Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ab/c8ebc1-b425-46c9-9d56-8aec4a9aa5b8/1/XGl5JYB9FsulLpLpIs_dXsB4hBg.mft
File:                     XGl5JYB9FsulLpLpIs_dXsB4hBg.mft (raw, json)
Hash identifier:          ze3jJPCxOSr04S8nHPwEJuQbFTaAVkDf5oZDAPoeXs8=
Subject key identifier:   5D:C3:C0:84:81:D0:1B:9B:2D:8C:3F:FA:B2:5E:9B:B3:EE:70:A6:27
Authority key identifier: 5C:69:79:25:80:7D:16:CB:A5:2E:92:E9:22:CF:DD:5E:C0:78:84:18
Certificate issuer:       /CN=5c697925807d16cba52e92e922cfdd5ec0788418
Certificate serial:       01954747FAE011139732B80378FE6A521C2C
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/XGl5JYB9FsulLpLpIs_dXsB4hBg.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/ab/c8ebc1-b425-46c9-9d56-8aec4a9aa5b8/1/XGl5JYB9FsulLpLpIs_dXsB4hBg.mft
Manifest number:          0C71
Signing time:             Thu 27 Feb 2025 12:00:54 +0000
Manifest this update:     Thu 27 Feb 2025 12:00:54 +0000
Manifest next update:     Fri 28 Feb 2025 12:00:54 +0000
Files and hashes:         1: XGl5JYB9FsulLpLpIs_dXsB4hBg.crl (hash: 6c1qkwfEltckr0qXbbvFp+dGquHhqg/dx+bogkdXKHI=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:95:47:47:fa:e0:11:13:97:32:b8:03:78:fe:6a:52:1c:2c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5c697925807d16cba52e92e922cfdd5ec0788418
        Validity
            Not Before: Feb 27 12:00:54 2025 GMT
            Not After : Feb 28 12:00:54 2025 GMT
        Subject: CN=5dc3c08481d01b9b2d8c3ffab25e9bb3ee70a627
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bd:3b:ea:8c:31:9d:b4:9d:4f:4c:1e:0a:7e:ed:
                    26:80:5d:9f:62:51:e1:98:96:22:f0:2e:25:02:91:
                    73:3c:2b:eb:b2:e8:62:c6:01:5e:a0:0d:17:f0:99:
                    d6:d0:b8:7e:ac:d0:d1:cd:05:e5:7d:bb:38:b8:a5:
                    6a:d2:50:3f:5c:48:3c:10:ee:0b:c4:db:06:eb:8a:
                    b0:6b:ac:40:1f:13:26:5e:e9:a2:3d:ef:18:81:92:
                    6d:14:72:87:41:b3:83:ff:31:ac:5c:39:6f:07:f2:
                    b5:2a:c3:99:18:3a:f1:9e:dc:a6:f9:f2:56:d0:6e:
                    f3:c3:88:33:af:62:43:cc:01:52:96:20:83:ff:8a:
                    e3:c2:09:37:1c:11:4d:fe:41:12:c6:7d:ae:21:84:
                    95:74:e5:3d:fd:e7:33:a3:3e:0d:89:94:ff:64:06:
                    12:fa:0d:05:6b:2d:2e:5d:e3:09:d6:59:e8:28:5f:
                    08:76:29:6c:91:f1:8a:16:d8:ef:02:ca:50:7a:8f:
                    16:f8:0d:f9:07:c3:61:87:90:03:0f:67:b5:06:7f:
                    03:ca:64:92:9b:11:50:52:c4:9a:b7:39:6b:81:b3:
                    e1:95:c3:18:ec:bb:90:6f:54:e6:bd:fe:47:95:a1:
                    68:d0:fc:98:cc:e0:a2:e5:0c:90:7a:18:b8:d1:b6:
                    8b:3d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5D:C3:C0:84:81:D0:1B:9B:2D:8C:3F:FA:B2:5E:9B:B3:EE:70:A6:27
            X509v3 Authority Key Identifier:
                keyid:5C:69:79:25:80:7D:16:CB:A5:2E:92:E9:22:CF:DD:5E:C0:78:84:18

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/XGl5JYB9FsulLpLpIs_dXsB4hBg.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ab/c8ebc1-b425-46c9-9d56-8aec4a9aa5b8/1/XGl5JYB9FsulLpLpIs_dXsB4hBg.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/ab/c8ebc1-b425-46c9-9d56-8aec4a9aa5b8/1/XGl5JYB9FsulLpLpIs_dXsB4hBg.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         87:f3:2d:8c:35:a5:c2:a9:35:e4:e7:1a:81:46:86:58:fb:13:
         49:d5:ea:c9:e5:80:d3:b2:11:e3:d3:c9:ce:7c:3a:a0:a5:73:
         82:05:e6:87:28:65:1c:a2:41:1a:63:87:9d:2c:05:a0:69:a3:
         fa:2d:28:40:36:16:59:70:d7:49:df:c8:66:e8:3b:b1:98:d5:
         31:5e:21:05:0e:a3:fa:3c:d5:d3:83:d9:8e:2a:21:d9:d3:06:
         a8:60:f2:49:ef:19:27:be:4c:e9:46:a7:9b:17:a1:75:d5:bd:
         d7:12:b5:b4:aa:74:f9:dd:35:e8:84:b2:67:27:9e:32:33:89:
         6c:b0:a4:58:cd:72:9f:12:06:c0:75:8c:4c:7d:20:27:fb:16:
         f4:f9:2f:ca:ce:ba:1c:1e:23:19:01:38:ed:1a:20:ee:fb:da:
         03:a9:46:08:7a:e2:11:5e:04:99:7a:61:ab:6e:20:29:e3:cf:
         98:08:23:77:ad:60:b6:82:4d:c0:e6:80:85:6e:ea:95:22:cd:
         b5:43:fd:ca:1e:fb:03:76:70:da:f6:e2:c4:5a:10:ed:aa:4e:
         a2:35:0f:05:9b:89:4b:f9:1d:64:28:55:31:ca:2e:42:51:16:
         4a:56:c2:91:cd:44:0a:7f:7c:65:d4:c2:49:58:96:00:e5:1f:
         95:1a:cd:57
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Mar 8 04:54:06 2025 by rpki-client on console.sobornost.net