Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/dd/eb46ef-1527-466d-81e9-478bd59c4f4b/1/Y_M-r7FqX509ALRjBrB_9gZf-54.mft
File:                     Y_M-r7FqX509ALRjBrB_9gZf-54.mft (raw, json)
Hash identifier:          e5uYMyaykTdCiPm0XmGFWDBste5WPX3jWfM9TDnARvY=
Subject key identifier:   AD:06:86:BA:17:8B:D2:B5:65:0D:9E:25:DE:C5:C0:93:01:EC:4A:C1
Authority key identifier: 63:F3:3E:AF:B1:6A:5F:9D:3D:00:B4:63:06:B0:7F:F6:06:5F:FB:9E
Certificate issuer:       /CN=63f33eafb16a5f9d3d00b46306b07ff6065ffb9e
Certificate serial:       01918D0E80B70AD0B71CC9E82F1FEF4AB2F0
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/Y_M-r7FqX509ALRjBrB_9gZf-54.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/dd/eb46ef-1527-466d-81e9-478bd59c4f4b/1/Y_M-r7FqX509ALRjBrB_9gZf-54.mft
Manifest number:          0136
Signing time:             Mon 26 Aug 2024 05:00:23 +0000
Manifest this update:     Mon 26 Aug 2024 05:00:23 +0000
Manifest next update:     Tue 27 Aug 2024 05:00:23 +0000
Files and hashes:         1: Y_M-r7FqX509ALRjBrB_9gZf-54.crl (hash: qheN4ngGYS9H68O16dhq9sdgAOZXmapYQTrbfb4+iCU=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:91:8d:0e:80:b7:0a:d0:b7:1c:c9:e8:2f:1f:ef:4a:b2:f0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=63f33eafb16a5f9d3d00b46306b07ff6065ffb9e
        Validity
            Not Before: Aug 26 05:00:23 2024 GMT
            Not After : Aug 27 05:00:23 2024 GMT
        Subject: CN=ad0686ba178bd2b5650d9e25dec5c09301ec4ac1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8f:3d:82:75:3a:d4:d0:84:cc:c9:72:3f:4d:91:
                    81:18:c5:e4:cc:f3:32:3d:89:60:38:95:ac:1d:04:
                    4b:f1:6e:77:15:40:27:03:fc:56:2e:35:6a:57:dc:
                    b8:51:54:10:6d:7f:ec:99:3a:80:b4:eb:8c:b5:2e:
                    a7:a4:b7:73:6a:2b:81:7b:e3:a6:58:25:16:ea:9a:
                    ed:ac:13:83:ac:be:c6:9a:c9:8b:06:48:47:05:9f:
                    95:54:2e:53:25:36:bb:23:51:cf:dc:0d:3a:4f:bb:
                    00:73:b1:e9:a9:56:b7:2c:c3:15:a4:43:6b:fd:dc:
                    9b:33:1b:bc:d8:7e:84:bf:4d:04:a8:fe:f0:45:9c:
                    01:9b:66:bf:2f:d7:56:bc:75:14:b1:f9:5b:9f:40:
                    2f:0d:22:a7:fa:db:bb:1a:c5:0c:b6:02:0f:f4:3a:
                    ae:b1:ea:2c:0b:22:45:f7:fb:74:01:35:a2:24:3f:
                    ff:8c:36:bb:3d:21:89:bb:fd:27:e0:53:54:71:8c:
                    75:5f:8c:c8:ab:5b:cc:3c:80:31:19:2b:9b:cc:c3:
                    4b:8a:20:8f:aa:43:92:74:37:4d:7a:a9:11:49:31:
                    ae:e4:0d:57:29:f6:19:99:93:35:7d:fa:2c:4f:18:
                    50:cd:e8:ae:ed:9b:f8:89:9d:e3:9b:ea:93:31:1e:
                    4d:39
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AD:06:86:BA:17:8B:D2:B5:65:0D:9E:25:DE:C5:C0:93:01:EC:4A:C1
            X509v3 Authority Key Identifier:
                keyid:63:F3:3E:AF:B1:6A:5F:9D:3D:00:B4:63:06:B0:7F:F6:06:5F:FB:9E

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Y_M-r7FqX509ALRjBrB_9gZf-54.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/dd/eb46ef-1527-466d-81e9-478bd59c4f4b/1/Y_M-r7FqX509ALRjBrB_9gZf-54.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/dd/eb46ef-1527-466d-81e9-478bd59c4f4b/1/Y_M-r7FqX509ALRjBrB_9gZf-54.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         71:9e:7c:b2:0e:62:42:ab:01:a8:e6:94:9b:a0:d1:e0:90:6a:
         42:aa:c1:75:ad:95:bf:40:1a:0d:6e:ca:e4:8d:bb:fd:56:5f:
         5b:6b:8a:06:c7:ab:88:0a:79:cc:89:b1:ed:2c:e7:27:8a:4d:
         cf:af:f4:4c:6d:4a:8a:a6:a4:07:ca:75:3b:e0:03:d9:4e:65:
         22:a2:b8:da:5c:e5:fd:fc:8c:3a:9d:b2:3c:cd:b4:f3:4b:97:
         36:26:e6:36:fd:8c:0f:3c:ee:0b:f9:cb:79:49:3d:76:3f:93:
         9b:4a:6a:c0:35:cb:ce:60:bb:0d:00:f8:98:dd:c7:2c:92:a3:
         01:ce:bb:cf:d0:d2:07:6d:ea:d2:ca:16:ef:93:b7:6d:22:7b:
         df:00:b1:97:05:e0:74:73:ac:7a:88:53:3a:f5:a3:52:30:c6:
         e3:39:00:9e:26:30:1e:7f:a1:41:98:a1:07:aa:2a:e6:db:ea:
         af:e2:85:0b:06:00:d3:e9:17:63:02:7e:cf:2c:e4:6e:96:2e:
         62:3c:bc:47:58:58:61:88:13:32:d9:cc:89:1b:80:ca:40:48:
         4d:0b:84:de:fc:80:58:04:7d:0b:5a:aa:99:d1:42:42:f3:37:
         e3:78:ef:94:b5:f0:eb:7b:ab:84:fb:29:44:30:13:38:b4:a1:
         f9:d0:18:bc
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZGNDoC3CtC3HMnoLx/vSrLwMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDYzZjMzZWFmYjE2YTVmOWQzZDAwYjQ2MzA2YjA3ZmY2MDY1
ZmZiOWUwHhcNMjQwODI2MDUwMDIzWhcNMjQwODI3MDUwMDIzWjAzMTEwLwYDVQQD
EyhhZDA2ODZiYTE3OGJkMmI1NjUwZDllMjVkZWM1YzA5MzAxZWM0YWMxMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjz2CdTrU0ITMyXI/TZGBGMXkzPMy
PYlgOJWsHQRL8W53FUAnA/xWLjVqV9y4UVQQbX/smTqAtOuMtS6npLdzaiuBe+Om
WCUW6prtrBODrL7GmsmLBkhHBZ+VVC5TJTa7I1HP3A06T7sAc7HpqVa3LMMVpENr
/dybMxu82H6Ev00EqP7wRZwBm2a/L9dWvHUUsflbn0AvDSKn+tu7GsUMtgIP9Dqu
seosCyJF9/t0ATWiJD//jDa7PSGJu/0n4FNUcYx1X4zIq1vMPIAxGSubzMNLiiCP
qkOSdDdNeqkRSTGu5A1XKfYZmZM1ffosTxhQzeiu7Zv4iZ3jm+qTMR5NOQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFK0GhroXi9K1ZQ2eJd7FwJMB7ErBMB8GA1UdIwQY
MBaAFGPzPq+xal+dPQC0Ywawf/YGX/ueMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvWV9NLXI3RnFYNTA5QUxSakJyQl85Z1pmLTU0LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kZC9lYjQ2ZWYtMTUyNy00NjZkLTgxZTkt
NDc4YmQ1OWM0ZjRiLzEvWV9NLXI3RnFYNTA5QUxSakJyQl85Z1pmLTU0Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9kZC9lYjQ2ZWYtMTUyNy00NjZkLTgxZTktNDc4YmQ1OWM0ZjRi
LzEvWV9NLXI3RnFYNTA5QUxSakJyQl85Z1pmLTU0LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAcZ58sg5i
QqsBqOaUm6DR4JBqQqrBda2Vv0AaDW7K5I27/VZfW2uKBseriAp5zImx7SznJ4pN
z6/0TG1KiqakB8p1O+AD2U5lIqK42lzl/fyMOp2yPM2080uXNibmNv2MDzzuC/nL
eUk9dj+Tm0pqwDXLzmC7DQD4mN3HLJKjAc67z9DSB23q0soW75O3bSJ73wCxlwXg
dHOseohTOvWjUjDG4zkAniYwHn+hQZihB6oq5tvqr+KFCwYA0+kXYwJ+zyzkbpYu
Yjy8R1hYYYgTMtnMiRuAykBITQuE3vyAWAR9C1qqmdFCQvM343jvlLXw63urhPsp
RDATOLSh+dAYvA==
-----END CERTIFICATE-----
Generated at Tue Aug 27 04:15:05 2024 by rpki-client on console.sobornost.net