Manifest

$ rpki-client -vvf rpki.co/repo/AS202400/2/3CDDC1E61C39E6E8A41B278056C9542E3C79F7B2.mft
File:                     3CDDC1E61C39E6E8A41B278056C9542E3C79F7B2.mft (raw, json)
Hash identifier:          j/mz6PeQISisbD5PKljqlkC5OAMRvBS/Smj+xXzPHoo=
Subject key identifier:   3A:D2:FA:F7:3F:32:B7:7C:54:29:B7:A8:68:A1:F2:3C:20:23:CA:A1
Authority key identifier: 3C:DD:C1:E6:1C:39:E6:E8:A4:1B:27:80:56:C9:54:2E:3C:79:F7:B2
Certificate issuer:       /CN=3cddc1e61c39e6e8a41b278056c9542e3c79f7b2
Certificate serial:       7E011D3B339DD4FE2AAFCB5CBB20E47895DD1304
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/PN3B5hw55uikGyeAVslULjx597I.cer
Subject info access:      rsync://rpki.co/repo/AS202400/2/3CDDC1E61C39E6E8A41B278056C9542E3C79F7B2.mft
Manifest number:          0345
Signing time:             Mon 25 Nov 2024 11:57:00 +0000
Manifest this update:     Mon 25 Nov 2024 11:52:00 +0000
Manifest next update:     Tue 26 Nov 2024 13:21:00 +0000
Files and hashes:         1: 3CDDC1E61C39E6E8A41B278056C9542E3C79F7B2.crl (hash: UOhtshOUMOJr8EqENT/yz/YQ5rVb1OaNNXNOGDA4zG8=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            7e:01:1d:3b:33:9d:d4:fe:2a:af:cb:5c:bb:20:e4:78:95:dd:13:04
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3cddc1e61c39e6e8a41b278056c9542e3c79f7b2
        Validity
            Not Before: Nov 25 11:52:00 2024 GMT
            Not After : Nov 26 13:21:00 2024 GMT
        Subject: CN=3AD2FAF73F32B77C5429B7A868A1F23C2023CAA1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:f5:e0:7b:01:ec:83:11:40:90:44:5d:34:53:eb:
                    b8:d5:a6:16:14:87:0e:80:24:09:51:17:05:7a:13:
                    73:01:72:19:18:3d:0f:a3:7e:0b:0a:a7:c2:91:90:
                    ae:be:d7:25:b7:64:de:72:62:df:77:fd:ca:2a:8a:
                    ba:b3:33:87:a2:7d:90:cf:bb:78:27:d8:75:f6:1a:
                    7e:d5:cc:ca:34:c2:92:59:6d:89:b5:53:96:37:82:
                    a2:b8:e3:2b:b2:35:29:3f:c8:3a:8e:ef:b2:61:3b:
                    dc:45:b9:14:e1:d2:a8:b6:7c:2d:5b:66:bc:29:27:
                    92:7a:99:fb:2c:af:7b:60:15:2c:69:75:ec:5b:9b:
                    1d:2d:d4:25:fc:51:e3:b2:26:fc:a7:79:21:95:77:
                    6e:61:94:b1:5b:65:b8:45:f9:2e:02:1f:3d:f7:bd:
                    3f:7a:87:17:42:f1:fa:df:0a:5a:38:a3:e4:e8:08:
                    98:38:57:e9:fb:9f:33:ce:a0:a9:f1:ce:cb:2c:c8:
                    91:41:35:a2:51:a0:99:ba:b3:eb:7e:68:a6:5f:d3:
                    e6:62:6f:79:4e:47:25:84:10:ac:a0:7a:9a:64:b0:
                    3a:60:23:25:d0:ec:41:81:7c:d5:61:59:ac:d2:a1:
                    bb:bc:b7:7b:08:04:3c:c1:ae:a5:5e:85:5b:66:fb:
                    72:67
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3A:D2:FA:F7:3F:32:B7:7C:54:29:B7:A8:68:A1:F2:3C:20:23:CA:A1
            X509v3 Authority Key Identifier:
                keyid:3C:DD:C1:E6:1C:39:E6:E8:A4:1B:27:80:56:C9:54:2E:3C:79:F7:B2

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.co/repo/AS202400/2/3CDDC1E61C39E6E8A41B278056C9542E3C79F7B2.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/PN3B5hw55uikGyeAVslULjx597I.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.co/repo/AS202400/2/3CDDC1E61C39E6E8A41B278056C9542E3C79F7B2.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         4f:37:f4:19:a3:61:63:a5:1f:03:40:77:d4:6e:9f:72:a3:7c:
         e5:61:40:0e:81:d3:a1:69:df:60:12:e9:a5:c8:b4:a2:f1:0e:
         f2:0b:59:c8:de:28:34:d6:de:05:86:a4:06:08:df:24:59:20:
         7d:0b:9d:fd:c5:cf:a2:6c:20:d1:22:d0:6a:e8:ea:3a:4e:a2:
         04:a9:0d:5f:5b:c4:1d:62:d8:c0:b1:12:96:c3:30:3f:e8:9f:
         08:e0:71:b7:48:58:c7:e8:6a:d4:9e:37:7a:0d:2c:ad:80:f8:
         34:af:57:53:5a:61:22:62:6c:f4:de:cc:00:82:5d:2e:56:00:
         71:c9:d0:a1:dd:93:ef:63:c7:86:e3:6b:63:69:10:c1:c6:eb:
         30:39:c4:a8:a4:09:7f:35:f9:85:08:fa:59:6a:24:dd:71:4d:
         a3:10:d0:0a:16:95:39:c5:3e:e5:ff:25:2a:bf:bd:fb:f7:c3:
         a1:ac:67:e7:ed:fa:22:94:d0:4f:b4:b3:bd:44:6d:01:28:fd:
         fc:79:00:1f:96:bc:af:f2:d0:95:6b:e2:07:63:a0:d0:e6:c7:
         5e:92:c4:3f:04:52:29:fb:ab:8c:bc:27:6c:7b:a8:02:77:a7:
         bb:84:87:b1:65:e3:f7:3e:52:e7:c7:d0:5c:9c:13:3d:7d:d2:
         a2:8b:83:9d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 26 01:04:36 2024 by rpki-client on console-ams.rpki-client.org