Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f0/32e7dc-bd1a-425b-9ee1-01de2598629f/1/1-3VI2ji-sc5y-KaTOzHaW1xlSDQ.mft
File:                     1-3VI2ji-sc5y-KaTOzHaW1xlSDQ.mft (raw, json)
Hash identifier:          zJy4qJgz6wXr9N2rPm6/+1+ErRTxH0D6IpVl8D+UgEE=
Subject key identifier:   B7:FF:40:3F:B0:FA:CC:7F:71:4D:E9:34:43:46:36:EB:67:C4:41:0D
Authority key identifier: FB:75:48:DA:38:BE:B1:CE:72:F8:A6:93:3B:31:DA:5B:5C:65:48:34
Certificate issuer:       /CN=fb7548da38beb1ce72f8a6933b31da5b5c654834
Certificate serial:       01948F99E65988F652FA834ECED370C1B6CF
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/1-3VI2ji-sc5y-KaTOzHaW1xlSDQ.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/f0/32e7dc-bd1a-425b-9ee1-01de2598629f/1/1-3VI2ji-sc5y-KaTOzHaW1xlSDQ.mft
Manifest number:          0340
Signing time:             Wed 22 Jan 2025 20:00:15 +0000
Manifest this update:     Wed 22 Jan 2025 20:00:15 +0000
Manifest next update:     Thu 23 Jan 2025 20:00:15 +0000
Files and hashes:         1: 1-3VI2ji-sc5y-KaTOzHaW1xlSDQ.crl (hash: zT4KSulTxx9gZFvwDjLwKGQV/R1mdI3pDeqH7FI8uXY=)
                          2: k9NZ-PYWI7kwwh7KMfjse_EGSio.roa (hash: MeUeYhfVRot9Ivd+KuTZUUB0nspI8NAxZsdO7dkoLzM=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:94:8f:99:e6:59:88:f6:52:fa:83:4e:ce:d3:70:c1:b6:cf
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=fb7548da38beb1ce72f8a6933b31da5b5c654834
        Validity
            Not Before: Jan 22 20:00:15 2025 GMT
            Not After : Jan 23 20:00:15 2025 GMT
        Subject: CN=b7ff403fb0facc7f714de934434636eb67c4410d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a5:f4:82:6d:d0:56:f2:3f:79:3c:33:13:34:a7:
                    8f:3e:92:67:26:b5:2e:20:ae:bd:5b:81:15:14:92:
                    a8:16:26:39:49:da:c5:9b:4d:fa:e6:5c:47:6c:94:
                    5c:02:59:a8:2a:ed:ae:96:0f:13:91:3a:20:99:fc:
                    ce:89:84:19:62:58:43:ac:9c:b8:06:ea:81:87:85:
                    21:09:f3:26:a0:24:02:e0:ae:69:c5:c7:8e:10:68:
                    00:54:13:2c:48:e1:2c:ed:6a:60:87:09:04:2a:d5:
                    7a:be:cc:78:d6:1d:4a:49:71:80:a6:d1:cf:88:be:
                    f8:42:c5:27:97:c6:fc:01:7e:5c:49:d1:bf:58:ec:
                    ee:b9:38:2f:81:04:c9:3a:21:1c:4e:b5:d2:67:b7:
                    1c:d1:76:62:0f:99:f3:f1:18:af:aa:61:26:b8:ad:
                    90:06:40:19:00:45:a8:b6:ba:25:b5:c6:39:8d:a5:
                    30:c7:9e:0e:fd:96:6f:9a:4f:a9:38:69:71:d8:03:
                    9e:48:db:4e:5a:d8:f4:21:22:26:dc:2b:34:7f:86:
                    dc:b2:de:04:2a:b8:29:67:de:0b:9d:d6:bc:ac:af:
                    c7:75:ca:e6:9f:57:68:82:01:52:bd:0d:18:28:1f:
                    0d:04:37:74:df:eb:ad:e3:1e:7c:77:ba:dd:91:2b:
                    ea:db
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B7:FF:40:3F:B0:FA:CC:7F:71:4D:E9:34:43:46:36:EB:67:C4:41:0D
            X509v3 Authority Key Identifier:
                keyid:FB:75:48:DA:38:BE:B1:CE:72:F8:A6:93:3B:31:DA:5B:5C:65:48:34

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1-3VI2ji-sc5y-KaTOzHaW1xlSDQ.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f0/32e7dc-bd1a-425b-9ee1-01de2598629f/1/1-3VI2ji-sc5y-KaTOzHaW1xlSDQ.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/f0/32e7dc-bd1a-425b-9ee1-01de2598629f/1/1-3VI2ji-sc5y-KaTOzHaW1xlSDQ.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         55:65:a4:8f:20:73:a6:ee:59:33:d9:c8:ec:41:e1:f9:45:90:
         5d:7a:33:6b:d6:0a:3d:4d:5f:04:a2:fd:8c:3d:a2:e4:97:27:
         a2:ce:24:dd:fe:cb:c0:0e:f1:f5:88:7b:4d:17:36:95:fd:93:
         6c:77:13:c5:d6:96:e6:b2:41:72:7d:db:3a:77:2f:d5:ba:c3:
         78:6e:71:4f:86:2c:25:96:8b:58:a5:fd:28:29:2e:bc:a4:bd:
         25:0a:a2:f1:fe:e3:b8:1e:e6:14:0c:08:86:43:3c:01:57:12:
         52:c4:1d:24:d8:f3:5a:3a:a1:be:73:27:64:f9:3a:aa:cb:9b:
         ba:ba:ed:82:53:a3:35:5a:bf:18:70:b5:fd:cf:9e:14:81:ae:
         37:02:7b:78:08:a5:bb:e4:1d:04:f7:79:3e:b0:89:30:8d:1f:
         53:cb:60:f3:3e:24:eb:36:c1:ff:c8:a8:4c:22:f5:ba:e1:21:
         56:b4:00:32:a3:60:db:bb:96:86:d1:9e:f2:61:03:71:a8:71:
         4f:ac:4c:82:83:07:71:d2:a0:cf:f6:32:32:2f:a8:4c:f9:7a:
         97:3d:98:71:19:86:36:e9:8d:1e:a4:4d:42:d8:f4:87:40:37:
         94:81:94:ad:f8:5a:7f:ca:97:b2:d7:6c:68:0b:91:bd:ef:bb:
         46:5c:03:31
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jan 23 19:17:05 2025 by rpki-client on console.sobornost.net