Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ee/65f609-33ef-4ca9-82a6-79ad49918694/1/hZJ6kyg9Ys5nLvofm-9XojVhGKo.mft
File:                     hZJ6kyg9Ys5nLvofm-9XojVhGKo.mft (raw, json)
Hash identifier:          9vPJj27Hg3Txe/SBJRE6nKVHSqLKJeC45LyU3ndoknQ=
Subject key identifier:   E9:A7:48:69:61:12:68:55:3F:89:85:9E:AD:C9:B3:EE:B8:44:6A:18
Authority key identifier: 85:92:7A:93:28:3D:62:CE:67:2E:FA:1F:9B:EF:57:A2:35:61:18:AA
Certificate issuer:       /CN=85927a93283d62ce672efa1f9bef57a2356118aa
Certificate serial:       019347179738FFF00A7F877EB40B29F91449
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/hZJ6kyg9Ys5nLvofm-9XojVhGKo.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/ee/65f609-33ef-4ca9-82a6-79ad49918694/1/hZJ6kyg9Ys5nLvofm-9XojVhGKo.mft
Manifest number:          1368
Signing time:             Wed 20 Nov 2024 01:02:28 +0000
Manifest this update:     Wed 20 Nov 2024 01:02:28 +0000
Manifest next update:     Thu 21 Nov 2024 01:02:28 +0000
Files and hashes:         1: hZJ6kyg9Ys5nLvofm-9XojVhGKo.crl (hash: YRGa7CVKA9Qv7zkvUlwfEbQpTWs8KE06aO366XwUhfM=)
                          2: xPsAEBUG9u8H5dpTDFetAp6IDP0.roa (hash: NrdGD4gWvSIPpkUkbU3+/XaUQk242Hs0KP5K2mIokbU=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:93:47:17:97:38:ff:f0:0a:7f:87:7e:b4:0b:29:f9:14:49
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=85927a93283d62ce672efa1f9bef57a2356118aa
        Validity
            Not Before: Nov 20 01:02:28 2024 GMT
            Not After : Nov 21 01:02:28 2024 GMT
        Subject: CN=e9a74869611268553f89859eadc9b3eeb8446a18
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9b:87:d3:bc:76:97:95:8e:41:8a:12:4e:ba:f3:
                    b5:a2:2b:ea:97:49:b6:5e:a6:63:20:08:aa:85:d3:
                    54:54:55:91:5f:82:b5:6e:3c:4f:e8:ad:70:42:a8:
                    be:f3:d1:ae:ef:77:49:fa:64:37:e0:98:41:10:62:
                    2b:5d:92:b3:6c:6a:9f:86:67:51:fa:dd:bb:78:9a:
                    bb:71:70:91:41:da:81:3d:da:0c:0e:89:c3:50:71:
                    cc:7d:73:63:e0:2f:a3:87:eb:69:54:c2:2f:52:1b:
                    48:d0:2e:83:9c:b0:a4:f9:f3:6d:d3:49:d3:44:a7:
                    94:6d:58:53:49:15:70:f8:8a:7e:b3:8a:25:cc:1f:
                    8f:f9:7a:2f:62:60:7d:f1:73:02:b7:98:7c:01:d1:
                    2a:bb:49:9b:b3:e7:cb:3c:95:78:91:10:cc:f6:50:
                    66:8d:4c:5f:2c:4e:76:3b:be:e8:a5:fc:5c:5d:e7:
                    4b:05:e1:fe:ab:c3:02:9c:a9:25:4c:bd:cd:0d:ce:
                    f5:7d:c5:31:c0:37:f6:bf:4a:f2:0f:0c:e4:bd:d0:
                    97:98:39:48:7a:6f:0e:a7:62:6a:9f:e7:c2:bd:a3:
                    d0:b4:8d:27:57:12:13:f5:fa:6f:cd:39:2d:0d:b6:
                    51:ee:74:61:4a:93:73:3c:46:76:dc:b7:7b:ad:9c:
                    db:b9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E9:A7:48:69:61:12:68:55:3F:89:85:9E:AD:C9:B3:EE:B8:44:6A:18
            X509v3 Authority Key Identifier:
                keyid:85:92:7A:93:28:3D:62:CE:67:2E:FA:1F:9B:EF:57:A2:35:61:18:AA

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/hZJ6kyg9Ys5nLvofm-9XojVhGKo.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ee/65f609-33ef-4ca9-82a6-79ad49918694/1/hZJ6kyg9Ys5nLvofm-9XojVhGKo.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/ee/65f609-33ef-4ca9-82a6-79ad49918694/1/hZJ6kyg9Ys5nLvofm-9XojVhGKo.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         61:4f:ea:17:a4:b3:fc:7f:67:81:fe:a9:a2:19:7b:4b:c8:89:
         28:da:67:c6:ce:a1:43:1a:e7:0f:87:f7:54:90:8b:c0:53:2c:
         63:3c:3b:85:c6:3b:a6:08:d3:f6:81:3f:6f:db:5f:03:e7:51:
         b1:e8:46:a1:a0:a7:cc:82:0a:37:52:9b:06:ab:20:f8:05:4d:
         32:1e:43:71:1f:ff:0a:2d:7c:3e:c8:c9:6d:59:b9:93:4b:d5:
         fc:d1:2d:5a:07:59:60:87:67:ef:00:1f:1f:dd:52:3c:d6:30:
         b1:e4:50:01:f6:93:dc:f5:00:7e:54:eb:71:c7:05:5b:ed:98:
         21:5e:52:31:4b:86:dd:52:d5:36:85:1f:a4:b1:80:c6:3c:03:
         7c:f7:dd:c7:cc:86:f3:28:1f:98:27:1e:25:cc:6e:e9:e8:34:
         ed:c0:4e:d0:a3:7f:c9:4b:c8:78:d9:ff:74:80:51:3b:8e:5f:
         4f:4f:6c:65:24:fc:ea:1d:3a:86:b3:3c:33:d9:48:91:96:c2:
         f9:37:67:c4:5c:54:b1:73:51:f0:db:12:f6:e5:9c:a8:b6:b0:
         58:e5:5a:b2:7a:71:70:24:4e:eb:e9:d2:79:d1:93:32:b2:1f:
         89:05:34:fb:69:8d:a9:cf:a1:46:92:ec:b2:cc:c3:e7:a2:64:
         e8:c3:45:ea
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZNHF5c4//AKf4d+tAsp+RRJMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDg1OTI3YTkzMjgzZDYyY2U2NzJlZmExZjliZWY1N2EyMzU2
MTE4YWEwHhcNMjQxMTIwMDEwMjI4WhcNMjQxMTIxMDEwMjI4WjAzMTEwLwYDVQQD
EyhlOWE3NDg2OTYxMTI2ODU1M2Y4OTg1OWVhZGM5YjNlZWI4NDQ2YTE4MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAm4fTvHaXlY5BihJOuvO1oivql0m2
XqZjIAiqhdNUVFWRX4K1bjxP6K1wQqi+89Gu73dJ+mQ34JhBEGIrXZKzbGqfhmdR
+t27eJq7cXCRQdqBPdoMDonDUHHMfXNj4C+jh+tpVMIvUhtI0C6DnLCk+fNt00nT
RKeUbVhTSRVw+Ip+s4olzB+P+XovYmB98XMCt5h8AdEqu0mbs+fLPJV4kRDM9lBm
jUxfLE52O77opfxcXedLBeH+q8MCnKklTL3NDc71fcUxwDf2v0ryDwzkvdCXmDlI
em8Op2Jqn+fCvaPQtI0nVxIT9fpvzTktDbZR7nRhSpNzPEZ23Ld7rZzbuQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFOmnSGlhEmhVP4mFnq3Js+64RGoYMB8GA1UdIwQY
MBaAFIWSepMoPWLOZy76H5vvV6I1YRiqMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvaFpKNmt5ZzlZczVuTHZvZm0tOVhvalZoR0tvLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lZS82NWY2MDktMzNlZi00Y2E5LTgyYTYt
NzlhZDQ5OTE4Njk0LzEvaFpKNmt5ZzlZczVuTHZvZm0tOVhvalZoR0tvLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9lZS82NWY2MDktMzNlZi00Y2E5LTgyYTYtNzlhZDQ5OTE4Njk0
LzEvaFpKNmt5ZzlZczVuTHZvZm0tOVhvalZoR0tvLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAYU/qF6Sz
/H9ngf6pohl7S8iJKNpnxs6hQxrnD4f3VJCLwFMsYzw7hcY7pgjT9oE/b9tfA+dR
sehGoaCnzIIKN1KbBqsg+AVNMh5DcR//Ci18PsjJbVm5k0vV/NEtWgdZYIdn7wAf
H91SPNYwseRQAfaT3PUAflTrcccFW+2YIV5SMUuG3VLVNoUfpLGAxjwDfPfdx8yG
8ygfmCceJcxu6eg07cBO0KN/yUvIeNn/dIBRO45fT09sZST86h06hrM8M9lIkZbC
+TdnxFxUsXNR8NsS9uWcqLawWOVasnpxcCRO6+nSedGTMrIfiQU0+2mNqc+hRpLs
sszD56Jk6MNF6g==
-----END CERTIFICATE-----
Generated at Thu Nov 21 02:22:08 2024 by rpki-client on console.sobornost.net