Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ae/8fd0d6-d340-4d26-b3ce-f172f3f321e2/1/Rnhgs4YTkhwAhdR6NPZqG2S86ws.mft
File:                     Rnhgs4YTkhwAhdR6NPZqG2S86ws.mft (raw, json)
Hash identifier:          dypwKuE3Rj16JVVPmDjz487o+AJpUmWgBFX3Y2P8VRk=
Subject key identifier:   9E:90:22:1C:B6:8A:0F:24:31:DC:D1:09:30:C9:26:B7:31:5E:E8:AD
Authority key identifier: 46:78:60:B3:86:13:92:1C:00:85:D4:7A:34:F6:6A:1B:64:BC:EB:0B
Certificate issuer:       /CN=467860b38613921c0085d47a34f66a1b64bceb0b
Certificate serial:       0191B2D2A4341A0208B9DF58E9ED1F3ECED3
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/Rnhgs4YTkhwAhdR6NPZqG2S86ws.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/ae/8fd0d6-d340-4d26-b3ce-f172f3f321e2/1/Rnhgs4YTkhwAhdR6NPZqG2S86ws.mft
Manifest number:          01D2
Signing time:             Mon 02 Sep 2024 13:00:34 +0000
Manifest this update:     Mon 02 Sep 2024 13:00:34 +0000
Manifest next update:     Tue 03 Sep 2024 13:00:34 +0000
Files and hashes:         1: Rnhgs4YTkhwAhdR6NPZqG2S86ws.crl (hash: AKwWIJXq/pvapVAbNi9opXMOOXJO517ft+QdzrQofzw=)
                          2: hy5NU6gZWNvq-WUfP-2n_4gqllA.roa (hash: virlGjDDAuODmYTvRLv5cs2ZKApHFUy2FVay8YCOEec=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:91:b2:d2:a4:34:1a:02:08:b9:df:58:e9:ed:1f:3e:ce:d3
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=467860b38613921c0085d47a34f66a1b64bceb0b
        Validity
            Not Before: Sep  2 13:00:34 2024 GMT
            Not After : Sep  3 13:00:34 2024 GMT
        Subject: CN=9e90221cb68a0f2431dcd10930c926b7315ee8ad
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b0:ff:ca:ac:8b:73:49:f4:3a:bb:2a:6f:42:15:
                    13:9a:7e:0e:bc:ad:b2:cd:a0:5c:31:b3:a0:6b:0a:
                    3b:e3:6c:27:85:4e:0d:2d:25:cc:a2:7d:c0:eb:d0:
                    fd:f9:7c:da:d3:2b:5a:8f:33:7b:63:53:3f:d1:55:
                    51:49:8a:52:60:7c:05:af:2a:24:98:01:21:8a:ce:
                    2b:3a:05:04:9f:80:de:09:f0:81:f4:8a:7e:12:e6:
                    40:06:df:8e:17:de:31:f8:14:19:33:ca:0b:b9:77:
                    12:2b:27:2c:0e:88:bc:be:a5:a2:52:bc:e6:a6:aa:
                    92:55:b2:5c:b8:db:55:85:0f:69:13:e8:39:a4:16:
                    32:f7:0d:15:db:da:3d:4b:71:00:61:75:ee:3c:93:
                    fd:8d:d6:5d:2f:d4:45:2c:a0:93:8a:00:cb:5e:b9:
                    c9:ff:d9:94:cc:7b:f2:4b:8a:9d:68:98:40:34:eb:
                    a7:25:96:69:2f:85:22:f2:58:1d:36:b8:f9:e5:2b:
                    f1:3e:5e:35:bc:e0:e5:34:d3:32:36:03:b2:56:75:
                    68:03:7a:02:ce:cc:4f:5d:8e:49:7a:bb:40:b9:58:
                    01:89:cc:ad:92:c9:5d:2a:2a:7e:b0:9a:ee:23:aa:
                    65:c7:36:65:d0:ba:df:88:a9:1d:03:a7:f8:ed:f9:
                    91:55
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9E:90:22:1C:B6:8A:0F:24:31:DC:D1:09:30:C9:26:B7:31:5E:E8:AD
            X509v3 Authority Key Identifier:
                keyid:46:78:60:B3:86:13:92:1C:00:85:D4:7A:34:F6:6A:1B:64:BC:EB:0B

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Rnhgs4YTkhwAhdR6NPZqG2S86ws.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ae/8fd0d6-d340-4d26-b3ce-f172f3f321e2/1/Rnhgs4YTkhwAhdR6NPZqG2S86ws.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/ae/8fd0d6-d340-4d26-b3ce-f172f3f321e2/1/Rnhgs4YTkhwAhdR6NPZqG2S86ws.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         97:85:40:73:1a:6a:08:b1:1d:a6:2e:47:30:59:0a:4a:fe:a6:
         32:e7:1b:e1:57:a9:23:0e:42:d0:9b:cf:63:f6:25:0d:fe:eb:
         63:c7:bf:07:6d:83:96:41:35:80:30:55:c0:ae:17:e3:f2:e7:
         ee:82:d5:2f:5f:ad:b2:34:d6:4c:c1:32:2d:c3:b8:52:bb:44:
         b7:a2:c4:b8:c0:95:11:b1:4d:8e:8c:96:74:6c:dd:79:a9:b9:
         66:79:77:ec:0d:62:4a:05:a7:2b:68:0e:9b:ed:41:4c:4f:4c:
         b2:01:70:e7:13:46:e3:ed:66:35:94:b6:39:e9:3a:ad:94:c0:
         e0:46:28:1c:41:05:35:cd:99:e3:fa:46:ee:78:0a:e0:d8:b8:
         77:aa:75:cc:70:a0:69:ba:ea:f9:55:b0:d7:07:fe:19:40:43:
         b5:e8:d9:ab:ed:a1:cd:84:a5:c4:b4:c5:38:93:08:74:de:82:
         e3:2b:44:44:07:3e:06:6e:f3:30:1b:10:d9:bd:0e:70:f3:c6:
         58:14:9d:e4:29:c2:09:34:c0:c5:d5:c6:32:5b:ee:f7:9e:d1:
         f0:cc:b6:f4:9b:c6:89:10:30:58:3b:0d:d1:e2:7d:53:be:fc:
         51:6f:d1:ab:3c:ec:d9:83:e5:41:9a:74:f0:b8:72:8c:99:5f:
         cb:b5:d1:68
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Sep 11 06:09:07 2024 by rpki-client on console.sobornost.net