Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f6/457968-feae-4554-abe2-f76e9ef52831/1/NO7jne0Dsqb9XijIisckTO1DKdg.mft
File:                     NO7jne0Dsqb9XijIisckTO1DKdg.mft (raw, json)
Hash identifier:          Zybbc5hrNKY9lqGrfP40fApvwM6Ok0DIAlwoxc6vNbs=
Subject key identifier:   7D:F8:65:3C:91:22:C5:5B:7C:F1:5E:E9:01:58:43:F2:C7:B4:10:C9
Authority key identifier: 34:EE:E3:9D:ED:03:B2:A6:FD:5E:28:C8:8A:C7:24:4C:ED:43:29:D8
Certificate issuer:       /CN=34eee39ded03b2a6fd5e28c88ac7244ced4329d8
Certificate serial:       01932565ABE383EBFD58FD43678DE0177D65
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/NO7jne0Dsqb9XijIisckTO1DKdg.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/f6/457968-feae-4554-abe2-f76e9ef52831/1/NO7jne0Dsqb9XijIisckTO1DKdg.mft
Manifest number:          1355
Signing time:             Wed 13 Nov 2024 12:00:40 +0000
Manifest this update:     Wed 13 Nov 2024 12:00:40 +0000
Manifest next update:     Thu 14 Nov 2024 12:00:40 +0000
Files and hashes:         1: A5koqhUzR29ZC6P2TVJc98EW0tw.roa (hash: lngzSIFkfWoMQ5qdyzzDdZhOfv+pSp9UEIU2tQYCtQw=)
                          2: NO7jne0Dsqb9XijIisckTO1DKdg.crl (hash: KZiUhAZVfNJQmaMyUFs+hNfnOiOa2zWnk9eucPCoXnU=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:93:25:65:ab:e3:83:eb:fd:58:fd:43:67:8d:e0:17:7d:65
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=34eee39ded03b2a6fd5e28c88ac7244ced4329d8
        Validity
            Not Before: Nov 13 12:00:40 2024 GMT
            Not After : Nov 14 12:00:40 2024 GMT
        Subject: CN=7df8653c9122c55b7cf15ee9015843f2c7b410c9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e9:22:af:47:9e:16:b8:e2:aa:24:05:0f:ee:65:
                    ad:ba:4f:83:a5:b6:a2:55:06:2d:ad:9c:9e:3f:7a:
                    8f:5d:5c:1d:30:f2:67:6a:51:07:13:58:f8:23:bb:
                    9a:d9:ce:cc:8f:68:79:3b:5f:86:f5:af:b6:7f:b3:
                    7c:7c:24:1b:70:f6:75:ee:fe:da:b4:42:1d:0f:2d:
                    7e:56:77:84:4c:1d:00:60:71:e2:6a:3b:ac:48:09:
                    c0:53:23:5e:5d:b1:ae:1c:4a:5b:c7:c0:59:2d:62:
                    d4:24:0e:15:6b:ec:78:1d:f2:eb:02:aa:14:f5:b5:
                    20:18:6c:eb:18:12:7a:6a:2e:a2:1b:07:c9:21:0b:
                    cb:dc:3d:dc:40:3b:e6:38:e4:94:47:dc:2c:4a:c4:
                    bc:5e:ed:ac:0a:7d:54:f0:67:ef:23:a2:30:ed:36:
                    b4:fb:a5:1d:ad:6a:78:02:a0:b9:e4:78:09:f0:ce:
                    48:18:96:9b:46:b6:b6:dc:d2:32:ae:96:c4:4f:cc:
                    62:1d:05:24:72:32:1c:bc:56:c4:55:49:ff:be:b9:
                    33:2b:ad:70:1f:c1:11:9e:ac:76:09:b5:77:d1:58:
                    01:88:70:69:cf:b8:9b:17:aa:a2:ab:42:0e:72:3c:
                    a5:34:be:6f:f8:37:77:dd:a5:6d:3d:95:f2:32:ed:
                    d7:cd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7D:F8:65:3C:91:22:C5:5B:7C:F1:5E:E9:01:58:43:F2:C7:B4:10:C9
            X509v3 Authority Key Identifier:
                keyid:34:EE:E3:9D:ED:03:B2:A6:FD:5E:28:C8:8A:C7:24:4C:ED:43:29:D8

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/NO7jne0Dsqb9XijIisckTO1DKdg.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f6/457968-feae-4554-abe2-f76e9ef52831/1/NO7jne0Dsqb9XijIisckTO1DKdg.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/f6/457968-feae-4554-abe2-f76e9ef52831/1/NO7jne0Dsqb9XijIisckTO1DKdg.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         61:11:03:ee:47:72:ff:98:78:7c:2c:a2:60:01:7a:37:35:54:
         56:03:64:78:08:f0:60:b4:5b:26:1a:0b:af:0c:8e:84:12:0f:
         5d:e5:c6:af:fd:89:f9:e3:8f:b0:38:d5:f1:3e:30:f3:61:02:
         84:23:fb:d8:8c:69:24:b0:76:2a:dd:a6:27:1b:2e:9f:7d:36:
         48:89:65:29:97:5b:04:20:f7:3b:f4:46:12:86:3b:7b:6b:07:
         6b:54:87:5f:d6:5f:ac:d5:00:aa:f9:d2:3e:9b:a5:cb:ef:87:
         00:07:e2:72:c7:bb:c5:15:cd:20:3d:c2:b9:60:51:ed:d5:49:
         d0:e9:61:44:f9:6d:3f:ee:24:9e:6d:76:2b:2a:5a:46:26:6a:
         b7:64:0f:0f:e7:87:1d:95:bd:49:ab:ac:44:8b:81:95:03:ab:
         8e:11:e0:3d:f8:ec:68:a9:1c:a8:71:d2:44:d2:52:b5:c8:21:
         2b:a4:22:17:49:77:1d:e7:45:e9:3b:35:48:81:fe:bc:fa:b3:
         5b:3d:bb:20:c4:fc:36:5e:d2:98:6e:be:d1:cc:f2:50:21:4c:
         27:33:34:cb:f5:92:9f:27:21:cb:03:e4:96:35:e2:db:a6:14:
         1c:4b:62:21:ec:ae:24:9c:ea:f1:ad:55:4a:94:15:27:71:23:
         bb:40:78:a6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Nov 14 18:12:18 2024 by rpki-client on console.sobornost.net