Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a2/51ecc9-5681-4b02-9db8-2e880a7a82ca/1/Kf5mFpV0HYXP7c9v-890aZlZVp8.mft
File:                     Kf5mFpV0HYXP7c9v-890aZlZVp8.mft (raw, json)
Hash identifier:          CTDc6n3AiHs9ysu4zneYaCnYUAbEyzmbi4rD2SfIGWU=
Subject key identifier:   6F:81:98:67:9E:7D:87:2B:E2:39:8E:B8:98:FF:F4:CC:4A:1C:AB:29
Authority key identifier: 29:FE:66:16:95:74:1D:85:CF:ED:CF:6F:FB:CF:74:69:99:59:56:9F
Certificate issuer:       /CN=29fe661695741d85cfedcf6ffbcf74699959569f
Certificate serial:       01962E99809313018215D0A192F4A5A3BB16
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/Kf5mFpV0HYXP7c9v-890aZlZVp8.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/a2/51ecc9-5681-4b02-9db8-2e880a7a82ca/1/Kf5mFpV0HYXP7c9v-890aZlZVp8.mft
Manifest number:          14E8
Signing time:             Sun 13 Apr 2025 10:02:13 +0000
Manifest this update:     Sun 13 Apr 2025 10:02:13 +0000
Manifest next update:     Mon 14 Apr 2025 10:02:13 +0000
Files and hashes:         1: Kf5mFpV0HYXP7c9v-890aZlZVp8.crl (hash: Grqlxip/qViamSroybrRFr5kSQ1kal6a+Zwi/LIAIFc=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2e:99:80:93:13:01:82:15:d0:a1:92:f4:a5:a3:bb:16
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=29fe661695741d85cfedcf6ffbcf74699959569f
        Validity
            Not Before: Apr 13 10:02:13 2025 GMT
            Not After : Apr 14 10:02:13 2025 GMT
        Subject: CN=6f8198679e7d872be2398eb898fff4cc4a1cab29
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ba:0c:e3:34:45:85:87:a2:ab:eb:06:44:74:56:
                    03:c6:c6:ea:a0:c3:74:bd:cb:a0:ed:de:c1:22:5e:
                    a3:6e:08:6c:cc:e0:9e:70:7b:35:72:5d:eb:90:39:
                    96:4c:4c:09:de:00:1e:41:3e:7f:10:33:8b:bb:57:
                    2e:2b:70:4b:79:e0:df:b1:52:b7:5f:1b:ba:1a:66:
                    f6:09:7c:55:f3:22:69:07:4d:71:d4:db:83:81:fc:
                    81:77:5a:bb:82:0d:9e:07:f4:6a:4f:de:32:9a:50:
                    74:12:7c:e6:a9:33:cd:11:02:b8:9f:ad:71:10:d8:
                    fa:0f:75:cb:f9:7e:c5:ca:47:6e:80:1b:20:e5:6a:
                    97:5e:45:e7:e3:ab:fc:4e:9c:67:84:00:1f:06:a8:
                    fd:7b:1e:50:ff:8d:0f:b1:35:76:2a:c1:aa:25:9e:
                    ea:96:19:a8:f7:d0:d6:e9:f6:92:3c:de:d0:6b:87:
                    f7:1b:94:4e:fc:a0:ed:2f:b6:2c:a7:ff:b0:df:56:
                    de:0f:9d:1f:82:a0:4f:a9:58:30:c6:e6:75:e1:4c:
                    7f:c0:73:75:c5:3b:cb:af:07:1e:63:61:d6:37:97:
                    9c:a7:67:d4:ba:71:6f:78:58:1f:21:1a:fe:7f:12:
                    d1:c3:6c:c5:be:86:55:c9:8a:0f:4c:64:6b:71:4c:
                    53:bb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6F:81:98:67:9E:7D:87:2B:E2:39:8E:B8:98:FF:F4:CC:4A:1C:AB:29
            X509v3 Authority Key Identifier:
                keyid:29:FE:66:16:95:74:1D:85:CF:ED:CF:6F:FB:CF:74:69:99:59:56:9F

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Kf5mFpV0HYXP7c9v-890aZlZVp8.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a2/51ecc9-5681-4b02-9db8-2e880a7a82ca/1/Kf5mFpV0HYXP7c9v-890aZlZVp8.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/a2/51ecc9-5681-4b02-9db8-2e880a7a82ca/1/Kf5mFpV0HYXP7c9v-890aZlZVp8.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         26:bd:85:19:fa:5f:90:4e:3b:99:f9:cc:e5:4c:eb:d5:04:dd:
         69:b3:9e:c3:67:38:3b:87:c3:ac:ab:70:ce:83:d4:57:9c:6c:
         fc:58:c3:10:03:07:3d:fb:ce:12:b6:83:64:cc:02:4a:3b:5f:
         d9:dc:c0:4f:93:a1:12:68:92:f6:1a:20:fe:5f:5b:c2:16:43:
         13:3b:c5:0e:45:ac:82:7e:44:c8:59:0a:ee:da:14:2f:20:b1:
         4e:5f:73:12:cc:a5:53:a4:5d:20:f5:d1:76:fd:e9:1c:66:09:
         e0:b8:4a:5d:a8:6e:3a:ed:39:99:02:a3:90:90:bc:80:32:32:
         34:69:f4:f4:d0:0c:26:d8:fe:24:1e:6f:fc:e8:a4:76:a9:7f:
         f5:a6:20:77:41:dc:1a:2e:0e:14:fc:04:a0:94:27:e3:20:8a:
         49:9b:86:d1:21:53:7a:58:86:d2:e4:64:ff:cb:8a:56:7a:cf:
         96:0e:84:89:60:a3:0a:e5:7c:3d:a8:e5:d1:91:a6:ae:21:0b:
         71:98:5b:2e:b7:48:db:6b:6f:89:b6:0b:fa:be:42:1c:d8:e4:
         6b:66:35:24:10:39:d1:30:5b:54:8d:4d:f1:c4:7b:3f:08:6c:
         5e:9f:1f:ab:66:d6:e0:86:4c:e8:4c:9b:67:cd:e1:bf:cd:df:
         35:62:40:f1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 14 20:31:25 2025 by rpki-client on console.sobornost.net