Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ef/185b1b-9885-4de6-bc5f-b9121a6f7189/1/Y3EI4NGZkv3Av7bicTcwT9VDQ20.mft
File:                     Y3EI4NGZkv3Av7bicTcwT9VDQ20.mft (raw, json)
Hash identifier:          Y65jwIWsvLtzi2JWi20AwV9Nxnzb1gH1anv38ISahuY=
Subject key identifier:   A4:FB:7C:20:B4:4C:7C:A5:C7:BC:F1:4E:0B:35:CF:CE:8C:8B:79:45
Authority key identifier: 63:71:08:E0:D1:99:92:FD:C0:BF:B6:E2:71:37:30:4F:D5:43:43:6D
Certificate issuer:       /CN=637108e0d19992fdc0bfb6e27137304fd543436d
Certificate serial:       0193FAB1C707BA4295860F6797B16E17AAE5
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/Y3EI4NGZkv3Av7bicTcwT9VDQ20.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/ef/185b1b-9885-4de6-bc5f-b9121a6f7189/1/Y3EI4NGZkv3Av7bicTcwT9VDQ20.mft
Manifest number:          12B6
Signing time:             Tue 24 Dec 2024 22:02:55 +0000
Manifest this update:     Tue 24 Dec 2024 22:02:55 +0000
Manifest next update:     Wed 25 Dec 2024 22:02:55 +0000
Files and hashes:         1: Y3EI4NGZkv3Av7bicTcwT9VDQ20.crl (hash: jpK0B97VduhZowBmApuYBe46F85T5Qxit+oWpa3DUVA=)
                          2: zosmpKcLQNGkscPW8tKE7PBQSyk.roa (hash: fxmp6kgoB1x7HBzudnwiHB17kPjYswX/Pg9n2OgaTJw=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:93:fa:b1:c7:07:ba:42:95:86:0f:67:97:b1:6e:17:aa:e5
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=637108e0d19992fdc0bfb6e27137304fd543436d
        Validity
            Not Before: Dec 24 22:02:55 2024 GMT
            Not After : Dec 25 22:02:55 2024 GMT
        Subject: CN=a4fb7c20b44c7ca5c7bcf14e0b35cfce8c8b7945
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:94:11:b8:5b:35:24:ff:85:2b:7e:2a:41:e8:99:
                    59:7e:df:f7:54:6b:19:ed:fc:2d:87:ae:2a:17:11:
                    48:b8:dc:fc:2b:7e:bb:1d:ab:2c:a5:89:69:89:0b:
                    b5:69:bc:3c:f4:bb:90:ca:4d:f7:fe:d2:8e:52:87:
                    6a:70:ce:e0:15:6d:88:27:e9:43:5d:5b:43:65:40:
                    83:df:a4:50:5b:01:60:bd:09:1e:bf:aa:a2:62:ab:
                    19:65:21:a0:c9:97:c7:1c:89:e5:42:22:da:27:5b:
                    64:4b:f1:d1:77:be:af:e7:11:50:01:6b:9b:de:13:
                    3f:17:05:1d:40:57:19:87:a4:3f:34:da:7a:83:b0:
                    56:e3:bb:bb:e4:ac:c1:f3:b2:43:50:08:bf:48:b7:
                    fd:91:f8:ec:ac:6a:2c:0d:7c:5d:8a:56:e6:82:46:
                    d0:41:b1:2f:96:41:6c:98:31:e1:e6:40:fe:e1:0b:
                    34:68:44:d4:af:99:37:a9:09:e4:36:de:99:78:f6:
                    c0:81:a8:1b:2a:e0:9a:4c:bb:29:8f:a7:b1:db:de:
                    08:5e:48:5f:a7:8d:41:56:7b:c5:c8:1f:c7:82:29:
                    1d:91:1d:64:96:a1:e6:49:b7:00:c9:16:4e:3a:15:
                    59:89:af:53:e7:de:d3:53:dd:9a:3c:47:c4:a0:f1:
                    55:f1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A4:FB:7C:20:B4:4C:7C:A5:C7:BC:F1:4E:0B:35:CF:CE:8C:8B:79:45
            X509v3 Authority Key Identifier:
                keyid:63:71:08:E0:D1:99:92:FD:C0:BF:B6:E2:71:37:30:4F:D5:43:43:6D

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Y3EI4NGZkv3Av7bicTcwT9VDQ20.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ef/185b1b-9885-4de6-bc5f-b9121a6f7189/1/Y3EI4NGZkv3Av7bicTcwT9VDQ20.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/ef/185b1b-9885-4de6-bc5f-b9121a6f7189/1/Y3EI4NGZkv3Av7bicTcwT9VDQ20.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         47:47:3b:c4:fb:26:93:5c:d2:a3:13:91:17:0a:f7:5a:ce:27:
         bf:4b:f7:ee:4f:ec:e6:ff:aa:0b:67:c9:2c:bb:2c:73:d7:5d:
         61:e1:ef:ac:cb:45:6b:88:3d:5c:f5:a2:76:f8:ae:4a:2f:47:
         33:56:59:f8:16:f8:25:bb:16:87:e2:b0:cd:0e:6f:1c:06:4d:
         3d:66:90:e5:6d:bf:79:a7:45:40:0b:35:05:9a:0e:f8:e1:ff:
         85:f9:69:36:09:7d:1f:9b:f2:59:cc:09:db:ad:0a:a7:53:5e:
         19:8c:33:61:b1:fd:a2:21:ba:3c:f2:92:8c:99:07:b7:cc:5c:
         0f:39:70:4b:c9:05:11:74:cf:17:dc:86:2f:42:fc:8f:a2:39:
         59:f3:a9:38:b3:44:d5:d6:77:1e:35:7a:41:ed:8a:da:8b:ab:
         03:ba:c6:62:9a:8f:6a:b8:89:be:00:08:45:df:eb:d1:03:97:
         49:58:ee:6a:f4:21:af:7a:5e:e0:1f:8f:86:2f:7f:89:3d:72:
         35:6a:17:d3:e3:48:f4:b3:d6:cc:ce:3f:60:5e:c0:fe:28:aa:
         82:a9:16:9d:70:c3:59:9e:d2:97:6c:12:d6:f9:ab:72:a1:be:
         1d:ae:c5:31:cd:ec:cd:27:7c:80:62:05:1e:a5:d5:c0:4c:fd:
         1c:1d:9a:e2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Dec 25 21:30:23 2024 by rpki-client on console.sobornost.net