Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b2/0301d4-4805-405c-a6e0-a42e1f1f4798/1/qbX_0k0utdXB4c_niwA8S6taLxM.mft
File:                     qbX_0k0utdXB4c_niwA8S6taLxM.mft (raw, json)
Hash identifier:          RSEm+OyAnJth6HAeZFXJ9KNICTTBp+43d/gPjXurC6U=
Subject key identifier:   72:D2:4B:60:ED:37:DA:0F:C0:34:A8:9C:68:28:C2:2C:06:4E:99:A6
Authority key identifier: A9:B5:FF:D2:4D:2E:B5:D5:C1:E1:CF:E7:8B:00:3C:4B:AB:5A:2F:13
Certificate issuer:       /CN=a9b5ffd24d2eb5d5c1e1cfe78b003c4bab5a2f13
Certificate serial:       0193FA0B599996D3B3241F491F208F78170C
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/qbX_0k0utdXB4c_niwA8S6taLxM.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/b2/0301d4-4805-405c-a6e0-a42e1f1f4798/1/qbX_0k0utdXB4c_niwA8S6taLxM.mft
Manifest number:          0B8C
Signing time:             Tue 24 Dec 2024 19:01:07 +0000
Manifest this update:     Tue 24 Dec 2024 19:01:07 +0000
Manifest next update:     Wed 25 Dec 2024 19:01:07 +0000
Files and hashes:         1: nxOt0xkNSt9v0qTkLyAPqs9uGVk.roa (hash: yI7C7IM5KVS250xTqUpI5kH1Z9T0wf9vBuCJWDd68Rw=)
                          2: oggCctqQ9vi-pmpRacJS6Ms3ygY.roa (hash: FXMSqU9MqSqcfOEfwKQB6c3fWkiOs+2U81NmwTONzk4=)
                          3: qbX_0k0utdXB4c_niwA8S6taLxM.crl (hash: 3CHMjxlS1usK5eS0mS0336dTK+P1GIW03mcrDghcUj0=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:93:fa:0b:59:99:96:d3:b3:24:1f:49:1f:20:8f:78:17:0c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=a9b5ffd24d2eb5d5c1e1cfe78b003c4bab5a2f13
        Validity
            Not Before: Dec 24 19:01:07 2024 GMT
            Not After : Dec 25 19:01:07 2024 GMT
        Subject: CN=72d24b60ed37da0fc034a89c6828c22c064e99a6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e8:30:c8:fa:3d:4b:d0:b6:d0:08:1c:a0:95:a8:
                    51:9e:eb:ef:82:38:4b:48:11:37:f5:f1:bb:12:e1:
                    22:48:9f:e3:3a:d7:11:5b:db:a4:80:e3:69:2f:63:
                    83:04:52:14:a8:0d:86:c0:bd:36:23:ad:ee:1d:3d:
                    e6:97:10:ad:fe:d5:ca:5b:da:24:71:7a:4d:e5:a1:
                    27:cc:e6:33:39:22:b6:ad:07:20:b4:1f:b1:89:52:
                    90:d7:78:77:72:d2:38:1a:45:ca:d3:fb:de:1f:74:
                    87:41:59:fe:04:51:6a:b8:47:7a:24:e0:a4:25:7a:
                    d2:40:74:95:30:bb:8c:47:48:3d:b3:66:79:ee:fa:
                    fd:b7:cc:46:c4:79:f0:76:d6:3f:d3:87:5e:0b:62:
                    95:f8:c0:98:7e:2f:32:e8:8c:06:be:5f:fb:70:1e:
                    3e:ac:d6:09:0c:d7:3b:a0:ca:f1:5c:43:60:f4:f2:
                    df:22:43:cc:66:b8:0e:d0:db:4f:84:d8:be:4e:f8:
                    33:a6:b8:29:72:39:7e:14:c5:55:31:d9:95:57:c5:
                    b3:ab:7d:a6:64:73:33:f7:86:c4:2d:24:28:0f:2d:
                    62:53:79:8c:c3:be:5b:2e:50:84:1d:ab:9e:99:ac:
                    0e:e2:c9:86:c3:43:bd:fa:a5:a7:51:d9:78:7c:9c:
                    92:77
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                72:D2:4B:60:ED:37:DA:0F:C0:34:A8:9C:68:28:C2:2C:06:4E:99:A6
            X509v3 Authority Key Identifier:
                keyid:A9:B5:FF:D2:4D:2E:B5:D5:C1:E1:CF:E7:8B:00:3C:4B:AB:5A:2F:13

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qbX_0k0utdXB4c_niwA8S6taLxM.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b2/0301d4-4805-405c-a6e0-a42e1f1f4798/1/qbX_0k0utdXB4c_niwA8S6taLxM.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/b2/0301d4-4805-405c-a6e0-a42e1f1f4798/1/qbX_0k0utdXB4c_niwA8S6taLxM.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         70:83:24:af:8a:3e:ef:87:e7:a9:08:a2:69:e1:34:1d:cb:95:
         84:b1:54:d7:fc:a7:83:f8:b5:e6:ff:f3:e3:49:da:49:78:b0:
         73:72:7c:07:77:24:98:c1:3c:58:61:0a:ab:96:01:55:a8:3f:
         5e:4b:65:74:35:48:fd:38:00:b7:93:f6:42:ea:63:ea:0a:75:
         46:f6:66:36:dd:74:e5:1d:f7:09:77:29:6c:f6:a6:26:8f:a3:
         6a:5d:49:af:bf:38:52:7c:30:4d:d3:7a:44:f3:25:43:a7:b4:
         38:3d:aa:ff:7a:62:e7:01:7f:cc:4b:c2:f3:8e:6e:92:cf:41:
         dc:54:bc:41:2b:d8:72:5c:06:f3:1c:1f:25:c1:a0:eb:a1:d7:
         34:94:ad:c6:0e:20:e4:be:68:52:91:6a:36:34:93:c3:20:b9:
         e3:8d:7e:f0:08:0b:a6:ae:1d:82:4b:4d:e4:40:0d:57:f6:99:
         24:2e:0f:1d:7b:99:c5:bb:0c:30:c8:7f:b5:35:e2:0d:06:ef:
         0d:5e:0a:5a:a1:62:fc:8e:00:da:a7:05:1a:b6:d3:41:e1:25:
         b7:56:21:a5:0c:c8:69:03:ad:bf:10:4b:39:c7:d3:9a:4b:51:
         d3:e1:45:90:37:f1:36:b7:3f:d8:9a:57:ea:dd:56:dc:5c:5e:
         b9:5a:3f:b5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Dec 25 21:29:27 2024 by rpki-client on console.sobornost.net