Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f7/a417c4-3af2-43e8-a4c1-3dad029b2d4e/1/CBclXfMTC9t3_DcYfQYAX-4GZyQ.mft
File:                     CBclXfMTC9t3_DcYfQYAX-4GZyQ.mft (raw, json)
Hash identifier:          6ojOiZjhILN/aj3W44rYUExD5m5WXsZ0kXwCi9LdWF0=
Subject key identifier:   BE:D4:EA:F5:FF:A6:0A:C5:A5:C0:A1:82:33:A8:76:77:05:45:0D:A1
Authority key identifier: 08:17:25:5D:F3:13:0B:DB:77:FC:37:18:7D:06:00:5F:EE:06:67:24
Certificate issuer:       /CN=0817255df3130bdb77fc37187d06005fee066724
Certificate serial:       0195C8E2C6549D4D6DC1D424774698A1FF8D
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/CBclXfMTC9t3_DcYfQYAX-4GZyQ.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/f7/a417c4-3af2-43e8-a4c1-3dad029b2d4e/1/CBclXfMTC9t3_DcYfQYAX-4GZyQ.mft
Manifest number:          0E43
Signing time:             Mon 24 Mar 2025 16:00:59 +0000
Manifest this update:     Mon 24 Mar 2025 16:00:59 +0000
Manifest next update:     Tue 25 Mar 2025 16:00:59 +0000
Files and hashes:         1: CBclXfMTC9t3_DcYfQYAX-4GZyQ.crl (hash: fT6JpFb0kKlg67kaAmHYpStu1zQBelENdTKvR7bBd8o=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:95:c8:e2:c6:54:9d:4d:6d:c1:d4:24:77:46:98:a1:ff:8d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0817255df3130bdb77fc37187d06005fee066724
        Validity
            Not Before: Mar 24 16:00:59 2025 GMT
            Not After : Mar 25 16:00:59 2025 GMT
        Subject: CN=bed4eaf5ffa60ac5a5c0a18233a8767705450da1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:de:13:ee:57:9f:4d:c5:68:99:ac:11:6a:f0:7e:
                    f8:e2:1f:44:9e:75:dc:cd:d8:a2:0f:d5:fa:08:e9:
                    c4:4d:10:97:ff:b9:0b:68:00:a8:19:38:a0:18:69:
                    42:41:81:d4:bc:48:1c:e9:ad:53:52:9b:12:fe:88:
                    52:39:ea:15:a2:9a:2d:3e:77:0f:ab:38:8f:f8:04:
                    97:ed:fa:d4:e0:2b:11:c2:83:c6:b2:ea:d7:ad:fa:
                    17:38:81:28:ad:bf:fb:de:59:9d:ca:f4:49:29:6f:
                    d4:0f:63:5b:8b:a9:a7:e0:c4:a6:16:b6:6f:f6:03:
                    a2:f6:87:24:b6:1b:29:58:09:f5:78:61:d0:59:67:
                    dc:f0:f4:83:e4:ec:50:fd:d3:19:91:5a:09:b5:24:
                    64:d4:5d:67:23:49:d3:be:df:e6:40:cd:2c:ed:37:
                    85:4c:a7:78:69:ca:f1:c2:a2:a6:32:f7:bc:c6:a1:
                    a6:4c:d3:ce:28:41:5c:55:bc:24:c4:bd:f2:52:ae:
                    ec:39:fb:3f:ea:02:90:13:34:6b:49:09:dd:f3:c3:
                    82:f7:5f:c5:f6:fd:cb:e9:ca:84:bf:33:6f:52:f5:
                    13:a8:cb:af:e8:4a:cb:6e:71:21:c4:6a:e2:09:e0:
                    86:03:30:d9:50:9f:e5:54:f9:39:fe:ba:b1:26:60:
                    2a:d3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BE:D4:EA:F5:FF:A6:0A:C5:A5:C0:A1:82:33:A8:76:77:05:45:0D:A1
            X509v3 Authority Key Identifier:
                keyid:08:17:25:5D:F3:13:0B:DB:77:FC:37:18:7D:06:00:5F:EE:06:67:24

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CBclXfMTC9t3_DcYfQYAX-4GZyQ.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f7/a417c4-3af2-43e8-a4c1-3dad029b2d4e/1/CBclXfMTC9t3_DcYfQYAX-4GZyQ.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/f7/a417c4-3af2-43e8-a4c1-3dad029b2d4e/1/CBclXfMTC9t3_DcYfQYAX-4GZyQ.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         4a:71:b9:26:9a:c1:c9:82:32:c7:08:91:7f:cb:8a:05:94:82:
         f8:b7:f9:29:d2:e6:c8:b9:74:2c:07:a6:21:e5:ac:15:cf:b2:
         87:be:f3:f6:52:b0:79:ff:50:8c:db:e1:5b:88:fc:d4:33:95:
         70:5f:86:02:50:14:fd:3f:d1:83:b9:3e:86:0d:f0:9d:11:6c:
         e9:59:ef:53:4d:65:e8:88:7f:dd:14:f1:b9:a0:cc:33:34:ac:
         0e:08:55:f0:12:56:68:91:77:95:83:2c:36:67:75:6a:8a:dc:
         cf:04:1b:ff:4d:84:8c:bf:21:6e:9b:d1:54:0e:c0:2c:e6:17:
         d2:6c:10:0d:22:a4:72:4e:90:87:b3:7c:66:76:15:a1:6a:f0:
         e4:e0:6a:bc:d4:00:ba:cd:26:c0:d5:05:56:ee:56:45:9a:ea:
         64:42:8c:85:c4:4d:71:e4:8d:1e:a4:9b:73:63:4e:4f:2b:99:
         16:05:88:5f:f4:e8:7a:11:9b:87:c8:9a:53:94:32:b9:b2:fd:
         d0:88:dd:57:c9:28:16:62:a0:7b:04:28:13:6d:42:de:d9:b4:
         79:78:8c:c0:b0:8b:5d:90:75:d8:60:b5:eb:d0:76:7f:d3:11:
         44:98:8c:91:10:40:f5:ee:d5:8d:cf:9e:c8:b1:b4:c0:50:35:
         4c:ed:2e:0d
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZXI4sZUnU1twdQkd0aYof+NMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDA4MTcyNTVkZjMxMzBiZGI3N2ZjMzcxODdkMDYwMDVmZWUw
NjY3MjQwHhcNMjUwMzI0MTYwMDU5WhcNMjUwMzI1MTYwMDU5WjAzMTEwLwYDVQQD
EyhiZWQ0ZWFmNWZmYTYwYWM1YTVjMGExODIzM2E4NzY3NzA1NDUwZGExMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA3hPuV59NxWiZrBFq8H744h9EnnXc
zdiiD9X6COnETRCX/7kLaACoGTigGGlCQYHUvEgc6a1TUpsS/ohSOeoVopotPncP
qziP+ASX7frU4CsRwoPGsurXrfoXOIEorb/73lmdyvRJKW/UD2Nbi6mn4MSmFrZv
9gOi9ockthspWAn1eGHQWWfc8PSD5OxQ/dMZkVoJtSRk1F1nI0nTvt/mQM0s7TeF
TKd4acrxwqKmMve8xqGmTNPOKEFcVbwkxL3yUq7sOfs/6gKQEzRrSQnd88OC91/F
9v3L6cqEvzNvUvUTqMuv6ErLbnEhxGriCeCGAzDZUJ/lVPk5/rqxJmAq0wIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFL7U6vX/pgrFpcChgjOodncFRQ2hMB8GA1UdIwQY
MBaAFAgXJV3zEwvbd/w3GH0GAF/uBmckMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvQ0JjbFhmTVRDOXQzX0RjWWZRWUFYLTRHWnlRLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mNy9hNDE3YzQtM2FmMi00M2U4LWE0YzEt
M2RhZDAyOWIyZDRlLzEvQ0JjbFhmTVRDOXQzX0RjWWZRWUFYLTRHWnlRLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9mNy9hNDE3YzQtM2FmMi00M2U4LWE0YzEtM2RhZDAyOWIyZDRl
LzEvQ0JjbFhmTVRDOXQzX0RjWWZRWUFYLTRHWnlRLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEASnG5JprB
yYIyxwiRf8uKBZSC+Lf5KdLmyLl0LAemIeWsFc+yh77z9lKwef9QjNvhW4j81DOV
cF+GAlAU/T/Rg7k+hg3wnRFs6VnvU01l6Ih/3RTxuaDMMzSsDghV8BJWaJF3lYMs
Nmd1aorczwQb/02EjL8hbpvRVA7ALOYX0mwQDSKkck6Qh7N8ZnYVoWrw5OBqvNQA
us0mwNUFVu5WRZrqZEKMhcRNceSNHqSbc2NOTyuZFgWIX/ToehGbh8iaU5QyubL9
0IjdV8koFmKgewQoE21C3tm0eXiMwLCLXZB12GC169B2f9MRRJiMkRBA9e7Vjc+e
yLG0wFA1TO0uDQ==
-----END CERTIFICATE-----
Generated at Tue Mar 25 22:18:08 2025 by rpki-client on console.sobornost.net