Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fe/7f7b6c-4e00-47ea-83fe-6a1e923cb3b0/1/Bh4lia_b3qWCMG8TyYPPJOXZ6Uw.mft
File:                     Bh4lia_b3qWCMG8TyYPPJOXZ6Uw.mft (raw, json)
Hash identifier:          +lZqDW1zG4xvvBshHrlgrFRhMUoecxMTitik8YBjDbg=
Subject key identifier:   DC:6C:EF:90:F7:2B:99:57:8E:6B:A0:8E:F6:9F:63:B4:6F:4F:28:F3
Authority key identifier: 06:1E:25:89:AF:DB:DE:A5:82:30:6F:13:C9:83:CF:24:E5:D9:E9:4C
Certificate issuer:       /CN=061e2589afdbdea582306f13c983cf24e5d9e94c
Certificate serial:       018E31784BE8284A6AC791AD88BDEC2890B8
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/Bh4lia_b3qWCMG8TyYPPJOXZ6Uw.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/fe/7f7b6c-4e00-47ea-83fe-6a1e923cb3b0/1/Bh4lia_b3qWCMG8TyYPPJOXZ6Uw.mft
Manifest number:          083A
Signing time:             Tue 12 Mar 2024 07:02:31 +0000
Manifest this update:     Tue 12 Mar 2024 07:02:31 +0000
Manifest next update:     Wed 13 Mar 2024 07:02:31 +0000
Files and hashes:         1: Bh4lia_b3qWCMG8TyYPPJOXZ6Uw.crl (hash: PxoaVjv1uaSGml9InBXUtgrHdd8OqaFWmmxhM2ULZzg=)
                          2: tFHmhD98jSnpjVNwVE0DeWc8NMg.roa (hash: oMj9crntLXQrGiipqys/y2cfzLa++4zSvrE2FeyY0dc=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:8e:31:78:4b:e8:28:4a:6a:c7:91:ad:88:bd:ec:28:90:b8
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=061e2589afdbdea582306f13c983cf24e5d9e94c
        Validity
            Not Before: Mar 12 07:02:31 2024 GMT
            Not After : Mar 13 07:02:31 2024 GMT
        Subject: CN=dc6cef90f72b99578e6ba08ef69f63b46f4f28f3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:92:82:38:b5:3d:80:73:ea:30:74:6b:98:d2:43:
                    b0:bf:a2:11:d9:67:06:35:0c:7f:68:ea:5a:4f:19:
                    3e:50:13:7b:74:60:68:6b:8b:f3:40:5b:3c:1b:f8:
                    de:2c:b4:6c:e3:f9:09:9b:56:38:dc:3b:ff:fd:cd:
                    8d:25:2c:1a:da:e0:d4:02:ae:90:91:56:af:ad:b5:
                    a3:ab:13:73:cb:30:67:68:4f:01:86:8a:d9:59:f3:
                    64:fd:12:50:f9:2c:ec:51:14:32:c4:24:b0:e7:73:
                    a8:e4:c5:d4:8e:42:df:77:6b:e9:5b:0a:46:a9:b2:
                    22:13:2a:5e:a8:ae:53:70:79:45:a0:c8:54:ba:12:
                    71:b9:76:04:30:a0:d8:c7:c2:6b:6d:36:2e:81:7f:
                    12:14:02:7c:b6:16:06:f2:01:0b:52:34:9d:83:ec:
                    42:bf:be:57:07:d7:30:16:63:b5:72:aa:f2:d8:7f:
                    d2:40:a4:3c:30:ca:5c:bc:c9:46:94:b1:2c:48:98:
                    90:8a:b0:14:21:a2:95:78:8d:ab:d6:98:19:b0:a9:
                    3d:5d:ed:c0:ec:6f:63:ef:47:87:f2:ea:3a:6b:39:
                    a1:25:9e:f9:98:fb:af:59:a1:bd:79:57:7f:87:88:
                    e7:ad:a3:8f:bb:c9:fc:cf:7a:3a:33:63:a5:0d:f9:
                    1e:55
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DC:6C:EF:90:F7:2B:99:57:8E:6B:A0:8E:F6:9F:63:B4:6F:4F:28:F3
            X509v3 Authority Key Identifier:
                keyid:06:1E:25:89:AF:DB:DE:A5:82:30:6F:13:C9:83:CF:24:E5:D9:E9:4C

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Bh4lia_b3qWCMG8TyYPPJOXZ6Uw.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fe/7f7b6c-4e00-47ea-83fe-6a1e923cb3b0/1/Bh4lia_b3qWCMG8TyYPPJOXZ6Uw.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/fe/7f7b6c-4e00-47ea-83fe-6a1e923cb3b0/1/Bh4lia_b3qWCMG8TyYPPJOXZ6Uw.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         2a:fa:b8:a6:12:df:7e:9e:34:9c:e7:cd:ba:9b:3f:90:af:b5:
         6b:97:68:be:17:b8:eb:40:0e:ff:9c:c5:74:b0:fd:7d:76:02:
         86:71:b2:af:c8:ab:a3:e5:95:2c:4c:37:f9:14:7d:0f:aa:4b:
         3b:03:02:fe:94:4e:16:0c:e4:6d:ed:9a:98:7e:5a:00:17:8e:
         ca:0a:ef:b5:14:b4:3e:bb:d8:40:2a:04:a2:6a:4a:e7:bd:31:
         16:84:84:63:25:dc:e9:0a:c7:1a:75:b6:2d:57:8c:14:99:bd:
         c8:0d:54:9a:77:08:04:6d:f0:f3:e6:02:f5:ce:a8:cd:81:1a:
         36:6e:a2:70:50:47:4b:15:82:0d:f1:eb:e7:bd:64:ee:c3:ff:
         bc:44:a0:6f:4a:c1:3f:96:72:77:de:72:3c:06:0a:35:3e:27:
         f2:16:c4:80:04:c8:b5:83:8a:ed:7e:ac:6a:de:ea:cd:47:d3:
         bd:20:97:71:e2:9b:d9:02:25:14:1c:17:b8:80:b1:7a:d0:1b:
         70:b1:b0:1b:f2:b7:54:48:0a:19:c2:18:03:a8:83:a0:a3:2e:
         61:2b:8f:4e:01:e2:22:11:88:56:3f:1e:95:85:a4:50:58:c0:
         7c:be:0b:5b:44:b5:df:ba:54:66:8b:0d:78:89:29:18:f7:95:
         5f:10:50:ec
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Mar 12 15:26:21 2024 by rpki-client on console.sobornost.net