Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d2/12e9a0-9c58-47a2-baf1-38d33e6697fb/1/qM7i8a1Bn3Jwo1OEDQpLg1Jcq14.mft
File:                     qM7i8a1Bn3Jwo1OEDQpLg1Jcq14.mft (raw, json)
Hash identifier:          3Lf/9zMDyVaW0C8SakukPN9BNYJwu1Bq/lFvu+LY7XU=
Subject key identifier:   A4:E2:16:DD:BD:39:16:79:54:DF:BA:D7:73:CA:DB:3C:A6:70:AA:6E
Authority key identifier: A8:CE:E2:F1:AD:41:9F:72:70:A3:53:84:0D:0A:4B:83:52:5C:AB:5E
Certificate issuer:       /CN=a8cee2f1ad419f7270a353840d0a4b83525cab5e
Certificate serial:       019326E63ECB4BE8DA668B518C967EBB6168
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/qM7i8a1Bn3Jwo1OEDQpLg1Jcq14.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/d2/12e9a0-9c58-47a2-baf1-38d33e6697fb/1/qM7i8a1Bn3Jwo1OEDQpLg1Jcq14.mft
Manifest number:          1359
Signing time:             Wed 13 Nov 2024 19:00:43 +0000
Manifest this update:     Wed 13 Nov 2024 19:00:43 +0000
Manifest next update:     Thu 14 Nov 2024 19:00:43 +0000
Files and hashes:         1: VdpU78xCQixOZA3Tl4FO-ihowDU.roa (hash: F8j2v4LG0IelIqBfrQKiflCNRrK83JTdtSceIedHB+c=)
                          2: qM7i8a1Bn3Jwo1OEDQpLg1Jcq14.crl (hash: +BKAYfVQZNv3ftKTGc4HEDy6nHnb4mEFyOLzQJpLS78=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:93:26:e6:3e:cb:4b:e8:da:66:8b:51:8c:96:7e:bb:61:68
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=a8cee2f1ad419f7270a353840d0a4b83525cab5e
        Validity
            Not Before: Nov 13 19:00:43 2024 GMT
            Not After : Nov 14 19:00:43 2024 GMT
        Subject: CN=a4e216ddbd39167954dfbad773cadb3ca670aa6e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:af:da:7d:51:c1:d8:05:bd:d7:e8:ab:db:9b:fe:
                    76:89:ff:46:a2:f8:97:bd:89:6c:59:37:a1:a1:62:
                    94:aa:a7:b8:da:b3:a2:87:90:e9:36:c1:56:0d:46:
                    5e:9e:a8:a7:82:fc:a0:88:1c:f9:5c:81:fc:2a:44:
                    44:06:a9:ee:a1:38:9c:3f:bb:55:fc:12:04:46:5b:
                    ac:18:14:b5:e8:06:4c:34:ce:c1:ec:9c:00:e6:f7:
                    da:f4:36:c2:80:e7:3c:81:83:13:3b:99:12:54:3f:
                    27:3e:61:66:40:0a:e2:c3:d6:40:5a:43:3a:34:9d:
                    a1:a1:a8:75:5a:ec:00:ed:6b:1f:9b:8c:f3:7d:2c:
                    54:11:39:b7:98:6a:1f:f7:f2:ef:63:17:e7:96:a2:
                    fa:74:75:e4:34:4d:e7:05:d2:d7:d3:7c:19:b3:3d:
                    b2:63:cb:09:86:2b:66:1f:27:d0:c6:37:73:ae:b0:
                    81:fd:0f:24:a8:d3:09:8d:24:cc:2d:80:49:79:ee:
                    3d:9e:7f:a1:7e:46:c2:29:3e:73:91:11:0f:b1:5e:
                    2e:dc:d9:93:b4:be:9d:3f:f8:0a:c9:2c:4f:19:74:
                    72:fb:34:e3:c4:16:13:e6:7a:e6:b2:3e:ca:55:71:
                    15:f1:6b:3a:8b:ac:24:64:6d:0a:3e:31:12:d3:5f:
                    97:a1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A4:E2:16:DD:BD:39:16:79:54:DF:BA:D7:73:CA:DB:3C:A6:70:AA:6E
            X509v3 Authority Key Identifier:
                keyid:A8:CE:E2:F1:AD:41:9F:72:70:A3:53:84:0D:0A:4B:83:52:5C:AB:5E

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qM7i8a1Bn3Jwo1OEDQpLg1Jcq14.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d2/12e9a0-9c58-47a2-baf1-38d33e6697fb/1/qM7i8a1Bn3Jwo1OEDQpLg1Jcq14.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/d2/12e9a0-9c58-47a2-baf1-38d33e6697fb/1/qM7i8a1Bn3Jwo1OEDQpLg1Jcq14.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         28:0b:9e:cd:74:c1:fe:0c:3b:d1:ac:d0:31:ad:47:e5:22:06:
         3f:d5:98:e0:d4:cb:75:02:59:eb:cb:13:d5:59:91:07:d9:50:
         06:19:f3:32:b8:a9:41:78:7d:92:8f:87:6a:f8:09:1c:f6:c3:
         d3:ec:9b:60:f3:2a:d8:34:4f:6a:88:d0:5e:48:04:af:ce:75:
         4c:9f:48:54:6e:9a:2f:c4:6d:70:d7:bc:07:d7:8c:9f:6a:86:
         7e:10:ca:d7:e3:d3:e4:04:9a:fe:13:eb:c1:d7:cf:04:2f:d3:
         56:25:04:90:70:5c:b6:8c:0c:53:58:6b:52:36:c8:82:d7:5e:
         d3:b9:73:a7:74:6e:90:41:ae:9e:c5:ac:9f:38:e2:ca:47:e9:
         1f:ce:d0:1a:41:e3:61:da:6e:1f:14:91:ea:6d:cd:13:8b:22:
         ed:cc:e8:8f:f1:db:f4:76:98:6e:b4:1f:b9:31:6d:d7:36:12:
         eb:a3:fc:67:a5:9d:7b:22:c6:04:f8:ae:05:3f:7c:1b:2d:88:
         06:28:f0:e3:08:7a:47:bb:29:6f:44:76:99:11:ee:08:ba:48:
         7d:4c:f6:57:c8:15:cc:c0:bf:e8:91:e0:c7:63:41:2b:52:10:
         c3:cf:7f:6d:e4:32:ed:77:47:68:15:26:81:fb:61:68:60:26:
         7d:03:a0:e7
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZMm5j7LS+jaZotRjJZ+u2FoMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGE4Y2VlMmYxYWQ0MTlmNzI3MGEzNTM4NDBkMGE0YjgzNTI1
Y2FiNWUwHhcNMjQxMTEzMTkwMDQzWhcNMjQxMTE0MTkwMDQzWjAzMTEwLwYDVQQD
EyhhNGUyMTZkZGJkMzkxNjc5NTRkZmJhZDc3M2NhZGIzY2E2NzBhYTZlMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAr9p9UcHYBb3X6Kvbm/52if9GoviX
vYlsWTehoWKUqqe42rOih5DpNsFWDUZenqingvygiBz5XIH8KkREBqnuoTicP7tV
/BIERlusGBS16AZMNM7B7JwA5vfa9DbCgOc8gYMTO5kSVD8nPmFmQAriw9ZAWkM6
NJ2hoah1WuwA7Wsfm4zzfSxUETm3mGof9/LvYxfnlqL6dHXkNE3nBdLX03wZsz2y
Y8sJhitmHyfQxjdzrrCB/Q8kqNMJjSTMLYBJee49nn+hfkbCKT5zkREPsV4u3NmT
tL6dP/gKySxPGXRy+zTjxBYT5nrmsj7KVXEV8Ws6i6wkZG0KPjES01+XoQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFKTiFt29ORZ5VN+613PK2zymcKpuMB8GA1UdIwQY
MBaAFKjO4vGtQZ9ycKNThA0KS4NSXKteMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvcU03aThhMUJuM0p3bzFPRURRcExnMUpjcTE0LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kMi8xMmU5YTAtOWM1OC00N2EyLWJhZjEt
MzhkMzNlNjY5N2ZiLzEvcU03aThhMUJuM0p3bzFPRURRcExnMUpjcTE0Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9kMi8xMmU5YTAtOWM1OC00N2EyLWJhZjEtMzhkMzNlNjY5N2Zi
LzEvcU03aThhMUJuM0p3bzFPRURRcExnMUpjcTE0LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAKAuezXTB
/gw70azQMa1H5SIGP9WY4NTLdQJZ68sT1VmRB9lQBhnzMripQXh9ko+HavgJHPbD
0+ybYPMq2DRPaojQXkgEr851TJ9IVG6aL8RtcNe8B9eMn2qGfhDK1+PT5ASa/hPr
wdfPBC/TViUEkHBctowMU1hrUjbIgtde07lzp3RukEGunsWsnzjiykfpH87QGkHj
YdpuHxSR6m3NE4si7czoj/Hb9HaYbrQfuTFt1zYS66P8Z6WdeyLGBPiuBT98Gy2I
Bijw4wh6R7spb0R2mRHuCLpIfUz2V8gVzMC/6JHgx2NBK1IQw89/beQy7XdHaBUm
gfthaGAmfQOg5w==
-----END CERTIFICATE-----
Generated at Thu Nov 14 17:55:42 2024 by rpki-client on console.sobornost.net