Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d1/48bc75-96b6-4fa7-8ada-a6eca43f0e05/1/3lSZvocvYvLQTcS8Y4MJ13uJo4c.mft
File:                     3lSZvocvYvLQTcS8Y4MJ13uJo4c.mft (raw, json)
Hash identifier:          UrTuY5st+vWcJ39f2TahD/uV/yzdb/6GMI/3e9Du5qY=
Subject key identifier:   55:26:28:C5:DF:82:EC:22:4A:AE:B8:2E:B7:AC:45:59:50:D6:2F:AC
Authority key identifier: DE:54:99:BE:87:2F:62:F2:D0:4D:C4:BC:63:83:09:D7:7B:89:A3:87
Certificate issuer:       /CN=de5499be872f62f2d04dc4bc638309d77b89a387
Certificate serial:       0191B2650BAD3C527832EDE1169A2B09FE50
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/3lSZvocvYvLQTcS8Y4MJ13uJo4c.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/d1/48bc75-96b6-4fa7-8ada-a6eca43f0e05/1/3lSZvocvYvLQTcS8Y4MJ13uJo4c.mft
Manifest number:          1234
Signing time:             Mon 02 Sep 2024 11:00:52 +0000
Manifest this update:     Mon 02 Sep 2024 11:00:52 +0000
Manifest next update:     Tue 03 Sep 2024 11:00:52 +0000
Files and hashes:         1: 3lSZvocvYvLQTcS8Y4MJ13uJo4c.crl (hash: RIByKHxCeWqURhOW+SmHJQCERvL/Y3r86n5yQd8sBJI=)
                          2: GBRb6fPs9zt623UuQ4fgOMDm7R4.roa (hash: yqymEa1Pm+wJzSp5qhbmUWv3H6WcofDKzM2DuRzAjoM=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:91:b2:65:0b:ad:3c:52:78:32:ed:e1:16:9a:2b:09:fe:50
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=de5499be872f62f2d04dc4bc638309d77b89a387
        Validity
            Not Before: Sep  2 11:00:52 2024 GMT
            Not After : Sep  3 11:00:52 2024 GMT
        Subject: CN=552628c5df82ec224aaeb82eb7ac455950d62fac
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a9:b9:49:0f:f5:39:da:79:e1:4a:bd:7b:0b:fc:
                    5d:6d:76:7a:70:c7:10:61:c5:8b:98:fb:ea:3f:79:
                    63:c4:de:97:12:fb:d0:5c:0c:63:80:09:6a:ad:7f:
                    67:66:37:2c:21:4f:27:be:b5:a3:bd:e5:13:66:3d:
                    cd:c7:a9:8b:17:50:3c:45:e3:d1:61:e0:cd:43:f6:
                    25:a4:ca:03:c8:b4:66:cd:9b:b5:36:57:8e:11:a1:
                    3d:ed:4a:0f:35:80:bd:08:d4:6f:4e:58:26:cb:c8:
                    d8:d0:4c:98:ee:c5:b3:d7:fd:2f:db:9f:0a:7e:c4:
                    58:a4:ce:86:30:90:dc:27:5a:4b:5a:45:01:f2:e8:
                    23:2b:70:a9:76:0e:0e:66:9e:a8:95:f2:9a:07:9c:
                    9f:34:1e:b4:ce:e1:19:c4:dd:22:29:ab:5e:2b:a0:
                    a0:83:ca:b7:ff:eb:ae:b7:f2:6c:92:82:04:28:25:
                    39:ab:75:7e:ba:d6:d1:5e:2b:4b:90:ba:cc:a1:5f:
                    82:2a:06:bb:e1:dd:c1:a7:95:7e:c8:6c:38:cf:1b:
                    b1:d0:3d:9f:44:4e:95:e5:a6:85:cc:4b:c3:c2:74:
                    8a:86:8c:08:2a:11:49:a9:7e:e2:20:4d:c0:18:22:
                    8e:94:a7:4c:af:0b:c8:bb:ad:bd:76:4b:38:ee:bf:
                    05:a5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                55:26:28:C5:DF:82:EC:22:4A:AE:B8:2E:B7:AC:45:59:50:D6:2F:AC
            X509v3 Authority Key Identifier:
                keyid:DE:54:99:BE:87:2F:62:F2:D0:4D:C4:BC:63:83:09:D7:7B:89:A3:87

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/3lSZvocvYvLQTcS8Y4MJ13uJo4c.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d1/48bc75-96b6-4fa7-8ada-a6eca43f0e05/1/3lSZvocvYvLQTcS8Y4MJ13uJo4c.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/d1/48bc75-96b6-4fa7-8ada-a6eca43f0e05/1/3lSZvocvYvLQTcS8Y4MJ13uJo4c.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         9a:a8:3b:e6:b1:13:85:60:6e:7e:51:14:fc:2f:22:0e:25:91:
         b7:7a:b8:2e:43:3f:31:0e:a0:e5:c9:33:74:cc:ec:49:0b:d3:
         1e:5a:4f:e6:bc:26:1b:66:7c:a6:ef:4f:55:36:dd:67:ca:de:
         dc:0e:d6:e7:83:86:4a:a7:69:a5:17:23:92:e7:72:a5:57:c7:
         f3:0d:cb:5a:d2:2e:9e:e0:ef:32:ca:3a:69:81:3f:6b:dd:1b:
         46:65:b3:2b:1e:bf:02:b3:74:cb:09:12:1d:48:99:fd:d7:4e:
         49:67:91:9b:73:21:f2:69:65:cd:0c:ce:1f:db:eb:2b:68:9b:
         d3:53:bf:b0:22:64:f4:5d:70:a3:80:ba:60:34:69:be:65:3e:
         15:34:71:ad:e0:bf:36:af:d4:ef:10:ba:2e:41:4a:0d:cb:3e:
         87:86:d2:f2:2a:dc:a7:1a:5e:53:d0:9f:20:92:ea:d0:c8:4d:
         25:41:93:91:db:41:66:e7:ac:a6:ba:64:5d:47:11:61:3a:21:
         30:27:d0:38:a0:36:94:be:61:6f:dd:e0:65:c1:e3:9f:16:c7:
         7f:96:49:25:6f:06:6e:c3:4c:5c:a4:7d:f9:a2:8c:80:fb:e3:
         9c:74:7e:71:45:03:b7:b0:15:db:f1:d4:27:94:18:fd:ff:4f:
         9a:bf:b6:f6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Sep 11 06:11:11 2024 by rpki-client on console.sobornost.net