Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f5/4377d6-515c-420a-9134-69e337884cc9/1/3pKhrIkQz1yGXeWwIxsJ0E4RMvM.mft
File:                     3pKhrIkQz1yGXeWwIxsJ0E4RMvM.mft (raw, json)
Hash identifier:          Xui9XScXRB/6PichRwiuZTx1p9yueUFPEha7vwVDYBU=
Subject key identifier:   4D:51:01:50:96:31:05:85:10:C4:C1:9B:FE:00:C3:F6:96:76:F0:F4
Authority key identifier: DE:92:A1:AC:89:10:CF:5C:86:5D:E5:B0:23:1B:09:D0:4E:11:32:F3
Certificate issuer:       /CN=de92a1ac8910cf5c865de5b0231b09d04e1132f3
Certificate serial:       019346DEBA9F0C77CD70A680F2B82D4F0426
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/3pKhrIkQz1yGXeWwIxsJ0E4RMvM.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/f5/4377d6-515c-420a-9134-69e337884cc9/1/3pKhrIkQz1yGXeWwIxsJ0E4RMvM.mft
Manifest number:          0AEE
Signing time:             Wed 20 Nov 2024 00:00:22 +0000
Manifest this update:     Wed 20 Nov 2024 00:00:22 +0000
Manifest next update:     Thu 21 Nov 2024 00:00:22 +0000
Files and hashes:         1: 2AjEDDvjLI2NhFoH8wO0CUP59vo.roa (hash: GHH8w/avwQT6edGrBHpj7IWbMAf7RVfozO1Xq9lVeqY=)
                          2: 3pKhrIkQz1yGXeWwIxsJ0E4RMvM.crl (hash: 6jcZ7GXJpr2ShYecCn2naNWpSZHuUtDGCBL1p8zCDF4=)
                          3: 5KH4yEFihyvqe8lWBqRe_9majWA.roa (hash: arc+c7jTrwTqn744fLPnOdN85JNk1CPvY1kTu+yyF2s=)
                          4: 9mcOMNmJn8Vd1BPjGbhoeq-eppE.roa (hash: KId9R8w2Vcq0r3uT6nQugNaPHowOLy7Lbuu5VI0i32g=)
                          5: LtXt8swanj1v8KpeYzaizld3WfI.roa (hash: XmB/zcGf3IhNKfApxjSHC99nMFeLAQ2ArE/iKN9hdoQ=)
                          6: Yc2at_93Zx-Rb9Z-z-Z-9fodHZw.roa (hash: /S+DjYbf5MT7bcrd5Hza5IKCQyB9FuGS6A8HyOz+Iwo=)
                          7: gh3fblMNyshrfGAmsN5Iq-02wYA.roa (hash: WotLgxYRuUIuzqYrcsflemc460BpdnEOyFA+8rWy6YA=)
                          8: hmPftndANiOel_mUR-MvXCtCo0g.roa (hash: JzqcQNWwUfvndAaMBZrlutiCpoYy3e7Dxtxu4tu1mxs=)
                          9: uSU0I16PyIOyPUlQfw2w_e8AlTA.roa (hash: +tZxCaP36dgS6+Kwpr1uU6GHnr5uXoNDYy2CTNCqnLk=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:93:46:de:ba:9f:0c:77:cd:70:a6:80:f2:b8:2d:4f:04:26
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=de92a1ac8910cf5c865de5b0231b09d04e1132f3
        Validity
            Not Before: Nov 20 00:00:22 2024 GMT
            Not After : Nov 21 00:00:22 2024 GMT
        Subject: CN=4d5101509631058510c4c19bfe00c3f69676f0f4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:de:ac:98:06:48:73:58:33:d9:36:bc:83:14:62:
                    3b:bc:37:55:0f:af:04:a6:15:37:d6:18:34:0c:af:
                    03:80:10:7b:b9:76:aa:29:2d:9b:26:4a:a1:63:ee:
                    3a:a9:c6:30:b5:7d:42:4e:01:fc:40:5b:cb:51:8d:
                    47:bb:69:5e:4e:14:21:c7:97:86:44:81:99:41:c8:
                    fd:6e:75:1f:88:5f:13:4a:ba:5d:a8:b8:73:53:ff:
                    ba:dc:b0:04:34:92:ce:be:6a:20:98:50:a6:36:6c:
                    6c:b7:a0:93:fc:2d:95:68:dd:7d:f6:15:f3:7f:c5:
                    da:4f:b7:92:65:ea:fa:47:a6:8e:7b:17:a3:74:94:
                    5d:4b:95:43:08:47:e1:9e:5b:0f:74:02:12:c7:89:
                    7f:f6:e9:67:8c:d5:60:ee:3d:64:44:8b:bc:cd:57:
                    d1:a8:19:08:1d:79:f4:71:d2:0f:95:0a:18:02:aa:
                    ec:f1:cc:80:f5:2b:c4:d9:60:27:a2:24:60:aa:93:
                    1e:e8:05:db:f9:75:01:7e:4b:e9:39:fb:1e:b6:b5:
                    c7:31:25:3b:18:c5:9b:14:60:99:36:92:3b:e0:bb:
                    fa:25:cf:0f:1e:a8:46:75:34:5e:43:62:87:6f:d2:
                    f6:56:29:64:42:b8:dd:ce:ec:c4:c8:f2:a9:fc:25:
                    e1:af
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4D:51:01:50:96:31:05:85:10:C4:C1:9B:FE:00:C3:F6:96:76:F0:F4
            X509v3 Authority Key Identifier:
                keyid:DE:92:A1:AC:89:10:CF:5C:86:5D:E5:B0:23:1B:09:D0:4E:11:32:F3

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/3pKhrIkQz1yGXeWwIxsJ0E4RMvM.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f5/4377d6-515c-420a-9134-69e337884cc9/1/3pKhrIkQz1yGXeWwIxsJ0E4RMvM.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/f5/4377d6-515c-420a-9134-69e337884cc9/1/3pKhrIkQz1yGXeWwIxsJ0E4RMvM.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         10:f9:38:72:b1:a4:99:57:db:3a:ad:c1:7b:8a:c2:54:14:c1:
         59:e0:62:7c:3e:3e:74:f6:2a:9a:4e:35:bf:09:be:22:1b:10:
         23:62:d7:cc:75:a9:13:10:ba:4f:5b:57:d7:11:88:4b:88:b2:
         4c:73:58:d3:60:38:89:06:30:72:df:e1:49:c0:68:39:e5:7c:
         5b:a8:45:b4:4c:6b:5e:9c:a7:99:b7:38:2c:5c:27:ac:aa:f7:
         38:5b:2b:be:4a:76:d9:e0:23:96:c0:54:58:1b:df:19:40:6e:
         89:33:0a:54:1b:5f:89:a2:7f:50:51:a1:96:26:88:20:f7:59:
         46:44:04:37:aa:58:58:fa:87:b7:dc:61:15:2b:c0:21:16:fd:
         fd:be:ab:0e:cd:1d:0b:17:f7:65:a0:c4:37:82:a3:79:12:c5:
         62:8d:ae:d2:00:b8:df:f1:3a:c9:9e:aa:ea:a4:44:9a:26:0f:
         d9:50:5f:b8:7e:e6:b7:49:67:b6:0c:2e:12:1f:e8:db:23:1e:
         a4:cc:13:83:99:ce:e0:33:d0:cf:9d:1d:c6:1d:f1:62:16:2d:
         cb:bf:8a:1f:7e:29:80:df:dc:7d:47:5b:6a:75:15:2a:a9:63:
         e1:d0:01:ef:3c:e2:33:fe:24:56:1c:a6:4a:1d:ae:92:56:b8:
         b9:5a:a9:6c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Nov 21 02:22:31 2024 by rpki-client on console.sobornost.net