Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c2/2fd023-e646-406a-84a5-bb6945a16fe7/1/MlBSt6Z4-qCX3L5lRxcMkVK0bPE.mft
File:                     MlBSt6Z4-qCX3L5lRxcMkVK0bPE.mft (raw, json)
Hash identifier:          MzZGPoW0exe6nyYU6jYk4HjNZuea0JygIGCXZ1khKzA=
Subject key identifier:   72:79:A6:59:65:8E:17:EE:F4:DC:92:F0:5B:9A:4A:D3:8F:B5:01:FB
Authority key identifier: 32:50:52:B7:A6:78:FA:A0:97:DC:BE:65:47:17:0C:91:52:B4:6C:F1
Certificate issuer:       /CN=325052b7a678faa097dcbe6547170c9152b46cf1
Certificate serial:       01962F06B00F2F93CF98FD3FB33A66C6C1FA
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/MlBSt6Z4-qCX3L5lRxcMkVK0bPE.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/c2/2fd023-e646-406a-84a5-bb6945a16fe7/1/MlBSt6Z4-qCX3L5lRxcMkVK0bPE.mft
Manifest number:          1479
Signing time:             Sun 13 Apr 2025 12:01:29 +0000
Manifest this update:     Sun 13 Apr 2025 12:01:29 +0000
Manifest next update:     Mon 14 Apr 2025 12:01:29 +0000
Files and hashes:         1: MlBSt6Z4-qCX3L5lRxcMkVK0bPE.crl (hash: y63n5LZnVgEgUDEvRWx+onsbPAs5T/t58ZQoQqseSuU=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2f:06:b0:0f:2f:93:cf:98:fd:3f:b3:3a:66:c6:c1:fa
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=325052b7a678faa097dcbe6547170c9152b46cf1
        Validity
            Not Before: Apr 13 12:01:29 2025 GMT
            Not After : Apr 14 12:01:29 2025 GMT
        Subject: CN=7279a659658e17eef4dc92f05b9a4ad38fb501fb
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a5:40:88:fd:a8:28:de:8d:0d:b2:85:af:37:fe:
                    6e:98:90:6c:9c:e0:e2:cd:20:08:50:8b:fc:3f:38:
                    22:f8:54:f0:be:63:ae:c0:f8:61:ab:f0:6d:2f:cf:
                    4c:d8:95:b9:b4:10:93:d2:87:d2:80:db:73:ff:e2:
                    95:3c:56:a1:7c:31:ea:df:27:d2:d7:9b:c9:e5:c5:
                    6c:0b:02:05:56:e5:c9:12:90:f2:d7:07:61:be:e1:
                    c5:78:2f:9a:fb:69:c0:98:fd:b2:0c:5e:b2:6e:f6:
                    f2:d1:d8:5a:be:ec:2e:d7:ca:3d:3f:c7:eb:80:99:
                    3f:70:7a:05:bf:f2:ca:99:86:4f:db:2c:48:15:98:
                    ff:11:8f:57:ea:e7:f1:05:0c:6a:3e:e2:14:ac:43:
                    40:9a:76:12:fe:69:34:01:96:f6:cb:b2:4d:19:17:
                    94:44:70:e5:2d:3f:b9:80:63:62:db:ad:d6:28:eb:
                    5c:d3:2d:50:57:c3:05:dd:6b:d8:e0:5e:4b:3d:03:
                    7e:a8:83:b4:42:43:4a:55:0e:e2:a7:a3:e9:aa:52:
                    e3:8c:ab:3a:a8:5f:3f:7a:d3:2d:1c:37:3a:ca:f6:
                    b1:3e:63:8c:e7:56:c4:4d:8b:7e:34:0f:fc:e7:e0:
                    d8:70:2f:6b:dc:12:b1:da:80:8a:62:8e:97:00:9a:
                    37:fd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                72:79:A6:59:65:8E:17:EE:F4:DC:92:F0:5B:9A:4A:D3:8F:B5:01:FB
            X509v3 Authority Key Identifier:
                keyid:32:50:52:B7:A6:78:FA:A0:97:DC:BE:65:47:17:0C:91:52:B4:6C:F1

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/MlBSt6Z4-qCX3L5lRxcMkVK0bPE.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c2/2fd023-e646-406a-84a5-bb6945a16fe7/1/MlBSt6Z4-qCX3L5lRxcMkVK0bPE.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/c2/2fd023-e646-406a-84a5-bb6945a16fe7/1/MlBSt6Z4-qCX3L5lRxcMkVK0bPE.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         4f:92:c1:11:56:b1:74:9b:c2:6f:11:e0:bb:d5:a5:0b:cf:c0:
         e3:02:d7:96:2f:41:09:ec:7a:a2:14:24:70:35:42:b5:a4:54:
         38:3f:3c:34:e7:4a:a8:86:58:b5:8d:a9:6b:7d:11:d8:0b:44:
         2d:46:2c:89:ae:1a:2d:12:b0:fa:78:d7:93:3e:0e:9a:1d:92:
         c2:78:40:da:c4:ce:f9:84:50:90:69:c5:35:9f:d2:a6:c2:bb:
         ed:d3:94:7e:71:19:e8:de:ef:37:e7:7d:19:f3:02:9f:8f:a9:
         69:3a:94:d5:9e:25:4f:0f:70:56:dd:22:51:e7:f2:cc:02:5b:
         47:93:be:e8:be:2d:a8:37:de:a4:0e:d5:7f:43:75:2b:dc:22:
         86:7a:f8:cb:ac:0b:02:68:d8:cc:e2:64:18:11:dd:57:72:2d:
         3c:68:70:a2:25:4a:f8:9f:a3:66:77:bb:1e:99:34:b7:64:7e:
         30:ad:b6:20:19:25:7f:66:0c:fb:79:18:af:eb:90:b9:71:04:
         82:47:b8:5e:e1:d3:a6:3a:48:7f:3e:2b:d7:fd:45:91:ed:1b:
         e9:7f:02:f1:e2:09:ea:22:4d:5f:66:ec:b3:27:f9:7e:ca:80:
         a0:37:c5:34:ac:7b:04:8c:b7:67:6b:21:ae:c1:c9:4c:d2:19:
         05:ec:11:03
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 14 20:31:58 2025 by rpki-client on console.sobornost.net