Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e1/3ec59e-ea85-40cb-a285-07ded20e3c63/1/hz7BW5jibospu33PSmBSys5tJoM.mft
File:                     hz7BW5jibospu33PSmBSys5tJoM.mft (raw, json)
Hash identifier:          wRhyp9Dsx4NV1fjeC9sajshi0AXp8BvZSUR3z9SQxrY=
Subject key identifier:   BE:3F:A2:9C:ED:7B:DE:BC:01:1A:40:88:B9:82:34:E8:BE:F6:1F:D7
Authority key identifier: 87:3E:C1:5B:98:E2:6E:8B:29:BB:7D:CF:4A:60:52:CA:CE:6D:26:83
Certificate issuer:       /CN=873ec15b98e26e8b29bb7dcf4a6052cace6d2683
Certificate serial:       018CECCF82C1C18DD4A033916EC53B2B1864
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/hz7BW5jibospu33PSmBSys5tJoM.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/e1/3ec59e-ea85-40cb-a285-07ded20e3c63/1/hz7BW5jibospu33PSmBSys5tJoM.mft
Manifest number:          07FB
Signing time:             Tue 09 Jan 2024 06:01:11 +0000
Manifest this update:     Tue 09 Jan 2024 06:01:11 +0000
Manifest next update:     Wed 10 Jan 2024 06:01:11 +0000
Files and hashes:         1: hz7BW5jibospu33PSmBSys5tJoM.crl (hash: gvGGGEM20LaHE1rCfSFnxvRqczUcTV+oQa9dIej8dcs=)
                          2: wzbb2zGEu4hFon3LvZoHz0P_YQs.roa (hash: D+qc74ALqdEhkQMcXXKCiEsyDiNvHhzDHWXcDZQU5XA=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:8c:ec:cf:82:c1:c1:8d:d4:a0:33:91:6e:c5:3b:2b:18:64
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=873ec15b98e26e8b29bb7dcf4a6052cace6d2683
        Validity
            Not Before: Jan  9 06:01:11 2024 GMT
            Not After : Jan 10 06:01:11 2024 GMT
        Subject: CN=be3fa29ced7bdebc011a4088b98234e8bef61fd7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a1:b4:9b:21:49:41:b6:c7:db:18:38:bc:f2:68:
                    b9:1c:00:2a:93:7a:69:ad:e1:c6:02:d5:c3:eb:cc:
                    33:e2:97:e3:c7:4e:8a:80:74:ec:23:9b:d7:37:a4:
                    32:1d:e9:11:6c:c1:14:ea:97:41:d0:d3:1e:63:10:
                    cf:c4:cb:80:cd:b0:57:70:58:f5:dd:ac:03:85:75:
                    58:63:f8:38:5f:07:1c:52:1d:03:90:90:a2:21:e7:
                    37:da:89:62:3d:90:16:e4:4b:84:8e:25:ab:85:02:
                    cb:55:fc:36:70:e6:95:aa:4f:7f:6b:3a:91:85:32:
                    f0:34:68:f1:08:c7:f4:39:35:43:6a:0b:59:10:dd:
                    4d:ea:ca:56:cc:0d:56:18:a4:b4:9e:99:17:92:6f:
                    73:e5:c3:be:22:60:3b:9c:a3:49:f0:03:ac:6a:6d:
                    a7:3f:28:5c:4c:20:ed:04:55:49:61:f8:d0:27:c8:
                    6c:71:d3:36:18:0f:e4:2c:c0:5b:d7:76:fd:cd:d2:
                    64:09:e0:f8:d1:40:ab:24:a8:6c:f8:0e:bf:7c:90:
                    32:6c:2d:e6:30:37:fe:6c:b4:89:e7:b0:c5:04:6e:
                    12:ab:ed:70:0d:52:d2:e5:60:61:0f:ba:c2:7d:71:
                    b1:6c:de:ab:8e:20:26:2d:56:87:1d:d9:d2:12:29:
                    16:f7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BE:3F:A2:9C:ED:7B:DE:BC:01:1A:40:88:B9:82:34:E8:BE:F6:1F:D7
            X509v3 Authority Key Identifier:
                keyid:87:3E:C1:5B:98:E2:6E:8B:29:BB:7D:CF:4A:60:52:CA:CE:6D:26:83

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/hz7BW5jibospu33PSmBSys5tJoM.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e1/3ec59e-ea85-40cb-a285-07ded20e3c63/1/hz7BW5jibospu33PSmBSys5tJoM.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/e1/3ec59e-ea85-40cb-a285-07ded20e3c63/1/hz7BW5jibospu33PSmBSys5tJoM.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         73:3c:2a:23:4b:b0:8b:93:69:9f:94:5e:cc:62:a9:14:c9:44:
         29:3e:82:81:86:5e:b0:56:86:ff:b4:55:bf:9b:cb:ee:dc:5c:
         65:4e:2e:1f:d7:52:c5:fc:56:fc:ec:ce:30:45:57:c2:88:04:
         94:95:9e:f6:5b:df:f4:21:ae:25:f8:5a:7a:b7:89:c5:09:85:
         3d:21:13:d2:78:11:b1:96:5f:47:47:cb:96:56:1b:ed:2c:f9:
         c3:aa:a6:e3:1f:93:8b:08:43:d9:a0:d3:2c:38:7e:c5:0f:23:
         0c:07:c7:8b:9f:04:75:5f:1c:ca:fa:68:1f:a3:07:82:f9:62:
         b9:a4:52:9b:ee:5c:c0:8b:7c:51:fd:08:43:2d:9d:28:a3:1e:
         8e:13:8b:ed:c5:2c:66:0a:a4:8b:29:7f:2b:0e:1f:f0:5f:32:
         04:d0:f6:b2:b8:66:ba:92:2f:56:20:2d:49:8f:fd:d8:d0:eb:
         4c:67:4e:30:83:c2:a6:38:22:f6:aa:13:28:20:52:9e:34:a4:
         d8:c4:9b:a9:06:96:34:13:d6:e8:46:12:9e:23:be:a9:3e:03:
         be:89:32:e6:f5:d5:f8:d4:72:88:9e:bd:a1:15:81:05:ce:88:
         ac:d7:b9:d8:ef:53:ae:0b:2b:ca:da:2c:d5:f4:46:73:ca:2e:
         fd:11:48:cd
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAYzsz4LBwY3UoDORbsU7KxhkMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDg3M2VjMTViOThlMjZlOGIyOWJiN2RjZjRhNjA1MmNhY2U2
ZDI2ODMwHhcNMjQwMTA5MDYwMTExWhcNMjQwMTEwMDYwMTExWjAzMTEwLwYDVQQD
EyhiZTNmYTI5Y2VkN2JkZWJjMDExYTQwODhiOTgyMzRlOGJlZjYxZmQ3MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAobSbIUlBtsfbGDi88mi5HAAqk3pp
reHGAtXD68wz4pfjx06KgHTsI5vXN6QyHekRbMEU6pdB0NMeYxDPxMuAzbBXcFj1
3awDhXVYY/g4XwccUh0DkJCiIec32oliPZAW5EuEjiWrhQLLVfw2cOaVqk9/azqR
hTLwNGjxCMf0OTVDagtZEN1N6spWzA1WGKS0npkXkm9z5cO+ImA7nKNJ8AOsam2n
PyhcTCDtBFVJYfjQJ8hscdM2GA/kLMBb13b9zdJkCeD40UCrJKhs+A6/fJAybC3m
MDf+bLSJ57DFBG4Sq+1wDVLS5WBhD7rCfXGxbN6rjiAmLVaHHdnSEikW9wIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFL4/opzte968ARpAiLmCNOi+9h/XMB8GA1UdIwQY
MBaAFIc+wVuY4m6LKbt9z0pgUsrObSaDMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvaHo3Qlc1amlib3NwdTMzUFNtQlN5czV0Sm9NLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lMS8zZWM1OWUtZWE4NS00MGNiLWEyODUt
MDdkZWQyMGUzYzYzLzEvaHo3Qlc1amlib3NwdTMzUFNtQlN5czV0Sm9NLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9lMS8zZWM1OWUtZWE4NS00MGNiLWEyODUtMDdkZWQyMGUzYzYz
LzEvaHo3Qlc1amlib3NwdTMzUFNtQlN5czV0Sm9NLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAczwqI0uw
i5Npn5RezGKpFMlEKT6CgYZesFaG/7RVv5vL7txcZU4uH9dSxfxW/OzOMEVXwogE
lJWe9lvf9CGuJfhaereJxQmFPSET0ngRsZZfR0fLllYb7Sz5w6qm4x+TiwhD2aDT
LDh+xQ8jDAfHi58EdV8cyvpoH6MHgvliuaRSm+5cwIt8Uf0IQy2dKKMejhOL7cUs
Zgqkiyl/Kw4f8F8yBND2srhmupIvViAtSY/92NDrTGdOMIPCpjgi9qoTKCBSnjSk
2MSbqQaWNBPW6EYSniO+qT4Dvoky5vXV+NRyiJ69oRWBBc6IrNe52O9Trgsrytos
1fRGc8ou/RFIzQ==
-----END CERTIFICATE-----
Generated at Tue Feb 27 01:01:14 2024 by rpki-client on console.sobornost.net