Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3d/884270-cb8e-486b-a63e-948c55a12c95/1/HiXLvxz6ojJZJBSElMYS44ihGjw.mft
File:                     HiXLvxz6ojJZJBSElMYS44ihGjw.mft (raw, json)
Hash identifier:          bckivQR78IurqP7AiToAbVarLLuAXjCwt3qqDdgDc0U=
Subject key identifier:   30:32:61:B5:CF:B2:DD:47:D5:77:5B:5D:2E:49:77:79:ED:20:7A:1F
Authority key identifier: 1E:25:CB:BF:1C:FA:A2:32:59:24:14:84:94:C6:12:E3:88:A1:1A:3C
Certificate issuer:       /CN=1e25cbbf1cfaa2325924148494c612e388a11a3c
Certificate serial:       018CEDE1CAF5FF49DC840E5FD93267E3A13D
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/HiXLvxz6ojJZJBSElMYS44ihGjw.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/3d/884270-cb8e-486b-a63e-948c55a12c95/1/HiXLvxz6ojJZJBSElMYS44ihGjw.mft
Manifest number:          0257
Signing time:             Tue 09 Jan 2024 11:00:46 +0000
Manifest this update:     Tue 09 Jan 2024 11:00:46 +0000
Manifest next update:     Wed 10 Jan 2024 11:00:46 +0000
Files and hashes:         1: HiXLvxz6ojJZJBSElMYS44ihGjw.crl (hash: IbFlpLX+3JvbJqWTyP34B9dYvz91XWg0NfAclxGG/5Q=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:8c:ed:e1:ca:f5:ff:49:dc:84:0e:5f:d9:32:67:e3:a1:3d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1e25cbbf1cfaa2325924148494c612e388a11a3c
        Validity
            Not Before: Jan  9 11:00:46 2024 GMT
            Not After : Jan 10 11:00:46 2024 GMT
        Subject: CN=303261b5cfb2dd47d5775b5d2e497779ed207a1f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b1:72:9d:c7:aa:09:52:0b:2d:01:98:a7:ce:77:
                    5f:97:37:cd:d7:82:cd:5e:e7:7c:a8:82:ef:dd:dc:
                    e7:eb:3e:d8:09:7b:2f:cc:8d:b6:6c:16:31:8c:93:
                    42:da:28:76:5e:1f:48:fb:fb:70:00:d3:9b:a9:37:
                    69:24:c9:66:30:ea:17:a0:4f:78:c3:62:3f:4d:d5:
                    f0:fe:80:77:ac:68:dc:6e:1e:90:c7:a9:91:e9:1b:
                    47:13:46:4b:6d:5b:7e:72:79:90:49:6a:70:00:db:
                    22:db:ed:6b:16:c8:a5:90:8b:ac:30:9e:de:61:98:
                    e6:47:ea:f7:27:90:4e:cf:83:b9:c6:ca:ea:90:6f:
                    b1:a7:8c:bc:2f:39:41:d5:6e:8b:3e:8e:1a:99:35:
                    b0:2e:48:52:1a:b4:97:be:78:9a:66:de:ef:dd:2e:
                    44:d4:5f:26:31:09:9e:01:0f:7d:d6:22:10:56:d2:
                    c1:41:7b:be:5e:83:73:4b:f7:b1:da:3d:ae:7e:e0:
                    01:11:08:78:ea:38:f8:4c:09:13:9b:f1:76:8a:15:
                    e8:e9:eb:a4:00:9c:89:8e:53:3a:11:1b:73:5a:3a:
                    46:ec:80:9f:18:0d:28:29:12:84:04:3f:af:be:53:
                    b8:07:7f:17:05:61:29:63:65:59:cd:b8:7e:3a:03:
                    10:27
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                30:32:61:B5:CF:B2:DD:47:D5:77:5B:5D:2E:49:77:79:ED:20:7A:1F
            X509v3 Authority Key Identifier:
                keyid:1E:25:CB:BF:1C:FA:A2:32:59:24:14:84:94:C6:12:E3:88:A1:1A:3C

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/HiXLvxz6ojJZJBSElMYS44ihGjw.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3d/884270-cb8e-486b-a63e-948c55a12c95/1/HiXLvxz6ojJZJBSElMYS44ihGjw.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/3d/884270-cb8e-486b-a63e-948c55a12c95/1/HiXLvxz6ojJZJBSElMYS44ihGjw.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         af:6f:62:77:56:ad:e9:78:0c:c5:3a:3b:ab:46:7e:3e:6c:78:
         99:d2:6e:f8:bb:e1:f3:5a:00:d2:4f:60:79:f7:ef:ed:2c:7f:
         67:4e:fa:0e:3d:91:f1:ca:f6:44:ba:e0:72:b7:b4:aa:96:5b:
         1a:8a:5c:1e:65:1f:3b:13:7d:e4:fa:b2:b4:f0:56:a2:50:49:
         7c:fa:09:bf:b1:53:4c:6c:df:f7:67:e6:21:ea:3b:e3:6c:d4:
         cd:de:c3:45:ba:bd:a3:82:7c:e5:fd:1a:e5:c2:13:c3:a1:7a:
         c4:62:5f:b0:5a:05:12:11:0f:ac:96:60:90:37:2e:1c:6d:7a:
         4b:c8:6c:83:c6:83:c1:d1:97:09:ca:23:3e:d5:f6:f7:47:5e:
         e8:84:0a:f1:08:26:49:c2:f9:a9:88:3e:30:e1:0a:c1:0e:eb:
         01:f3:e2:dc:86:7e:ae:72:b3:e5:45:01:10:18:5e:a5:d8:40:
         04:50:fe:dd:00:b7:40:23:bf:25:81:43:b1:13:60:3f:f4:3b:
         50:5b:53:d1:e5:ee:2e:51:7a:38:52:11:6d:8e:ef:6c:b8:46:
         f3:55:49:c2:7c:21:f2:37:ce:e1:03:b9:c6:7d:96:66:09:a5:
         a9:7a:bd:8d:68:37:4c:38:f7:9a:0a:97:39:b2:45:73:79:d6:
         41:3d:a0:9d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Feb 27 00:59:02 2024 by rpki-client on console.sobornost.net