Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a6/209f60-d57a-4ecb-a8c6-d2c1ddae69b1/1/eL6wfollqs5RD0Q1MkLJzE1Rojc.mft
File:                     eL6wfollqs5RD0Q1MkLJzE1Rojc.mft (raw, json)
Hash identifier:          e9Ak7XNRSGH1ccQlGwJnRPCTNyFVn+e1GUuyvBOASp4=
Subject key identifier:   2E:EF:82:40:24:69:E9:B9:49:34:E0:14:65:87:E5:69:88:F9:44:B7
Authority key identifier: 78:BE:B0:7E:89:65:AA:CE:51:0F:44:35:32:42:C9:CC:4D:51:A2:37
Certificate issuer:       /CN=78beb07e8965aace510f44353242c9cc4d51a237
Certificate serial:       018CED73E188AD9F4D31E8DA9592F7548E40
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/eL6wfollqs5RD0Q1MkLJzE1Rojc.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/a6/209f60-d57a-4ecb-a8c6-d2c1ddae69b1/1/eL6wfollqs5RD0Q1MkLJzE1Rojc.mft
Manifest number:          0812
Signing time:             Tue 09 Jan 2024 09:00:43 +0000
Manifest this update:     Tue 09 Jan 2024 09:00:43 +0000
Manifest next update:     Wed 10 Jan 2024 09:00:43 +0000
Files and hashes:         1: QXXFIYAWsMHr2-QgbZmv9pfTOUM.roa (hash: xxg00AZaGngjsUMViKDuChjgFK+r+O7cgmqCYrgiRKE=)
                          2: eL6wfollqs5RD0Q1MkLJzE1Rojc.crl (hash: FQFf7bXxsd3wAfJp4GhRvgv56rW9QEzeX5LowgAda3M=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:8c:ed:73:e1:88:ad:9f:4d:31:e8:da:95:92:f7:54:8e:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=78beb07e8965aace510f44353242c9cc4d51a237
        Validity
            Not Before: Jan  9 09:00:43 2024 GMT
            Not After : Jan 10 09:00:43 2024 GMT
        Subject: CN=2eef82402469e9b94934e0146587e56988f944b7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c4:52:5a:2c:4d:9a:26:7f:d1:8e:3f:5b:0d:a7:
                    54:db:84:63:c0:d0:82:27:49:67:35:67:61:71:32:
                    a0:4f:75:e0:b3:3f:d0:91:7c:0f:f1:d7:6e:bb:64:
                    39:1b:1e:de:fa:05:43:bd:78:b2:41:83:ed:9e:80:
                    10:b8:70:bc:12:a6:19:35:b9:9f:0e:e4:c8:25:ba:
                    86:38:9b:f8:11:58:66:da:e7:89:0a:44:44:fe:e1:
                    56:09:b6:ba:53:aa:bc:5b:71:fa:42:af:ea:8f:35:
                    31:d6:be:51:44:b2:e5:ad:dd:14:8d:aa:f5:89:c7:
                    22:2d:34:74:8f:11:d5:01:89:c5:a2:2e:cc:90:73:
                    7a:e3:98:95:d7:90:89:a3:f3:50:2c:10:c3:54:02:
                    5c:2a:4d:95:a0:9a:96:ca:47:5a:6f:ec:fa:9d:b6:
                    e8:10:a9:3a:1c:45:4e:f4:aa:34:1b:73:68:fb:50:
                    e3:23:ee:22:62:e1:f4:a5:97:cd:bc:3e:21:f6:27:
                    f9:a8:95:d4:50:79:3a:29:f4:b6:60:af:1a:b9:ce:
                    14:bd:f9:4a:48:a3:50:bf:d3:83:43:57:e8:e5:7d:
                    80:58:8c:5e:0f:08:e1:cb:1b:98:5a:58:95:d6:b3:
                    76:57:df:b8:1e:9a:2c:37:19:7e:69:f7:a9:51:5c:
                    9b:09
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2E:EF:82:40:24:69:E9:B9:49:34:E0:14:65:87:E5:69:88:F9:44:B7
            X509v3 Authority Key Identifier:
                keyid:78:BE:B0:7E:89:65:AA:CE:51:0F:44:35:32:42:C9:CC:4D:51:A2:37

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/eL6wfollqs5RD0Q1MkLJzE1Rojc.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a6/209f60-d57a-4ecb-a8c6-d2c1ddae69b1/1/eL6wfollqs5RD0Q1MkLJzE1Rojc.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/a6/209f60-d57a-4ecb-a8c6-d2c1ddae69b1/1/eL6wfollqs5RD0Q1MkLJzE1Rojc.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         00:88:6c:69:66:02:63:4c:89:37:01:7a:30:f1:64:4f:5b:a1:
         df:9c:c6:c2:e6:22:fd:da:48:b4:f6:9b:c0:4e:c2:09:b7:8c:
         10:18:6f:f6:da:98:25:b7:b0:17:3a:1f:75:71:52:dc:88:39:
         1f:ce:23:21:75:82:b0:15:26:bc:41:c3:c6:45:d6:d7:3d:f9:
         0f:85:48:c1:cd:9e:7b:55:5b:a4:3e:77:8a:26:4f:28:54:65:
         4b:c9:e1:d4:99:a9:47:14:5a:fa:e2:7c:ab:7e:43:d7:07:43:
         6a:9b:ab:79:5b:98:e3:75:81:9f:7e:7a:9c:d8:09:bb:35:e9:
         16:0b:32:56:c3:01:de:30:b7:29:05:60:8f:ec:68:52:24:39:
         95:e9:b2:ba:2d:25:2d:a9:7f:16:72:20:87:1d:05:00:e6:1d:
         0b:cf:8e:a4:d8:41:ad:cd:48:3f:9d:85:e4:f1:6b:d2:69:66:
         14:1b:f4:fb:06:aa:08:5b:0b:e1:22:9e:aa:53:6c:d3:80:d7:
         60:91:f6:e0:00:1a:6e:9e:d8:5d:9f:44:81:9f:b2:8d:2f:87:
         21:af:12:97:90:c7:88:6b:ba:c0:6b:83:45:25:05:8b:af:5b:
         3a:e5:4a:b7:42:46:74:b2:f3:98:e8:6e:ee:31:7b:0c:1f:15:
         69:59:94:a0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Feb 27 01:00:30 2024 by rpki-client on console.sobornost.net