Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/33/cf3e97-0792-4313-b19c-cc1f5a97870f/1/fhZGNHqf54Y0SFKKzFSzyj1DRA8.mft
File:                     fhZGNHqf54Y0SFKKzFSzyj1DRA8.mft (raw, json)
Hash identifier:          5tdw7THE5cT1mIKogj+cAzVqp3TTcsTUdTiuWWwSlbY=
Subject key identifier:   2C:27:8F:F4:D4:9C:57:6B:58:60:49:88:59:F5:58:2D:1F:86:E5:8B
Authority key identifier: 7E:16:46:34:7A:9F:E7:86:34:48:52:8A:CC:54:B3:CA:3D:43:44:0F
Certificate issuer:       /CN=7e1646347a9fe7863448528acc54b3ca3d43440f
Certificate serial:       01948EBE5C0E19E4BD8C834E1923A59EB1B7
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/fhZGNHqf54Y0SFKKzFSzyj1DRA8.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/33/cf3e97-0792-4313-b19c-cc1f5a97870f/1/fhZGNHqf54Y0SFKKzFSzyj1DRA8.mft
Manifest number:          102D
Signing time:             Wed 22 Jan 2025 16:00:27 +0000
Manifest this update:     Wed 22 Jan 2025 16:00:27 +0000
Manifest next update:     Thu 23 Jan 2025 16:00:27 +0000
Files and hashes:         1: fhZGNHqf54Y0SFKKzFSzyj1DRA8.crl (hash: RISRUUaq0cJj5uGU4YTD7n1v9feNLF5/kQIIk3mgATo=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:94:8e:be:5c:0e:19:e4:bd:8c:83:4e:19:23:a5:9e:b1:b7
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7e1646347a9fe7863448528acc54b3ca3d43440f
        Validity
            Not Before: Jan 22 16:00:27 2025 GMT
            Not After : Jan 23 16:00:27 2025 GMT
        Subject: CN=2c278ff4d49c576b5860498859f5582d1f86e58b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e7:0f:fe:5c:b5:9d:cc:34:8d:62:e4:c0:f2:f3:
                    23:81:bb:da:a0:27:2a:bb:53:f1:3f:d5:bf:7c:f9:
                    7c:c3:d8:a8:3d:9e:aa:64:92:44:34:e4:50:90:54:
                    bf:66:63:5e:ed:7f:a1:25:5f:46:ca:2b:ff:f8:39:
                    9d:04:9e:b4:fa:82:b6:73:e8:7f:cc:00:2b:2b:ed:
                    52:87:6b:f9:de:14:8e:d7:86:3d:97:9b:8c:67:05:
                    24:a3:8c:ea:e1:99:5a:58:ce:55:b7:b8:f1:c5:67:
                    93:59:8c:24:e0:69:0a:09:ea:c1:08:50:70:79:17:
                    3c:a2:9b:a4:86:7d:89:c3:7d:ea:cd:56:cf:01:62:
                    08:0f:80:62:50:52:7f:ff:5c:e8:83:38:26:a9:2c:
                    2f:9b:ec:22:83:1d:65:e7:de:c8:6e:3f:04:68:bc:
                    53:a4:da:93:2d:d6:d8:08:2d:48:02:63:54:d7:df:
                    73:eb:45:31:10:30:40:a1:66:dd:aa:c5:ca:b6:e8:
                    bf:15:56:02:cd:43:7a:60:03:9b:dc:59:2a:da:df:
                    b3:a5:54:96:2a:95:f5:d5:92:16:de:ef:8b:e5:1f:
                    c8:ae:6e:ac:15:a5:b0:59:9d:e3:f6:f4:99:b0:1a:
                    a9:d1:ab:e7:fd:c0:67:79:61:d8:d4:07:03:de:af:
                    63:5b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2C:27:8F:F4:D4:9C:57:6B:58:60:49:88:59:F5:58:2D:1F:86:E5:8B
            X509v3 Authority Key Identifier:
                keyid:7E:16:46:34:7A:9F:E7:86:34:48:52:8A:CC:54:B3:CA:3D:43:44:0F

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/fhZGNHqf54Y0SFKKzFSzyj1DRA8.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/33/cf3e97-0792-4313-b19c-cc1f5a97870f/1/fhZGNHqf54Y0SFKKzFSzyj1DRA8.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/33/cf3e97-0792-4313-b19c-cc1f5a97870f/1/fhZGNHqf54Y0SFKKzFSzyj1DRA8.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         73:be:a3:8d:d7:04:52:e6:69:c4:3d:7d:c1:06:91:5c:33:81:
         07:b3:6a:f0:15:f7:29:dc:66:35:9b:e0:32:73:bd:e7:4c:07:
         a5:6f:19:6a:b3:ef:8d:e4:1c:2e:20:25:ab:68:54:73:8f:bf:
         46:6c:af:b1:e1:62:39:c5:e5:3d:bd:f5:e8:e3:26:e2:da:07:
         21:b8:89:ce:23:3a:6a:65:80:44:19:88:bc:84:7f:c1:53:f4:
         50:55:33:8c:dd:ca:90:c3:ed:5a:0e:00:e4:04:a7:30:74:bb:
         e1:93:00:51:49:6f:2a:7c:9f:81:30:c8:fc:ac:5d:cc:e2:ff:
         7e:a9:d1:3e:86:b8:6b:0e:a4:31:ea:7a:82:2c:d8:30:01:a2:
         0d:b5:6d:d0:e2:84:6e:63:d0:39:c3:2e:c5:19:6e:45:05:f3:
         8b:65:92:f7:e9:3b:98:32:8a:e7:07:0b:db:81:bf:0e:32:9d:
         96:82:9d:b1:30:26:c1:0e:c2:77:8e:c8:87:3c:09:87:76:fc:
         fc:d1:47:6c:c8:ec:40:3b:87:17:e2:7a:9a:b6:98:96:73:5e:
         ec:8e:3d:68:cf:b3:de:85:3d:0a:20:cd:35:dd:61:bf:1c:dc:
         d1:dc:e0:c6:b4:40:36:f2:2a:d2:1e:06:ca:cf:5a:1d:e9:30:
         bc:55:34:12
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jan 23 19:12:51 2025 by rpki-client on console.sobornost.net