Manifest

$ rpki-client -vvf rsync.rp.ki/repo/clonoth/1/C23A7169F6499DD2815C9178A890BC4C0514DDF9.mft
File:                     C23A7169F6499DD2815C9178A890BC4C0514DDF9.mft (raw, json)
Hash identifier:          +vlMclgtkPPeIsImK9fyuBdO8VTkibEDpE3Cy2wr+Jo=
Subject key identifier:   92:56:F2:2D:CE:01:53:5A:21:DF:A4:7D:07:85:51:B2:C5:D9:9B:E0
Authority key identifier: C2:3A:71:69:F6:49:9D:D2:81:5C:91:78:A8:90:BC:4C:05:14:DD:F9
Certificate issuer:       /CN=c23a7169f6499dd2815c9178a890bc4c0514ddf9
Certificate serial:       70124E60B21F684AB543315D1A945A74BCADD321
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/wjpxafZJndKBXJF4qJC8TAUU3fk.cer
Subject info access:      rsync://rsync.rp.ki/repo/clonoth/1/C23A7169F6499DD2815C9178A890BC4C0514DDF9.mft
Manifest number:          0238
Signing time:             Fri 31 Jan 2025 10:08:12 +0000
Manifest this update:     Fri 31 Jan 2025 10:03:12 +0000
Manifest next update:     Sat 01 Feb 2025 11:59:12 +0000
Files and hashes:         1: 326131333a376134303a3a2f32392d3438203d3e203537313936.roa (hash: XL6US0An98xPzqDkSmmsQ/A2pY3jEWx/noy7TrW/Uto=)
                          2: C23A7169F6499DD2815C9178A890BC4C0514DDF9.crl (hash: vdxcqil14azX3w9wzm8pGTLY5Ud82hpYXDRhZ0EW4RE=)
                          3: 3139332e33322e3130302e302f32342d3234203d3e203537313936.roa (hash: Q3QiqxUuMSp7WUu02mA+KyUsM0fons3AJE9l+1oNWeY=)
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            70:12:4e:60:b2:1f:68:4a:b5:43:31:5d:1a:94:5a:74:bc:ad:d3:21
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c23a7169f6499dd2815c9178a890bc4c0514ddf9
        Validity
            Not Before: Jan 31 10:03:12 2025 GMT
            Not After : Feb  1 11:59:12 2025 GMT
        Subject: CN=9256F22DCE01535A21DFA47D078551B2C5D99BE0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c2:68:b7:2e:47:f4:4b:ee:a7:65:d7:8d:71:42:
                    11:56:82:e4:8e:ec:86:32:4f:61:96:d1:ee:98:58:
                    04:b5:93:db:e1:4a:66:ff:c2:7e:e3:e3:62:fe:20:
                    7e:2c:0b:c5:74:ff:8c:56:31:34:e3:58:2b:28:7e:
                    4e:3c:7c:9b:df:18:88:59:f9:41:a1:39:73:1d:af:
                    f7:ac:06:a2:db:54:e9:89:43:ec:c1:90:62:e3:ad:
                    23:4d:84:77:e0:cc:bd:01:a0:58:1b:12:c7:c0:b8:
                    54:41:76:13:9c:0c:a6:50:0b:cd:44:e9:f1:9f:d2:
                    11:a9:e4:ea:a4:06:38:d9:0e:0b:77:4a:e5:87:11:
                    31:8a:08:c8:3e:fe:38:13:07:6b:ed:79:19:bd:fd:
                    19:87:f1:f1:27:cb:05:1f:ac:7b:73:e5:76:98:ff:
                    b5:ee:57:19:b8:ee:53:5d:66:59:4a:10:53:0e:52:
                    df:fe:fe:0e:6d:38:3c:cc:67:d7:47:0c:a3:1d:c3:
                    ab:e3:54:70:59:00:fb:77:02:51:5e:84:68:05:80:
                    df:38:31:04:2d:82:11:84:54:b9:8b:c6:87:bc:5d:
                    51:31:b4:35:78:38:d8:04:f6:c0:40:85:18:31:94:
                    e7:22:1e:14:be:4e:93:f0:69:79:fa:79:7b:f4:9d:
                    d5:67
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                92:56:F2:2D:CE:01:53:5A:21:DF:A4:7D:07:85:51:B2:C5:D9:9B:E0
            X509v3 Authority Key Identifier:
                keyid:C2:3A:71:69:F6:49:9D:D2:81:5C:91:78:A8:90:BC:4C:05:14:DD:F9

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rsync.rp.ki/repo/clonoth/1/C23A7169F6499DD2815C9178A890BC4C0514DDF9.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/wjpxafZJndKBXJF4qJC8TAUU3fk.cer

            Subject Information Access:
                Signed Object - URI:rsync://rsync.rp.ki/repo/clonoth/1/C23A7169F6499DD2815C9178A890BC4C0514DDF9.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         06:96:fd:7c:09:1d:6a:01:e2:a6:5b:27:1e:02:87:7c:f4:7b:
         41:53:a3:d0:a6:28:f4:f8:d7:10:e1:ee:9b:c6:62:14:4c:02:
         f7:46:22:58:db:9c:9a:81:4b:1f:91:63:04:5c:b0:07:58:cc:
         9f:e0:cd:66:91:3c:8e:82:63:06:6f:c8:b6:03:f4:3d:f5:ec:
         4a:f6:6f:6e:7b:55:06:bf:a6:aa:0d:ea:26:69:75:4f:42:79:
         5a:5f:dc:a9:8f:2b:d8:13:bc:6d:9e:b2:7e:07:ec:2b:ac:05:
         8b:ab:64:36:30:fa:a7:ec:8c:05:da:61:14:7b:83:41:91:34:
         d0:89:68:0c:fe:28:17:bc:13:8a:7f:3f:0a:08:38:38:ca:64:
         4e:be:de:db:b7:09:85:c9:2a:eb:43:ec:ff:39:7d:4d:bb:ea:
         11:64:fc:f7:90:5e:4b:6a:f8:fd:ce:0f:21:84:30:ec:91:21:
         22:0c:9f:64:70:2a:85:02:0e:22:00:e2:a3:33:62:94:e9:e8:
         0b:6d:b4:e2:f2:a9:e9:ad:b4:74:7b:9b:d1:57:09:c5:d9:a1:
         37:71:ce:2d:85:3f:0f:5c:3f:92:9c:64:5f:20:bc:95:8e:23:
         de:6b:26:66:2b:0a:33:f8:ad:6c:74:72:d2:95:4d:e6:49:29:
         0c:c1:98:c1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 24 21:23:01 2025 by rpki-client