Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b7/ac5e83-8add-4f56-b73b-829cf0f825e9/1/XzCAHjNozz9wYMjyHMy5ta3b5rc.mft
File:                     XzCAHjNozz9wYMjyHMy5ta3b5rc.mft (raw, json)
Hash identifier:          nc/2dqNsogiHetRdGBvV0d3MDbwjC8Y06S0EB8/r0QU=
Subject key identifier:   E7:50:EB:C5:9A:11:1A:4B:1E:31:74:0B:0E:A3:7C:D9:8C:50:72:B6
Authority key identifier: 5F:30:80:1E:33:68:CF:3F:70:60:C8:F2:1C:CC:B9:B5:AD:DB:E6:B7
Certificate issuer:       /CN=5f30801e3368cf3f7060c8f21cccb9b5addbe6b7
Certificate serial:       01916FE03FFA0D4204F7D506CB782B5698D0
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/XzCAHjNozz9wYMjyHMy5ta3b5rc.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/b7/ac5e83-8add-4f56-b73b-829cf0f825e9/1/XzCAHjNozz9wYMjyHMy5ta3b5rc.mft
Manifest number:          0AC6
Signing time:             Tue 20 Aug 2024 13:00:53 +0000
Manifest this update:     Tue 20 Aug 2024 13:00:53 +0000
Manifest next update:     Wed 21 Aug 2024 13:00:53 +0000
Files and hashes:         1: XzCAHjNozz9wYMjyHMy5ta3b5rc.crl (hash: qoz+6iZvgAYYQF1Jq1iJysnKomLF1a9uCGdRYDVjWgA=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:91:6f:e0:3f:fa:0d:42:04:f7:d5:06:cb:78:2b:56:98:d0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5f30801e3368cf3f7060c8f21cccb9b5addbe6b7
        Validity
            Not Before: Aug 20 13:00:53 2024 GMT
            Not After : Aug 21 13:00:53 2024 GMT
        Subject: CN=e750ebc59a111a4b1e31740b0ea37cd98c5072b6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cc:d6:79:33:d3:6e:05:82:53:a5:50:88:42:ad:
                    ff:2c:aa:86:68:bb:e5:4b:c1:2c:8f:c0:d8:72:9f:
                    1c:46:5e:96:59:4d:2e:10:0b:d3:0b:67:1b:da:35:
                    a8:4d:3c:fb:0a:75:91:7b:5c:45:99:d3:46:ce:72:
                    27:50:49:0f:3a:53:28:ad:33:34:2c:49:ac:f6:09:
                    b7:8d:c8:4a:08:41:a0:c9:a4:bf:54:48:b4:94:cc:
                    19:c6:0e:63:a0:75:6d:36:20:01:b9:dc:f0:f0:12:
                    de:11:23:18:6c:21:19:b3:de:e3:3d:af:e0:15:48:
                    89:28:66:99:d0:c6:f3:12:a8:3a:6c:8b:71:47:57:
                    f1:82:59:e9:4d:65:82:3c:85:f0:56:ad:3b:f5:e1:
                    53:f7:0d:3e:75:56:17:59:fe:10:a8:7f:3b:89:79:
                    90:04:3e:8e:6b:00:73:c2:cf:18:67:cf:ed:9e:cf:
                    a3:d4:83:21:f0:f3:31:bf:7f:30:1a:a0:15:58:52:
                    41:a6:fc:7b:2c:51:31:09:6b:94:fa:23:b1:6a:f7:
                    93:be:f2:99:8c:57:88:75:51:47:1d:12:df:7b:f6:
                    4b:9c:ce:24:5d:c9:e1:8b:f1:99:6c:cf:a2:96:e8:
                    43:3a:45:62:2c:e7:dd:55:0c:bb:34:22:8d:5f:1d:
                    6e:45
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E7:50:EB:C5:9A:11:1A:4B:1E:31:74:0B:0E:A3:7C:D9:8C:50:72:B6
            X509v3 Authority Key Identifier:
                keyid:5F:30:80:1E:33:68:CF:3F:70:60:C8:F2:1C:CC:B9:B5:AD:DB:E6:B7

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/XzCAHjNozz9wYMjyHMy5ta3b5rc.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b7/ac5e83-8add-4f56-b73b-829cf0f825e9/1/XzCAHjNozz9wYMjyHMy5ta3b5rc.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/b7/ac5e83-8add-4f56-b73b-829cf0f825e9/1/XzCAHjNozz9wYMjyHMy5ta3b5rc.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         8e:c3:b0:4c:3a:f7:cc:17:b1:f0:ea:7d:64:34:49:58:97:31:
         62:d0:c4:be:a2:5b:fe:5b:3a:0a:97:7f:d4:20:e6:f7:cf:07:
         2d:41:e4:70:5b:67:ee:02:b7:28:18:cb:b2:ca:27:99:3b:00:
         da:3d:a0:dc:a5:fe:43:7d:11:50:21:a5:d8:bc:02:79:d0:4f:
         9e:0f:8f:a3:c3:a9:31:4b:1d:78:f4:d2:03:f2:2c:cb:37:84:
         5e:83:b4:81:65:d9:5e:e2:8e:ab:dc:54:44:18:f1:87:80:41:
         91:98:a0:53:6d:79:b9:e1:88:26:68:60:a2:4e:9e:2d:3d:97:
         76:0d:d9:0b:be:99:2b:b0:3f:93:53:de:88:28:56:f3:09:3a:
         61:21:fc:ed:c4:aa:44:8e:d0:1a:4d:0b:89:19:f2:fb:a6:cb:
         8c:21:29:e2:32:0f:71:94:03:7e:78:61:76:97:11:0d:6c:de:
         0e:18:d7:a4:0b:93:d9:6e:e7:15:b2:da:f0:47:f9:a5:d8:98:
         ed:35:5c:32:09:52:3c:f3:54:84:7d:7b:de:85:c4:07:a4:8a:
         68:87:61:e8:27:c7:d8:e3:c3:1b:45:ee:37:22:7c:dc:b0:62:
         f6:d9:90:b5:cc:60:c2:d6:4d:c3:17:c2:b1:19:e9:43:13:0b:
         48:f2:78:d0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Aug 21 19:07:31 2024 by rpki-client on console.sobornost.net