Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a5/998e59-1fe2-4346-82a8-dcd15112c6d7/1/U7gc6zN9LdQOYwonBEfAmVk5jBE.mft
File:                     U7gc6zN9LdQOYwonBEfAmVk5jBE.mft (raw, json)
Hash identifier:          Y3RY8VJf9xFS1JCZXCwdxIAyx1CdlEOrgUmUMjiV0uo=
Subject key identifier:   73:FC:7F:B7:7E:97:C6:49:6E:A9:2E:CC:5E:D0:56:31:6E:DF:72:FF
Authority key identifier: 53:B8:1C:EB:33:7D:2D:D4:0E:63:0A:27:04:47:C0:99:59:39:8C:11
Certificate issuer:       /CN=53b81ceb337d2dd40e630a270447c09959398c11
Certificate serial:       0195477EE1B5AD3B79569AC40171FE2E277D
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/U7gc6zN9LdQOYwonBEfAmVk5jBE.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/a5/998e59-1fe2-4346-82a8-dcd15112c6d7/1/U7gc6zN9LdQOYwonBEfAmVk5jBE.mft
Manifest number:          093A
Signing time:             Thu 27 Feb 2025 13:00:52 +0000
Manifest this update:     Thu 27 Feb 2025 13:00:52 +0000
Manifest next update:     Fri 28 Feb 2025 13:00:52 +0000
Files and hashes:         1: U7gc6zN9LdQOYwonBEfAmVk5jBE.crl (hash: 6ve8s7MIokqr0SYHgKOX1eNs6C0msJdPqNr12WVxknE=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:95:47:7e:e1:b5:ad:3b:79:56:9a:c4:01:71:fe:2e:27:7d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=53b81ceb337d2dd40e630a270447c09959398c11
        Validity
            Not Before: Feb 27 13:00:52 2025 GMT
            Not After : Feb 28 13:00:52 2025 GMT
        Subject: CN=73fc7fb77e97c6496ea92ecc5ed056316edf72ff
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ca:94:43:6f:7b:70:1d:43:a9:b4:5b:f5:83:22:
                    2f:ff:45:54:d8:eb:42:54:fd:fc:66:72:88:12:bf:
                    a3:e8:aa:c8:d9:30:fd:49:ab:6e:fc:c7:24:4a:b1:
                    b6:42:42:0e:4c:4a:51:94:a0:6e:88:28:b6:1d:f2:
                    d3:d7:2d:c9:8f:75:5c:55:8b:3d:58:85:9b:68:04:
                    ea:02:bb:9d:0a:e0:3e:f4:9b:f9:0d:de:72:97:1e:
                    51:d2:05:a8:15:dd:04:7c:eb:96:e0:4a:4d:5c:13:
                    e7:f8:be:37:7d:da:3f:a5:85:b1:63:bf:16:4b:d6:
                    c7:36:09:38:c5:a4:25:55:00:c6:30:b1:5f:54:d4:
                    db:08:41:0f:44:0d:9e:25:f1:e1:33:0d:35:8b:ef:
                    12:27:3d:d1:22:32:c0:66:ec:9d:48:0e:24:f6:f9:
                    da:6c:1e:c8:e1:78:3a:cb:1c:d0:b4:e5:72:89:e7:
                    9f:0c:75:c2:a0:f0:96:ae:33:65:ca:5d:ea:1a:58:
                    91:9f:3f:ac:27:83:99:ae:fc:9b:e4:2a:d2:a2:76:
                    fc:42:d5:2d:a4:f4:b2:c2:74:f8:cc:06:a1:26:f3:
                    96:bd:5b:d8:c5:9f:83:54:52:9e:7f:85:06:19:59:
                    76:dc:8b:80:8a:1b:1a:3c:16:d6:33:0d:05:f0:09:
                    2c:2f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                73:FC:7F:B7:7E:97:C6:49:6E:A9:2E:CC:5E:D0:56:31:6E:DF:72:FF
            X509v3 Authority Key Identifier:
                keyid:53:B8:1C:EB:33:7D:2D:D4:0E:63:0A:27:04:47:C0:99:59:39:8C:11

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/U7gc6zN9LdQOYwonBEfAmVk5jBE.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a5/998e59-1fe2-4346-82a8-dcd15112c6d7/1/U7gc6zN9LdQOYwonBEfAmVk5jBE.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/a5/998e59-1fe2-4346-82a8-dcd15112c6d7/1/U7gc6zN9LdQOYwonBEfAmVk5jBE.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         7b:5e:1d:9e:cf:53:17:5a:27:b1:88:05:a7:a1:96:fe:5e:e6:
         8b:a0:e1:47:60:72:e1:49:92:97:20:90:08:e5:21:63:ea:02:
         2e:17:86:8c:67:9d:a5:8b:6f:fe:b8:82:72:76:37:4b:16:44:
         aa:0f:31:50:de:72:23:1a:45:56:d4:b2:da:52:09:4d:4d:2b:
         0d:ba:bd:c8:eb:fc:cf:16:1a:18:ea:76:3f:ac:fe:1b:90:36:
         c8:9f:f7:e0:71:cf:0c:f9:68:5c:67:11:58:f2:9b:c3:f1:4d:
         32:82:0c:2f:36:5d:01:c7:2b:ad:ac:5d:6c:9c:2a:47:c7:3f:
         34:96:60:79:78:2b:45:a4:1c:39:91:91:af:b0:ad:49:97:21:
         ef:b4:a5:63:99:30:e1:b0:42:8b:f4:65:08:5a:1e:a4:bd:41:
         01:63:d4:59:7d:c9:8f:d1:b5:0d:e6:d2:df:e9:10:2c:ca:07:
         7c:86:1e:f5:31:6f:1d:5e:3c:87:03:d1:31:a2:6a:42:71:d4:
         52:41:63:7c:84:4b:04:25:55:7c:25:7c:32:cd:f7:9e:1d:b3:
         64:41:29:68:85:b5:76:15:0b:0f:14:5c:3c:a5:1a:d0:d6:ac:
         d0:fa:03:48:d0:09:fe:f8:ef:5f:94:36:34:ee:75:36:ec:3b:
         91:a7:0a:7d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Mar 8 04:53:46 2025 by rpki-client on console.sobornost.net