Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ad/4eef24-29c1-4d16-b264-55fc997b9f7c/1/ra_ShN_sz3RcsubROR4mCxOjT-A.mft
File:                     ra_ShN_sz3RcsubROR4mCxOjT-A.mft (raw, json)
Hash identifier:          fM4MrO2RcIApvMd2nf9nd4Qa8iVdPYG9SPVwYuGze3o=
Subject key identifier:   67:F9:82:FD:D5:33:61:89:CD:F7:C3:FB:B7:9C:86:DE:F0:E1:73:A9
Authority key identifier: AD:AF:D2:84:DF:EC:CF:74:5C:B2:E6:D1:39:1E:26:0B:13:A3:4F:E0
Certificate issuer:       /CN=adafd284dfeccf745cb2e6d1391e260b13a34fe0
Certificate serial:       018B8FB12BA6593272365B6C3BD9388E9535
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/ra_ShN_sz3RcsubROR4mCxOjT-A.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/ad/4eef24-29c1-4d16-b264-55fc997b9f7c/1/ra_ShN_sz3RcsubROR4mCxOjT-A.mft
Manifest number:          0854
Signing time:             Thu 02 Nov 2023 11:00:34 +0000
Manifest this update:     Thu 02 Nov 2023 11:00:34 +0000
Manifest next update:     Fri 03 Nov 2023 11:00:34 +0000
Files and hashes:         1: 09AgRErKmBgtYyFNHL0dN5eaZKk.roa (hash: 2MyiyLHehHdWVhtUDWsVQ8qHn1KWXPPz/L57slhuTaI=)
                          2: ra_ShN_sz3RcsubROR4mCxOjT-A.crl (hash: KRwPX13oWx4qtAvPn4MNSoj9Vax3XyN75s8TgWU55to=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:8b:8f:b1:2b:a6:59:32:72:36:5b:6c:3b:d9:38:8e:95:35
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=adafd284dfeccf745cb2e6d1391e260b13a34fe0
        Validity
            Not Before: Nov  2 11:00:34 2023 GMT
            Not After : Nov  3 11:00:34 2023 GMT
        Subject: CN=67f982fdd5336189cdf7c3fbb79c86def0e173a9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:83:33:65:b5:14:ba:7a:b5:19:9b:33:0d:21:7d:
                    fd:01:f1:2b:41:74:2d:7b:04:57:29:16:04:34:7d:
                    9a:09:e3:12:0f:e2:9b:0a:0a:eb:04:36:47:9d:e3:
                    e3:d0:ae:72:cf:28:e3:af:34:a8:63:96:b7:d5:4b:
                    d1:16:1b:7c:d8:41:09:55:01:ca:80:33:d8:65:63:
                    0a:e9:a4:8c:e5:1c:3e:ea:f9:3f:c7:9a:50:50:3f:
                    65:87:e1:d2:ca:eb:eb:83:34:93:97:3c:f7:cd:14:
                    e6:ab:97:16:cb:ad:95:a4:d4:c9:bb:ec:37:44:3b:
                    14:92:7b:b1:82:8f:b2:84:d5:64:f9:5d:a6:b9:ed:
                    61:d3:13:1b:dc:7a:5c:14:02:d8:19:4a:db:22:5b:
                    5b:a7:06:ab:47:45:6c:80:02:e6:d9:42:e5:e9:3f:
                    c8:42:cb:77:bc:f5:6f:47:91:57:8f:ba:2d:e1:96:
                    87:29:73:e1:b1:85:dd:f3:78:44:54:93:da:32:be:
                    08:fc:e8:49:22:f5:ef:f8:87:be:20:61:d8:f4:65:
                    48:45:7c:15:cb:27:75:07:9c:c6:ac:84:fe:b0:18:
                    89:92:d2:a3:43:18:d4:51:98:53:47:d8:6b:a8:dc:
                    23:61:c0:90:55:0e:96:a2:7d:c3:1a:09:27:cd:4a:
                    9f:bf
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                67:F9:82:FD:D5:33:61:89:CD:F7:C3:FB:B7:9C:86:DE:F0:E1:73:A9
            X509v3 Authority Key Identifier:
                keyid:AD:AF:D2:84:DF:EC:CF:74:5C:B2:E6:D1:39:1E:26:0B:13:A3:4F:E0

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ra_ShN_sz3RcsubROR4mCxOjT-A.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ad/4eef24-29c1-4d16-b264-55fc997b9f7c/1/ra_ShN_sz3RcsubROR4mCxOjT-A.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/ad/4eef24-29c1-4d16-b264-55fc997b9f7c/1/ra_ShN_sz3RcsubROR4mCxOjT-A.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         74:a5:96:52:c8:90:7f:a0:f6:90:89:1a:83:57:e7:ef:b1:07:
         30:08:a2:64:65:35:14:35:58:00:29:24:99:3e:87:60:8d:3d:
         9e:5a:db:b5:1e:50:29:dd:fc:4c:58:91:7e:cd:93:0d:bb:d1:
         f0:34:af:f3:8d:0d:f0:f5:ea:d2:1c:e1:f7:37:93:e1:1c:bf:
         b3:29:8b:4f:df:73:a7:b0:3f:fc:8f:ec:db:b4:06:25:14:b7:
         fb:2c:71:34:90:e8:49:f8:d3:e4:9d:4f:70:96:c9:9e:59:10:
         65:04:1d:a5:82:56:66:f7:b6:50:32:be:94:52:f9:48:46:6b:
         77:9c:79:56:62:52:d0:90:bd:32:23:e1:a8:77:f4:a5:ec:a2:
         3b:a5:32:8f:02:2c:c9:c7:6a:b9:5e:58:1b:33:03:92:f9:0b:
         95:a6:62:1a:87:80:11:cd:ef:48:7e:b3:7f:71:8e:d1:5e:da:
         11:43:60:4b:4d:a1:8e:9f:46:14:e0:eb:d7:ce:62:f7:f9:b1:
         f4:48:f4:92:d8:a2:3e:c7:61:59:ad:b7:88:b0:2f:1c:d0:c2:
         64:fc:74:99:25:45:ee:89:a0:2a:d7:5f:b9:7c:74:87:6f:ae:
         b9:2a:55:94:3a:e6:01:88:a2:47:46:c8:92:0a:41:44:db:84:
         42:30:a3:f1
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAYuPsSumWTJyNltsO9k4jpU1MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGFkYWZkMjg0ZGZlY2NmNzQ1Y2IyZTZkMTM5MWUyNjBiMTNh
MzRmZTAwHhcNMjMxMTAyMTEwMDM0WhcNMjMxMTAzMTEwMDM0WjAzMTEwLwYDVQQD
Eyg2N2Y5ODJmZGQ1MzM2MTg5Y2RmN2MzZmJiNzljODZkZWYwZTE3M2E5MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAgzNltRS6erUZmzMNIX39AfErQXQt
ewRXKRYENH2aCeMSD+KbCgrrBDZHnePj0K5yzyjjrzSoY5a31UvRFht82EEJVQHK
gDPYZWMK6aSM5Rw+6vk/x5pQUD9lh+HSyuvrgzSTlzz3zRTmq5cWy62VpNTJu+w3
RDsUknuxgo+yhNVk+V2mue1h0xMb3HpcFALYGUrbIltbpwarR0VsgALm2ULl6T/I
Qst3vPVvR5FXj7ot4ZaHKXPhsYXd83hEVJPaMr4I/OhJIvXv+Ie+IGHY9GVIRXwV
yyd1B5zGrIT+sBiJktKjQxjUUZhTR9hrqNwjYcCQVQ6Won3DGgknzUqfvwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFGf5gv3VM2GJzffD+7echt7w4XOpMB8GA1UdIwQY
MBaAFK2v0oTf7M90XLLm0TkeJgsTo0/gMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvcmFfU2hOX3N6M1Jjc3ViUk9SNG1DeE9qVC1BLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hZC80ZWVmMjQtMjljMS00ZDE2LWIyNjQt
NTVmYzk5N2I5ZjdjLzEvcmFfU2hOX3N6M1Jjc3ViUk9SNG1DeE9qVC1BLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9hZC80ZWVmMjQtMjljMS00ZDE2LWIyNjQtNTVmYzk5N2I5Zjdj
LzEvcmFfU2hOX3N6M1Jjc3ViUk9SNG1DeE9qVC1BLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAdKWWUsiQ
f6D2kIkag1fn77EHMAiiZGU1FDVYACkkmT6HYI09nlrbtR5QKd38TFiRfs2TDbvR
8DSv840N8PXq0hzh9zeT4Ry/symLT99zp7A//I/s27QGJRS3+yxxNJDoSfjT5J1P
cJbJnlkQZQQdpYJWZve2UDK+lFL5SEZrd5x5VmJS0JC9MiPhqHf0peyiO6UyjwIs
ycdquV5YGzMDkvkLlaZiGoeAEc3vSH6zf3GO0V7aEUNgS02hjp9GFODr185i9/mx
9Ej0ktiiPsdhWa23iLAvHNDCZPx0mSVF7omgKtdfuXx0h2+uuSpVlDrmAYiiR0bI
kgpBRNuEQjCj8Q==
-----END CERTIFICATE-----
Generated at Wed Dec 27 18:42:16 2023 by rpki-client on console.sobornost.net