Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c1/ba5c9a-8105-4be1-bcf3-6c395a6c7420/1/zywUDr4TKWR_SFiMjgjHP_2q4vU.mft
File:                     zywUDr4TKWR_SFiMjgjHP_2q4vU.mft (raw, json)
Hash identifier:          Qt1Kf8DtrFol759V6H10qAApM4EhWP/equ5h1DNQTiM=
Subject key identifier:   85:B7:30:7C:78:19:DC:94:FB:C6:90:80:A9:7B:8D:AC:5C:72:7C:FC
Authority key identifier: CF:2C:14:0E:BE:13:29:64:7F:48:58:8C:8E:08:C7:3F:FD:AA:E2:F5
Certificate issuer:       /CN=cf2c140ebe1329647f48588c8e08c73ffdaae2f5
Certificate serial:       0193F99D062AAFEC9D2DCD223551AB287B9A
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/zywUDr4TKWR_SFiMjgjHP_2q4vU.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/c1/ba5c9a-8105-4be1-bcf3-6c395a6c7420/1/zywUDr4TKWR_SFiMjgjHP_2q4vU.mft
Manifest number:          06A8
Signing time:             Tue 24 Dec 2024 17:00:37 +0000
Manifest this update:     Tue 24 Dec 2024 17:00:37 +0000
Manifest next update:     Wed 25 Dec 2024 17:00:37 +0000
Files and hashes:         1: zywUDr4TKWR_SFiMjgjHP_2q4vU.crl (hash: O80yVGUwmt+E2d4o5V+BNtRpJj4vjXGXl7UbpjcxVQQ=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:93:f9:9d:06:2a:af:ec:9d:2d:cd:22:35:51:ab:28:7b:9a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=cf2c140ebe1329647f48588c8e08c73ffdaae2f5
        Validity
            Not Before: Dec 24 17:00:37 2024 GMT
            Not After : Dec 25 17:00:37 2024 GMT
        Subject: CN=85b7307c7819dc94fbc69080a97b8dac5c727cfc
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c7:23:91:81:0c:53:3b:78:1d:1c:5a:b9:70:ed:
                    46:8f:6f:54:d5:50:46:c9:ff:46:ab:58:35:4d:2d:
                    19:96:ac:43:ea:e0:cf:47:88:68:cc:ac:45:f3:2c:
                    2d:91:9e:b3:ce:2b:72:d2:34:03:74:73:ae:fa:eb:
                    0a:d2:76:a5:1b:2a:c5:ab:5d:ad:30:65:7c:83:eb:
                    ea:47:17:09:9e:62:40:7a:c1:89:18:b2:ea:71:6d:
                    45:b3:48:a5:78:15:00:10:a2:00:b1:ca:d8:cc:66:
                    32:72:65:1a:21:67:6b:c2:77:58:de:fd:5c:af:4c:
                    24:7e:e3:07:84:3f:46:72:48:b2:0e:8f:b7:33:c2:
                    e2:fb:1c:ef:b3:81:e6:27:9d:d4:3c:34:39:dd:d6:
                    2a:ba:59:e9:a4:23:c5:6f:36:f6:5b:62:66:4c:91:
                    91:15:a2:82:38:51:51:a4:30:ac:4b:3c:c9:ef:3a:
                    2d:66:a6:31:24:35:2b:9d:3d:99:a8:eb:21:fd:48:
                    66:9b:04:74:d4:52:b3:d8:4b:bb:76:3c:db:af:ad:
                    91:07:f6:90:b1:6d:31:34:75:71:63:17:dd:3d:8e:
                    43:0b:52:19:66:10:cb:fd:c3:42:2c:12:73:32:e3:
                    6d:c1:5c:5e:2c:de:40:e9:35:f7:2c:2e:3d:87:8e:
                    46:fd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                85:B7:30:7C:78:19:DC:94:FB:C6:90:80:A9:7B:8D:AC:5C:72:7C:FC
            X509v3 Authority Key Identifier:
                keyid:CF:2C:14:0E:BE:13:29:64:7F:48:58:8C:8E:08:C7:3F:FD:AA:E2:F5

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/zywUDr4TKWR_SFiMjgjHP_2q4vU.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c1/ba5c9a-8105-4be1-bcf3-6c395a6c7420/1/zywUDr4TKWR_SFiMjgjHP_2q4vU.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/c1/ba5c9a-8105-4be1-bcf3-6c395a6c7420/1/zywUDr4TKWR_SFiMjgjHP_2q4vU.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         b2:20:8b:ef:c0:6d:bc:e5:81:af:b2:9b:ea:3e:1f:41:f1:a5:
         d0:1f:de:32:6d:31:b2:89:74:4c:9b:aa:97:fc:90:9f:ac:60:
         da:0d:f9:90:76:ba:d7:34:2d:51:1e:b2:b5:9f:03:d3:9d:9b:
         c1:c5:91:6e:5b:ae:50:f3:24:31:b0:00:b3:29:43:36:b7:1e:
         02:6d:19:0d:c9:76:68:01:65:6d:bb:4b:e1:d2:e4:7c:53:45:
         1f:e4:bf:d1:67:fb:45:1c:b3:4a:db:58:6e:8d:e4:1b:27:79:
         c8:9e:91:12:50:72:9d:73:cb:01:9a:6f:b0:1a:9c:e3:f2:a0:
         4f:9a:ec:1d:06:d2:50:1e:f9:99:ce:83:4f:69:f3:93:c5:ff:
         10:42:36:af:b8:24:3c:f7:8b:da:64:8b:20:ee:09:f1:d0:6c:
         2a:6d:24:59:60:d1:52:51:1c:ca:b4:6b:66:bf:26:c6:4d:d1:
         ed:ea:95:d6:b3:3d:9c:c5:ad:cb:ca:09:0e:3e:f8:63:11:6e:
         63:fa:9d:02:7c:33:9c:8b:85:ad:e9:d6:8a:58:a2:b9:89:81:
         60:ca:df:7b:1c:18:a3:0e:f1:e1:b5:8d:fd:e2:f2:aa:34:aa:
         fb:cb:ce:f6:11:62:6d:a3:aa:4f:dd:8f:7a:e3:99:5e:e9:94:
         cc:4b:d1:0e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Dec 25 21:29:42 2024 by rpki-client on console.sobornost.net