Manifest

$ rpki-client -vvf rsync.rp.ki/repo/clonoth/1/8B3F166D83606C1D74F388A25D9F50A57352BA6E.mft
File:                     8B3F166D83606C1D74F388A25D9F50A57352BA6E.mft (raw, json)
Hash identifier:          Ey2da5HJIHSnqYo8tk5r9Zw4hj4gIeH4J7RcY3uWST0=
Subject key identifier:   26:72:CD:22:42:23:5E:83:8C:7B:B5:E5:9F:E5:AA:3D:C7:90:BF:F2
Authority key identifier: 8B:3F:16:6D:83:60:6C:1D:74:F3:88:A2:5D:9F:50:A5:73:52:BA:6E
Certificate issuer:       /CN=8b3f166d83606c1d74f388a25d9f50a57352ba6e
Certificate serial:       0A2FF8B39DEC511349DCC3E4969AA7B87CD392E4
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/iz8WbYNgbB1084iiXZ9QpXNSum4.cer
Subject info access:      rsync://rsync.rp.ki/repo/clonoth/1/8B3F166D83606C1D74F388A25D9F50A57352BA6E.mft
Manifest number:          01B8
Signing time:             Sat 02 Dec 2023 18:25:50 +0000
Manifest this update:     Sat 02 Dec 2023 18:20:50 +0000
Manifest next update:     Sun 03 Dec 2023 20:04:50 +0000
Files and hashes:         1: 326131333a376134303a3a2f32392d3438203d3e203537313936.roa (hash: 69RNJuw+FUwScDuzzJOHUklFOaWd7LA5CSuwSwd+amI=)
                          2: 8B3F166D83606C1D74F388A25D9F50A57352BA6E.crl (hash: Mda8b2DdbKfsHltd5aSxmtBuQEH/Ciq691Arh8Sc0Sw=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            0a:2f:f8:b3:9d:ec:51:13:49:dc:c3:e4:96:9a:a7:b8:7c:d3:92:e4
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8b3f166d83606c1d74f388a25d9f50a57352ba6e
        Validity
            Not Before: Dec  2 18:20:50 2023 GMT
            Not After : Dec  3 20:04:50 2023 GMT
        Subject: CN=2672CD2242235E838C7BB5E59FE5AA3DC790BFF2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c9:12:c6:26:2a:a1:72:81:05:fa:e1:8c:3e:24:
                    b2:05:1c:78:0e:25:1b:98:e1:90:39:bd:ac:6c:a9:
                    e8:24:5c:38:63:7e:38:0a:f0:6d:9f:87:70:6e:4c:
                    99:50:ef:48:df:04:f1:c0:f5:33:e5:4a:41:51:9e:
                    03:10:f8:9b:9d:fe:35:41:c9:ba:db:8e:f3:a4:6c:
                    ad:d9:80:d7:4e:9e:7b:0d:7c:c4:9c:ed:26:87:5a:
                    43:5a:4c:62:64:20:a9:88:4b:83:14:86:e4:05:53:
                    4c:ef:74:58:a0:72:54:b3:90:4d:70:16:57:93:8f:
                    34:8d:ce:a4:c5:19:d9:56:7d:24:07:6d:93:f5:0e:
                    59:8a:61:4b:f9:fa:d9:da:f9:96:87:ba:ca:0a:25:
                    3c:b4:d9:ff:70:37:21:ff:eb:4f:c5:6f:65:48:eb:
                    95:eb:9a:f3:f0:37:63:a9:b8:d5:19:93:6a:96:09:
                    2c:71:60:67:48:30:80:15:29:9c:b6:80:ae:a5:0f:
                    fb:91:70:ff:bf:13:0e:7d:0b:4f:a0:93:b1:53:c6:
                    e4:b1:b6:43:5b:c3:0d:65:8e:3b:28:79:88:c7:e5:
                    68:30:85:29:e2:b4:04:73:6c:81:0e:be:a6:84:18:
                    22:36:06:b3:38:ba:f5:33:24:d7:f1:b6:0b:cb:2f:
                    7e:eb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                26:72:CD:22:42:23:5E:83:8C:7B:B5:E5:9F:E5:AA:3D:C7:90:BF:F2
            X509v3 Authority Key Identifier:
                keyid:8B:3F:16:6D:83:60:6C:1D:74:F3:88:A2:5D:9F:50:A5:73:52:BA:6E

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rsync.rp.ki/repo/clonoth/1/8B3F166D83606C1D74F388A25D9F50A57352BA6E.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/iz8WbYNgbB1084iiXZ9QpXNSum4.cer

            Subject Information Access:
                Signed Object - URI:rsync://rsync.rp.ki/repo/clonoth/1/8B3F166D83606C1D74F388A25D9F50A57352BA6E.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         12:a3:96:7d:3a:5c:7a:a1:38:de:5d:9e:4a:00:5b:08:d0:2f:
         ec:69:1a:7f:68:1f:65:55:62:b5:f0:0f:4c:20:f0:a3:c5:0e:
         fd:1d:69:f4:c4:53:c6:12:5b:10:cb:3b:e4:65:06:20:7f:80:
         e3:fa:c3:cf:82:17:d0:c2:31:89:50:af:90:f0:51:86:c3:89:
         62:06:f1:ca:a9:46:35:da:dd:f2:d3:b9:03:25:38:59:c2:d4:
         78:e7:d9:d6:27:38:35:65:e6:f9:08:c9:b6:e4:ba:00:93:b7:
         9d:74:b9:2e:8d:ce:f9:67:62:24:ad:e1:eb:c8:77:0d:55:56:
         2b:a9:07:ea:16:3b:57:5a:59:42:11:ef:42:dc:56:41:89:26:
         82:d8:13:66:92:18:57:e1:d6:30:1e:cb:57:aa:a2:8a:98:c7:
         b9:81:25:26:96:ca:6b:6e:41:27:f7:e8:99:f6:00:e9:8a:3c:
         12:bc:4f:1c:e3:2f:01:2f:d0:84:93:75:e9:ba:f7:b7:45:77:
         f1:b1:80:88:d0:da:2d:1d:97:34:36:e0:1a:45:29:fc:5f:cf:
         b5:30:a7:6a:1e:6f:55:ba:81:72:de:a0:ce:f4:61:4e:88:13:
         0c:c2:1a:25:5e:66:3a:de:9b:2b:44:83:7b:e7:b6:87:f4:bb:
         4b:de:05:02
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 18:05:24 2024 by rpki-client on console-fra.rpki-client.org