Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/52/a3a48d-ccae-458d-8dbd-9685b8484789/1/1-XhhvCSEodMubzbMLEayFG4xW8E.mft
File:                     1-XhhvCSEodMubzbMLEayFG4xW8E.mft (raw, json)
Hash identifier:          GKuHxilOCJIsp6GvYVywCClzsTPc0ucaY5F3/U9ug2U=
Subject key identifier:   30:D1:30:1F:97:08:F0:5C:3F:AF:84:A3:8D:44:87:87:B3:93:4A:1E
Authority key identifier: F9:78:61:BC:24:84:A1:D3:2E:6F:36:CC:2C:46:B2:14:6E:31:5B:C1
Certificate issuer:       /CN=f97861bc2484a1d32e6f36cc2c46b2146e315bc1
Certificate serial:       019547B5A7A90552CCAF242C960E1DB819D7
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/1-XhhvCSEodMubzbMLEayFG4xW8E.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/52/a3a48d-ccae-458d-8dbd-9685b8484789/1/1-XhhvCSEodMubzbMLEayFG4xW8E.mft
Manifest number:          0941
Signing time:             Thu 27 Feb 2025 14:00:41 +0000
Manifest this update:     Thu 27 Feb 2025 14:00:41 +0000
Manifest next update:     Fri 28 Feb 2025 14:00:41 +0000
Files and hashes:         1: 1-XhhvCSEodMubzbMLEayFG4xW8E.crl (hash: Nkrakv+/2Plw6EK8hNMLYUitwT6P/dHd0J+39jeu9v4=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:95:47:b5:a7:a9:05:52:cc:af:24:2c:96:0e:1d:b8:19:d7
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=f97861bc2484a1d32e6f36cc2c46b2146e315bc1
        Validity
            Not Before: Feb 27 14:00:41 2025 GMT
            Not After : Feb 28 14:00:41 2025 GMT
        Subject: CN=30d1301f9708f05c3faf84a38d448787b3934a1e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:dd:74:44:04:53:cd:ff:c4:89:5f:52:02:81:2b:
                    e6:b0:c3:07:f2:67:46:1f:f2:82:cc:c0:40:9b:eb:
                    a9:cb:a9:52:2b:68:b2:9b:95:d7:20:50:da:42:71:
                    00:e3:41:97:06:5e:b9:5d:a3:38:fd:85:fe:3c:75:
                    a3:4e:fd:fc:a3:a0:88:a0:2d:b6:e9:65:6b:e1:04:
                    cf:8b:ba:d2:07:94:da:f5:86:4d:bb:40:03:e3:a1:
                    d6:e7:a8:4c:c6:b3:7c:a2:9e:30:31:4d:93:d6:11:
                    ec:8c:dd:25:73:85:74:7e:1c:2b:fb:1a:5a:1a:48:
                    be:d7:4e:99:fe:01:25:10:02:68:75:c0:25:07:02:
                    56:08:c4:11:ba:3f:3d:86:ec:29:09:1d:04:78:e5:
                    76:06:3b:21:d1:18:ee:2c:1e:e1:cc:38:e5:f9:b4:
                    8a:c3:b9:bb:c8:d8:b5:e5:36:06:15:92:6b:7d:53:
                    21:a7:aa:0e:4c:3c:f5:ff:a9:e6:66:a0:e2:43:7b:
                    b2:e1:50:36:f1:ef:58:37:3d:72:72:d1:5d:12:38:
                    85:b2:08:77:b8:05:cc:79:69:b2:6b:74:42:f4:a7:
                    fd:86:bf:c5:aa:6d:55:73:f0:37:19:3b:a5:ae:a8:
                    92:5d:54:23:af:75:ab:a4:c2:bd:59:0e:69:75:a4:
                    ca:25
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                30:D1:30:1F:97:08:F0:5C:3F:AF:84:A3:8D:44:87:87:B3:93:4A:1E
            X509v3 Authority Key Identifier:
                keyid:F9:78:61:BC:24:84:A1:D3:2E:6F:36:CC:2C:46:B2:14:6E:31:5B:C1

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1-XhhvCSEodMubzbMLEayFG4xW8E.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/52/a3a48d-ccae-458d-8dbd-9685b8484789/1/1-XhhvCSEodMubzbMLEayFG4xW8E.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/52/a3a48d-ccae-458d-8dbd-9685b8484789/1/1-XhhvCSEodMubzbMLEayFG4xW8E.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         cc:c4:a9:16:22:cb:35:71:0d:ac:44:c6:63:57:b7:29:ac:84:
         03:2a:c8:f7:d9:9d:24:d2:19:41:8f:7e:62:c4:6a:01:fd:f2:
         2d:4d:40:03:92:97:59:fd:3a:2a:39:10:0a:47:42:70:97:8a:
         a4:da:9c:f6:dc:37:2c:c5:63:f8:85:29:21:8d:21:4c:af:21:
         b6:f8:60:0f:33:30:15:8b:f3:6c:0b:87:32:b4:72:38:68:c1:
         81:e9:68:18:43:2a:21:07:26:66:3d:f7:57:fb:f9:c9:3d:e4:
         7f:9e:02:5e:d3:17:8a:73:92:46:71:da:1b:5c:b3:02:7f:7a:
         cc:e9:ce:7b:6f:8a:66:04:68:04:73:5f:4b:87:5e:78:06:20:
         1d:bb:91:50:4b:06:37:ee:1a:6b:28:e9:f5:70:b2:8b:23:32:
         de:4b:de:9f:70:2b:c9:53:c3:3d:ad:d2:b1:fb:fa:00:d7:0e:
         49:09:ab:93:92:5f:00:be:97:d7:d0:62:67:37:db:8f:41:de:
         13:43:e4:cc:6e:0b:6b:e7:75:fb:7b:8a:92:42:4f:82:77:15:
         f3:36:f7:a0:9b:df:d2:e8:95:a1:7e:d4:52:1f:21:e4:8c:0b:
         ea:bd:53:27:8f:59:11:52:33:53:18:81:36:1c:a4:9c:7c:34:
         6f:58:33:11
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Mar 8 04:49:16 2025 by rpki-client on console.sobornost.net