Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a3/baa5f0-4c59-4ce1-a29d-d97e6c16f370/1/e3GzUs9psfJyplQhurrIElGJ0-Q.mft
File:                     e3GzUs9psfJyplQhurrIElGJ0-Q.mft (raw, json)
Hash identifier:          pTbBA4UdbmnZutD7Hq5YbFDLok0IiomMQsVgh09McnU=
Subject key identifier:   6A:8E:75:D5:EC:07:CC:3B:F5:75:F4:4F:FC:89:C5:CC:0A:6D:6F:C8
Authority key identifier: 7B:71:B3:52:CF:69:B1:F2:72:A6:54:21:BA:BA:C8:12:51:89:D3:E4
Certificate issuer:       /CN=7b71b352cf69b1f272a65421babac8125189d3e4
Certificate serial:       018F96BC16D03BFB62FE9F684E3F9C566287
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/e3GzUs9psfJyplQhurrIElGJ0-Q.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/a3/baa5f0-4c59-4ce1-a29d-d97e6c16f370/1/e3GzUs9psfJyplQhurrIElGJ0-Q.mft
Manifest number:          04DE
Signing time:             Mon 20 May 2024 16:01:00 +0000
Manifest this update:     Mon 20 May 2024 16:01:00 +0000
Manifest next update:     Tue 21 May 2024 16:01:00 +0000
Files and hashes:         1: e3GzUs9psfJyplQhurrIElGJ0-Q.crl (hash: QMw+2+EKORaACXQa02L1q2I7/7NZkgO7UqcSt6c/XY8=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:8f:96:bc:16:d0:3b:fb:62:fe:9f:68:4e:3f:9c:56:62:87
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7b71b352cf69b1f272a65421babac8125189d3e4
        Validity
            Not Before: May 20 16:01:00 2024 GMT
            Not After : May 21 16:01:00 2024 GMT
        Subject: CN=6a8e75d5ec07cc3bf575f44ffc89c5cc0a6d6fc8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:af:f1:6c:6d:0b:4e:fc:d4:4c:86:fe:ff:5f:6e:
                    ab:9a:27:b2:67:79:1b:52:db:7a:a0:d8:3d:54:f3:
                    2d:72:31:47:4a:6f:6c:8d:4f:04:75:e3:f9:c7:7a:
                    89:b0:d6:1d:73:09:67:60:53:40:af:dc:cb:29:01:
                    d3:53:82:67:7d:e4:a4:0f:4e:99:67:2d:3f:36:67:
                    31:f2:66:78:82:7e:16:21:36:2c:2a:a7:b2:23:df:
                    8c:79:72:70:b7:3f:de:17:1f:18:95:2b:5e:25:9f:
                    6c:7a:eb:e9:b2:f5:94:cc:52:35:95:e3:97:80:29:
                    3a:34:ca:21:26:72:09:ca:78:58:5f:5d:58:a4:78:
                    ac:58:c5:bf:98:54:ae:d5:65:7b:bc:61:ea:4b:10:
                    4f:cb:ff:d6:21:d7:66:36:e3:8a:16:10:31:4a:8c:
                    bb:7a:a9:7c:08:93:fe:b9:b0:2a:57:56:45:24:5f:
                    ab:60:80:27:f7:c2:d9:24:67:3c:78:16:06:0e:29:
                    46:25:96:1d:b4:33:17:83:6b:70:7c:94:97:94:f5:
                    7f:25:5e:50:b1:32:f0:83:fa:f1:3f:87:23:bb:64:
                    9c:2a:2d:e0:c1:7a:a8:25:a8:bc:22:10:f0:f1:16:
                    0e:02:9c:d1:b5:c8:23:b6:4e:e4:15:21:e1:34:05:
                    64:e1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6A:8E:75:D5:EC:07:CC:3B:F5:75:F4:4F:FC:89:C5:CC:0A:6D:6F:C8
            X509v3 Authority Key Identifier:
                keyid:7B:71:B3:52:CF:69:B1:F2:72:A6:54:21:BA:BA:C8:12:51:89:D3:E4

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/e3GzUs9psfJyplQhurrIElGJ0-Q.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a3/baa5f0-4c59-4ce1-a29d-d97e6c16f370/1/e3GzUs9psfJyplQhurrIElGJ0-Q.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/a3/baa5f0-4c59-4ce1-a29d-d97e6c16f370/1/e3GzUs9psfJyplQhurrIElGJ0-Q.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         36:d1:49:06:8e:ea:73:a5:32:38:1e:98:c4:0b:35:08:14:2a:
         c8:bf:a5:0b:58:a9:c7:37:bd:1f:f9:80:a9:cb:21:b7:02:92:
         85:12:09:61:ca:1c:b5:ab:ab:40:f7:b6:ec:0a:89:bb:f1:4f:
         8a:32:95:b0:36:c5:49:c5:b2:e8:72:56:6f:67:69:ac:d7:11:
         9e:c1:0f:b7:10:ee:37:f6:f2:2e:63:23:21:64:2a:9b:a4:ae:
         31:a6:34:a2:16:e2:62:56:10:1a:68:c0:75:ad:32:ed:24:19:
         10:15:46:92:07:39:12:b7:fe:98:fd:f3:79:55:15:8b:c9:d7:
         60:2b:0c:f7:39:0d:16:9d:90:ce:5d:25:6d:ed:3d:6d:d0:f1:
         3a:6f:ec:4a:f8:7a:ed:6b:63:a0:57:85:e1:32:a6:6a:4e:6f:
         5a:93:c3:3a:78:39:e4:e8:1e:f8:e8:76:ea:bf:58:7c:6c:de:
         38:03:0a:4d:28:22:92:33:9e:fa:40:7d:b5:7c:b7:2a:0d:cb:
         8a:92:6e:fb:e6:fa:e7:70:2e:b7:4d:11:f7:18:58:4d:22:4e:
         e8:96:86:15:8a:dd:c4:53:89:5d:e9:d1:84:11:c1:7a:dc:db:
         b7:07:e8:ec:c3:dc:fd:cb:60:20:55:2d:34:34:cd:ae:e5:cd:
         e2:44:47:62
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue May 21 18:06:46 2024 by rpki-client on console.sobornost.net