Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/99/bc9816-8d07-4afe-9ba0-cdef4a8205f6/1/BF30UOrP3Wee8NCMiAqR_HW4qJc.mft
File:                     BF30UOrP3Wee8NCMiAqR_HW4qJc.mft (raw, json)
Hash identifier:          xsJiFyYAlpofZpSYX+PQCz6Sg/KSeZAvYHT+I2ra0ls=
Subject key identifier:   E9:B8:09:65:4E:AC:E6:03:7E:5A:A7:5F:8D:EC:21:64:F6:12:F5:9E
Authority key identifier: 04:5D:F4:50:EA:CF:DD:67:9E:F0:D0:8C:88:0A:91:FC:75:B8:A8:97
Certificate issuer:       /CN=045df450eacfdd679ef0d08c880a91fc75b8a897
Certificate serial:       019347176575E0CC7CDF1C9D02EAD7827AC8
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/BF30UOrP3Wee8NCMiAqR_HW4qJc.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/99/bc9816-8d07-4afe-9ba0-cdef4a8205f6/1/BF30UOrP3Wee8NCMiAqR_HW4qJc.mft
Manifest number:          0A91
Signing time:             Wed 20 Nov 2024 01:02:15 +0000
Manifest this update:     Wed 20 Nov 2024 01:02:15 +0000
Manifest next update:     Thu 21 Nov 2024 01:02:15 +0000
Files and hashes:         1: BF30UOrP3Wee8NCMiAqR_HW4qJc.crl (hash: MrrwelccmGVO+quCBFeAvUWKRukR6gst/I+U2eHoBo0=)
                          2: V01B3v4DNa6pEBDxFhPnkLayN_s.roa (hash: Y9qTWXWC42HT8upq877McYVY7T+jC75WCxYPa3RIlrk=)
                          3: at0xU4Xy0rRkmWXUtKUZysC3hhY.roa (hash: rOuoGhZTyll9Aqf+yn6PuggNh2fEqXaUH1QFv8DFpSY=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:93:47:17:65:75:e0:cc:7c:df:1c:9d:02:ea:d7:82:7a:c8
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=045df450eacfdd679ef0d08c880a91fc75b8a897
        Validity
            Not Before: Nov 20 01:02:15 2024 GMT
            Not After : Nov 21 01:02:15 2024 GMT
        Subject: CN=e9b809654eace6037e5aa75f8dec2164f612f59e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:99:b5:3f:15:11:70:8e:02:89:e5:71:21:10:69:
                    df:d8:cc:70:27:d9:5d:6e:9e:48:ce:34:b3:ce:a2:
                    88:83:51:09:ab:96:27:0a:f4:68:6d:59:6e:55:6f:
                    23:18:e9:82:19:ae:eb:2f:6b:5e:ee:7d:48:48:42:
                    d4:ea:a9:fd:36:88:88:de:3c:7e:fb:c7:f9:6e:6f:
                    84:49:9f:dd:e5:1a:f1:ab:5c:54:d2:b5:cf:25:42:
                    cf:73:dd:03:d4:1d:c6:58:2d:f8:2d:84:08:25:fd:
                    41:36:dc:46:6b:39:98:c3:6f:06:bf:b9:b8:f0:42:
                    c2:af:22:d1:74:2c:aa:26:c4:48:c4:61:47:0f:8d:
                    4e:17:ad:6a:51:98:c1:e8:27:50:a5:44:39:2a:15:
                    55:2b:20:20:3b:b2:62:11:d0:8b:a6:37:b1:16:78:
                    84:e3:d8:9f:4e:83:06:03:0c:cf:0f:9e:93:aa:64:
                    b8:ee:c7:25:dd:fe:59:f8:b2:af:b8:28:37:fc:80:
                    31:2a:a8:da:d6:b4:59:bc:6d:92:ba:d5:7a:f6:94:
                    49:1e:bd:8c:79:49:6a:8d:46:34:b1:5a:23:51:37:
                    00:43:6b:e3:a2:1d:88:2f:73:d5:e5:e7:f1:99:7d:
                    a0:69:28:a1:24:69:ae:09:5f:04:a1:6d:82:72:de:
                    81:ef
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E9:B8:09:65:4E:AC:E6:03:7E:5A:A7:5F:8D:EC:21:64:F6:12:F5:9E
            X509v3 Authority Key Identifier:
                keyid:04:5D:F4:50:EA:CF:DD:67:9E:F0:D0:8C:88:0A:91:FC:75:B8:A8:97

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/BF30UOrP3Wee8NCMiAqR_HW4qJc.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/99/bc9816-8d07-4afe-9ba0-cdef4a8205f6/1/BF30UOrP3Wee8NCMiAqR_HW4qJc.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/99/bc9816-8d07-4afe-9ba0-cdef4a8205f6/1/BF30UOrP3Wee8NCMiAqR_HW4qJc.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         6c:e2:e6:9c:7f:50:1f:f5:08:6b:09:27:02:0b:85:a8:1d:d4:
         ca:c0:a2:24:75:c4:85:c7:ac:32:04:09:37:9f:df:2f:8a:8c:
         0e:fe:38:14:3c:88:af:1c:09:24:93:55:1b:d4:26:61:a6:e1:
         ac:dc:30:f8:40:27:bc:8b:8e:8b:5f:1e:db:e9:75:b2:28:b4:
         af:00:22:7d:b9:9f:ad:58:41:a7:b4:13:dd:f4:a5:52:13:dd:
         db:9f:8f:c9:c0:9a:cb:d8:c5:86:3c:fe:03:62:c2:d0:be:cf:
         b2:cb:a7:8b:2e:43:89:4b:5f:f8:81:08:47:74:38:dd:30:bc:
         12:2c:64:05:c8:70:b3:8c:ee:77:60:aa:cd:5b:49:ab:84:cc:
         92:f7:5e:86:96:f6:77:1c:8e:db:74:90:69:70:f5:c1:65:87:
         69:7d:3e:59:61:c1:ca:4e:cd:f9:a6:2a:93:e7:60:e8:80:d7:
         b6:10:06:a5:1d:71:a1:40:4a:28:a1:9b:71:4c:1c:65:06:6f:
         22:28:c0:72:9d:ac:dd:8f:d8:dc:8e:e6:0a:10:d2:db:17:99:
         88:28:e2:cb:59:74:cd:67:b0:83:39:80:91:35:cf:7c:9c:b4:
         73:99:e4:9a:c3:3f:c4:d6:3f:7c:1c:84:1c:d5:b0:d5:03:8e:
         57:7b:bd:b6
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZNHF2V14Mx83xydAurXgnrIMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDA0NWRmNDUwZWFjZmRkNjc5ZWYwZDA4Yzg4MGE5MWZjNzVi
OGE4OTcwHhcNMjQxMTIwMDEwMjE1WhcNMjQxMTIxMDEwMjE1WjAzMTEwLwYDVQQD
EyhlOWI4MDk2NTRlYWNlNjAzN2U1YWE3NWY4ZGVjMjE2NGY2MTJmNTllMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmbU/FRFwjgKJ5XEhEGnf2MxwJ9ld
bp5IzjSzzqKIg1EJq5YnCvRobVluVW8jGOmCGa7rL2te7n1ISELU6qn9NoiI3jx+
+8f5bm+ESZ/d5Rrxq1xU0rXPJULPc90D1B3GWC34LYQIJf1BNtxGazmYw28Gv7m4
8ELCryLRdCyqJsRIxGFHD41OF61qUZjB6CdQpUQ5KhVVKyAgO7JiEdCLpjexFniE
49ifToMGAwzPD56TqmS47scl3f5Z+LKvuCg3/IAxKqja1rRZvG2SutV69pRJHr2M
eUlqjUY0sVojUTcAQ2vjoh2IL3PV5efxmX2gaSihJGmuCV8EoW2Cct6B7wIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFOm4CWVOrOYDflqnX43sIWT2EvWeMB8GA1UdIwQY
MBaAFARd9FDqz91nnvDQjIgKkfx1uKiXMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvQkYzMFVPclAzV2VlOE5DTWlBcVJfSFc0cUpjLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC85OS9iYzk4MTYtOGQwNy00YWZlLTliYTAt
Y2RlZjRhODIwNWY2LzEvQkYzMFVPclAzV2VlOE5DTWlBcVJfSFc0cUpjLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC85OS9iYzk4MTYtOGQwNy00YWZlLTliYTAtY2RlZjRhODIwNWY2
LzEvQkYzMFVPclAzV2VlOE5DTWlBcVJfSFc0cUpjLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAbOLmnH9Q
H/UIawknAguFqB3UysCiJHXEhcesMgQJN5/fL4qMDv44FDyIrxwJJJNVG9QmYabh
rNww+EAnvIuOi18e2+l1sii0rwAifbmfrVhBp7QT3fSlUhPd25+PycCay9jFhjz+
A2LC0L7Pssuniy5DiUtf+IEIR3Q43TC8EixkBchws4zud2CqzVtJq4TMkvdehpb2
dxyO23SQaXD1wWWHaX0+WWHByk7N+aYqk+dg6IDXthAGpR1xoUBKKKGbcUwcZQZv
IijAcp2s3Y/Y3I7mChDS2xeZiCjiy1l0zWewgzmAkTXPfJy0c5nkmsM/xNY/fByE
HNWw1QOOV3u9tg==
-----END CERTIFICATE-----
Generated at Thu Nov 21 02:16:31 2024 by rpki-client on console.sobornost.net