Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c1/bd4f30-d24b-4e5e-9e1b-70a9ca27af66/1/s7vFnmf3BQj_HoGmtTWmrVJh7Ik.mft
File:                     s7vFnmf3BQj_HoGmtTWmrVJh7Ik.mft (raw, json)
Hash identifier:          umgbX4h5nurPhIPgwUgBtGPRE2n3NVE9T3U57r0zUuI=
Subject key identifier:   32:5D:D2:07:6D:80:59:E4:26:1F:07:DC:7E:BA:1C:B4:4C:1B:E2:A8
Authority key identifier: B3:BB:C5:9E:67:F7:05:08:FF:1E:81:A6:B5:35:A6:AD:52:61:EC:89
Certificate issuer:       /CN=b3bbc59e67f70508ff1e81a6b535a6ad5261ec89
Certificate serial:       018CEDE24CDD8C5BC9D5AFD46728A53F6591
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/s7vFnmf3BQj_HoGmtTWmrVJh7Ik.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/c1/bd4f30-d24b-4e5e-9e1b-70a9ca27af66/1/s7vFnmf3BQj_HoGmtTWmrVJh7Ik.mft
Manifest number:          08BC
Signing time:             Tue 09 Jan 2024 11:01:20 +0000
Manifest this update:     Tue 09 Jan 2024 11:01:20 +0000
Manifest next update:     Wed 10 Jan 2024 11:01:20 +0000
Files and hashes:         1: s7vFnmf3BQj_HoGmtTWmrVJh7Ik.crl (hash: P510de63+5ydipK6abdbrnkY0HBHhbUZvsO9QNuJAa8=)
                          2: svK-rLhs0cUJ0UncTDbyyB22WF0.roa (hash: nq0Bh/VUjpwderNgkdt6Tw9oNOwIfo3Riekojrk/1is=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:8c:ed:e2:4c:dd:8c:5b:c9:d5:af:d4:67:28:a5:3f:65:91
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b3bbc59e67f70508ff1e81a6b535a6ad5261ec89
        Validity
            Not Before: Jan  9 11:01:20 2024 GMT
            Not After : Jan 10 11:01:20 2024 GMT
        Subject: CN=325dd2076d8059e4261f07dc7eba1cb44c1be2a8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:97:45:4f:79:9e:f8:b9:63:a0:ef:6a:81:c2:d1:
                    9b:78:86:c5:91:5e:cf:5f:7d:cc:7d:dc:18:5b:b8:
                    e7:4a:8c:a2:b0:c0:3b:9c:24:f4:f5:a6:95:3c:be:
                    ce:af:db:d2:d5:a0:f3:82:88:35:36:ac:68:b5:2c:
                    64:fc:35:bc:16:ae:27:0f:0c:44:db:b3:70:8f:e1:
                    fe:05:05:bc:70:78:32:cb:51:34:93:19:44:b4:d8:
                    a9:2e:37:75:ea:ef:1b:51:1a:6d:f8:d7:3f:65:01:
                    ce:72:7d:a8:59:79:7a:84:65:83:d5:69:e6:59:4f:
                    77:34:07:01:2b:00:19:ca:c2:c6:5c:23:30:59:3b:
                    1e:31:ea:7c:9a:c2:34:a9:47:43:f3:65:11:f9:13:
                    1f:a6:1f:f1:77:74:01:22:b2:18:87:d8:c8:10:69:
                    cd:37:22:d1:01:a8:f1:0f:0f:70:c1:78:1c:22:1b:
                    e1:2c:96:4a:c2:b7:be:7e:d9:0b:b0:9b:dc:95:4f:
                    ef:de:c3:4e:ed:e1:d2:f5:7d:aa:19:98:0b:34:c8:
                    65:5a:4f:e1:34:da:e6:6d:de:20:af:62:d4:67:1c:
                    5f:7c:f9:71:27:e9:96:1b:dd:88:86:ed:82:29:87:
                    17:40:60:a4:d8:b3:94:13:cb:c1:ca:06:f6:e1:40:
                    4b:cd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                32:5D:D2:07:6D:80:59:E4:26:1F:07:DC:7E:BA:1C:B4:4C:1B:E2:A8
            X509v3 Authority Key Identifier:
                keyid:B3:BB:C5:9E:67:F7:05:08:FF:1E:81:A6:B5:35:A6:AD:52:61:EC:89

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/s7vFnmf3BQj_HoGmtTWmrVJh7Ik.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c1/bd4f30-d24b-4e5e-9e1b-70a9ca27af66/1/s7vFnmf3BQj_HoGmtTWmrVJh7Ik.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/c1/bd4f30-d24b-4e5e-9e1b-70a9ca27af66/1/s7vFnmf3BQj_HoGmtTWmrVJh7Ik.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         23:f2:73:19:f3:62:a9:47:f0:0e:7f:e1:b6:fe:ba:a3:11:3a:
         d9:9b:f4:56:61:f9:f2:c5:ae:fd:94:0b:90:a3:14:09:1d:50:
         5f:f7:77:cf:10:d1:8f:92:9f:5e:c5:66:24:60:46:4c:cd:3c:
         1f:40:5d:4f:54:9f:45:ef:c0:4c:2c:e3:73:2b:1b:13:6a:e2:
         b5:cf:f9:2d:e7:c4:d1:a7:b4:c8:39:54:25:d1:48:bc:ee:1a:
         5e:f5:93:75:ef:0c:13:b6:ea:8b:3e:6e:7f:d1:00:74:22:88:
         87:ed:ef:9b:2c:9b:33:f1:32:6a:4e:91:cb:cb:65:1f:45:b9:
         74:cf:8e:18:47:0b:7c:01:19:27:4e:19:bc:78:a9:d3:be:09:
         be:53:20:d1:74:a8:4f:30:50:f6:5b:3b:42:4f:9a:1f:e8:89:
         32:c2:f4:92:1b:cf:f1:99:df:09:df:e6:7b:1a:c7:dc:77:3a:
         0c:48:f0:a2:31:05:d3:b5:dc:23:51:82:f3:a6:82:37:7a:2a:
         68:de:95:e1:82:7c:d7:96:f6:8a:62:5a:02:c0:60:68:ba:fb:
         f6:86:9c:18:8a:d9:62:68:08:65:8c:be:5d:0f:bf:32:c0:40:
         10:dc:25:86:ad:5a:25:6d:e6:74:4c:73:46:81:18:86:17:f3:
         b2:67:26:f9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Feb 27 01:00:50 2024 by rpki-client on console.sobornost.net