Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/02/00b426-128b-4f9c-a3af-bdb5f16d46f0/1/_e3ZOtbKqmCtSfD5N32Kq_h34ts.mft
File:                     _e3ZOtbKqmCtSfD5N32Kq_h34ts.mft (raw, json)
Hash identifier:          bjil2g8Ht1HtI6YuZhfLcin7IOAnOTCdBNP0B0RNXOM=
Subject key identifier:   54:FD:9E:6F:CB:8D:33:1F:FF:6F:5A:50:C3:30:10:40:D4:46:68:1F
Authority key identifier: FD:ED:D9:3A:D6:CA:AA:60:AD:49:F0:F9:37:7D:8A:AB:F8:77:E2:DB
Certificate issuer:       /CN=fdedd93ad6caaa60ad49f0f9377d8aabf877e2db
Certificate serial:       01962E9996DE883CF82E0E7ED85232023AE2
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/_e3ZOtbKqmCtSfD5N32Kq_h34ts.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/02/00b426-128b-4f9c-a3af-bdb5f16d46f0/1/_e3ZOtbKqmCtSfD5N32Kq_h34ts.mft
Manifest number:          0669
Signing time:             Sun 13 Apr 2025 10:02:19 +0000
Manifest this update:     Sun 13 Apr 2025 10:02:19 +0000
Manifest next update:     Mon 14 Apr 2025 10:02:19 +0000
Files and hashes:         1: _e3ZOtbKqmCtSfD5N32Kq_h34ts.crl (hash: PlC9rSmSSlPXW03QD1PXc68le37Xgblwieu9q1ZtkDU=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2e:99:96:de:88:3c:f8:2e:0e:7e:d8:52:32:02:3a:e2
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=fdedd93ad6caaa60ad49f0f9377d8aabf877e2db
        Validity
            Not Before: Apr 13 10:02:19 2025 GMT
            Not After : Apr 14 10:02:19 2025 GMT
        Subject: CN=54fd9e6fcb8d331fff6f5a50c3301040d446681f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:f3:43:c7:3e:f8:c5:47:10:de:9a:b1:24:fe:37:
                    91:b9:bd:00:cb:fd:63:41:c5:0c:6f:e2:e1:ad:d9:
                    d0:26:47:70:b0:da:56:d6:3b:37:47:5e:9f:b6:1c:
                    72:c9:57:d8:bb:62:67:a4:29:99:cd:ca:d7:6b:15:
                    b6:e4:c7:7a:e8:f2:92:b3:31:79:82:e1:98:79:d2:
                    cb:29:45:6c:cb:66:1b:ed:f0:32:65:16:95:e7:cc:
                    01:bb:bb:1e:e9:51:53:24:66:a8:9f:08:c7:95:29:
                    e1:85:af:01:15:d2:b8:7b:8a:ff:ae:8b:34:27:c3:
                    7e:69:b7:ba:d7:bd:bd:40:6c:6b:71:38:c8:5f:17:
                    ef:f2:12:0a:d1:1e:1c:d4:8f:d2:98:3f:9f:37:58:
                    78:3b:3d:7f:3c:18:e9:f6:72:53:7c:66:8c:1d:51:
                    5e:e7:2f:1a:2c:d2:ec:7d:a0:48:87:ee:21:fd:16:
                    9b:21:cc:2e:c6:bc:ef:f9:0d:a5:dc:e1:4a:65:db:
                    81:95:f1:5f:4f:ce:51:ca:d9:c6:4f:ef:9d:bc:c4:
                    e6:ca:fb:27:98:30:8e:52:06:56:6c:3e:20:fa:be:
                    b4:06:30:04:96:90:60:c7:02:2f:a9:df:58:29:e2:
                    93:7a:22:24:fb:a2:77:1b:f2:55:93:1e:6f:85:2b:
                    2d:ef
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                54:FD:9E:6F:CB:8D:33:1F:FF:6F:5A:50:C3:30:10:40:D4:46:68:1F
            X509v3 Authority Key Identifier:
                keyid:FD:ED:D9:3A:D6:CA:AA:60:AD:49:F0:F9:37:7D:8A:AB:F8:77:E2:DB

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/_e3ZOtbKqmCtSfD5N32Kq_h34ts.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/02/00b426-128b-4f9c-a3af-bdb5f16d46f0/1/_e3ZOtbKqmCtSfD5N32Kq_h34ts.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/02/00b426-128b-4f9c-a3af-bdb5f16d46f0/1/_e3ZOtbKqmCtSfD5N32Kq_h34ts.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         7b:72:48:75:5d:ce:69:73:07:3a:f6:aa:be:72:3a:12:31:00:
         c3:28:31:2b:1f:51:dc:a0:ca:54:c7:6e:f6:d3:cb:34:0a:03:
         95:e8:21:c1:bf:42:05:a8:5f:05:a2:b3:fb:e0:60:de:94:d9:
         dc:3f:de:31:9f:a5:9e:d3:33:98:fe:3a:20:8d:9c:cd:d6:fc:
         67:b9:a9:d7:e1:ea:d8:d3:cf:49:12:1e:39:b8:fb:09:64:68:
         e8:03:c5:e9:8a:07:72:72:b4:5e:c9:19:0b:44:8b:ab:f9:60:
         61:aa:76:94:48:d5:43:5d:fa:96:2b:ef:38:1f:54:69:80:01:
         da:2c:72:b2:dd:02:12:d0:c5:66:93:c8:1a:fb:21:08:d4:59:
         f6:4a:d2:cd:67:30:11:2f:9f:de:0b:d9:26:4f:d6:8c:09:6d:
         e2:1d:7f:40:6c:26:99:5a:76:17:ca:c2:69:b4:19:82:22:fc:
         36:08:24:99:9b:27:2c:5b:ff:9d:3b:db:40:ac:2c:9b:02:4f:
         c1:23:ae:64:f8:c4:23:38:23:53:c7:1b:55:6a:7e:60:22:ec:
         e3:66:c7:fb:77:ff:69:7d:72:eb:ae:68:48:79:04:e4:e1:3b:
         c6:73:8e:4e:52:86:74:09:3e:e9:7b:2b:a8:e9:b6:4f:94:4f:
         b9:09:7e:e5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 14 20:26:42 2025 by rpki-client on console.sobornost.net