Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/67/aec107-93e9-40a7-868e-c91c5debd5b7/1/pziV78cIO7fqppbPh2s6ZuJ5wdM.mft
File:                     pziV78cIO7fqppbPh2s6ZuJ5wdM.mft (raw, json)
Hash identifier:          Qk1oSFdO6MxVqbEcY0W2Tx+fQpHUYTgd5IeqILlH9/M=
Subject key identifier:   48:9F:E7:83:5A:E0:D0:A6:91:1D:9D:9C:61:1C:11:44:65:C9:F7:FD
Authority key identifier: A7:38:95:EF:C7:08:3B:B7:EA:A6:96:CF:87:6B:3A:66:E2:79:C1:D3
Certificate issuer:       /CN=a73895efc7083bb7eaa696cf876b3a66e279c1d3
Certificate serial:       019547B58844EEC37FE8146D2A18680CC7CE
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/pziV78cIO7fqppbPh2s6ZuJ5wdM.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/67/aec107-93e9-40a7-868e-c91c5debd5b7/1/pziV78cIO7fqppbPh2s6ZuJ5wdM.mft
Manifest number:          08FA
Signing time:             Thu 27 Feb 2025 14:00:33 +0000
Manifest this update:     Thu 27 Feb 2025 14:00:33 +0000
Manifest next update:     Fri 28 Feb 2025 14:00:33 +0000
Files and hashes:         1: pziV78cIO7fqppbPh2s6ZuJ5wdM.crl (hash: 6uzXpP3XCq9/0FEbzfgYzVaT/gMEez2Uziev4p8WeWQ=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:95:47:b5:88:44:ee:c3:7f:e8:14:6d:2a:18:68:0c:c7:ce
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=a73895efc7083bb7eaa696cf876b3a66e279c1d3
        Validity
            Not Before: Feb 27 14:00:33 2025 GMT
            Not After : Feb 28 14:00:33 2025 GMT
        Subject: CN=489fe7835ae0d0a6911d9d9c611c114465c9f7fd
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b2:45:c4:2d:1d:0a:0f:7d:e6:4b:de:a3:48:f0:
                    72:b7:5e:62:47:be:ce:75:8e:f8:d4:01:48:5d:f8:
                    51:39:d8:96:cf:44:23:51:27:4f:57:fd:db:5d:ea:
                    c5:c3:1f:eb:80:7f:da:49:0d:50:a4:f8:ed:4c:e0:
                    20:a5:9c:96:4c:59:f9:9e:89:66:1d:62:48:b3:37:
                    00:9f:e8:f0:27:ca:4f:39:b1:42:6c:35:32:30:29:
                    73:d4:ff:e1:b0:b2:69:bf:a0:45:ec:3d:bd:52:86:
                    7c:a3:32:89:99:b2:b2:1c:fe:1f:b1:11:c1:fe:e8:
                    ce:3d:0c:6c:b2:e1:5a:56:f6:fe:b9:19:bc:1e:e1:
                    a2:72:71:ec:39:11:f3:6c:04:96:74:15:1a:ed:cd:
                    62:0f:f4:63:83:15:a8:86:24:e0:3b:a5:5a:f9:6c:
                    bf:1c:a2:3f:fd:bb:fb:ab:99:0a:90:3d:58:ae:bc:
                    3b:7e:b7:06:f7:12:2b:9e:00:df:03:de:34:82:a7:
                    d4:bc:ad:e1:0d:00:60:10:6b:e9:7a:0e:2b:f5:ba:
                    07:ab:80:b6:a8:59:e3:55:c4:17:16:3e:77:cc:19:
                    6b:65:9d:58:37:d4:2d:33:67:c1:fb:a7:b9:0d:a8:
                    9d:dc:92:a6:48:28:e7:9f:d6:02:a9:4a:ae:9c:f8:
                    92:37
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                48:9F:E7:83:5A:E0:D0:A6:91:1D:9D:9C:61:1C:11:44:65:C9:F7:FD
            X509v3 Authority Key Identifier:
                keyid:A7:38:95:EF:C7:08:3B:B7:EA:A6:96:CF:87:6B:3A:66:E2:79:C1:D3

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/pziV78cIO7fqppbPh2s6ZuJ5wdM.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/67/aec107-93e9-40a7-868e-c91c5debd5b7/1/pziV78cIO7fqppbPh2s6ZuJ5wdM.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/67/aec107-93e9-40a7-868e-c91c5debd5b7/1/pziV78cIO7fqppbPh2s6ZuJ5wdM.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         49:7c:66:08:84:1f:a1:c4:62:06:69:cb:dc:11:6f:5d:a6:61:
         22:fe:93:22:bb:05:f0:db:7f:c1:ba:e6:38:f2:e9:da:ab:fa:
         22:d4:3b:66:5c:86:2d:c5:0a:51:f7:02:93:b4:b8:f5:88:d1:
         8e:df:5f:1e:58:eb:38:fa:f9:37:e5:a4:9b:62:f2:9f:2c:c1:
         67:ba:b9:a3:f0:a4:aa:d7:e1:49:3b:4f:1f:4d:98:ce:8c:92:
         ee:f6:87:13:84:2f:65:96:23:30:8c:c9:40:e8:22:d2:7d:22:
         97:aa:3c:57:6e:5a:28:00:da:2e:86:0b:8e:dc:d5:d4:53:b7:
         c4:b9:e6:78:70:fc:0d:b6:a9:c5:7a:1b:79:9d:92:37:18:2e:
         c1:c0:a3:16:7f:5e:bb:0f:43:99:c5:47:66:d2:15:d2:4d:10:
         8f:72:e4:d0:1e:6c:c7:31:66:ee:64:96:c5:e2:6a:0b:04:bc:
         0c:f1:13:ad:f9:72:78:8d:c9:62:94:6e:96:8e:1d:a0:01:c7:
         be:5b:2b:b4:92:ee:2a:ed:c5:d7:ea:e2:c0:fd:92:8d:de:52:
         cd:16:33:32:3b:2d:dc:4b:f2:a4:93:21:df:07:ef:4a:e8:5f:
         95:f8:75:5c:fb:96:46:5e:c8:b2:dc:83:1a:4b:9e:2b:54:b8:
         aa:7d:1b:ad
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Mar 8 04:49:56 2025 by rpki-client on console.sobornost.net