Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2f/031554-78c4-4577-8058-9b6b87138ae7/1/32d5WjuqRaia2o3afoTpa7euB4c.mft
File:                     32d5WjuqRaia2o3afoTpa7euB4c.mft (raw, json)
Hash identifier:          OWQOcU+JIyIvkvJVkXBOPcZdTJs2ZoyZ6xoFkSScD3o=
Subject key identifier:   3D:64:03:8A:0D:4B:11:0D:B6:B6:13:91:8B:21:A1:4C:4B:64:96:C3
Authority key identifier: DF:67:79:5A:3B:AA:45:A8:9A:DA:8D:DA:7E:84:E9:6B:B7:AE:07:87
Certificate issuer:       /CN=df67795a3baa45a89ada8dda7e84e96bb7ae0787
Certificate serial:       01948F9A289536D518682FF9D4442F8B6BE5
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/32d5WjuqRaia2o3afoTpa7euB4c.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/2f/031554-78c4-4577-8058-9b6b87138ae7/1/32d5WjuqRaia2o3afoTpa7euB4c.mft
Manifest number:          088B
Signing time:             Wed 22 Jan 2025 20:00:32 +0000
Manifest this update:     Wed 22 Jan 2025 20:00:32 +0000
Manifest next update:     Thu 23 Jan 2025 20:00:32 +0000
Files and hashes:         1: 32d5WjuqRaia2o3afoTpa7euB4c.crl (hash: 8NDWbvkxMiwcTKgnJRAuCnw9EGxN7Jcw39Bx+9Td3Jw=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:94:8f:9a:28:95:36:d5:18:68:2f:f9:d4:44:2f:8b:6b:e5
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=df67795a3baa45a89ada8dda7e84e96bb7ae0787
        Validity
            Not Before: Jan 22 20:00:32 2025 GMT
            Not After : Jan 23 20:00:32 2025 GMT
        Subject: CN=3d64038a0d4b110db6b613918b21a14c4b6496c3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b5:ff:7b:04:7b:b9:a1:9e:1f:20:77:a4:a4:31:
                    35:ef:42:38:7d:4d:2e:ff:01:94:a4:9f:33:d3:2e:
                    54:5c:f3:49:23:a8:81:60:d8:e1:b8:34:82:e5:58:
                    8b:f4:8f:37:28:93:d2:ea:11:3c:e1:c4:f2:bc:24:
                    00:e7:6f:06:55:70:c2:7f:f1:74:92:c8:14:2a:91:
                    8c:93:14:9f:64:5a:3e:1d:cc:55:7c:16:f1:93:58:
                    7a:0a:ac:41:cf:d8:a5:45:0f:5f:04:0a:6a:86:4a:
                    75:92:2c:11:69:9d:ab:42:14:48:05:8a:ae:62:18:
                    6e:c9:61:8c:cb:ef:be:6d:90:82:ce:78:d0:2f:f2:
                    45:03:c2:cb:de:67:a9:cb:fb:ea:64:d6:fb:67:65:
                    f9:1d:ea:f5:7e:52:6e:db:c5:90:ef:78:d4:7c:56:
                    a5:e8:d6:65:98:66:08:47:6a:11:81:af:e9:a1:6c:
                    f6:07:4b:41:fa:2d:74:63:e8:5b:b5:4e:7a:b1:07:
                    4b:fd:83:2c:87:c9:5a:d0:8f:4e:cc:87:bf:5b:9b:
                    ea:7f:2c:9f:92:5b:a9:06:43:33:30:59:00:8e:84:
                    65:58:71:3d:d7:23:18:e5:07:62:ab:15:4a:53:96:
                    e6:54:10:6e:6d:df:5b:50:6b:47:99:42:73:60:92:
                    ab:bd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3D:64:03:8A:0D:4B:11:0D:B6:B6:13:91:8B:21:A1:4C:4B:64:96:C3
            X509v3 Authority Key Identifier:
                keyid:DF:67:79:5A:3B:AA:45:A8:9A:DA:8D:DA:7E:84:E9:6B:B7:AE:07:87

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/32d5WjuqRaia2o3afoTpa7euB4c.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2f/031554-78c4-4577-8058-9b6b87138ae7/1/32d5WjuqRaia2o3afoTpa7euB4c.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/2f/031554-78c4-4577-8058-9b6b87138ae7/1/32d5WjuqRaia2o3afoTpa7euB4c.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         5b:95:38:1d:72:b2:40:30:98:1a:c9:82:b5:df:a5:54:3b:c3:
         9d:aa:08:79:7f:83:db:2c:79:9c:4f:1b:87:b2:57:7a:ea:4e:
         09:5e:91:64:17:f5:68:15:f9:a9:d1:db:7a:0b:b8:c8:39:dc:
         c9:fa:7f:6d:c9:9b:9b:91:cf:95:eb:e2:03:d6:e2:ed:6d:f0:
         cf:6a:5d:c1:ba:11:5f:d6:e5:62:08:7a:dd:bf:20:5e:9f:06:
         f7:ab:82:8d:7b:a8:c3:41:fe:9d:b3:f7:76:74:13:ae:35:2c:
         57:25:2f:38:77:ac:56:ed:05:a7:10:79:8f:ce:86:30:e4:d6:
         c5:ff:fe:d9:9d:53:9c:2e:52:48:d4:10:00:6e:e0:d0:c8:f9:
         92:32:0a:d5:6b:e2:88:e8:09:bb:5c:dd:25:2f:7e:6c:1c:2c:
         55:08:6a:26:d0:9c:b7:e3:11:af:cc:aa:07:e1:1d:8c:c3:ef:
         6b:b2:10:07:e7:cd:9e:64:81:ae:b2:d1:e5:ee:af:32:c8:9f:
         cf:ee:a8:30:32:37:74:c3:d0:57:6e:30:d1:2d:2a:2d:a1:e0:
         93:38:ba:b3:45:7a:2f:af:58:8e:af:0c:e5:0f:a2:46:18:eb:
         b0:a7:52:99:b2:11:f5:ab:e2:1b:4d:2e:75:26:b7:3c:e9:26:
         7b:c1:0a:4f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jan 23 19:12:48 2025 by rpki-client on console.sobornost.net