Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d5/4e95d7-7f76-454d-aa47-8389f43ed6f6/1/jIlVMEGw01v4L_tKe6fepIYZPk4.mft
File:                     jIlVMEGw01v4L_tKe6fepIYZPk4.mft (raw, json)
Hash identifier:          5pVBNQLU5DbVmR5bbwDE2tQkiM7U3XmtbDA7ywHUL3o=
Subject key identifier:   66:9B:AE:81:79:C2:5D:D6:6A:55:CD:08:7D:D3:99:20:1F:08:04:E5
Authority key identifier: 8C:89:55:30:41:B0:D3:5B:F8:2F:FB:4A:7B:A7:DE:A4:86:19:3E:4E
Certificate issuer:       /CN=8c89553041b0d35bf82ffb4a7ba7dea486193e4e
Certificate serial:       0192AF6129C0330261367EFE5F8520B98FDC
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/jIlVMEGw01v4L_tKe6fepIYZPk4.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/d5/4e95d7-7f76-454d-aa47-8389f43ed6f6/1/jIlVMEGw01v4L_tKe6fepIYZPk4.mft
Manifest number:          131A
Signing time:             Mon 21 Oct 2024 14:00:33 +0000
Manifest this update:     Mon 21 Oct 2024 14:00:33 +0000
Manifest next update:     Tue 22 Oct 2024 14:00:33 +0000
Files and hashes:         1: Z7LUk7OcnuKzBTRK5zel9LyKP34.roa (hash: rOle79UfQ+G3jYlKLRoQygtuFAVaXJyxkR+IUvVO7Bg=)
                          2: jIlVMEGw01v4L_tKe6fepIYZPk4.crl (hash: tIx8M+J1E2dF+g3WK27UG9RcyBsoXHL30YQJp/aZXVQ=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:92:af:61:29:c0:33:02:61:36:7e:fe:5f:85:20:b9:8f:dc
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8c89553041b0d35bf82ffb4a7ba7dea486193e4e
        Validity
            Not Before: Oct 21 14:00:33 2024 GMT
            Not After : Oct 22 14:00:33 2024 GMT
        Subject: CN=669bae8179c25dd66a55cd087dd399201f0804e5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ba:9b:32:9b:8a:56:24:b8:1e:3b:c1:4e:5a:55:
                    4d:9d:ff:5e:5f:a8:e9:29:85:85:e7:b9:1b:b6:0c:
                    4c:ee:8b:04:7d:b5:a9:aa:42:45:e3:43:6c:3d:8e:
                    4b:be:84:0f:c8:50:1c:bd:76:3d:68:90:37:fa:de:
                    02:46:4e:8c:9d:91:c6:53:ed:e1:f4:82:c7:c6:80:
                    41:af:ee:9f:3b:41:35:ad:83:bb:7c:78:45:5d:ca:
                    ed:9e:e3:7b:fe:84:12:65:4c:81:89:26:d5:b4:69:
                    6b:c4:84:01:91:a4:3b:04:8d:f2:40:19:68:f8:af:
                    89:52:6b:96:99:53:a2:38:ca:d0:f7:6e:38:97:4f:
                    8e:94:5d:74:18:3f:0e:89:c0:1e:ff:e3:71:45:bb:
                    22:0a:38:d5:18:60:0e:c5:78:5d:50:da:b5:f4:41:
                    f8:8f:61:0b:d7:83:2b:24:9c:47:32:49:0a:a1:48:
                    5b:53:a3:47:97:10:4c:a2:5a:70:41:7a:ea:1a:b4:
                    5d:0f:0b:70:0d:a1:73:3a:9b:3c:3a:a7:42:0f:8c:
                    99:6d:e0:3c:48:dc:06:28:34:3d:d8:9f:26:0d:88:
                    ca:45:ed:98:77:cd:11:8f:3d:09:d7:78:15:29:f9:
                    41:2d:28:94:c5:1a:ee:bd:75:1b:6c:fb:9d:d0:22:
                    44:c1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                66:9B:AE:81:79:C2:5D:D6:6A:55:CD:08:7D:D3:99:20:1F:08:04:E5
            X509v3 Authority Key Identifier:
                keyid:8C:89:55:30:41:B0:D3:5B:F8:2F:FB:4A:7B:A7:DE:A4:86:19:3E:4E

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/jIlVMEGw01v4L_tKe6fepIYZPk4.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d5/4e95d7-7f76-454d-aa47-8389f43ed6f6/1/jIlVMEGw01v4L_tKe6fepIYZPk4.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/d5/4e95d7-7f76-454d-aa47-8389f43ed6f6/1/jIlVMEGw01v4L_tKe6fepIYZPk4.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         4f:f2:8e:be:d7:91:90:51:64:46:80:4d:d5:bf:e6:3f:3c:0b:
         4e:63:74:3f:f2:fa:4b:2d:b2:a3:52:51:c9:29:aa:87:fc:82:
         87:a5:2f:2a:a6:b2:2e:4b:c1:b0:3b:02:29:05:0d:06:d2:16:
         ea:b4:d5:92:a6:10:07:9b:56:9c:28:c8:cf:78:13:d7:61:ea:
         b0:3a:06:2b:61:bb:21:8e:4c:14:15:7a:c9:4a:f7:30:7a:89:
         96:c0:e1:6f:0a:b8:8a:36:95:3c:75:11:1d:27:3d:44:12:67:
         ae:79:6e:87:0a:40:13:d3:e5:e1:fd:73:50:a6:35:30:1e:72:
         6d:ed:bf:ad:21:99:66:01:e7:a3:37:e9:de:0f:c1:aa:d4:3f:
         77:e8:0d:10:a1:16:d3:a3:74:84:71:c6:6d:87:40:79:57:eb:
         d8:ff:13:33:8c:0b:86:81:c9:e6:c3:35:b7:74:3b:2e:d9:32:
         ff:f7:3a:19:d9:70:8d:fb:f1:59:bd:ca:12:95:d2:67:dd:df:
         a7:0b:ab:ab:eb:a5:5e:4d:a3:dd:83:dd:4b:80:b4:99:39:18:
         68:0f:7a:c0:39:f1:c1:8e:9a:07:ff:c5:b7:9f:3f:50:08:0f:
         00:7f:f0:37:12:86:4b:40:48:e8:79:0d:37:88:7c:04:f0:1e:
         97:0c:0b:92
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZKvYSnAMwJhNn7+X4UguY/cMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDhjODk1NTMwNDFiMGQzNWJmODJmZmI0YTdiYTdkZWE0ODYx
OTNlNGUwHhcNMjQxMDIxMTQwMDMzWhcNMjQxMDIyMTQwMDMzWjAzMTEwLwYDVQQD
Eyg2NjliYWU4MTc5YzI1ZGQ2NmE1NWNkMDg3ZGQzOTkyMDFmMDgwNGU1MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAupsym4pWJLgeO8FOWlVNnf9eX6jp
KYWF57kbtgxM7osEfbWpqkJF40NsPY5LvoQPyFAcvXY9aJA3+t4CRk6MnZHGU+3h
9ILHxoBBr+6fO0E1rYO7fHhFXcrtnuN7/oQSZUyBiSbVtGlrxIQBkaQ7BI3yQBlo
+K+JUmuWmVOiOMrQ9244l0+OlF10GD8OicAe/+NxRbsiCjjVGGAOxXhdUNq19EH4
j2EL14MrJJxHMkkKoUhbU6NHlxBMolpwQXrqGrRdDwtwDaFzOps8OqdCD4yZbeA8
SNwGKDQ92J8mDYjKRe2Yd80Rjz0J13gVKflBLSiUxRruvXUbbPud0CJEwQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFGabroF5wl3WalXNCH3TmSAfCATlMB8GA1UdIwQY
MBaAFIyJVTBBsNNb+C/7Snun3qSGGT5OMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvaklsVk1FR3cwMXY0TF90S2U2ZmVwSVlaUGs0LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kNS80ZTk1ZDctN2Y3Ni00NTRkLWFhNDct
ODM4OWY0M2VkNmY2LzEvaklsVk1FR3cwMXY0TF90S2U2ZmVwSVlaUGs0Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9kNS80ZTk1ZDctN2Y3Ni00NTRkLWFhNDctODM4OWY0M2VkNmY2
LzEvaklsVk1FR3cwMXY0TF90S2U2ZmVwSVlaUGs0LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAT/KOvteR
kFFkRoBN1b/mPzwLTmN0P/L6Sy2yo1JRySmqh/yCh6UvKqayLkvBsDsCKQUNBtIW
6rTVkqYQB5tWnCjIz3gT12HqsDoGK2G7IY5MFBV6yUr3MHqJlsDhbwq4ijaVPHUR
HSc9RBJnrnluhwpAE9Pl4f1zUKY1MB5ybe2/rSGZZgHnozfp3g/BqtQ/d+gNEKEW
06N0hHHGbYdAeVfr2P8TM4wLhoHJ5sM1t3Q7Ltky//c6GdlwjfvxWb3KEpXSZ93f
pwurq+ulXk2j3YPdS4C0mTkYaA96wDnxwY6aB//Ft58/UAgPAH/wNxKGS0BI6HkN
N4h8BPAelwwLkg==
-----END CERTIFICATE-----
Generated at Tue Oct 22 19:22:26 2024 by rpki-client on console.sobornost.net