Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/cf/221d93-2a39-42e7-bda5-e9f2da31aaeb/1/jIKwJTk-vPKLHf5yn7GUqPnSdEA.mft
File:                     jIKwJTk-vPKLHf5yn7GUqPnSdEA.mft (raw, json)
Hash identifier:          4O+GOLchRYsauPbutX9xvfGaKLctvo6noRz1/9c/WVg=
Subject key identifier:   C9:FD:25:CD:61:28:55:E8:DB:DC:4A:6D:98:F4:0E:F7:88:65:50:CD
Authority key identifier: 8C:82:B0:25:39:3E:BC:F2:8B:1D:FE:72:9F:B1:94:A8:F9:D2:74:40
Certificate issuer:       /CN=8c82b025393ebcf28b1dfe729fb194a8f9d27440
Certificate serial:       01934717B923FEF6742C43FE356493103494
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/jIKwJTk-vPKLHf5yn7GUqPnSdEA.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/cf/221d93-2a39-42e7-bda5-e9f2da31aaeb/1/jIKwJTk-vPKLHf5yn7GUqPnSdEA.mft
Manifest number:          135A
Signing time:             Wed 20 Nov 2024 01:02:37 +0000
Manifest this update:     Wed 20 Nov 2024 01:02:37 +0000
Manifest next update:     Thu 21 Nov 2024 01:02:37 +0000
Files and hashes:         1: jIKwJTk-vPKLHf5yn7GUqPnSdEA.crl (hash: rh6PqSQh/GyrexApxQqAhTQsBEQ6LzPGY7gRt3sCac0=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:93:47:17:b9:23:fe:f6:74:2c:43:fe:35:64:93:10:34:94
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8c82b025393ebcf28b1dfe729fb194a8f9d27440
        Validity
            Not Before: Nov 20 01:02:37 2024 GMT
            Not After : Nov 21 01:02:37 2024 GMT
        Subject: CN=c9fd25cd612855e8dbdc4a6d98f40ef7886550cd
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:aa:fe:38:24:aa:85:2f:55:7d:6d:58:83:05:56:
                    19:50:12:8c:24:38:f8:56:60:68:5c:f6:b5:21:e5:
                    9c:ba:b5:cf:2d:13:2b:4b:5a:2c:56:58:ce:4f:2d:
                    b3:e4:0b:af:fa:d5:95:d1:1f:eb:a3:ef:b8:52:09:
                    c1:e5:5c:8d:23:d0:94:6f:7c:6a:e1:b6:6e:f2:bd:
                    c0:b6:4f:1f:68:80:c7:ac:d7:39:b9:57:11:19:ef:
                    55:64:66:84:1f:d6:3c:75:ab:c5:87:43:af:8e:e4:
                    13:5b:f1:5e:43:7b:be:00:83:b1:49:de:28:3b:c2:
                    6b:c5:0b:a8:a3:33:d0:b7:b0:47:d1:91:85:71:90:
                    0c:0d:c6:f2:ed:64:59:13:6f:5d:38:76:af:81:13:
                    ff:63:99:79:7e:2e:ff:44:10:5a:fb:09:75:4b:f4:
                    73:eb:2b:f6:7a:de:7e:fe:e5:c9:e6:d9:27:d2:42:
                    ba:66:3f:71:29:75:54:a2:e7:3d:b5:5d:28:13:49:
                    ff:38:b6:bf:a7:bc:14:cc:2e:41:08:12:82:64:66:
                    d5:73:0b:42:1b:29:34:63:4b:36:35:70:63:23:03:
                    3f:1d:1f:d4:de:d3:04:50:cb:4d:8a:1d:00:4c:be:
                    5f:6f:a1:6a:1e:81:16:0c:47:52:ed:e1:f7:6d:aa:
                    97:27
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C9:FD:25:CD:61:28:55:E8:DB:DC:4A:6D:98:F4:0E:F7:88:65:50:CD
            X509v3 Authority Key Identifier:
                keyid:8C:82:B0:25:39:3E:BC:F2:8B:1D:FE:72:9F:B1:94:A8:F9:D2:74:40

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/jIKwJTk-vPKLHf5yn7GUqPnSdEA.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/cf/221d93-2a39-42e7-bda5-e9f2da31aaeb/1/jIKwJTk-vPKLHf5yn7GUqPnSdEA.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/cf/221d93-2a39-42e7-bda5-e9f2da31aaeb/1/jIKwJTk-vPKLHf5yn7GUqPnSdEA.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         1d:7b:07:ed:5e:4b:98:05:ad:d7:c4:2c:21:4e:bb:18:98:8e:
         e2:b7:91:97:b5:e3:c8:e7:37:d9:6b:ac:cc:0f:77:c8:30:59:
         a6:ef:c6:ea:29:ef:27:f7:cc:47:03:59:f0:d6:02:ec:1e:6f:
         72:bc:08:f5:80:ed:95:b3:b1:59:6f:63:f7:fa:68:25:5d:4a:
         51:63:84:e3:75:5f:5a:8a:cb:38:9f:ba:4b:3e:4b:44:02:3a:
         74:b8:67:88:d8:90:91:9c:5e:19:2b:4a:3a:85:0e:61:5f:61:
         2f:b8:39:76:ee:f2:e1:c1:7a:db:1f:27:88:00:76:97:20:59:
         db:08:22:01:35:e5:d6:f8:1e:56:dc:ef:50:22:d1:2e:6e:75:
         dc:cf:e5:39:f7:a6:4e:26:b2:d8:ac:54:dd:1a:c9:18:d6:cf:
         4d:3d:41:ae:9a:15:28:48:11:34:8a:f2:37:b4:59:ac:8a:87:
         1c:6d:52:ea:31:2a:37:ea:77:49:da:ef:71:cd:ee:bb:57:1b:
         ad:23:0b:0b:5c:d8:80:2e:19:c7:38:13:5c:0c:12:05:33:80:
         47:14:aa:ff:a9:28:82:a4:3f:8c:86:8c:74:cd:52:4e:54:d3:
         35:98:3f:52:77:9e:00:d4:65:5f:72:b3:f5:69:04:91:c8:52:
         a7:7b:ea:02
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Nov 21 02:21:11 2024 by rpki-client on console.sobornost.net