Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fc/a793cd-4952-4c4c-ab3f-1640e661c8d3/1/Nd8c221FfxrbM-u94BnqWyHftCw.mft
File:                     Nd8c221FfxrbM-u94BnqWyHftCw.mft (raw, json)
Hash identifier:          m9hLH9/03Y4eel8TCJAIblQOJCV8apsJKupvSyzbbwU=
Subject key identifier:   AC:A4:AD:A5:9A:30:26:0E:C8:B6:60:51:74:35:97:BE:45:F7:38:0D
Authority key identifier: 35:DF:1C:DB:6D:45:7F:1A:DB:33:EB:BD:E0:19:EA:5B:21:DF:B4:2C
Certificate issuer:       /CN=35df1cdb6d457f1adb33ebbde019ea5b21dfb42c
Certificate serial:       01934783825F982F2B7EC5E0DDDEA396525D
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/Nd8c221FfxrbM-u94BnqWyHftCw.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/fc/a793cd-4952-4c4c-ab3f-1640e661c8d3/1/Nd8c221FfxrbM-u94BnqWyHftCw.mft
Manifest number:          052C
Signing time:             Wed 20 Nov 2024 03:00:21 +0000
Manifest this update:     Wed 20 Nov 2024 03:00:21 +0000
Manifest next update:     Thu 21 Nov 2024 03:00:21 +0000
Files and hashes:         1: Nd8c221FfxrbM-u94BnqWyHftCw.crl (hash: Q5y52hL/0i/rBgd3bN0Nie8mbfQ62q6XVVemujOS30U=)
                          2: P2sHDsZKQzZHqUIQgZJB7m2qGFI.roa (hash: n7LWUggYc1ThxGrvKw/4s2DfFn/FOBkEL2Zf9WAnERg=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:93:47:83:82:5f:98:2f:2b:7e:c5:e0:dd:de:a3:96:52:5d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=35df1cdb6d457f1adb33ebbde019ea5b21dfb42c
        Validity
            Not Before: Nov 20 03:00:21 2024 GMT
            Not After : Nov 21 03:00:21 2024 GMT
        Subject: CN=aca4ada59a30260ec8b66051743597be45f7380d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a8:cd:e6:10:6f:25:d9:38:66:a3:83:f9:40:3e:
                    ee:63:ba:5e:11:31:06:3e:76:a8:0d:67:f0:e5:b1:
                    4b:31:d8:67:d3:3d:56:19:43:7c:b1:45:32:ba:98:
                    db:0a:c8:f9:d1:df:1f:67:43:7c:be:6a:ab:07:fb:
                    a3:eb:10:f0:ee:eb:ab:dc:23:77:30:c4:74:79:02:
                    83:d6:ec:f3:90:5e:35:b0:3a:80:e7:f6:32:b8:85:
                    c6:c3:06:09:bb:4c:7a:8d:2b:d9:42:f0:c4:44:c7:
                    65:24:cf:73:31:a7:be:5e:03:9b:ad:25:9d:87:48:
                    4f:6a:55:06:a0:93:ce:0f:d1:d6:5d:4c:3b:e0:ae:
                    90:b4:73:9d:e5:03:41:0a:61:27:21:4a:5f:f2:47:
                    a7:c1:f1:68:4c:d3:18:44:fc:69:60:07:4e:18:82:
                    e6:05:71:50:af:3e:da:07:09:06:fe:57:2b:9c:3b:
                    d8:5f:45:34:5a:d3:d9:e9:1a:de:15:6c:df:eb:07:
                    e5:33:27:76:3b:b0:73:c5:a0:e1:5e:dd:52:c5:2c:
                    c1:5f:12:6e:c0:11:ed:6b:75:e9:08:bf:18:9a:dc:
                    ef:f9:7a:55:fb:f7:6e:97:22:46:e0:7d:86:d7:03:
                    44:27:5f:dc:83:f2:76:90:3a:49:5a:67:82:35:df:
                    dc:31
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AC:A4:AD:A5:9A:30:26:0E:C8:B6:60:51:74:35:97:BE:45:F7:38:0D
            X509v3 Authority Key Identifier:
                keyid:35:DF:1C:DB:6D:45:7F:1A:DB:33:EB:BD:E0:19:EA:5B:21:DF:B4:2C

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Nd8c221FfxrbM-u94BnqWyHftCw.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fc/a793cd-4952-4c4c-ab3f-1640e661c8d3/1/Nd8c221FfxrbM-u94BnqWyHftCw.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/fc/a793cd-4952-4c4c-ab3f-1640e661c8d3/1/Nd8c221FfxrbM-u94BnqWyHftCw.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         9f:34:a1:f5:57:1d:7c:2a:75:f3:12:33:2f:77:d2:ff:e2:23:
         b0:4a:10:01:fc:19:9e:32:91:3b:64:f8:37:68:02:d5:df:37:
         66:3c:20:73:31:1a:68:8b:3e:64:e9:5f:0f:68:d7:ea:2e:a6:
         ef:5b:8c:78:2b:34:73:84:62:44:57:e5:87:87:f9:3c:78:25:
         bb:2e:24:6b:a9:b7:e5:2e:61:ca:06:2d:f6:22:0d:cc:e2:ca:
         1a:ef:fc:1e:d8:3c:3e:66:e6:6c:fe:c8:3e:12:8f:eb:92:05:
         be:e0:4a:bb:bd:24:85:41:e5:24:a5:1b:5e:10:a7:62:f9:ff:
         8d:21:f3:20:95:0b:ab:a6:de:20:5e:15:50:78:1c:d2:e8:92:
         ae:28:6b:48:56:a3:3a:e9:32:a9:72:44:59:2c:40:dd:c9:a1:
         f8:05:99:67:cb:d6:d2:d9:48:de:1c:72:a4:e1:a5:69:35:ad:
         b9:ff:ae:49:26:6c:bb:8a:eb:ef:b7:26:db:1b:e9:38:6e:aa:
         4c:59:6e:5e:f6:25:c4:38:0e:2e:78:65:b7:74:39:92:c1:9b:
         5a:9a:8c:e4:74:7f:2a:ee:51:0a:32:33:3b:65:85:8b:18:0a:
         f1:36:76:60:34:db:1e:99:72:d5:51:3e:45:47:37:49:3a:01:
         69:f3:df:47
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Nov 21 02:22:48 2024 by rpki-client on console.sobornost.net