Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fb/945f0e-268e-4947-abb3-a9424d948251/1/9EV_vhDrKubg-Nx-pi1w8zFsNds.mft
File:                     9EV_vhDrKubg-Nx-pi1w8zFsNds.mft (raw, json)
Hash identifier:          Nhk3aNsm0zUD7whNGb1eywHtH6WiiQR0eabyKwMf3ys=
Subject key identifier:   14:58:C0:45:A2:A9:3E:99:9C:14:32:A0:A6:E9:EC:5C:F4:F1:E5:84
Authority key identifier: F4:45:7F:BE:10:EB:2A:E6:E0:F8:DC:7E:A6:2D:70:F3:31:6C:35:DB
Certificate issuer:       /CN=f4457fbe10eb2ae6e0f8dc7ea62d70f3316c35db
Certificate serial:       018CC9BDAE28F90C66599814BFFCFD347D9C
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/9EV_vhDrKubg-Nx-pi1w8zFsNds.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/fb/945f0e-268e-4947-abb3-a9424d948251/1/9EV_vhDrKubg-Nx-pi1w8zFsNds.mft
Manifest number:          0622
Signing time:             Tue 02 Jan 2024 10:35:00 +0000
Manifest this update:     Tue 02 Jan 2024 10:35:00 +0000
Manifest next update:     Wed 03 Jan 2024 10:35:00 +0000
Files and hashes:         1: 9EV_vhDrKubg-Nx-pi1w8zFsNds.crl (hash: fWoxaQD/2ElYM7nuL4KZ8YpfrLWlSnfexAQ/60mu0VU=)
                          2: crBEIFdLGziWgks2si4dhchqp6o.roa (hash: GxzvA536G0cl6XPAfA1wzVi3UZpUQPgclrrPuq5ErpA=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:8c:c9:bd:ae:28:f9:0c:66:59:98:14:bf:fc:fd:34:7d:9c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=f4457fbe10eb2ae6e0f8dc7ea62d70f3316c35db
        Validity
            Not Before: Jan  2 10:35:00 2024 GMT
            Not After : Jan  3 10:35:00 2024 GMT
        Subject: CN=1458c045a2a93e999c1432a0a6e9ec5cf4f1e584
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:86:54:d3:ea:6f:e4:20:ba:93:f5:49:ae:50:08:
                    4d:6c:70:97:6b:70:ea:b7:4d:5f:88:ce:b4:2c:28:
                    b2:37:92:7b:f6:9d:e5:0f:67:0c:a0:83:63:44:60:
                    c4:fa:2c:24:dd:71:ec:6e:4f:8a:12:ea:c4:f5:4a:
                    37:3d:b5:02:34:df:34:38:61:f8:c7:f8:c8:5d:85:
                    a6:43:eb:45:58:9d:e8:fd:94:88:d3:2b:3c:47:77:
                    ee:56:86:e3:83:f1:cb:ff:c4:6c:cd:85:89:45:be:
                    8f:70:10:d7:58:9e:e8:55:8d:0b:61:ff:34:82:b7:
                    b2:7e:a9:89:2c:b1:f7:e2:7b:b0:09:0a:cf:20:cb:
                    82:42:c2:c8:3f:a0:c7:72:23:8f:16:6f:27:57:42:
                    ff:01:5e:47:af:f5:30:56:25:b0:dd:2b:48:d0:d9:
                    2b:d0:e0:82:cb:4c:35:02:b8:58:36:4e:82:18:77:
                    6d:db:52:9c:84:75:87:8f:fc:33:fa:a9:1a:71:c0:
                    da:31:b7:ab:d8:b2:ba:eb:5a:e9:af:ed:17:86:dd:
                    33:b3:82:5b:d2:26:cf:4a:5c:9e:a7:11:6a:c3:13:
                    f5:90:dd:bd:c8:ca:b2:08:44:29:f8:66:54:8d:b3:
                    c8:f9:d6:4a:af:7f:ae:69:bd:27:00:60:f5:d3:ed:
                    dd:93
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                14:58:C0:45:A2:A9:3E:99:9C:14:32:A0:A6:E9:EC:5C:F4:F1:E5:84
            X509v3 Authority Key Identifier:
                keyid:F4:45:7F:BE:10:EB:2A:E6:E0:F8:DC:7E:A6:2D:70:F3:31:6C:35:DB

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/9EV_vhDrKubg-Nx-pi1w8zFsNds.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fb/945f0e-268e-4947-abb3-a9424d948251/1/9EV_vhDrKubg-Nx-pi1w8zFsNds.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/fb/945f0e-268e-4947-abb3-a9424d948251/1/9EV_vhDrKubg-Nx-pi1w8zFsNds.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         b2:d2:cf:f2:2d:aa:c1:ad:c9:83:2f:0d:29:93:9e:6c:cb:9d:
         ec:47:bb:bb:89:45:15:7b:6f:07:af:a8:e3:90:b1:2c:7c:50:
         a6:ce:94:bf:f9:f9:e3:9f:1b:e9:84:02:52:5c:6b:96:b5:a9:
         c2:6f:a4:e6:3c:3a:c1:20:d0:78:aa:6e:27:23:c5:46:f8:8c:
         e7:42:c6:3e:ff:2a:47:67:e6:20:b8:b4:c8:89:32:7e:9a:bc:
         19:51:f4:7d:6e:25:31:b0:ef:18:01:5b:c4:33:ee:02:c7:e4:
         26:c0:d7:92:11:de:94:68:78:29:ac:bc:59:d7:7c:f6:4f:42:
         fc:6e:a2:a2:18:00:8a:97:ff:33:55:42:ec:f7:91:66:19:f4:
         a0:d8:b2:10:43:01:ac:4e:42:98:d1:3e:10:c1:50:a8:c1:49:
         39:5f:58:ef:25:67:8b:de:58:7f:a1:51:c7:b2:1f:94:6a:54:
         35:dc:73:a7:73:48:7d:6f:8f:d4:ad:62:53:71:99:cc:80:ca:
         81:d6:f5:28:73:5d:17:b3:f7:bd:44:fb:af:33:f2:87:02:b5:
         36:a9:e4:65:2d:8d:19:e8:53:71:b1:fb:ae:ea:67:d3:6b:4b:
         b1:92:98:60:84:4e:8c:81:bf:ae:f3:af:09:c9:26:f4:4e:9b:
         fd:bc:51:a1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jan 2 16:34:51 2024 by rpki-client on console.sobornost.net