f:d5:ad:c1:54:b1:bd:7a:
                    33:b1:f9:f3:bb:78:cc:8d:8d:56:bc:2f:dc:62:c0:
                    f9:d6:f4:97:07:f9:0e:94:4e:5d:6d:6a:14:6f:65:
                    0f:45:5c:7a:54:de:65:a9:ca:0e:fc:59:cd:a4:f1:
                    db:2b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                28:FF:D7:64:28:FB:12:15:0B:6C:47:49:AA:C0:36:91:51:0D:79:43
            X509v3 Authority Key Identifier:
                keyid:71:6D:A8:6C:53:6C:62:15:74:83:B6:33:C1:85:36:2B:A7:F7:D1:F2

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cW2obFNsYhV0g7YzwYU2K6f30fI.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/95/0f6ddc-21b7-44d7-b984-73aea6eaca85/1/cW2obFNsYhV0g7YzwYU2K6f30fI.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/95/0f6ddc-21b7-44d7-b984-73aea6eaca85/1/cW2obFNsYhV0g7YzwYU2K6f30fI.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         a5:41:6c:e6:0e:0a:bf:bb:c0:8a:3c:9d:b0:74:c6:c9:df:55:
         51:9c:13:54:28:46:00:35:7c:bd:52:41:f6:19:af:66:3c:a1:
         94:f8:fe:8b:ec:4e:db:04:4b:48:d9:6c:bb:f2:60:fb:4e:34:
         63:ba:e0:18:b0:83:60:55:ce:e8:fc:28:83:b7:3e:b6:8f:23:
         87:58:3a:60:73:71:a8:88:79:cb:f1:17:f4:10:a4:7b:e2:fd:
         6e:91:67:f9:db:a3:d5:8e:f5:5d:a4:19:95:49:d4:f2:d1:45:
         2a:98:59:4f:f7:0d:2e:2a:0e:f1:99:62:01:69:51:01:44:5c:
         b9:26:13:df:90:d5:69:ed:a2:3c:0c:0f:59:43:59:69:9e:31:
         d8:8a:db:4f:ec:98:57:06:58:c8:ce:ec:c9:f0:9a:dd:fa:39:
         c9:e5:6c:be:55:de:e2:51:57:c5:d4:79:41:7d:c8:19:57:88:
         90:1e:22:01:5f:d7:a2:2f:33:c3:f8:62:d3:5e:62:71:85:6c:
         ba:39:64:db:01:1f:09:50:15:b6:4c:8e:ba:32:9e:b3:9d:a7:
         0c:3c:dd:27:f1:be:3a:84:25:07:ed:4c:c1:b0:b2:55:f6:65:
         55:40:44:0b:a0:17:78:49:f2:b2:3e:31:33:0b:c6:d8:75:98:
         1a:cd:f5:8c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Aug 15 03:09:26 2024 by rpki-client on console.sobornost.net