Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/bd/6e7b9d-dbdf-42dc-a79e-e0f1a82bf660/1/ikSqR5L1Si-fmMNME9S8fPyaVpE.mft
File:                     ikSqR5L1Si-fmMNME9S8fPyaVpE.mft (raw, json)
Hash identifier:          aiQupf29xvro8/uSCW5kxF7eCmX4+hvGvwW7fHy0q9o=
Subject key identifier:   D4:42:DD:FD:EF:00:C4:60:A3:19:77:62:A0:14:5A:A0:9D:A1:F6:5A
Authority key identifier: 8A:44:AA:47:92:F5:4A:2F:9F:98:C3:4C:13:D4:BC:7C:FC:9A:56:91
Certificate issuer:       /CN=8a44aa4792f54a2f9f98c34c13d4bc7cfc9a5691
Certificate serial:       0191B379EBB786EF5FF05E0DDB3433A94955
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/ikSqR5L1Si-fmMNME9S8fPyaVpE.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/bd/6e7b9d-dbdf-42dc-a79e-e0f1a82bf660/1/ikSqR5L1Si-fmMNME9S8fPyaVpE.mft
Manifest number:          03E6
Signing time:             Mon 02 Sep 2024 16:03:17 +0000
Manifest this update:     Mon 02 Sep 2024 16:03:17 +0000
Manifest next update:     Tue 03 Sep 2024 16:03:17 +0000
Files and hashes:         1: ikSqR5L1Si-fmMNME9S8fPyaVpE.crl (hash: vlls5lRgy0ojKCxXUDMag0VmzByCgh32x9lre/7ecZ8=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:91:b3:79:eb:b7:86:ef:5f:f0:5e:0d:db:34:33:a9:49:55
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8a44aa4792f54a2f9f98c34c13d4bc7cfc9a5691
        Validity
            Not Before: Sep  2 16:03:17 2024 GMT
            Not After : Sep  3 16:03:17 2024 GMT
        Subject: CN=d442ddfdef00c460a3197762a0145aa09da1f65a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c8:b1:e9:c6:f7:59:0e:d0:a1:ff:ac:d5:7f:a0:
                    d4:0e:0d:7f:b8:dc:36:53:04:f4:6a:66:a2:38:c2:
                    df:e2:be:93:9f:9d:a9:d1:ae:51:78:ff:3f:14:22:
                    20:16:29:5b:38:3a:db:10:e8:cb:82:96:e5:44:02:
                    5e:cb:df:b2:24:a6:c4:27:72:25:4b:50:d0:5c:35:
                    c1:32:c0:45:dd:08:d8:5b:b4:25:3e:2b:af:65:c5:
                    b5:a1:c1:ae:d8:ec:a5:3f:af:f7:7c:9a:10:fc:ed:
                    f6:f7:a7:c5:c9:b6:79:67:1b:1d:ba:35:c6:28:03:
                    93:c8:f1:25:0b:cc:93:f1:4d:d4:0f:38:e7:1e:a8:
                    3c:6f:f5:0a:4b:1f:91:d6:aa:42:96:83:a4:b1:18:
                    c1:fe:e0:b5:2e:22:14:ce:32:3b:c5:ca:a5:bf:3e:
                    3d:88:3d:eb:27:5a:91:91:a2:b7:8d:1c:1f:08:b8:
                    3e:02:72:73:32:e2:7f:dd:ad:0d:5f:52:11:67:99:
                    a5:01:d2:14:37:31:b9:77:52:f9:b1:a4:03:78:dc:
                    11:77:fc:9f:e8:e7:f3:3e:01:47:de:04:2d:0c:54:
                    0f:bf:aa:79:c2:46:ea:d7:cf:aa:06:46:37:68:94:
                    fd:f8:5b:1e:ea:f2:76:e0:62:bf:48:51:63:69:46:
                    d6:8b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D4:42:DD:FD:EF:00:C4:60:A3:19:77:62:A0:14:5A:A0:9D:A1:F6:5A
            X509v3 Authority Key Identifier:
                keyid:8A:44:AA:47:92:F5:4A:2F:9F:98:C3:4C:13:D4:BC:7C:FC:9A:56:91

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ikSqR5L1Si-fmMNME9S8fPyaVpE.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/bd/6e7b9d-dbdf-42dc-a79e-e0f1a82bf660/1/ikSqR5L1Si-fmMNME9S8fPyaVpE.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/bd/6e7b9d-dbdf-42dc-a79e-e0f1a82bf660/1/ikSqR5L1Si-fmMNME9S8fPyaVpE.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         8f:df:4c:bd:ed:d9:3f:fd:44:62:8c:d3:42:90:e5:9f:87:22:
         96:e8:0c:45:81:cb:9a:f3:54:d3:82:ba:c2:43:22:ea:8f:f4:
         52:53:4c:76:d2:f7:b0:77:51:4d:c1:fb:b3:f5:54:c0:5f:9d:
         99:22:c9:87:7e:ed:97:38:28:51:6f:80:90:9f:aa:2f:d3:68:
         14:64:ee:fc:45:79:f6:9c:6b:a2:b4:0a:81:cc:94:27:6c:e3:
         64:13:ab:1b:73:5d:fd:6d:1d:6f:f4:fb:4f:b4:f3:65:2b:41:
         13:d6:cb:64:71:1f:56:ba:e7:ee:af:e8:eb:89:c2:8e:85:d0:
         1b:09:56:03:3e:4e:3b:30:91:38:e6:01:e9:6a:a7:86:c9:03:
         f0:c0:c1:aa:e9:0f:b6:d4:79:50:36:af:00:9d:1c:1b:0a:cc:
         af:60:c8:97:3f:df:85:7e:d9:b5:17:00:f0:fd:ef:58:f2:2b:
         69:46:53:ad:dd:1e:6a:34:dd:ea:53:d1:a8:05:2b:5b:b7:03:
         42:86:50:ae:88:6a:19:25:f2:17:cf:71:62:ab:05:e4:5a:df:
         f0:fb:53:03:40:16:ed:2e:79:1d:40:d0:bd:26:81:ff:20:19:
         5e:fd:07:fa:6c:4d:e5:f9:d8:ae:96:9b:0d:6e:41:e8:a7:e2:
         19:3f:2f:06
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZGzeeu3hu9f8F4N2zQzqUlVMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDhhNDRhYTQ3OTJmNTRhMmY5Zjk4YzM0YzEzZDRiYzdjZmM5
YTU2OTEwHhcNMjQwOTAyMTYwMzE3WhcNMjQwOTAzMTYwMzE3WjAzMTEwLwYDVQQD
EyhkNDQyZGRmZGVmMDBjNDYwYTMxOTc3NjJhMDE0NWFhMDlkYTFmNjVhMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAyLHpxvdZDtCh/6zVf6DUDg1/uNw2
UwT0amaiOMLf4r6Tn52p0a5ReP8/FCIgFilbODrbEOjLgpblRAJey9+yJKbEJ3Il
S1DQXDXBMsBF3QjYW7QlPiuvZcW1ocGu2OylP6/3fJoQ/O3296fFybZ5ZxsdujXG
KAOTyPElC8yT8U3UDzjnHqg8b/UKSx+R1qpCloOksRjB/uC1LiIUzjI7xcqlvz49
iD3rJ1qRkaK3jRwfCLg+AnJzMuJ/3a0NX1IRZ5mlAdIUNzG5d1L5saQDeNwRd/yf
6OfzPgFH3gQtDFQPv6p5wkbq18+qBkY3aJT9+Fse6vJ24GK/SFFjaUbWiwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFNRC3f3vAMRgoxl3YqAUWqCdofZaMB8GA1UdIwQY
MBaAFIpEqkeS9Uovn5jDTBPUvHz8mlaRMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvaWtTcVI1TDFTaS1mbU1OTUU5UzhmUHlhVnBFLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iZC82ZTdiOWQtZGJkZi00MmRjLWE3OWUt
ZTBmMWE4MmJmNjYwLzEvaWtTcVI1TDFTaS1mbU1OTUU5UzhmUHlhVnBFLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9iZC82ZTdiOWQtZGJkZi00MmRjLWE3OWUtZTBmMWE4MmJmNjYw
LzEvaWtTcVI1TDFTaS1mbU1OTUU5UzhmUHlhVnBFLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAj99Mve3Z
P/1EYozTQpDln4cilugMRYHLmvNU04K6wkMi6o/0UlNMdtL3sHdRTcH7s/VUwF+d
mSLJh37tlzgoUW+AkJ+qL9NoFGTu/EV59pxrorQKgcyUJ2zjZBOrG3Nd/W0db/T7
T7TzZStBE9bLZHEfVrrn7q/o64nCjoXQGwlWAz5OOzCROOYB6WqnhskD8MDBqukP
ttR5UDavAJ0cGwrMr2DIlz/fhX7ZtRcA8P3vWPIraUZTrd0eajTd6lPRqAUrW7cD
QoZQrohqGSXyF89xYqsF5Frf8PtTA0AW7S55HUDQvSaB/yAZXv0H+mxN5fnYrpab
DW5B6KfiGT8vBg==
-----END CERTIFICATE-----
Generated at Wed Sep 11 06:09:56 2024 by rpki-client on console.sobornost.net