Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/99/dbf772-9396-4101-b3e8-43f9ab6734ec/1/tTjHKVvNR0uCnk5H7ryw4JPOUjo.mft
File:                     tTjHKVvNR0uCnk5H7ryw4JPOUjo.mft (raw, json)
Hash identifier:          nii9cIuATXQkPku906TJeWI31y8lnHUkhbfCwucd2/g=
Subject key identifier:   1B:F1:46:9B:CC:4D:0A:DA:EF:F5:30:2B:53:84:AA:02:A7:24:F9:AC
Authority key identifier: B5:38:C7:29:5B:CD:47:4B:82:9E:4E:47:EE:BC:B0:E0:93:CE:52:3A
Certificate issuer:       /CN=b538c7295bcd474b829e4e47eebcb0e093ce523a
Certificate serial:       0191B37910D25EB1912A84C62A5C9A8F9BE2
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/tTjHKVvNR0uCnk5H7ryw4JPOUjo.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/99/dbf772-9396-4101-b3e8-43f9ab6734ec/1/tTjHKVvNR0uCnk5H7ryw4JPOUjo.mft
Manifest number:          09D1
Signing time:             Mon 02 Sep 2024 16:02:21 +0000
Manifest this update:     Mon 02 Sep 2024 16:02:21 +0000
Manifest next update:     Tue 03 Sep 2024 16:02:21 +0000
Files and hashes:         1: OiRuCXbD-8kN9gb8lSfwwuM1yGc.roa (hash: 6W4wNyVlpDEjUx/pG+UbJCstA7rUpuIEYaM1acYNCwE=)
                          2: tTjHKVvNR0uCnk5H7ryw4JPOUjo.crl (hash: nn6SjylroADNMUGJW+8ssIK9yyMCiJq9/FaIIm/6U0M=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:91:b3:79:10:d2:5e:b1:91:2a:84:c6:2a:5c:9a:8f:9b:e2
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b538c7295bcd474b829e4e47eebcb0e093ce523a
        Validity
            Not Before: Sep  2 16:02:21 2024 GMT
            Not After : Sep  3 16:02:21 2024 GMT
        Subject: CN=1bf1469bcc4d0adaeff5302b5384aa02a724f9ac
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ad:a4:f3:a4:6c:f1:76:bf:fb:85:90:f8:a6:e8:
                    5e:5e:6b:92:94:70:e1:cc:e8:ad:d2:7e:c1:e9:cf:
                    2e:ae:55:5a:ae:53:36:ed:b9:0b:4b:85:9a:cc:34:
                    7e:af:82:3e:0e:55:71:0b:55:b8:91:47:55:9a:95:
                    4e:af:16:0d:f3:82:37:69:83:49:b3:ff:a8:76:4c:
                    64:50:5d:6c:5b:c9:0e:3b:34:d0:32:9c:0b:ae:54:
                    f5:06:e8:cb:4e:4d:e0:b9:7c:b6:77:7b:95:bc:59:
                    2c:fd:09:3f:09:04:ef:41:87:61:8c:90:f3:17:7d:
                    11:b2:71:62:2a:f5:0d:4b:19:a5:c5:a0:d9:b5:db:
                    61:11:44:91:77:7e:03:15:29:62:c6:6a:36:ce:0b:
                    c1:c1:71:c5:38:91:6a:74:9a:4b:fa:0c:90:d5:0e:
                    dd:73:65:e4:be:d1:0a:6e:f9:f2:e3:66:ae:8f:b7:
                    e8:0a:8d:be:7a:98:8c:da:76:54:8b:c9:a2:b3:e7:
                    a1:21:76:b4:54:61:13:d8:7b:5d:f8:88:24:5e:78:
                    02:86:80:3d:b5:db:ea:bd:e4:fa:2e:c4:bb:0e:82:
                    56:e3:78:a9:04:39:b6:05:51:b3:fb:34:0c:f7:32:
                    25:38:b1:fb:07:c3:33:2c:36:23:6f:31:1a:9b:a3:
                    dc:a5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1B:F1:46:9B:CC:4D:0A:DA:EF:F5:30:2B:53:84:AA:02:A7:24:F9:AC
            X509v3 Authority Key Identifier:
                keyid:B5:38:C7:29:5B:CD:47:4B:82:9E:4E:47:EE:BC:B0:E0:93:CE:52:3A

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/tTjHKVvNR0uCnk5H7ryw4JPOUjo.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/99/dbf772-9396-4101-b3e8-43f9ab6734ec/1/tTjHKVvNR0uCnk5H7ryw4JPOUjo.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/99/dbf772-9396-4101-b3e8-43f9ab6734ec/1/tTjHKVvNR0uCnk5H7ryw4JPOUjo.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         71:16:cb:85:b3:81:52:7d:42:e2:0c:de:04:cc:b0:bb:67:72:
         02:06:55:b1:ac:db:e4:68:50:75:f8:05:96:88:e1:d4:c5:55:
         4a:06:dd:cb:43:dc:ff:bc:80:b5:be:34:d5:d5:84:ba:0e:ad:
         ba:d4:39:3d:75:d2:ed:df:66:f4:84:22:0d:9f:a7:62:b1:1d:
         35:eb:f8:56:8a:68:24:05:4b:1b:bc:13:a2:14:23:a0:60:a7:
         6d:86:6d:f9:c3:55:3e:e3:01:13:c3:64:fd:1a:b7:70:20:74:
         ed:1b:5d:1f:42:78:72:34:b4:7c:d6:12:06:05:ac:48:b6:f2:
         f9:36:29:b0:c9:96:ef:4b:e0:e6:c6:be:1b:9b:75:b4:23:a6:
         75:31:dd:ce:f4:28:74:d4:22:33:d3:2d:f4:d5:de:cf:f9:dc:
         84:56:eb:56:05:13:7c:d6:06:87:ca:62:02:9b:41:be:29:32:
         68:f9:fa:c6:32:e1:59:26:8a:a1:59:93:f5:62:e9:b6:5d:88:
         aa:4c:14:14:a3:98:13:87:e3:b8:c7:9b:96:ee:a6:70:1a:20:
         82:4f:f4:c3:21:ad:d9:9b:7b:41:b1:e4:17:79:e9:b9:22:fe:
         d3:70:9d:e6:41:82:3d:dd:ba:9c:cd:84:80:c7:b3:fe:64:bf:
         09:d4:70:6d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Sep 11 05:48:42 2024 by rpki-client on console.sobornost.net