Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/14/278cfe-eaeb-4bae-a0db-a17011e4557b/1/Qd6VK1JCO0AaqfTkniQJ0C06Yz8.mft
File:                     Qd6VK1JCO0AaqfTkniQJ0C06Yz8.mft (raw, json)
Hash identifier:          53dbCo0NLgQ3rg73IQbReBF499xxvEEZOZsrgU3CD4o=
Subject key identifier:   F1:2C:ED:6F:CD:3C:04:D6:C0:0D:E5:AB:F3:F0:E4:BD:94:C7:55:73
Authority key identifier: 41:DE:95:2B:52:42:3B:40:1A:A9:F4:E4:9E:24:09:D0:2D:3A:63:3F
Certificate issuer:       /CN=41de952b52423b401aa9f4e49e2409d02d3a633f
Certificate serial:       01954823D65D851E730B19131C620C8F78EF
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/Qd6VK1JCO0AaqfTkniQJ0C06Yz8.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/14/278cfe-eaeb-4bae-a0db-a17011e4557b/1/Qd6VK1JCO0AaqfTkniQJ0C06Yz8.mft
Manifest number:          09F1
Signing time:             Thu 27 Feb 2025 16:01:02 +0000
Manifest this update:     Thu 27 Feb 2025 16:01:02 +0000
Manifest next update:     Fri 28 Feb 2025 16:01:02 +0000
Files and hashes:         1: Qd6VK1JCO0AaqfTkniQJ0C06Yz8.crl (hash: b9Js2vcPDvriWZCwgHlOx/X29oKLxD9kc1f2xrzHRjc=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:95:48:23:d6:5d:85:1e:73:0b:19:13:1c:62:0c:8f:78:ef
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=41de952b52423b401aa9f4e49e2409d02d3a633f
        Validity
            Not Before: Feb 27 16:01:02 2025 GMT
            Not After : Feb 28 16:01:02 2025 GMT
        Subject: CN=f12ced6fcd3c04d6c00de5abf3f0e4bd94c75573
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bd:cb:be:ab:57:1b:7d:d8:51:52:9d:1c:32:d0:
                    2d:a3:85:71:2b:3a:32:d9:dd:55:a8:25:30:fe:e8:
                    76:82:cc:97:a6:88:51:f6:23:0e:4b:6b:ca:bc:3d:
                    3f:63:29:88:fa:ff:56:60:2c:9f:13:1a:60:82:e8:
                    18:09:a8:6a:a4:27:13:a5:5d:ab:59:7b:fa:56:74:
                    42:a0:17:16:97:e2:9c:6c:85:b4:bd:81:d4:05:fa:
                    d2:fc:67:21:29:19:db:11:a5:b9:de:20:29:e0:f6:
                    6c:42:09:b5:33:23:d1:7d:53:ba:66:4a:24:93:35:
                    5a:19:81:80:ba:de:0f:30:ae:12:82:f2:30:99:e1:
                    02:a0:78:16:77:6d:6c:26:42:c6:5d:ca:44:4d:ca:
                    34:40:bc:de:ef:3a:d6:fb:13:ba:82:86:e2:37:8c:
                    6b:7f:7b:e2:0d:26:7a:1c:7f:81:e3:be:ae:3b:ca:
                    7f:a9:33:c7:63:d0:75:ac:bc:db:87:20:fd:12:fb:
                    2d:11:50:fc:b6:56:a1:ee:44:6a:02:ee:68:f3:e5:
                    4c:c6:71:66:f8:bd:a7:a5:47:73:ea:eb:a8:dd:fc:
                    5b:0f:06:5f:96:3a:8c:66:05:b9:5b:01:5e:ce:2a:
                    fd:94:21:38:c1:00:c4:02:b8:31:09:a1:8d:ca:4d:
                    2a:3f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F1:2C:ED:6F:CD:3C:04:D6:C0:0D:E5:AB:F3:F0:E4:BD:94:C7:55:73
            X509v3 Authority Key Identifier:
                keyid:41:DE:95:2B:52:42:3B:40:1A:A9:F4:E4:9E:24:09:D0:2D:3A:63:3F

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Qd6VK1JCO0AaqfTkniQJ0C06Yz8.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/14/278cfe-eaeb-4bae-a0db-a17011e4557b/1/Qd6VK1JCO0AaqfTkniQJ0C06Yz8.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/14/278cfe-eaeb-4bae-a0db-a17011e4557b/1/Qd6VK1JCO0AaqfTkniQJ0C06Yz8.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         a2:49:2b:79:fc:d7:a5:02:16:6a:c6:19:61:ca:8f:89:c4:28:
         75:ca:77:f7:19:3c:7c:9d:24:c1:cf:5f:27:0b:bb:87:a7:a9:
         b5:d4:9c:5f:05:1f:f6:4b:15:01:45:60:ca:74:19:51:09:a7:
         bd:31:bb:60:56:5d:f8:2a:fb:f6:f9:99:95:66:53:ad:b4:29:
         b5:44:d7:58:37:f0:5a:ad:af:bc:d0:90:69:c9:26:78:11:63:
         12:af:d8:13:ae:da:6e:5f:d6:b2:94:a7:28:dd:57:dc:6e:9e:
         98:3b:f8:5d:57:fa:3a:c1:6b:57:39:f8:41:51:70:20:28:e8:
         90:f1:17:51:3d:b2:b7:b1:7e:ad:43:d8:c9:d3:ee:d8:3f:66:
         de:4f:90:5a:cf:3e:78:f7:d9:11:ab:9b:de:be:f6:fe:2c:47:
         14:5e:6f:d3:a9:e9:16:d2:12:31:58:7b:8a:67:11:4c:6b:5c:
         23:c7:f5:6a:5b:09:cf:a3:24:7f:fd:63:83:1c:53:45:2a:85:
         ea:1d:b7:39:36:38:98:5c:c9:1e:84:e6:1f:af:e0:29:89:29:
         94:3a:d5:97:de:40:7c:c3:81:26:e1:5a:40:af:78:87:8a:e6:
         7c:d6:b6:90:d8:8f:ab:b3:ab:ed:33:13:70:7a:bf:cc:07:59:
         91:08:cc:32
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Mar 8 04:47:32 2025 by rpki-client on console.sobornost.net