Manifest

$ rpki-client -vvf rpki.co/repo/AS202400/2/3CDDC1E61C39E6E8A41B278056C9542E3C79F7B2.mft
File:                     3CDDC1E61C39E6E8A41B278056C9542E3C79F7B2.mft (raw, json)
Hash identifier:          4JwdpfMseT7t+4/rlHpPMSPaKVGgVeRcra3TgR4j1AQ=
Subject key identifier:   2A:C7:71:C6:32:1B:D3:7D:66:DB:A4:3F:3A:37:C5:DA:29:6F:07:87
Authority key identifier: 3C:DD:C1:E6:1C:39:E6:E8:A4:1B:27:80:56:C9:54:2E:3C:79:F7:B2
Certificate issuer:       /CN=3cddc1e61c39e6e8a41b278056c9542e3c79f7b2
Certificate serial:       0ADB12D5E7DB8803F3D271F5BD4818262344953B
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/PN3B5hw55uikGyeAVslULjx597I.cer
Subject info access:      rsync://rpki.co/repo/AS202400/2/3CDDC1E61C39E6E8A41B278056C9542E3C79F7B2.mft
Manifest number:          033E
Signing time:             Wed 20 Nov 2024 06:00:48 +0000
Manifest this update:     Wed 20 Nov 2024 05:55:48 +0000
Manifest next update:     Thu 21 Nov 2024 07:36:48 +0000
Files and hashes:         1: 3CDDC1E61C39E6E8A41B278056C9542E3C79F7B2.crl (hash: josbyfeWxeP6+1UG7i9OwZtP2AYGsY5bWhkAQAD2TqM=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            0a:db:12:d5:e7:db:88:03:f3:d2:71:f5:bd:48:18:26:23:44:95:3b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3cddc1e61c39e6e8a41b278056c9542e3c79f7b2
        Validity
            Not Before: Nov 20 05:55:48 2024 GMT
            Not After : Nov 21 07:36:48 2024 GMT
        Subject: CN=2AC771C6321BD37D66DBA43F3A37C5DA296F0787
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c5:f1:25:d7:e1:f1:15:db:58:43:c5:c3:76:9e:
                    d1:d5:11:3d:20:9b:3a:22:d5:34:d5:f4:a0:0b:22:
                    0a:56:10:70:e0:b9:17:d6:e7:62:e0:a0:08:52:a9:
                    50:d6:a2:72:b6:4d:8e:ec:be:9c:4e:d0:ca:25:f3:
                    5c:6f:f1:a3:9c:4d:d9:f1:56:2c:0e:24:d0:18:dd:
                    68:84:73:10:d4:a4:86:31:1a:01:4e:23:46:b7:73:
                    35:18:e0:4e:3f:81:96:33:8d:77:bf:65:d7:07:8c:
                    17:1c:ea:9d:ab:e3:b2:25:e8:eb:b8:65:ec:d4:a0:
                    34:ff:bc:64:c1:8c:5c:c6:cf:54:51:d8:4f:ae:e3:
                    ed:26:f2:34:f4:b1:62:7d:29:8f:06:76:a1:f5:d4:
                    3b:79:6a:1f:b3:92:b3:64:37:1f:c6:81:48:07:7b:
                    7e:ac:d7:34:19:30:3f:c7:32:82:11:31:1a:eb:fe:
                    95:52:0f:da:2d:ac:c5:44:26:ce:bd:39:bb:93:13:
                    63:14:1f:69:da:33:7c:ac:22:11:f6:f8:a9:ee:60:
                    34:67:9a:68:c4:af:7a:d8:15:b7:4b:92:72:cf:7b:
                    8b:30:03:29:b2:03:41:ac:1b:08:64:2d:db:2b:a2:
                    31:12:ef:2f:d9:3d:25:df:07:f4:eb:96:96:ca:d0:
                    88:cb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2A:C7:71:C6:32:1B:D3:7D:66:DB:A4:3F:3A:37:C5:DA:29:6F:07:87
            X509v3 Authority Key Identifier:
                keyid:3C:DD:C1:E6:1C:39:E6:E8:A4:1B:27:80:56:C9:54:2E:3C:79:F7:B2

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.co/repo/AS202400/2/3CDDC1E61C39E6E8A41B278056C9542E3C79F7B2.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/PN3B5hw55uikGyeAVslULjx597I.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.co/repo/AS202400/2/3CDDC1E61C39E6E8A41B278056C9542E3C79F7B2.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         4b:f5:06:74:cc:9f:1f:22:73:12:c3:a3:bd:53:f2:8b:03:6c:
         22:0f:a0:b4:bb:52:ab:ba:0e:52:69:4b:ed:77:51:3f:1a:c0:
         d9:51:e8:3a:12:dd:02:dc:af:34:1c:6d:8b:ae:3b:e2:4d:da:
         45:6d:70:0f:0d:b4:4e:d3:0d:10:5a:45:b7:c2:55:43:6a:b8:
         76:6c:5c:2a:69:f4:d5:fb:41:30:3d:9c:cd:7b:1e:2b:9a:90:
         f9:db:bb:02:46:20:ba:d6:e7:34:93:70:db:3c:e9:91:7b:49:
         91:c9:fb:0f:31:1e:27:82:58:89:10:d1:11:ea:c6:c7:37:c6:
         f3:30:89:30:75:8a:ee:91:78:17:a5:20:e4:00:07:d1:86:d0:
         5d:79:57:b1:ab:5e:91:27:47:69:12:02:68:7a:8e:14:b0:8f:
         66:87:80:d5:e4:b5:8a:87:9a:1c:c0:1c:ea:82:a2:87:7a:8a:
         ad:12:a5:34:05:e1:ae:fc:63:3b:c2:c2:20:04:1b:17:ff:dd:
         3e:3e:b2:67:09:d7:66:cb:90:03:f4:27:85:6d:0a:65:07:12:
         27:c5:77:26:3a:3c:3d:86:84:41:ba:db:72:c4:ba:b7:92:96:
         46:56:2d:06:75:b1:d6:69:73:87:21:37:84:e0:78:b9:ec:30:
         63:08:6e:bb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Nov 21 02:11:44 2024 by rpki-client on console.sobornost.net