Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/57/cf3ca3-1cd7-4312-ba73-83c8596229fa/1/0k9JfRV4RwBTNrd3NhsdIJBcUhM.mft
File:                     0k9JfRV4RwBTNrd3NhsdIJBcUhM.mft (raw, json)
Hash identifier:          fgwDUEguw1jTDsWamdM6k3876Xg6CnT7pU8KZJYhHZ8=
Subject key identifier:   D1:37:CC:C5:51:87:31:80:5C:B2:D9:D3:5F:DE:79:4F:49:B7:DE:F7
Authority key identifier: D2:4F:49:7D:15:78:47:00:53:36:B7:77:36:1B:1D:20:90:5C:52:13
Certificate issuer:       /CN=d24f497d157847005336b777361b1d20905c5213
Certificate serial:       019325655D900029A67D189C2B5B9C9663C2
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/0k9JfRV4RwBTNrd3NhsdIJBcUhM.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/57/cf3ca3-1cd7-4312-ba73-83c8596229fa/1/0k9JfRV4RwBTNrd3NhsdIJBcUhM.mft
Manifest number:          1360
Signing time:             Wed 13 Nov 2024 12:00:20 +0000
Manifest this update:     Wed 13 Nov 2024 12:00:20 +0000
Manifest next update:     Thu 14 Nov 2024 12:00:20 +0000
Files and hashes:         1: 0k9JfRV4RwBTNrd3NhsdIJBcUhM.crl (hash: qt2HxYLLgVXHjLPjxVd4UERGqaK45yowr7F2FOQlsdU=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:93:25:65:5d:90:00:29:a6:7d:18:9c:2b:5b:9c:96:63:c2
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d24f497d157847005336b777361b1d20905c5213
        Validity
            Not Before: Nov 13 12:00:20 2024 GMT
            Not After : Nov 14 12:00:20 2024 GMT
        Subject: CN=d137ccc5518731805cb2d9d35fde794f49b7def7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d8:02:c6:46:c9:ce:48:26:31:3e:69:93:1c:42:
                    e1:4a:4a:c4:bf:53:96:3f:37:48:ed:45:09:15:b2:
                    71:7b:64:a4:77:ae:a4:d2:fb:17:c6:fc:c3:d0:88:
                    45:a9:95:bf:8f:23:c5:1c:e4:4b:af:94:65:03:f2:
                    de:3f:87:43:4b:0b:55:b8:06:28:d8:ab:3d:b7:6f:
                    5b:20:38:6e:dd:a6:17:9d:d3:f9:76:af:73:4a:13:
                    8b:c8:5a:50:18:da:19:87:e6:4a:fe:ab:56:f0:13:
                    fc:48:79:e1:59:90:b8:3e:39:c2:d0:70:8f:11:64:
                    ec:a3:46:5d:f2:a0:b1:f9:eb:37:8c:28:24:46:66:
                    de:b6:cf:5a:f3:60:68:03:bd:2d:8c:41:2d:08:10:
                    3a:ca:43:b2:9f:3d:1b:e4:d2:88:75:02:58:aa:01:
                    fe:e0:d6:3f:c4:05:80:71:e1:7d:64:1a:c3:80:b3:
                    c7:a8:a3:bb:2d:40:6e:06:7d:b6:72:5e:af:23:91:
                    99:0c:0e:a5:8a:9d:c4:66:63:aa:9b:60:7a:b1:17:
                    e5:f2:58:d3:2f:3f:05:30:75:c5:f7:83:f7:60:7f:
                    06:61:a8:e9:43:5e:81:99:86:90:16:3d:57:68:8b:
                    fa:ea:85:9d:15:b4:6c:e0:4b:c5:c8:07:2d:42:7b:
                    e0:9f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D1:37:CC:C5:51:87:31:80:5C:B2:D9:D3:5F:DE:79:4F:49:B7:DE:F7
            X509v3 Authority Key Identifier:
                keyid:D2:4F:49:7D:15:78:47:00:53:36:B7:77:36:1B:1D:20:90:5C:52:13

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/0k9JfRV4RwBTNrd3NhsdIJBcUhM.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/57/cf3ca3-1cd7-4312-ba73-83c8596229fa/1/0k9JfRV4RwBTNrd3NhsdIJBcUhM.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/57/cf3ca3-1cd7-4312-ba73-83c8596229fa/1/0k9JfRV4RwBTNrd3NhsdIJBcUhM.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         6e:c5:82:a8:fd:d9:d4:59:88:97:d7:22:bb:a6:95:ca:3e:df:
         2d:26:7d:bd:07:c6:b2:87:a6:b9:75:0a:d4:4d:6c:ef:6e:84:
         61:31:f4:ad:ab:fd:a0:45:5f:72:eb:7f:bd:38:08:2d:bd:e4:
         01:d6:39:7a:87:d0:76:de:ba:67:46:d0:12:d2:64:46:d0:23:
         88:bc:01:12:d5:b3:1d:8e:8b:ea:28:0b:73:03:10:b8:71:bd:
         e1:fc:84:21:d2:3b:91:84:15:27:31:d2:6b:f6:34:03:2d:f4:
         df:d3:59:c1:e0:45:5a:52:2f:13:bb:ef:d6:45:e6:c7:c0:f9:
         14:ed:85:79:37:df:c6:7e:50:0c:66:4a:e9:25:0e:3b:03:7d:
         01:6d:80:60:72:62:43:7e:68:f0:74:4e:83:bc:18:52:b9:4b:
         51:de:4a:ea:e9:85:69:1c:d4:63:0f:a2:49:47:dc:f3:23:f7:
         41:2d:dd:4a:02:4e:4c:27:48:49:66:b9:ef:52:b0:27:ab:cb:
         37:8a:ef:e9:be:7f:54:5c:ed:2d:67:b3:16:1d:99:b3:41:90:
         2f:6d:39:17:37:f9:d6:61:76:77:a4:02:b9:28:ed:49:f1:73:
         d2:4c:82:3c:f1:ae:4b:63:c3:61:1b:69:b7:8e:a3:5e:a3:2c:
         4f:f5:20:65
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Nov 14 16:59:23 2024 by rpki-client on console.sobornost.net