Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e6/bc216d-db94-4bb1-9147-010e4219aeda/1/nL21tzqDMNIl80EMgbY40oPEDR8.mft
File:                     nL21tzqDMNIl80EMgbY40oPEDR8.mft (raw, json)
Hash identifier:          SdHRIUf/FDkelMh6Wn3re3aotQFeV00OpC16DUNI43w=
Subject key identifier:   F9:F5:F9:1A:BD:F7:D5:24:80:65:F9:AB:BE:75:0B:E8:FB:A6:0C:AD
Authority key identifier: 9C:BD:B5:B7:3A:83:30:D2:25:F3:41:0C:81:B6:38:D2:83:C4:0D:1F
Certificate issuer:       /CN=9cbdb5b73a8330d225f3410c81b638d283c40d1f
Certificate serial:       01922F1244E55A906281E94C1A492CF72327
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/nL21tzqDMNIl80EMgbY40oPEDR8.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/e6/bc216d-db94-4bb1-9147-010e4219aeda/1/nL21tzqDMNIl80EMgbY40oPEDR8.mft
Manifest number:          0EE5
Signing time:             Thu 26 Sep 2024 16:02:59 +0000
Manifest this update:     Thu 26 Sep 2024 16:02:59 +0000
Manifest next update:     Fri 27 Sep 2024 16:02:59 +0000
Files and hashes:         1: Na8sW_DHiQT24Q3-aonz8hz8WqI.roa (hash: eMw6Sd57TTrnc0QtEgRwXg+wTilafrlCiLtMotv7cEA=)
                          2: nL21tzqDMNIl80EMgbY40oPEDR8.crl (hash: vxY3eSi19Y6lUjHvzgJDsqtrgUAgupkXrb8MAhFQAcE=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:92:2f:12:44:e5:5a:90:62:81:e9:4c:1a:49:2c:f7:23:27
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9cbdb5b73a8330d225f3410c81b638d283c40d1f
        Validity
            Not Before: Sep 26 16:02:59 2024 GMT
            Not After : Sep 27 16:02:59 2024 GMT
        Subject: CN=f9f5f91abdf7d5248065f9abbe750be8fba60cad
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a1:01:10:57:4b:d1:4d:fd:32:80:89:89:5c:9d:
                    a0:b1:83:70:4c:6a:fc:9b:23:5b:3e:7c:13:0c:82:
                    89:e7:82:a3:66:0e:f3:c2:21:6f:45:f5:e9:31:b9:
                    c3:01:a3:67:8a:85:01:86:09:65:a4:c5:e7:61:aa:
                    89:e4:f0:a7:bb:7e:f0:3b:91:6c:56:2c:e1:be:05:
                    4e:cf:fd:98:d3:07:83:a4:d2:7a:63:88:2d:ae:28:
                    4b:be:43:65:1d:7c:64:e1:cf:3c:d7:fb:8a:81:0e:
                    36:23:46:22:37:4b:61:28:99:b4:34:da:e8:1a:1e:
                    b9:c6:a7:c6:2a:c0:bb:e7:5a:41:7d:76:03:5b:46:
                    34:c9:b4:03:54:22:58:55:5a:4c:21:ee:21:d9:76:
                    c9:09:39:f0:26:e3:e6:4a:74:34:f7:56:8e:ad:37:
                    62:45:c0:20:14:a7:14:3b:fc:7d:95:db:e8:57:26:
                    e5:8b:03:c6:0e:d9:e0:08:63:31:f8:6f:a7:13:ac:
                    34:5c:0c:55:26:e9:c5:c0:57:94:42:4e:f0:b8:11:
                    3a:62:0d:a0:5f:88:74:e2:e8:af:70:c8:ea:35:88:
                    a2:37:c2:79:02:01:65:73:8b:7e:6f:5f:8f:df:3a:
                    a4:2b:46:01:ba:51:35:0d:7e:c0:40:1a:25:20:9d:
                    9b:33
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F9:F5:F9:1A:BD:F7:D5:24:80:65:F9:AB:BE:75:0B:E8:FB:A6:0C:AD
            X509v3 Authority Key Identifier:
                keyid:9C:BD:B5:B7:3A:83:30:D2:25:F3:41:0C:81:B6:38:D2:83:C4:0D:1F

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/nL21tzqDMNIl80EMgbY40oPEDR8.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e6/bc216d-db94-4bb1-9147-010e4219aeda/1/nL21tzqDMNIl80EMgbY40oPEDR8.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/e6/bc216d-db94-4bb1-9147-010e4219aeda/1/nL21tzqDMNIl80EMgbY40oPEDR8.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         5c:56:a0:af:54:28:98:ef:45:27:63:80:78:00:a0:34:4f:e3:
         01:e1:56:c9:e6:eb:62:b8:7d:ca:b8:76:dd:7f:d3:0f:82:48:
         8b:7c:fe:b7:98:a2:87:95:6a:89:a2:78:c5:b3:3d:21:3e:1a:
         b2:a6:11:a4:10:48:c5:af:91:fe:9a:41:91:6c:7a:20:7b:c5:
         66:31:38:23:0f:87:bc:f1:80:78:de:da:b8:38:11:ab:4b:1b:
         6b:e6:d9:80:9b:da:48:73:6e:ca:08:e3:f5:9d:f7:4c:00:1f:
         7a:14:0e:1f:b4:b2:f0:18:65:03:cb:80:29:ac:02:0e:2a:b3:
         48:2f:1d:e9:66:eb:9c:d5:f1:81:ad:1c:4d:4f:83:73:6f:76:
         45:08:d6:1c:b2:ca:ec:02:fb:ac:99:98:97:e3:d3:2e:6e:53:
         77:4a:1c:c0:61:03:7e:91:53:91:e2:45:0a:b0:fc:a1:23:24:
         df:55:f3:db:65:34:54:2f:87:bc:66:c3:8b:34:fe:19:9e:85:
         c3:5a:e8:d3:e0:1c:24:36:97:74:8f:51:1f:73:ea:41:f1:35:
         9c:44:29:4b:7a:67:05:2e:f1:6c:21:cf:d0:65:c4:3c:bd:0e:
         4d:e7:a3:23:1b:1c:a5:44:0d:6d:a7:79:4f:94:90:2a:0e:cc:
         9b:ce:65:b6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Sep 27 20:11:23 2024 by rpki-client on console.sobornost.net