Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/85/7b6677-d2c4-4191-9fee-bd19b0836151/1/kliCV2f7wINzKpbhgSzMW_4VAYU.mft
File:                     kliCV2f7wINzKpbhgSzMW_4VAYU.mft (raw, json)
Hash identifier:          tkdHRzglUXwJ7f80qXujJOR+I+Th3Xg2QMfyXCaIJqI=
Subject key identifier:   AD:15:AB:3A:AA:21:24:18:24:D9:93:25:F3:D0:DA:F6:ED:CC:5F:6B
Authority key identifier: 92:58:82:57:67:FB:C0:83:73:2A:96:E1:81:2C:CC:5B:FE:15:01:85
Certificate issuer:       /CN=9258825767fbc083732a96e1812ccc5bfe150185
Certificate serial:       01948EF52D50C63430468298F9D0F6452C73
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/kliCV2f7wINzKpbhgSzMW_4VAYU.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/85/7b6677-d2c4-4191-9fee-bd19b0836151/1/kliCV2f7wINzKpbhgSzMW_4VAYU.mft
Manifest number:          1412
Signing time:             Wed 22 Jan 2025 17:00:20 +0000
Manifest this update:     Wed 22 Jan 2025 17:00:20 +0000
Manifest next update:     Thu 23 Jan 2025 17:00:20 +0000
Files and hashes:         1: kliCV2f7wINzKpbhgSzMW_4VAYU.crl (hash: sDs6XHE6WCxTFz4NiL3HPT0qBjuFAJrgQ+Rnfnjh9Gg=)
                          2: yvQyy9Z9k5i1VmlHAKaertyzN34.roa (hash: Ff1Cn1lR26UTFSkop2LtIu2dpCA0zAQ/5vNY09uigMg=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:94:8e:f5:2d:50:c6:34:30:46:82:98:f9:d0:f6:45:2c:73
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9258825767fbc083732a96e1812ccc5bfe150185
        Validity
            Not Before: Jan 22 17:00:20 2025 GMT
            Not After : Jan 23 17:00:20 2025 GMT
        Subject: CN=ad15ab3aaa21241824d99325f3d0daf6edcc5f6b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bd:a1:7b:80:2b:87:52:c6:ec:2f:37:3f:e8:33:
                    e6:e0:f9:1b:a9:26:69:13:40:df:14:10:a5:2b:23:
                    ee:e4:f8:ef:41:c8:ac:8f:9c:53:b1:5f:c1:5b:27:
                    57:d7:7e:f4:c8:37:c6:4d:f0:44:04:ba:4e:1e:9a:
                    4f:40:3f:58:3f:3e:a6:f8:31:aa:94:bd:89:b6:f5:
                    0c:78:5f:b6:80:de:71:8b:82:28:5b:83:aa:e2:7d:
                    b9:16:fc:c8:bd:c5:8c:1e:34:10:70:31:cb:8a:c0:
                    22:f4:05:b1:a7:68:a2:fe:27:2a:4f:4f:cc:2b:1e:
                    5c:47:b7:f3:f8:fd:61:17:e2:e9:0a:9a:fd:0a:04:
                    f1:e1:84:4e:6b:4f:88:00:ff:9f:b5:a8:34:89:a6:
                    99:95:d5:81:0e:b0:2b:c7:22:51:42:cf:35:87:98:
                    7a:2a:bd:30:81:46:93:d9:18:b8:d6:97:1a:91:25:
                    fb:91:6b:9e:40:77:c4:d8:b5:49:b0:d2:96:7e:98:
                    b3:0a:d6:97:a0:e4:52:e4:15:0a:2b:fb:0e:09:c5:
                    a0:bd:80:17:90:8e:28:a5:1a:79:c1:61:eb:fe:51:
                    34:ab:d0:75:85:2f:9c:56:4f:18:f4:3a:41:07:40:
                    2d:f3:44:2a:4c:d5:39:7c:c7:96:3a:c0:b5:80:70:
                    e9:c3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AD:15:AB:3A:AA:21:24:18:24:D9:93:25:F3:D0:DA:F6:ED:CC:5F:6B
            X509v3 Authority Key Identifier:
                keyid:92:58:82:57:67:FB:C0:83:73:2A:96:E1:81:2C:CC:5B:FE:15:01:85

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/kliCV2f7wINzKpbhgSzMW_4VAYU.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/85/7b6677-d2c4-4191-9fee-bd19b0836151/1/kliCV2f7wINzKpbhgSzMW_4VAYU.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/85/7b6677-d2c4-4191-9fee-bd19b0836151/1/kliCV2f7wINzKpbhgSzMW_4VAYU.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         12:d1:26:fb:5f:f0:70:e3:c1:de:e0:46:f6:19:53:73:f1:43:
         86:1d:95:e2:01:19:71:06:a9:32:e6:80:63:fd:1c:54:34:3d:
         1f:df:d8:ba:72:25:29:43:64:34:da:4d:74:fb:1c:28:17:c0:
         41:31:17:ca:4f:c8:52:03:fa:33:38:bc:59:90:9d:43:2f:71:
         6a:5c:5f:b8:2d:e6:35:5e:e5:49:7c:a4:6e:63:4e:77:ee:f4:
         70:df:5e:5a:28:09:25:f3:a2:e7:f8:0f:0d:bc:df:1f:c6:a6:
         e3:17:85:62:e1:6e:38:39:00:23:fb:10:29:4e:25:3b:3c:43:
         ac:10:99:54:81:f6:9a:4f:66:7f:07:b7:38:3f:a6:2d:ea:ff:
         de:e2:d4:b8:79:bb:9e:51:ca:a9:41:7a:7f:f3:12:16:a2:33:
         82:ab:f4:9c:d7:86:e0:ca:ad:53:30:72:ef:26:28:02:dd:f3:
         e5:ad:89:06:53:fb:eb:96:12:24:d1:fd:4f:c9:a7:26:b8:d4:
         9b:50:f8:fe:49:78:2b:6a:8c:83:b9:dc:9e:10:3e:59:c8:9e:
         b3:85:8c:f5:f3:52:16:98:cf:45:9e:73:df:65:e7:14:b2:59:
         91:c3:78:ea:b9:45:6d:96:6d:c7:3a:56:1d:0f:88:ef:3b:95:
         c5:e8:66:35
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jan 23 19:13:54 2025 by rpki-client on console.sobornost.net