Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/22/987c09-bd70-4c61-ac90-beb8dbe0a442/1/9twfThiB7UwA6fyUYYP4lAg914M.mft
File:                     9twfThiB7UwA6fyUYYP4lAg914M.mft (raw, json)
Hash identifier:          6Pj0UfuPorJl2TPWSTZvxCM29cBhPtFj/h7XmvyTQUg=
Subject key identifier:   09:89:F3:0D:A4:B3:FA:48:E8:60:61:F8:0D:A9:C1:13:60:8A:8E:5A
Authority key identifier: F6:DC:1F:4E:18:81:ED:4C:00:E9:FC:94:61:83:F8:94:08:3D:D7:83
Certificate issuer:       /CN=f6dc1f4e1881ed4c00e9fc946183f894083dd783
Certificate serial:       01948F62F8CD87566981E25342A7B61AFFB1
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/9twfThiB7UwA6fyUYYP4lAg914M.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/22/987c09-bd70-4c61-ac90-beb8dbe0a442/1/9twfThiB7UwA6fyUYYP4lAg914M.mft
Manifest number:          05AA
Signing time:             Wed 22 Jan 2025 19:00:15 +0000
Manifest this update:     Wed 22 Jan 2025 19:00:15 +0000
Manifest next update:     Thu 23 Jan 2025 19:00:15 +0000
Files and hashes:         1: 9twfThiB7UwA6fyUYYP4lAg914M.crl (hash: gw9gTG6WiZwdIFJICOavBm83Ru4iKFTRtj88W22Qkcw=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:94:8f:62:f8:cd:87:56:69:81:e2:53:42:a7:b6:1a:ff:b1
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=f6dc1f4e1881ed4c00e9fc946183f894083dd783
        Validity
            Not Before: Jan 22 19:00:15 2025 GMT
            Not After : Jan 23 19:00:15 2025 GMT
        Subject: CN=0989f30da4b3fa48e86061f80da9c113608a8e5a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b4:82:61:54:a6:6f:19:17:d1:a3:ed:bd:c1:95:
                    04:9b:f1:f3:79:1d:de:4a:ce:86:4d:9a:c7:08:0f:
                    57:ed:93:5e:ac:10:b9:76:61:b0:5d:d3:0c:b9:0c:
                    fb:3f:fe:88:f3:b3:cc:bb:86:2e:cf:4d:da:25:7d:
                    d2:cb:b9:e9:bd:57:35:9f:04:17:cd:83:43:e3:25:
                    90:08:87:17:29:1d:16:e4:20:25:9f:0f:97:76:32:
                    db:e9:05:b2:c8:38:ff:71:7e:17:2b:93:d7:e9:51:
                    85:e1:c6:66:df:ef:7b:b6:41:82:77:60:0f:15:d1:
                    9b:bd:b9:34:8d:84:e9:a5:dc:8c:17:bb:20:56:bf:
                    14:f3:b8:2a:f7:a9:b7:d8:22:2b:4a:9d:4f:e2:34:
                    a5:92:b3:09:19:89:61:1b:c4:23:ed:ed:f1:b2:01:
                    37:73:1b:b6:16:fc:63:06:fc:1b:88:b8:22:53:f1:
                    8b:a8:e2:8d:5a:50:12:d0:56:5e:ec:00:5a:85:42:
                    2d:9f:7a:e9:c9:c5:0f:73:82:eb:29:c2:06:c2:47:
                    25:e0:07:cb:8a:17:af:54:6d:aa:74:ac:9d:1f:2a:
                    30:a8:91:88:e8:ad:61:e4:15:c3:78:6b:39:eb:dc:
                    fe:cc:84:4e:4b:ee:02:47:bf:47:f6:ab:74:3c:d4:
                    2e:e9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                09:89:F3:0D:A4:B3:FA:48:E8:60:61:F8:0D:A9:C1:13:60:8A:8E:5A
            X509v3 Authority Key Identifier:
                keyid:F6:DC:1F:4E:18:81:ED:4C:00:E9:FC:94:61:83:F8:94:08:3D:D7:83

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/9twfThiB7UwA6fyUYYP4lAg914M.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/22/987c09-bd70-4c61-ac90-beb8dbe0a442/1/9twfThiB7UwA6fyUYYP4lAg914M.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/22/987c09-bd70-4c61-ac90-beb8dbe0a442/1/9twfThiB7UwA6fyUYYP4lAg914M.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         5b:fd:55:6e:64:7c:86:41:82:87:2d:ff:05:e9:ac:e6:02:e1:
         e0:c2:1b:ea:41:e6:f3:98:4f:17:db:f3:b6:09:30:93:26:56:
         a7:b2:c2:47:dd:1d:df:a9:15:eb:a8:bd:db:44:2e:5a:f6:c6:
         81:c1:53:76:36:4a:08:82:77:f4:42:a1:75:27:75:07:1b:a6:
         e4:49:71:1c:9a:b7:24:b8:84:80:4c:bf:b5:1d:cd:14:b0:51:
         29:1f:e8:6a:44:26:a3:9e:50:a0:6d:8c:4d:77:ce:22:ca:fb:
         fd:77:de:11:f5:fe:d3:4b:94:44:4a:15:46:6c:dd:64:89:2b:
         17:ae:d4:fb:47:dc:a2:8b:03:cf:88:c9:a5:37:a9:a8:b0:25:
         59:50:b6:96:87:70:a3:03:f4:91:01:11:80:1f:53:44:55:bc:
         4c:88:43:ee:42:4a:89:8b:5b:4d:5b:f9:f7:6f:d1:e4:a9:73:
         52:2b:2a:b4:fd:b8:8f:b3:56:2c:e6:61:11:2f:44:ef:65:3d:
         42:b5:11:76:12:18:2d:f0:f6:a0:ad:ed:40:ce:d4:dd:61:5a:
         dd:ac:73:e7:e4:dc:3c:63:b3:d6:c8:5f:eb:84:8c:8d:bc:6f:
         e2:86:b0:1a:20:bb:b5:75:73:1d:33:b5:f5:a1:ce:43:df:c7:
         2c:df:13:a0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jan 23 19:12:35 2025 by rpki-client on console.sobornost.net