Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a0/0e23b0-f557-46f5-8cf3-5fc3a9391c3d/1/KVvOWx426oDwZZguWNrvDZnzhDg.mft
File:                     KVvOWx426oDwZZguWNrvDZnzhDg.mft (raw, json)
Hash identifier:          wzRg7pDz23mWnGYNJIUs/ksWpQqKYEhBZV/Y9pyEJOk=
Subject key identifier:   9D:0F:AF:57:4C:2A:46:F2:59:EE:CD:13:6E:B0:E8:40:35:CF:F3:A9
Authority key identifier: 29:5B:CE:5B:1E:36:EA:80:F0:65:98:2E:58:DA:EF:0D:99:F3:84:38
Certificate issuer:       /CN=295bce5b1e36ea80f065982e58daef0d99f38438
Certificate serial:       01889AA91D974B1458CDA7DCA51A1F55BBBC
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/KVvOWx426oDwZZguWNrvDZnzhDg.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/a0/0e23b0-f557-46f5-8cf3-5fc3a9391c3d/1/KVvOWx426oDwZZguWNrvDZnzhDg.mft
Manifest number:          0D5B
Signing time:             Thu 08 Jun 2023 10:59:14 +0000
Manifest this update:     Thu 08 Jun 2023 10:59:14 +0000
Manifest next update:     Fri 09 Jun 2023 10:59:14 +0000
Files and hashes:         1: KVvOWx426oDwZZguWNrvDZnzhDg.crl (hash: hPfM5nexEDsW8QJFpzLUJqSLgyqzXNQKVuWNIcqMt7c=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:88:9a:a9:1d:97:4b:14:58:cd:a7:dc:a5:1a:1f:55:bb:bc
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=295bce5b1e36ea80f065982e58daef0d99f38438
        Validity
            Not Before: Jun  8 10:59:14 2023 GMT
            Not After : Jun  9 10:59:14 2023 GMT
        Subject: CN=9d0faf574c2a46f259eecd136eb0e84035cff3a9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9c:8c:1c:74:b3:d1:93:9a:b9:60:b7:d5:a4:c4:
                    62:3b:13:31:e5:7f:49:97:e7:ec:83:41:ba:fb:53:
                    ee:b6:00:e3:16:88:9f:1d:65:bb:8b:58:4f:70:7b:
                    3e:3e:05:5e:0f:7f:0e:be:33:3e:53:f9:a1:dc:0b:
                    74:f6:5c:48:77:7d:85:f0:d5:47:c3:06:7a:ec:ba:
                    10:b6:f3:06:ae:a2:6b:c1:f1:d5:25:67:05:96:db:
                    b5:5b:c8:10:4e:63:3e:e4:a3:c1:1e:be:fa:67:ae:
                    b9:c1:b4:3e:2e:e1:b0:4f:f0:03:85:63:54:f7:e1:
                    6f:a0:4d:c9:02:97:86:d1:5d:92:d7:42:82:1c:61:
                    39:d6:21:fc:a5:c9:57:21:40:89:7a:cd:d5:49:76:
                    f1:b6:b9:85:e4:21:54:05:7a:77:05:7e:ca:e0:5d:
                    70:9f:ba:1a:16:a4:f6:29:5f:45:b2:4a:bf:ff:2a:
                    93:ee:ea:77:24:e5:07:c0:03:46:a1:26:ef:ef:b1:
                    99:0d:02:5f:7f:43:51:ff:5e:44:f0:34:59:3b:51:
                    9d:48:89:7d:aa:b9:18:2b:ef:8d:79:a7:d8:03:76:
                    55:49:94:5d:d9:ba:d0:69:69:b4:c5:36:0a:f9:71:
                    cc:fb:cf:c0:88:49:0e:49:b5:89:55:9c:52:b5:3d:
                    d5:c9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9D:0F:AF:57:4C:2A:46:F2:59:EE:CD:13:6E:B0:E8:40:35:CF:F3:A9
            X509v3 Authority Key Identifier:
                keyid:29:5B:CE:5B:1E:36:EA:80:F0:65:98:2E:58:DA:EF:0D:99:F3:84:38

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/KVvOWx426oDwZZguWNrvDZnzhDg.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a0/0e23b0-f557-46f5-8cf3-5fc3a9391c3d/1/KVvOWx426oDwZZguWNrvDZnzhDg.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/a0/0e23b0-f557-46f5-8cf3-5fc3a9391c3d/1/KVvOWx426oDwZZguWNrvDZnzhDg.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         52:f6:da:c3:ac:21:73:5a:23:70:e6:bf:8b:f6:9c:34:55:b9:
         33:94:21:6c:13:dd:5d:7b:e6:cb:6e:8a:ec:27:e4:b2:d2:6b:
         49:d8:90:31:c7:f8:c9:66:75:6a:f7:bd:2c:2f:29:1d:1f:7c:
         c3:ed:0d:99:ac:59:2c:d4:ac:69:22:cf:4c:4a:90:8e:a7:d9:
         eb:34:b6:d9:db:b3:d9:cd:27:3a:1f:70:c7:ab:d9:69:81:d1:
         b3:10:f1:ca:1b:12:de:e3:49:33:29:85:1d:43:ba:68:8f:42:
         12:9a:88:c3:30:09:6d:5e:68:c8:fd:78:99:10:37:5a:98:cb:
         c2:ed:cc:f5:75:da:72:c4:2e:23:dc:30:e7:d5:ec:c9:4d:f0:
         bf:66:2f:f5:a2:9e:2a:b5:f7:b8:21:47:74:2d:1a:54:33:38:
         05:77:92:d8:db:b6:9c:0c:e8:bc:2c:d1:56:56:6d:70:8c:c7:
         3a:37:ea:a8:6d:97:d7:f4:66:a8:69:d7:1b:cd:a2:50:51:84:
         11:9e:4c:5b:1e:16:17:12:e7:38:b4:6d:4c:3c:a1:a1:84:4f:
         b2:d3:a6:61:86:13:04:5f:e0:d9:2c:36:86:07:51:f2:17:56:
         b8:f2:a0:64:a5:60:c6:b8:8c:4c:66:2e:e6:a0:34:54:aa:9e:
         c6:6a:58:ca
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAYiaqR2XSxRYzafcpRofVbu8MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDI5NWJjZTViMWUzNmVhODBmMDY1OTgyZTU4ZGFlZjBkOTlm
Mzg0MzgwHhcNMjMwNjA4MTA1OTE0WhcNMjMwNjA5MTA1OTE0WjAzMTEwLwYDVQQD
Eyg5ZDBmYWY1NzRjMmE0NmYyNTllZWNkMTM2ZWIwZTg0MDM1Y2ZmM2E5MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnIwcdLPRk5q5YLfVpMRiOxMx5X9J
l+fsg0G6+1PutgDjFoifHWW7i1hPcHs+PgVeD38OvjM+U/mh3At09lxId32F8NVH
wwZ67LoQtvMGrqJrwfHVJWcFltu1W8gQTmM+5KPBHr76Z665wbQ+LuGwT/ADhWNU
9+FvoE3JApeG0V2S10KCHGE51iH8pclXIUCJes3VSXbxtrmF5CFUBXp3BX7K4F1w
n7oaFqT2KV9Fskq//yqT7up3JOUHwANGoSbv77GZDQJff0NR/15E8DRZO1GdSIl9
qrkYK++NeafYA3ZVSZRd2brQaWm0xTYK+XHM+8/AiEkOSbWJVZxStT3VyQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFJ0Pr1dMKkbyWe7NE26w6EA1z/OpMB8GA1UdIwQY
MBaAFClbzlseNuqA8GWYLlja7w2Z84Q4MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvS1Z2T1d4NDI2b0R3WlpndVdOcnZEWm56aERnLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hMC8wZTIzYjAtZjU1Ny00NmY1LThjZjMt
NWZjM2E5MzkxYzNkLzEvS1Z2T1d4NDI2b0R3WlpndVdOcnZEWm56aERnLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9hMC8wZTIzYjAtZjU1Ny00NmY1LThjZjMtNWZjM2E5MzkxYzNk
LzEvS1Z2T1d4NDI2b0R3WlpndVdOcnZEWm56aERnLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAUvbaw6wh
c1ojcOa/i/acNFW5M5QhbBPdXXvmy26K7CfkstJrSdiQMcf4yWZ1ave9LC8pHR98
w+0NmaxZLNSsaSLPTEqQjqfZ6zS22duz2c0nOh9wx6vZaYHRsxDxyhsS3uNJMymF
HUO6aI9CEpqIwzAJbV5oyP14mRA3WpjLwu3M9XXacsQuI9ww59XsyU3wv2Yv9aKe
KrX3uCFHdC0aVDM4BXeS2Nu2nAzovCzRVlZtcIzHOjfqqG2X1/RmqGnXG82iUFGE
EZ5MWx4WFxLnOLRtTDyhoYRPstOmYYYTBF/g2Sw2hgdR8hdWuPKgZKVgxriMTGYu
5qA0VKqexmpYyg==
-----END CERTIFICATE-----
Generated at Wed Dec 27 18:44:32 2023 by rpki-client on console.sobornost.net