Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5b/389477-5870-4e2d-ac87-cc6bc94538fa/1/3C8IdW9U7NcoDR6sz4eK6z8orE8.mft
File:                     3C8IdW9U7NcoDR6sz4eK6z8orE8.mft (raw, json)
Hash identifier:          RYfvu+7c42Y4VLKt2Hja38aaPceKENLIE43/HxHhoGE=
Subject key identifier:   8D:0E:A4:2E:35:E1:D4:86:18:AE:A6:44:76:EA:DC:35:25:DC:4C:0E
Authority key identifier: DC:2F:08:75:6F:54:EC:D7:28:0D:1E:AC:CF:87:8A:EB:3F:28:AC:4F
Certificate issuer:       /CN=dc2f08756f54ecd7280d1eaccf878aeb3f28ac4f
Certificate serial:       01962F06DE358D70AD95579A0DAC5E3C4B02
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/3C8IdW9U7NcoDR6sz4eK6z8orE8.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/5b/389477-5870-4e2d-ac87-cc6bc94538fa/1/3C8IdW9U7NcoDR6sz4eK6z8orE8.mft
Manifest number:          11F8
Signing time:             Sun 13 Apr 2025 12:01:41 +0000
Manifest this update:     Sun 13 Apr 2025 12:01:41 +0000
Manifest next update:     Mon 14 Apr 2025 12:01:41 +0000
Files and hashes:         1: 3C8IdW9U7NcoDR6sz4eK6z8orE8.crl (hash: JvuG2UBDMWx4UrddRqWrl0Vsioh0wTk6kpz7dewSs/I=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2f:06:de:35:8d:70:ad:95:57:9a:0d:ac:5e:3c:4b:02
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=dc2f08756f54ecd7280d1eaccf878aeb3f28ac4f
        Validity
            Not Before: Apr 13 12:01:41 2025 GMT
            Not After : Apr 14 12:01:41 2025 GMT
        Subject: CN=8d0ea42e35e1d48618aea64476eadc3525dc4c0e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a9:2c:24:50:a8:61:45:69:c7:95:7d:30:5d:61:
                    57:5a:db:e9:5c:3b:3c:33:a1:ea:a8:a7:b7:87:06:
                    42:17:4d:8d:48:5b:ea:00:2a:b9:68:88:ef:46:46:
                    64:87:ec:05:8f:04:ad:2b:59:a4:97:82:c0:ea:cb:
                    67:3f:5c:71:b0:e8:37:e3:46:ec:53:69:17:ed:f1:
                    c3:95:69:18:49:c6:dc:46:98:f9:c3:17:14:65:b4:
                    5c:b4:20:0b:f0:4f:15:cc:80:d7:fd:94:15:f5:6c:
                    c0:51:16:18:5b:35:16:27:9d:a9:8b:93:64:c9:c9:
                    92:61:bd:8b:8f:9b:fe:c4:bc:96:31:7b:d0:fa:d2:
                    b3:c8:e6:29:27:d1:a8:45:94:ac:e9:a0:55:a8:84:
                    03:5b:0a:1d:d8:15:3e:a7:85:40:e5:04:98:02:8f:
                    0f:71:0c:ed:d4:86:b7:70:6c:87:4c:0d:6d:19:9d:
                    02:1c:5b:2b:43:fe:f9:bd:39:49:47:98:fc:e8:5c:
                    4f:4e:10:64:54:fc:f5:ae:9c:ff:89:68:7b:17:45:
                    17:b2:8e:bf:7e:f3:9e:25:f5:97:27:36:43:cb:b3:
                    8c:c7:8d:db:4c:41:6a:87:b5:09:be:19:ed:5b:e9:
                    29:9c:67:9d:01:38:72:fc:2f:42:8a:76:e1:50:e9:
                    72:09
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8D:0E:A4:2E:35:E1:D4:86:18:AE:A6:44:76:EA:DC:35:25:DC:4C:0E
            X509v3 Authority Key Identifier:
                keyid:DC:2F:08:75:6F:54:EC:D7:28:0D:1E:AC:CF:87:8A:EB:3F:28:AC:4F

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/3C8IdW9U7NcoDR6sz4eK6z8orE8.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5b/389477-5870-4e2d-ac87-cc6bc94538fa/1/3C8IdW9U7NcoDR6sz4eK6z8orE8.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/5b/389477-5870-4e2d-ac87-cc6bc94538fa/1/3C8IdW9U7NcoDR6sz4eK6z8orE8.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         bf:c3:6f:ff:cc:2d:27:dd:be:b5:8e:7e:3f:27:c1:80:3c:cc:
         21:0f:16:c2:4b:e8:c9:79:e8:67:a3:bb:d4:cc:31:c9:75:dc:
         00:4e:57:19:f1:12:66:1f:05:09:67:b9:65:61:4f:ce:92:d3:
         4d:e0:77:e2:9a:ce:0f:4b:58:a9:83:9a:25:a3:0e:f0:5a:54:
         bb:4c:60:bc:7d:ac:0e:03:d4:fe:7a:c5:d0:7d:68:98:c2:95:
         b3:23:ee:41:c8:ce:bd:92:1d:68:de:eb:e1:ff:09:12:32:28:
         2a:5f:77:68:69:85:0b:e0:45:ba:f3:17:55:88:70:bc:ad:a9:
         33:4c:8c:b9:c1:f4:c8:f1:dd:3e:af:ce:33:03:a1:b5:e0:ab:
         d0:eb:bf:8b:82:52:51:1d:78:47:00:4d:dd:d5:05:d3:f5:f2:
         63:1c:c6:76:46:50:f1:7d:26:26:ad:32:c0:01:65:af:46:33:
         cc:7a:30:df:56:3e:71:56:c2:b6:af:16:3f:16:90:8b:8a:2b:
         dd:37:0b:9d:3f:35:66:06:8b:b1:a2:c2:0d:71:3d:50:2f:4e:
         6b:6f:38:ed:41:0f:15:13:09:e3:95:8a:ad:ef:e2:42:bd:92:
         3c:5d:40:d9:76:42:4e:dc:c6:80:c8:a1:82:aa:79:ee:fd:27:
         5f:1d:28:76
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 14 20:28:29 2025 by rpki-client on console.sobornost.net