Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d8/c86177-714a-487e-8985-cbe95139b9a6/1/9lCFQ2i9OqC-5Jv37cAxG5DfNxc.mft
File:                     9lCFQ2i9OqC-5Jv37cAxG5DfNxc.mft (raw, json)
Hash identifier:          kfon8KXih43gavfzmcG00TA5JcKv7rF//UneMuCuUf4=
Subject key identifier:   8E:9B:8B:C5:21:D1:B0:9C:8D:1F:6E:D6:7D:AC:7C:B4:E0:C8:51:C3
Authority key identifier: F6:50:85:43:68:BD:3A:A0:BE:E4:9B:F7:ED:C0:31:1B:90:DF:37:17
Certificate issuer:       /CN=f650854368bd3aa0bee49bf7edc0311b90df3717
Certificate serial:       018CED0689CE8EAE84326EB4F2B65EAFB412
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/9lCFQ2i9OqC-5Jv37cAxG5DfNxc.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/d8/c86177-714a-487e-8985-cbe95139b9a6/1/9lCFQ2i9OqC-5Jv37cAxG5DfNxc.mft
Manifest number:          0A2B
Signing time:             Tue 09 Jan 2024 07:01:17 +0000
Manifest this update:     Tue 09 Jan 2024 07:01:17 +0000
Manifest next update:     Wed 10 Jan 2024 07:01:17 +0000
Files and hashes:         1: 9lCFQ2i9OqC-5Jv37cAxG5DfNxc.crl (hash: jdFVvoG0FA2mMQNzgJgJ7TpgcNEs9PQs369OEC5Y8ro=)
                          2: hK3IXqAod9p2sJVZvcOmfYnJq4Q.roa (hash: hB4bg/RNkMnjB05Rug2GEYcoWabUjy/vDPdnau0MqcQ=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:8c:ed:06:89:ce:8e:ae:84:32:6e:b4:f2:b6:5e:af:b4:12
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=f650854368bd3aa0bee49bf7edc0311b90df3717
        Validity
            Not Before: Jan  9 07:01:17 2024 GMT
            Not After : Jan 10 07:01:17 2024 GMT
        Subject: CN=8e9b8bc521d1b09c8d1f6ed67dac7cb4e0c851c3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:91:85:34:0b:e0:19:d7:8b:7e:ab:c5:0c:90:b5:
                    1d:55:45:b1:5e:99:f8:c2:46:c1:21:7d:d6:04:e3:
                    ec:b5:e0:cd:12:73:b5:ae:59:85:89:f1:70:36:70:
                    e6:88:1e:01:ea:f8:09:75:40:2d:01:7b:7d:e7:6d:
                    dc:71:52:18:12:8d:a8:08:79:ae:60:96:a9:b8:a4:
                    da:8c:ad:79:b5:14:75:f9:18:43:c1:1d:9b:5c:2a:
                    01:19:9e:62:2b:93:75:db:e2:a5:c3:62:50:e4:ba:
                    d8:d2:d8:90:ae:e2:df:04:f5:c4:8a:e8:68:5b:47:
                    1e:42:3b:0c:29:5c:f7:de:92:f7:48:9f:7e:11:b3:
                    b5:98:f0:50:38:5d:cc:fc:73:b6:88:1e:18:b3:b7:
                    0c:b7:b6:2c:3e:11:67:72:f7:eb:9d:d3:5e:05:fd:
                    f2:c5:fa:a4:de:4e:3a:f7:9d:41:b3:11:6b:23:57:
                    83:8d:eb:8c:9e:ce:0d:fc:7d:af:87:fb:67:18:d8:
                    49:45:79:c4:34:ba:d0:37:5c:d7:1b:21:50:57:e4:
                    ea:e8:c8:77:23:d6:ac:b7:68:f0:2a:ab:fd:3f:b7:
                    d2:2e:c2:06:89:78:c3:c3:91:4f:48:32:dc:fb:86:
                    38:91:14:df:d4:19:76:0f:80:7b:e8:97:0f:04:56:
                    1c:f7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8E:9B:8B:C5:21:D1:B0:9C:8D:1F:6E:D6:7D:AC:7C:B4:E0:C8:51:C3
            X509v3 Authority Key Identifier:
                keyid:F6:50:85:43:68:BD:3A:A0:BE:E4:9B:F7:ED:C0:31:1B:90:DF:37:17

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/9lCFQ2i9OqC-5Jv37cAxG5DfNxc.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d8/c86177-714a-487e-8985-cbe95139b9a6/1/9lCFQ2i9OqC-5Jv37cAxG5DfNxc.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/d8/c86177-714a-487e-8985-cbe95139b9a6/1/9lCFQ2i9OqC-5Jv37cAxG5DfNxc.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         2e:7d:62:23:97:5a:61:5e:c5:5b:b3:09:9f:30:78:86:7b:aa:
         e0:bc:11:7d:df:00:2a:b8:46:9b:1a:26:ad:29:74:0c:43:6e:
         6f:8d:a6:9e:ea:a0:0f:0c:3b:64:aa:24:80:71:8c:81:6a:0a:
         8e:cc:86:a0:b5:84:03:cc:e1:07:e1:a4:7b:4a:65:30:56:f3:
         da:44:f3:6a:93:07:09:ad:1c:f0:cd:80:8d:90:b1:f8:4d:71:
         5f:19:22:cf:45:87:20:8c:42:48:b1:05:69:40:38:70:08:d5:
         47:0c:59:f4:8b:f1:2f:8f:95:68:ba:10:ef:09:8a:9f:2c:0e:
         41:52:29:eb:0f:f3:04:fe:ad:14:df:b0:e3:71:dd:2a:aa:e6:
         c2:b3:47:3d:e2:17:32:e8:04:1d:47:11:03:2e:07:9f:e8:e9:
         de:d1:60:97:ec:65:55:af:11:e9:3f:a8:45:5b:5e:aa:f8:3b:
         8b:ce:26:c8:66:e5:f2:b0:5f:41:4e:7d:1e:dd:2b:5e:40:51:
         e2:2a:b1:6b:98:c8:49:c7:e2:56:3a:88:1e:23:64:0f:61:cc:
         bf:1b:05:3f:9b:18:29:f5:aa:7f:0b:67:a6:70:b2:b7:03:0a:
         d8:5c:2b:7f:35:6a:0b:fd:3f:6d:1d:bf:d1:a1:66:78:67:e4:
         c4:c8:2f:94
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAYztBonOjq6EMm608rZer7QSMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGY2NTA4NTQzNjhiZDNhYTBiZWU0OWJmN2VkYzAzMTFiOTBk
ZjM3MTcwHhcNMjQwMTA5MDcwMTE3WhcNMjQwMTEwMDcwMTE3WjAzMTEwLwYDVQQD
Eyg4ZTliOGJjNTIxZDFiMDljOGQxZjZlZDY3ZGFjN2NiNGUwYzg1MWMzMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkYU0C+AZ14t+q8UMkLUdVUWxXpn4
wkbBIX3WBOPsteDNEnO1rlmFifFwNnDmiB4B6vgJdUAtAXt9523ccVIYEo2oCHmu
YJapuKTajK15tRR1+RhDwR2bXCoBGZ5iK5N12+Klw2JQ5LrY0tiQruLfBPXEiuho
W0ceQjsMKVz33pL3SJ9+EbO1mPBQOF3M/HO2iB4Ys7cMt7YsPhFncvfrndNeBf3y
xfqk3k46951BsxFrI1eDjeuMns4N/H2vh/tnGNhJRXnENLrQN1zXGyFQV+Tq6Mh3
I9ast2jwKqv9P7fSLsIGiXjDw5FPSDLc+4Y4kRTf1Bl2D4B76JcPBFYc9wIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFI6bi8Uh0bCcjR9u1n2sfLTgyFHDMB8GA1UdIwQY
MBaAFPZQhUNovTqgvuSb9+3AMRuQ3zcXMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvOWxDRlEyaTlPcUMtNUp2MzdjQXhHNURmTnhjLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kOC9jODYxNzctNzE0YS00ODdlLTg5ODUt
Y2JlOTUxMzliOWE2LzEvOWxDRlEyaTlPcUMtNUp2MzdjQXhHNURmTnhjLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9kOC9jODYxNzctNzE0YS00ODdlLTg5ODUtY2JlOTUxMzliOWE2
LzEvOWxDRlEyaTlPcUMtNUp2MzdjQXhHNURmTnhjLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEALn1iI5da
YV7FW7MJnzB4hnuq4LwRfd8AKrhGmxomrSl0DENub42mnuqgDww7ZKokgHGMgWoK
jsyGoLWEA8zhB+Gke0plMFbz2kTzapMHCa0c8M2AjZCx+E1xXxkiz0WHIIxCSLEF
aUA4cAjVRwxZ9IvxL4+VaLoQ7wmKnywOQVIp6w/zBP6tFN+w43HdKqrmwrNHPeIX
MugEHUcRAy4Hn+jp3tFgl+xlVa8R6T+oRVteqvg7i84myGbl8rBfQU59Ht0rXkBR
4iqxa5jIScfiVjqIHiNkD2HMvxsFP5sYKfWqfwtnpnCytwMK2FwrfzVqC/0/bR2/
0aFmeGfkxMgvlA==
-----END CERTIFICATE-----
Generated at Tue Feb 27 01:01:08 2024 by rpki-client on console.sobornost.net