Manifest

$ rpki-client -vvf rpki.co/repo/AS202400/3/9B4F55D25CA44886E84A3C4D982C8D35E56A169C.mft
File:                     9B4F55D25CA44886E84A3C4D982C8D35E56A169C.mft (raw, json)
Hash identifier:          AqZcIhhmN6b6RVaqmCKX21Y5nlh5F0Bd9Nak5gyKars=
Subject key identifier:   10:A1:5A:F0:82:03:20:36:8C:86:A9:66:D1:D6:DF:EC:24:96:08:24
Authority key identifier: 9B:4F:55:D2:5C:A4:48:86:E8:4A:3C:4D:98:2C:8D:35:E5:6A:16:9C
Certificate issuer:       /CN=9b4f55d25ca44886e84a3c4d982c8d35e56a169c
Certificate serial:       10BFA0498938FEA488F4EF704893835C77B2BD6D
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/m09V0lykSIboSjxNmCyNNeVqFpw.cer
Subject info access:      rsync://rpki.co/repo/AS202400/3/9B4F55D25CA44886E84A3C4D982C8D35E56A169C.mft
Manifest number:          0335
Signing time:             Wed 20 Nov 2024 06:05:48 +0000
Manifest this update:     Wed 20 Nov 2024 06:00:48 +0000
Manifest next update:     Thu 21 Nov 2024 09:07:48 +0000
Files and hashes:         1: 9B4F55D25CA44886E84A3C4D982C8D35E56A169C.crl (hash: A/x7esvI3szAGyALa92NtLcOv38G6FD/Nz/3IftA/5w=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            10:bf:a0:49:89:38:fe:a4:88:f4:ef:70:48:93:83:5c:77:b2:bd:6d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9b4f55d25ca44886e84a3c4d982c8d35e56a169c
        Validity
            Not Before: Nov 20 06:00:48 2024 GMT
            Not After : Nov 21 09:07:48 2024 GMT
        Subject: CN=10A15AF0820320368C86A966D1D6DFEC24960824
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c9:e5:12:a2:e1:3a:01:a5:12:f7:e5:fb:5d:d2:
                    65:de:30:2f:67:aa:04:b2:a9:9d:8b:45:5f:14:29:
                    ae:6d:42:dc:79:28:78:ea:30:57:56:83:56:20:d1:
                    23:39:52:51:40:04:46:59:5f:2a:e7:b4:85:de:b0:
                    bb:c2:7e:c6:8d:e1:cb:62:60:d7:ef:38:ca:da:97:
                    d6:48:ee:50:54:ad:ea:9f:16:9e:2c:d8:f9:84:24:
                    e1:fa:4d:29:a0:1a:47:54:a2:db:ff:87:c0:ef:f4:
                    da:94:56:49:bb:c9:6d:1d:b3:dd:35:e9:2e:76:cc:
                    63:b3:a7:6e:ee:26:5b:2f:ee:ce:b2:c7:d9:97:5e:
                    75:d1:a9:28:d8:ff:f4:20:06:e1:3a:d1:cc:86:75:
                    91:e0:f6:5f:54:19:45:1c:8e:36:19:33:7a:01:7a:
                    27:e0:aa:f4:24:69:42:3a:36:a0:c4:be:23:e2:1e:
                    51:2f:8d:08:fe:49:e9:45:bb:df:4c:59:49:25:31:
                    f9:b0:e6:c9:ef:1c:48:ef:8b:25:fd:6c:98:7a:24:
                    be:e7:47:99:1d:f8:96:cb:97:02:ec:51:5e:70:2a:
                    ee:16:05:10:5e:d3:d2:88:84:c2:17:0c:ef:3d:8e:
                    cb:4b:d3:c8:40:17:5d:e9:bc:f8:49:71:e5:9b:d3:
                    85:83
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                10:A1:5A:F0:82:03:20:36:8C:86:A9:66:D1:D6:DF:EC:24:96:08:24
            X509v3 Authority Key Identifier:
                keyid:9B:4F:55:D2:5C:A4:48:86:E8:4A:3C:4D:98:2C:8D:35:E5:6A:16:9C

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.co/repo/AS202400/3/9B4F55D25CA44886E84A3C4D982C8D35E56A169C.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/m09V0lykSIboSjxNmCyNNeVqFpw.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.co/repo/AS202400/3/9B4F55D25CA44886E84A3C4D982C8D35E56A169C.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         ad:a9:f5:a2:29:89:69:97:4c:09:2c:72:f6:85:cb:49:ae:dc:
         89:11:df:91:a2:a4:6e:5c:59:f7:d2:b8:9d:c7:3b:97:19:83:
         76:e3:65:e8:57:ba:bb:80:6e:8c:41:a6:dd:35:26:4d:f7:a9:
         82:80:c9:4a:ff:6c:f8:81:24:e5:fa:77:50:87:6a:c0:06:7d:
         c0:bc:5b:06:74:74:4a:74:47:67:48:9c:55:3c:6e:4c:4b:0a:
         9a:2e:c1:76:51:7b:6d:e3:8d:f6:d7:58:57:eb:1b:a2:d5:ef:
         45:c9:13:b9:cc:13:8e:0d:09:33:6f:2d:c8:2c:2c:94:2c:06:
         df:f6:50:a3:7f:e0:51:d3:71:20:da:a7:bd:9d:ee:2a:6f:0f:
         df:f4:c1:2a:10:a7:d3:12:7b:02:d5:05:e3:f5:09:61:39:0e:
         62:d1:89:d0:6c:05:57:ae:0d:9f:f0:fa:54:ff:de:70:e5:88:
         73:61:a5:a0:80:9e:2d:bd:65:8f:2c:ba:ff:db:a6:2c:d7:2a:
         56:18:d3:69:50:1f:57:93:70:d2:7f:03:dd:50:8d:02:5d:3a:
         62:78:fd:3d:c4:cf:ce:d7:24:d1:10:49:25:cb:8e:cd:38:9b:
         4e:9c:b3:80:62:23:c2:90:fa:29:2e:9f:c7:38:92:34:ad:2b:
         90:d2:8d:f3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Nov 21 02:11:44 2024 by rpki-client on console.sobornost.net