Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f4/4916b7-000e-489d-9783-f2569ea4cd74/1/0IhbQcqB-T9YPB7KcitQVYKAxZo.mft
File:                     0IhbQcqB-T9YPB7KcitQVYKAxZo.mft (raw, json)
Hash identifier:          WnCS/kSgsIMINgHbJTCParu+AevxC6wfWOUYkmEGmlU=
Subject key identifier:   87:D5:F3:9C:55:76:F3:79:FD:BC:32:23:09:50:48:76:1F:64:35:6E
Authority key identifier: D0:88:5B:41:CA:81:F9:3F:58:3C:1E:CA:72:2B:50:55:82:80:C5:9A
Certificate issuer:       /CN=d0885b41ca81f93f583c1eca722b50558280c59a
Certificate serial:       0193264333AC0EC700A25D0BBA262172352F
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/0IhbQcqB-T9YPB7KcitQVYKAxZo.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/f4/4916b7-000e-489d-9783-f2569ea4cd74/1/0IhbQcqB-T9YPB7KcitQVYKAxZo.mft
Manifest number:          1357
Signing time:             Wed 13 Nov 2024 16:02:38 +0000
Manifest this update:     Wed 13 Nov 2024 16:02:38 +0000
Manifest next update:     Thu 14 Nov 2024 16:02:38 +0000
Files and hashes:         1: 0IhbQcqB-T9YPB7KcitQVYKAxZo.crl (hash: U38IKd3/3ktSiv/kbng2ozB7IyzQ/kzycKRWE5zhIXI=)
                          2: PbD_YpB2I8RPNvIGY_jfvbC9Jp0.roa (hash: wnz+SWvI03910vTJkLnMypz5Xf7O6dK+S9jgdcRzu5w=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:93:26:43:33:ac:0e:c7:00:a2:5d:0b:ba:26:21:72:35:2f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d0885b41ca81f93f583c1eca722b50558280c59a
        Validity
            Not Before: Nov 13 16:02:38 2024 GMT
            Not After : Nov 14 16:02:38 2024 GMT
        Subject: CN=87d5f39c5576f379fdbc3223095048761f64356e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a6:60:f0:e8:d9:81:43:05:14:18:78:5d:d8:76:
                    b2:e5:d8:b6:10:3c:9c:a7:c0:09:50:57:77:bd:de:
                    9e:fd:34:c3:cf:00:01:fc:54:66:5d:29:bc:a2:3c:
                    52:de:f6:6a:ca:7b:32:0c:2b:ca:16:a4:be:84:2c:
                    97:07:ee:85:59:3d:4f:44:6e:43:da:8e:97:c3:ce:
                    b6:a4:2f:44:e2:c5:f0:3c:09:b2:a7:a7:b9:67:5e:
                    75:bc:86:a9:f3:05:07:5f:2f:97:ae:11:d6:1f:b9:
                    42:70:3d:4e:be:c4:02:0f:ba:d5:e6:3d:50:63:ca:
                    cd:f5:72:16:87:5a:3c:1e:7e:66:fe:b7:0d:07:de:
                    8c:0b:af:fe:6f:1d:d9:ea:d1:aa:cb:f5:1b:81:0c:
                    2b:24:f0:9b:8a:80:fe:24:25:c4:19:b2:54:4c:ae:
                    c4:c8:27:92:f1:1b:f9:bc:ea:05:bf:1a:b9:74:3a:
                    8b:84:49:a9:e4:b7:9b:62:05:cd:3a:77:54:44:0c:
                    4e:ef:13:13:26:ae:90:b2:d2:9e:08:6d:c0:81:dd:
                    ae:64:4c:8f:ee:9c:00:c0:98:5f:5d:78:18:d3:d8:
                    a0:01:ae:91:c2:27:93:d1:cb:16:db:6a:1d:f7:fc:
                    1a:14:bc:6d:db:a3:fd:33:f5:70:f7:e9:1e:8b:80:
                    66:41
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                87:D5:F3:9C:55:76:F3:79:FD:BC:32:23:09:50:48:76:1F:64:35:6E
            X509v3 Authority Key Identifier:
                keyid:D0:88:5B:41:CA:81:F9:3F:58:3C:1E:CA:72:2B:50:55:82:80:C5:9A

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/0IhbQcqB-T9YPB7KcitQVYKAxZo.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f4/4916b7-000e-489d-9783-f2569ea4cd74/1/0IhbQcqB-T9YPB7KcitQVYKAxZo.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/f4/4916b7-000e-489d-9783-f2569ea4cd74/1/0IhbQcqB-T9YPB7KcitQVYKAxZo.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         6c:a2:ce:e1:4c:fa:22:19:dc:3f:d1:28:4a:22:26:d0:97:4f:
         2f:62:4b:9f:32:78:02:ae:da:df:c0:17:54:9c:94:aa:cf:1a:
         d4:3d:19:3d:f5:1f:12:e9:f2:a1:f3:e8:29:66:07:dd:15:04:
         ff:25:62:79:08:b1:d1:19:af:2e:b5:a6:26:eb:6d:67:2b:f4:
         fd:bc:dc:25:45:dc:f5:b5:e4:17:19:5a:11:b7:20:bf:95:c3:
         d6:b3:26:04:85:73:bc:c5:c0:50:0f:34:af:70:d1:df:a0:b3:
         17:22:b2:5f:44:8b:f1:66:18:52:af:e0:13:15:3a:2d:38:5b:
         1f:66:01:b1:3c:a3:09:c0:5c:e4:3a:8f:ea:f9:1a:0e:0b:13:
         a5:dd:88:01:e9:ad:a4:79:90:49:a8:b8:ef:f3:34:56:05:00:
         20:e6:db:d6:76:0c:57:bb:ee:22:18:7f:99:ca:35:22:9d:a9:
         f7:16:82:c7:84:b3:5f:3d:f4:a6:6e:52:af:48:5f:f8:94:c5:
         db:d1:5e:ba:f3:86:b9:33:68:12:2b:df:f6:79:58:7b:b3:11:
         1a:6a:9e:da:b9:f2:2a:0d:af:ae:9b:7f:fb:36:de:e6:a3:49:
         d8:55:81:8f:f8:83:08:33:c4:13:65:93:d5:ea:3c:dd:a0:ec:
         eb:9d:b3:3d
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZMmQzOsDscAol0LuiYhcjUvMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGQwODg1YjQxY2E4MWY5M2Y1ODNjMWVjYTcyMmI1MDU1ODI4
MGM1OWEwHhcNMjQxMTEzMTYwMjM4WhcNMjQxMTE0MTYwMjM4WjAzMTEwLwYDVQQD
Eyg4N2Q1ZjM5YzU1NzZmMzc5ZmRiYzMyMjMwOTUwNDg3NjFmNjQzNTZlMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEApmDw6NmBQwUUGHhd2Hay5di2EDyc
p8AJUFd3vd6e/TTDzwAB/FRmXSm8ojxS3vZqynsyDCvKFqS+hCyXB+6FWT1PRG5D
2o6Xw862pC9E4sXwPAmyp6e5Z151vIap8wUHXy+XrhHWH7lCcD1OvsQCD7rV5j1Q
Y8rN9XIWh1o8Hn5m/rcNB96MC6/+bx3Z6tGqy/UbgQwrJPCbioD+JCXEGbJUTK7E
yCeS8Rv5vOoFvxq5dDqLhEmp5LebYgXNOndURAxO7xMTJq6QstKeCG3Agd2uZEyP
7pwAwJhfXXgY09igAa6RwieT0csW22od9/waFLxt26P9M/Vw9+kei4BmQQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFIfV85xVdvN5/bwyIwlQSHYfZDVuMB8GA1UdIwQY
MBaAFNCIW0HKgfk/WDweynIrUFWCgMWaMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvMEloYlFjcUItVDlZUEI3S2NpdFFWWUtBeFpvLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mNC80OTE2YjctMDAwZS00ODlkLTk3ODMt
ZjI1NjllYTRjZDc0LzEvMEloYlFjcUItVDlZUEI3S2NpdFFWWUtBeFpvLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9mNC80OTE2YjctMDAwZS00ODlkLTk3ODMtZjI1NjllYTRjZDc0
LzEvMEloYlFjcUItVDlZUEI3S2NpdFFWWUtBeFpvLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAbKLO4Uz6
IhncP9EoSiIm0JdPL2JLnzJ4Aq7a38AXVJyUqs8a1D0ZPfUfEunyofPoKWYH3RUE
/yVieQix0RmvLrWmJuttZyv0/bzcJUXc9bXkFxlaEbcgv5XD1rMmBIVzvMXAUA80
r3DR36CzFyKyX0SL8WYYUq/gExU6LThbH2YBsTyjCcBc5DqP6vkaDgsTpd2IAemt
pHmQSai47/M0VgUAIObb1nYMV7vuIhh/mco1Ip2p9xaCx4SzXz30pm5Sr0hf+JTF
29FeuvOGuTNoEivf9nlYe7MRGmqe2rnyKg2vrpt/+zbe5qNJ2FWBj/iDCDPEE2WT
1eo83aDs652zPQ==
-----END CERTIFICATE-----
Generated at Thu Nov 14 18:11:30 2024 by rpki-client on console.sobornost.net