Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2c/4eacd7-a7a9-4a48-8325-b66bf3d405bb/1/QkWTfGiXa22Vg4AvQtSn6HIlil0.mft
File:                     QkWTfGiXa22Vg4AvQtSn6HIlil0.mft (raw, json)
Hash identifier:          rmvPW3E/S3uRzMw7NflIwXFmDwlmfnBem2TEzkPOZd4=
Subject key identifier:   FC:3A:FB:0E:98:93:E6:58:82:9F:2F:9F:2E:63:D4:C7:99:97:68:27
Authority key identifier: 42:45:93:7C:68:97:6B:6D:95:83:80:2F:42:D4:A7:E8:72:25:8A:5D
Certificate issuer:       /CN=4245937c68976b6d9583802f42d4a7e872258a5d
Certificate serial:       0192AF2A0630F6B04D0C6B0D6C60379C35D2
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/QkWTfGiXa22Vg4AvQtSn6HIlil0.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/2c/4eacd7-a7a9-4a48-8325-b66bf3d405bb/1/QkWTfGiXa22Vg4AvQtSn6HIlil0.mft
Manifest number:          6D
Signing time:             Mon 21 Oct 2024 13:00:19 +0000
Manifest this update:     Mon 21 Oct 2024 13:00:19 +0000
Manifest next update:     Tue 22 Oct 2024 13:00:19 +0000
Files and hashes:         1: QkWTfGiXa22Vg4AvQtSn6HIlil0.crl (hash: TGz8piaN5E8e2uM8w4Nm0zV08hQ4yJrVCe6HHCbLI7M=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:92:af:2a:06:30:f6:b0:4d:0c:6b:0d:6c:60:37:9c:35:d2
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4245937c68976b6d9583802f42d4a7e872258a5d
        Validity
            Not Before: Oct 21 13:00:19 2024 GMT
            Not After : Oct 22 13:00:19 2024 GMT
        Subject: CN=fc3afb0e9893e658829f2f9f2e63d4c799976827
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a3:53:43:df:43:a8:70:5f:fe:b2:c7:45:ac:9a:
                    01:bb:88:f9:93:c7:ce:55:03:e5:64:a6:c2:8d:a9:
                    55:62:89:35:ac:7a:72:72:10:cb:49:9f:51:fd:71:
                    8f:d7:2b:16:24:8f:32:8a:74:60:8e:83:be:3b:c4:
                    34:5d:ec:b9:73:da:8d:ec:7d:b4:26:d0:28:52:3a:
                    9b:fe:6e:c7:90:02:95:b4:ed:25:85:e7:31:d7:1a:
                    79:80:83:cc:42:e7:20:91:34:57:0c:a6:11:f0:27:
                    40:50:c9:21:77:f2:05:8e:2b:be:8a:30:a6:36:31:
                    b8:01:df:1b:b6:bc:61:18:e8:aa:75:fb:eb:ae:de:
                    9b:0d:d2:5a:55:64:2c:16:90:a9:f0:4c:48:46:4d:
                    63:8b:f1:f6:84:7d:c6:e9:d4:eb:d7:aa:52:1f:57:
                    ce:1d:d5:ee:78:ed:d2:c1:97:ee:c7:c4:6d:9d:f5:
                    aa:42:69:57:5f:e4:e6:c7:92:90:e4:d0:b6:17:f6:
                    28:17:17:91:5b:e9:0a:cd:1d:f1:da:a8:0e:7e:82:
                    a6:85:6e:54:9f:d4:e5:eb:49:c8:7d:94:c5:5a:35:
                    be:c9:21:fd:b1:3f:6e:78:b6:3e:2d:c7:60:bb:c4:
                    e5:e9:55:fc:94:c1:45:2d:8d:a4:6d:8d:df:e2:b1:
                    39:ef
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FC:3A:FB:0E:98:93:E6:58:82:9F:2F:9F:2E:63:D4:C7:99:97:68:27
            X509v3 Authority Key Identifier:
                keyid:42:45:93:7C:68:97:6B:6D:95:83:80:2F:42:D4:A7:E8:72:25:8A:5D

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/QkWTfGiXa22Vg4AvQtSn6HIlil0.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2c/4eacd7-a7a9-4a48-8325-b66bf3d405bb/1/QkWTfGiXa22Vg4AvQtSn6HIlil0.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/2c/4eacd7-a7a9-4a48-8325-b66bf3d405bb/1/QkWTfGiXa22Vg4AvQtSn6HIlil0.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         85:d9:a0:d9:eb:93:9b:4a:1f:34:8e:65:00:40:54:71:79:b8:
         8c:a9:75:29:eb:40:25:66:be:e2:db:ff:d1:18:56:7f:78:24:
         af:9c:c6:0c:2f:94:46:c2:ad:78:a1:ba:60:fb:7d:1a:08:98:
         7a:dd:b4:3b:9e:a6:5a:b2:15:8f:20:36:84:8e:fd:08:ab:db:
         72:f1:93:51:18:26:75:98:b2:af:62:7b:a5:27:d7:77:6c:34:
         09:d0:fc:7d:3a:2d:69:c1:46:c9:e2:57:a9:56:82:1c:7e:ab:
         2c:cc:80:19:16:4c:53:2d:83:48:c6:17:b2:cc:5e:9a:e5:19:
         9f:d2:a0:4a:9d:64:dd:2d:09:1c:bd:93:22:52:6a:32:6b:24:
         5c:07:33:9d:6f:cc:64:20:6f:2e:d5:e2:49:0f:ed:78:ac:30:
         29:61:14:96:ad:cd:1e:16:c0:d5:d2:6b:22:f9:f9:09:c5:9e:
         57:ea:70:e7:f9:df:7c:ed:52:d1:8d:28:46:6c:22:2c:82:9a:
         63:31:c3:83:58:11:4e:de:f0:b9:57:d2:9c:5d:5e:05:0d:62:
         4b:b9:55:d7:be:fd:c3:c0:b7:68:37:59:46:f6:70:f6:2d:a4:
         4c:82:eb:a5:fd:0d:94:a3:33:06:1d:72:41:f0:df:c8:a5:4a:
         82:63:5e:e5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Oct 22 19:17:50 2024 by rpki-client on console.sobornost.net