Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b6/717273-6b83-47c2-a343-c5824e422e21/1/6rZxTXGRgev8zV3N5s1ildd43tk.mft
File:                     6rZxTXGRgev8zV3N5s1ildd43tk.mft (raw, json)
Hash identifier:          glkqWmoMTeDou5IPlZ/5u/dgqOj7ho+OmnWrAcxhn8Y=
Subject key identifier:   88:F2:05:67:9A:69:BA:83:8E:A9:2D:E8:3E:8C:74:EF:79:8E:F4:42
Authority key identifier: EA:B6:71:4D:71:91:81:EB:FC:CD:5D:CD:E6:CD:62:95:D7:78:DE:D9
Certificate issuer:       /CN=eab6714d719181ebfccd5dcde6cd6295d778ded9
Certificate serial:       018B949A0AEB58C84EE9C65F19ADF0029670
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/6rZxTXGRgev8zV3N5s1ildd43tk.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/b6/717273-6b83-47c2-a343-c5824e422e21/1/6rZxTXGRgev8zV3N5s1ildd43tk.mft
Manifest number:          08AE
Signing time:             Fri 03 Nov 2023 09:53:25 +0000
Manifest this update:     Fri 03 Nov 2023 09:53:25 +0000
Manifest next update:     Sat 04 Nov 2023 09:53:25 +0000
Files and hashes:         1: 6rZxTXGRgev8zV3N5s1ildd43tk.crl (hash: fJw3JHexumR1XkCKExEtNEQPNrZoiwa5dC6KhS8B24w=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:8b:94:9a:0a:eb:58:c8:4e:e9:c6:5f:19:ad:f0:02:96:70
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=eab6714d719181ebfccd5dcde6cd6295d778ded9
        Validity
            Not Before: Nov  3 09:53:25 2023 GMT
            Not After : Nov  4 09:53:25 2023 GMT
        Subject: CN=88f205679a69ba838ea92de83e8c74ef798ef442
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cd:ba:f3:8e:b9:94:bb:96:c7:46:47:21:a1:43:
                    08:7c:9b:e2:1f:27:d3:7f:9e:ac:0c:d9:79:a3:73:
                    af:7a:26:06:2a:c7:1f:b6:47:cf:2c:05:20:e8:9e:
                    27:a9:1d:08:5f:42:74:b2:b3:f1:1d:3a:67:32:b3:
                    89:18:53:bc:2f:b2:e5:ed:72:48:17:66:d5:8e:81:
                    8e:66:08:04:fd:db:7d:71:99:d7:83:ab:5a:39:f9:
                    ef:44:8e:1d:f8:29:e9:d3:9a:11:93:f8:00:b9:f6:
                    8f:a2:c5:a8:fe:a0:f6:47:42:27:4a:58:db:d3:a4:
                    f5:62:0c:db:c7:26:e7:0d:8b:f1:d2:9d:34:10:a9:
                    9b:3a:09:56:a6:bd:28:6a:2d:05:6f:d1:e9:71:ec:
                    74:de:ac:76:c5:71:82:1b:54:63:56:e9:3e:31:96:
                    b0:db:ee:a1:b1:87:b5:8f:6a:2d:be:cf:d4:d8:9f:
                    c7:9a:ee:52:d4:ef:52:11:0d:6d:e6:23:f8:ce:19:
                    4e:12:42:af:86:74:c6:c1:f0:b5:02:97:79:ed:75:
                    31:ed:f2:95:92:d2:79:19:20:a7:ca:5e:d2:50:6f:
                    43:a4:82:d4:20:e7:74:e5:7d:02:47:84:7e:2f:6c:
                    8c:aa:5c:bd:07:bb:dd:f9:07:2b:b5:b1:b3:05:63:
                    4f:0b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                88:F2:05:67:9A:69:BA:83:8E:A9:2D:E8:3E:8C:74:EF:79:8E:F4:42
            X509v3 Authority Key Identifier:
                keyid:EA:B6:71:4D:71:91:81:EB:FC:CD:5D:CD:E6:CD:62:95:D7:78:DE:D9

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/6rZxTXGRgev8zV3N5s1ildd43tk.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b6/717273-6b83-47c2-a343-c5824e422e21/1/6rZxTXGRgev8zV3N5s1ildd43tk.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/b6/717273-6b83-47c2-a343-c5824e422e21/1/6rZxTXGRgev8zV3N5s1ildd43tk.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         1d:8a:30:6b:5c:01:01:e5:bb:d6:3b:57:ad:75:74:b9:fb:4c:
         39:9b:66:23:eb:49:0d:36:bf:0f:bf:1b:a8:e9:0d:07:e8:c4:
         f9:b8:10:a0:ae:7c:6f:d5:59:50:77:13:70:c6:98:6e:d3:10:
         8b:2c:c1:a4:9c:43:e7:92:1f:83:5c:21:46:fc:45:d2:16:38:
         e2:44:35:86:cc:e5:95:25:ca:16:e5:dd:a5:59:40:5b:ed:9b:
         d8:cf:a7:a1:a0:0c:83:b2:4d:ee:08:09:3b:35:17:b9:3a:5f:
         79:6c:d8:6a:1c:79:cc:c5:53:b5:9e:28:aa:54:15:9f:01:af:
         16:c6:ae:c9:2a:bc:e4:25:15:5f:77:bf:d6:09:68:2b:c1:f7:
         e9:37:29:23:7a:3e:b2:f2:c5:2d:35:e6:a0:53:e2:9e:25:71:
         47:b2:45:33:98:ee:dd:70:e8:c2:64:3b:5f:8c:a8:ef:06:7d:
         76:29:ca:1d:73:cd:a4:00:81:64:6b:81:a6:f3:86:9b:0e:9b:
         4d:89:f8:f2:b3:7c:2e:fb:c8:41:94:92:6a:4a:b6:dd:e1:45:
         24:b5:8f:db:b9:8f:8d:c9:a4:3d:89:f6:e8:da:d8:4b:cc:98:
         33:56:68:3b:aa:3d:fe:8f:7f:95:c9:43:9f:19:3a:b9:10:54:
         f1:4d:c9:38
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAYuUmgrrWMhO6cZfGa3wApZwMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGVhYjY3MTRkNzE5MTgxZWJmY2NkNWRjZGU2Y2Q2Mjk1ZDc3
OGRlZDkwHhcNMjMxMTAzMDk1MzI1WhcNMjMxMTA0MDk1MzI1WjAzMTEwLwYDVQQD
Eyg4OGYyMDU2NzlhNjliYTgzOGVhOTJkZTgzZThjNzRlZjc5OGVmNDQyMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAzbrzjrmUu5bHRkchoUMIfJviHyfT
f56sDNl5o3OveiYGKscftkfPLAUg6J4nqR0IX0J0srPxHTpnMrOJGFO8L7Ll7XJI
F2bVjoGOZggE/dt9cZnXg6taOfnvRI4d+Cnp05oRk/gAufaPosWo/qD2R0InSljb
06T1YgzbxybnDYvx0p00EKmbOglWpr0oai0Fb9Hpcex03qx2xXGCG1RjVuk+MZaw
2+6hsYe1j2otvs/U2J/Hmu5S1O9SEQ1t5iP4zhlOEkKvhnTGwfC1Apd57XUx7fKV
ktJ5GSCnyl7SUG9DpILUIOd05X0CR4R+L2yMqly9B7vd+QcrtbGzBWNPCwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFIjyBWeaabqDjqkt6D6MdO95jvRCMB8GA1UdIwQY
MBaAFOq2cU1xkYHr/M1dzebNYpXXeN7ZMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvNnJaeFRYR1JnZXY4elYzTjVzMWlsZGQ0M3RrLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iNi83MTcyNzMtNmI4My00N2MyLWEzNDMt
YzU4MjRlNDIyZTIxLzEvNnJaeFRYR1JnZXY4elYzTjVzMWlsZGQ0M3RrLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9iNi83MTcyNzMtNmI4My00N2MyLWEzNDMtYzU4MjRlNDIyZTIx
LzEvNnJaeFRYR1JnZXY4elYzTjVzMWlsZGQ0M3RrLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAHYowa1wB
AeW71jtXrXV0uftMOZtmI+tJDTa/D78bqOkNB+jE+bgQoK58b9VZUHcTcMaYbtMQ
iyzBpJxD55Ifg1whRvxF0hY44kQ1hszllSXKFuXdpVlAW+2b2M+noaAMg7JN7ggJ
OzUXuTpfeWzYahx5zMVTtZ4oqlQVnwGvFsauySq85CUVX3e/1gloK8H36TcpI3o+
svLFLTXmoFPiniVxR7JFM5ju3XDowmQ7X4yo7wZ9dinKHXPNpACBZGuBpvOGmw6b
TYn48rN8LvvIQZSSakq23eFFJLWP27mPjcmkPYn26NrYS8yYM1ZoO6o9/o9/lclD
nxk6uRBU8U3JOA==
-----END CERTIFICATE-----
Generated at Wed Dec 27 18:42:13 2023 by rpki-client on console.sobornost.net