Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/cf/b76a25-6c25-4933-a101-0e99e3e43886/1/Ah-HxCW9b5hb_GPoKC_RrIyU2sA.mft
File:                     Ah-HxCW9b5hb_GPoKC_RrIyU2sA.mft (raw, json)
Hash identifier:          Dhbzn/otdUewVCXkTxLV1St5OEVVt1Jv9YGS2wmbZtY=
Subject key identifier:   EE:3E:16:C5:02:6E:2D:E5:3A:6D:73:E0:7C:CA:21:9E:2F:B6:7E:93
Authority key identifier: 02:1F:87:C4:25:BD:6F:98:5B:FC:63:E8:28:2F:D1:AC:8C:94:DA:C0
Certificate issuer:       /CN=021f87c425bd6f985bfc63e8282fd1ac8c94dac0
Certificate serial:       0191B2D28DD695F4CCA2DB183CAA7B6DC118
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/Ah-HxCW9b5hb_GPoKC_RrIyU2sA.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/cf/b76a25-6c25-4933-a101-0e99e3e43886/1/Ah-HxCW9b5hb_GPoKC_RrIyU2sA.mft
Manifest number:          0CDF
Signing time:             Mon 02 Sep 2024 13:00:28 +0000
Manifest this update:     Mon 02 Sep 2024 13:00:28 +0000
Manifest next update:     Tue 03 Sep 2024 13:00:28 +0000
Files and hashes:         1: Ah-HxCW9b5hb_GPoKC_RrIyU2sA.crl (hash: FPv3ub3UWighkpEquWioUppfMSV5e0VBTzSVrLKG8aQ=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:91:b2:d2:8d:d6:95:f4:cc:a2:db:18:3c:aa:7b:6d:c1:18
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=021f87c425bd6f985bfc63e8282fd1ac8c94dac0
        Validity
            Not Before: Sep  2 13:00:28 2024 GMT
            Not After : Sep  3 13:00:28 2024 GMT
        Subject: CN=ee3e16c5026e2de53a6d73e07cca219e2fb67e93
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:da:03:3b:09:35:4a:98:5e:d0:28:43:3f:69:75:
                    55:0e:3d:36:07:90:da:a3:34:7f:44:9e:2b:bb:7e:
                    28:df:00:75:33:e9:e9:eb:e4:94:be:62:7d:38:27:
                    7a:45:01:c9:9a:cc:a0:99:6d:b6:bd:f4:76:a5:f0:
                    9c:e2:a2:5a:f4:86:08:8a:99:7d:7e:8d:c4:b0:1d:
                    b8:e7:d1:44:5d:57:09:66:2d:af:75:2b:eb:f9:80:
                    fe:81:50:30:81:91:ee:66:03:61:50:0e:87:99:d9:
                    35:d6:a0:a4:e3:1c:1b:cb:31:fb:c9:19:f8:b3:10:
                    4a:05:de:ec:cd:76:38:03:7b:74:2c:2d:37:d2:a8:
                    66:1b:65:3f:15:57:66:51:58:d8:85:0b:45:bc:04:
                    03:f3:c7:3f:43:2d:87:d6:c0:7e:29:46:00:cf:4e:
                    e3:4f:bd:af:e3:1f:70:c2:82:09:d1:12:64:8f:bf:
                    72:3f:38:dc:ab:96:c5:77:13:71:5e:ce:2e:cc:8c:
                    ad:be:6a:11:4f:d0:a3:a5:66:4a:ab:ab:ed:8f:f6:
                    4f:ae:50:ae:6d:d8:ec:b6:b7:14:3b:15:3e:00:15:
                    9f:88:fd:08:65:7a:58:03:42:7d:44:cd:35:96:2a:
                    8b:41:22:fe:a2:a9:24:6d:ad:d0:3a:0b:2f:91:5e:
                    7b:85
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                EE:3E:16:C5:02:6E:2D:E5:3A:6D:73:E0:7C:CA:21:9E:2F:B6:7E:93
            X509v3 Authority Key Identifier:
                keyid:02:1F:87:C4:25:BD:6F:98:5B:FC:63:E8:28:2F:D1:AC:8C:94:DA:C0

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Ah-HxCW9b5hb_GPoKC_RrIyU2sA.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/cf/b76a25-6c25-4933-a101-0e99e3e43886/1/Ah-HxCW9b5hb_GPoKC_RrIyU2sA.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/cf/b76a25-6c25-4933-a101-0e99e3e43886/1/Ah-HxCW9b5hb_GPoKC_RrIyU2sA.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         c4:1d:7d:64:45:b5:d0:50:44:a6:af:81:45:cc:18:54:2a:0e:
         e7:28:b8:5f:f9:a7:2e:ee:50:b8:6f:34:e1:51:74:a2:53:13:
         70:bd:f0:75:33:6d:d2:34:13:8b:d2:87:b3:c5:65:a2:b0:16:
         9f:ab:89:a4:a4:7a:b3:c6:65:18:05:ab:18:65:f4:71:b6:c7:
         17:3f:a0:fb:31:17:69:9b:ca:f8:04:17:f3:02:99:c9:c0:29:
         7a:c4:f5:66:d8:54:66:94:59:5e:63:17:7b:7b:aa:d1:54:ef:
         94:9f:45:f5:8e:18:e1:3c:67:dd:20:21:d1:7f:ff:33:a9:cc:
         14:eb:22:17:2f:f9:8e:47:c1:a1:cf:d0:b5:28:43:42:eb:d5:
         86:a3:21:a1:15:a2:27:9d:d7:78:79:90:e9:f0:ba:38:f6:ee:
         08:31:e5:be:91:fa:c5:b4:d1:96:b3:62:7a:f6:69:4c:19:2d:
         48:ef:d5:72:30:ea:82:0d:b3:d6:8b:af:5f:aa:82:bd:16:b1:
         d2:56:c6:55:d0:9e:e2:fb:b7:02:02:eb:37:59:44:ed:70:0a:
         96:ed:c8:61:a3:ac:33:69:b2:e8:e7:f6:16:89:a1:00:70:67:
         0a:63:25:d4:23:5a:51:c8:11:ad:6d:af:3d:30:73:91:0f:0e:
         a5:f4:58:73
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZGy0o3WlfTMotsYPKp7bcEYMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDAyMWY4N2M0MjViZDZmOTg1YmZjNjNlODI4MmZkMWFjOGM5
NGRhYzAwHhcNMjQwOTAyMTMwMDI4WhcNMjQwOTAzMTMwMDI4WjAzMTEwLwYDVQQD
EyhlZTNlMTZjNTAyNmUyZGU1M2E2ZDczZTA3Y2NhMjE5ZTJmYjY3ZTkzMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA2gM7CTVKmF7QKEM/aXVVDj02B5Da
ozR/RJ4ru34o3wB1M+np6+SUvmJ9OCd6RQHJmsygmW22vfR2pfCc4qJa9IYIipl9
fo3EsB2459FEXVcJZi2vdSvr+YD+gVAwgZHuZgNhUA6Hmdk11qCk4xwbyzH7yRn4
sxBKBd7szXY4A3t0LC030qhmG2U/FVdmUVjYhQtFvAQD88c/Qy2H1sB+KUYAz07j
T72v4x9wwoIJ0RJkj79yPzjcq5bFdxNxXs4uzIytvmoRT9CjpWZKq6vtj/ZPrlCu
bdjstrcUOxU+ABWfiP0IZXpYA0J9RM01liqLQSL+oqkkba3QOgsvkV57hQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFO4+FsUCbi3lOm1z4HzKIZ4vtn6TMB8GA1UdIwQY
MBaAFAIfh8QlvW+YW/xj6Cgv0ayMlNrAMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvQWgtSHhDVzliNWhiX0dQb0tDX1JySXlVMnNBLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jZi9iNzZhMjUtNmMyNS00OTMzLWExMDEt
MGU5OWUzZTQzODg2LzEvQWgtSHhDVzliNWhiX0dQb0tDX1JySXlVMnNBLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9jZi9iNzZhMjUtNmMyNS00OTMzLWExMDEtMGU5OWUzZTQzODg2
LzEvQWgtSHhDVzliNWhiX0dQb0tDX1JySXlVMnNBLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAxB19ZEW1
0FBEpq+BRcwYVCoO5yi4X/mnLu5QuG804VF0olMTcL3wdTNt0jQTi9KHs8VlorAW
n6uJpKR6s8ZlGAWrGGX0cbbHFz+g+zEXaZvK+AQX8wKZycApesT1ZthUZpRZXmMX
e3uq0VTvlJ9F9Y4Y4Txn3SAh0X//M6nMFOsiFy/5jkfBoc/QtShDQuvVhqMhoRWi
J53XeHmQ6fC6OPbuCDHlvpH6xbTRlrNievZpTBktSO/VcjDqgg2z1ouvX6qCvRax
0lbGVdCe4vu3AgLrN1lE7XAKlu3IYaOsM2my6Of2FomhAHBnCmMl1CNaUcgRrW2v
PTBzkQ8OpfRYcw==
-----END CERTIFICATE-----
Generated at Wed Sep 11 06:10:51 2024 by rpki-client on console.sobornost.net