Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d1/5c92ef-141f-4c7f-9556-757c182291fb/1/cvMzrKBkl1H_xcE0ZCisIcvN9QE.mft
File:                     cvMzrKBkl1H_xcE0ZCisIcvN9QE.mft (raw, json)
Hash identifier:          dFlA9SnikW/goGpdmM5OfBwnoA6+hvOvlqXqM1Gd5nc=
Subject key identifier:   50:CB:59:B6:65:7E:0C:3C:DA:54:5C:BC:EF:3F:ED:4F:B3:92:C9:C4
Authority key identifier: 72:F3:33:AC:A0:64:97:51:FF:C5:C1:34:64:28:AC:21:CB:CD:F5:01
Certificate issuer:       /CN=72f333aca0649751ffc5c1346428ac21cbcdf501
Certificate serial:       018CEE871EC54287A755D540E197524CD3C2
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/cvMzrKBkl1H_xcE0ZCisIcvN9QE.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/d1/5c92ef-141f-4c7f-9556-757c182291fb/1/cvMzrKBkl1H_xcE0ZCisIcvN9QE.mft
Manifest number:          08C4
Signing time:             Tue 09 Jan 2024 14:01:21 +0000
Manifest this update:     Tue 09 Jan 2024 14:01:21 +0000
Manifest next update:     Wed 10 Jan 2024 14:01:21 +0000
Files and hashes:         1: cvMzrKBkl1H_xcE0ZCisIcvN9QE.crl (hash: EGpPnF5GL7iiH9RxJpoy23Up59j7xoeyULFKBSzYy24=)
                          2: hkzhZS7HeE-rgMUTaezaUHzB_JU.roa (hash: YF5BJcw6pemXfCa2fKfDhdB8P+l9UQ5KDmfmyi9KrFk=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:8c:ee:87:1e:c5:42:87:a7:55:d5:40:e1:97:52:4c:d3:c2
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=72f333aca0649751ffc5c1346428ac21cbcdf501
        Validity
            Not Before: Jan  9 14:01:21 2024 GMT
            Not After : Jan 10 14:01:21 2024 GMT
        Subject: CN=50cb59b6657e0c3cda545cbcef3fed4fb392c9c4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b6:08:0e:7c:ec:12:12:29:a9:f6:f4:1e:5e:ba:
                    60:0e:00:74:57:5f:65:c9:76:84:56:f5:fd:b3:2d:
                    07:fb:96:03:ca:e4:a6:10:69:ab:d7:60:31:18:b5:
                    19:a8:4e:46:38:34:90:24:b4:c5:33:d6:c7:c7:06:
                    60:0a:38:6b:b1:52:02:43:fb:89:e5:ed:51:aa:1b:
                    ec:6e:5d:f4:1a:87:df:4d:c6:89:8c:9f:ae:12:9f:
                    5d:39:ad:af:a8:57:a8:2a:87:83:8a:5d:68:38:f8:
                    77:14:25:89:3e:ce:30:93:4a:2e:df:09:a5:ca:79:
                    84:4e:9a:d6:d4:0b:8d:f8:61:f1:e1:dc:7c:9f:35:
                    cd:6f:64:f1:4f:eb:71:07:3c:12:bf:57:82:36:ac:
                    23:87:3d:77:fc:b1:7d:fa:0d:45:f1:c3:24:b1:de:
                    3e:c9:54:b8:9b:db:f7:72:a6:11:e1:f7:31:f2:c0:
                    74:91:e6:8e:e7:c2:b6:21:62:8b:03:04:4b:dc:f4:
                    6a:4b:d7:85:f9:09:e1:36:f8:de:0a:ba:c1:4e:58:
                    1c:45:5f:65:b9:cf:68:2a:92:c5:5b:ed:f3:b8:7a:
                    34:ad:ee:3f:a9:70:89:17:69:d4:75:f3:02:af:45:
                    b0:6c:ca:51:5d:a6:b7:18:13:ed:b2:82:a5:fb:30:
                    1f:ed
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                50:CB:59:B6:65:7E:0C:3C:DA:54:5C:BC:EF:3F:ED:4F:B3:92:C9:C4
            X509v3 Authority Key Identifier:
                keyid:72:F3:33:AC:A0:64:97:51:FF:C5:C1:34:64:28:AC:21:CB:CD:F5:01

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cvMzrKBkl1H_xcE0ZCisIcvN9QE.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d1/5c92ef-141f-4c7f-9556-757c182291fb/1/cvMzrKBkl1H_xcE0ZCisIcvN9QE.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/d1/5c92ef-141f-4c7f-9556-757c182291fb/1/cvMzrKBkl1H_xcE0ZCisIcvN9QE.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         4d:fd:34:4d:53:b0:ae:c5:67:db:1a:53:15:83:db:53:68:76:
         37:70:bf:91:5f:1b:62:41:dd:f6:6c:9b:f4:91:a5:50:48:4f:
         3c:86:d8:d1:7d:af:23:38:64:d5:f2:ac:78:9d:97:69:e3:06:
         ad:ef:30:2e:50:98:a4:a0:8e:36:4f:e5:fb:50:41:39:24:ba:
         04:62:13:25:b0:f1:28:b9:30:43:62:5b:42:03:4c:31:c7:e6:
         74:30:af:69:5d:5b:a4:9a:95:07:bc:34:0b:f9:e6:4c:ea:ac:
         71:21:55:a6:21:a4:d8:86:69:9b:da:9a:ce:67:59:9e:da:e7:
         c9:3c:28:f8:05:85:fb:06:c7:70:f5:5b:37:92:61:fd:fc:62:
         a3:a8:9c:bd:83:fa:b1:f5:f3:cf:81:ea:5c:b8:db:94:52:ce:
         0c:db:0f:b0:25:f3:b8:9c:4f:7f:42:73:ec:28:61:5c:43:d0:
         1d:7f:2e:e3:8e:8f:5e:bc:f4:29:c6:25:ce:b3:c1:08:58:00:
         07:96:98:0e:54:b2:56:cf:e4:8f:76:75:51:bf:b6:73:63:e7:
         b3:25:d2:0b:b2:24:85:9f:03:b2:75:ce:18:3d:83:f8:54:e9:
         de:e5:e8:25:b6:b5:b8:cb:e2:5f:76:7e:e3:c8:ee:aa:06:03:
         6b:8f:75:96
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAYzuhx7FQoenVdVA4ZdSTNPCMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDcyZjMzM2FjYTA2NDk3NTFmZmM1YzEzNDY0MjhhYzIxY2Jj
ZGY1MDEwHhcNMjQwMTA5MTQwMTIxWhcNMjQwMTEwMTQwMTIxWjAzMTEwLwYDVQQD
Eyg1MGNiNTliNjY1N2UwYzNjZGE1NDVjYmNlZjNmZWQ0ZmIzOTJjOWM0MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtggOfOwSEimp9vQeXrpgDgB0V19l
yXaEVvX9sy0H+5YDyuSmEGmr12AxGLUZqE5GODSQJLTFM9bHxwZgCjhrsVICQ/uJ
5e1Rqhvsbl30GoffTcaJjJ+uEp9dOa2vqFeoKoeDil1oOPh3FCWJPs4wk0ou3wml
ynmETprW1AuN+GHx4dx8nzXNb2TxT+txBzwSv1eCNqwjhz13/LF9+g1F8cMksd4+
yVS4m9v3cqYR4fcx8sB0keaO58K2IWKLAwRL3PRqS9eF+QnhNvjeCrrBTlgcRV9l
uc9oKpLFW+3zuHo0re4/qXCJF2nUdfMCr0WwbMpRXaa3GBPtsoKl+zAf7QIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFFDLWbZlfgw82lRcvO8/7U+zksnEMB8GA1UdIwQY
MBaAFHLzM6ygZJdR/8XBNGQorCHLzfUBMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvY3ZNenJLQmtsMUhfeGNFMFpDaXNJY3ZOOVFFLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kMS81YzkyZWYtMTQxZi00YzdmLTk1NTYt
NzU3YzE4MjI5MWZiLzEvY3ZNenJLQmtsMUhfeGNFMFpDaXNJY3ZOOVFFLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9kMS81YzkyZWYtMTQxZi00YzdmLTk1NTYtNzU3YzE4MjI5MWZi
LzEvY3ZNenJLQmtsMUhfeGNFMFpDaXNJY3ZOOVFFLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEATf00TVOw
rsVn2xpTFYPbU2h2N3C/kV8bYkHd9myb9JGlUEhPPIbY0X2vIzhk1fKseJ2XaeMG
re8wLlCYpKCONk/l+1BBOSS6BGITJbDxKLkwQ2JbQgNMMcfmdDCvaV1bpJqVB7w0
C/nmTOqscSFVpiGk2IZpm9qazmdZntrnyTwo+AWF+wbHcPVbN5Jh/fxio6icvYP6
sfXzz4HqXLjblFLODNsPsCXzuJxPf0Jz7ChhXEPQHX8u446PXrz0KcYlzrPBCFgA
B5aYDlSyVs/kj3Z1Ub+2c2PnsyXSC7IkhZ8DsnXOGD2D+FTp3uXoJba1uMviX3Z+
48juqgYDa491lg==
-----END CERTIFICATE-----
Generated at Tue Feb 27 01:01:05 2024 by rpki-client on console.sobornost.net