Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/03/09012f-b4f6-4df7-b562-010cf2dd40af/1/F3jPwJo2OnPMjdo2KiyegiPX2tY.mft
File:                     F3jPwJo2OnPMjdo2KiyegiPX2tY.mft (raw, json)
Hash identifier:          Yxl7qVZ0HfmZo2NvbwBc7+okoruYQuzewtf4Px8e9Fs=
Subject key identifier:   21:EF:0D:39:0E:65:80:03:C6:90:3A:0C:3A:7C:58:BE:9D:66:27:55
Authority key identifier: 17:78:CF:C0:9A:36:3A:73:CC:8D:DA:36:2A:2C:9E:82:23:D7:DA:D6
Certificate issuer:       /CN=1778cfc09a363a73cc8dda362a2c9e8223d7dad6
Certificate serial:       01962E61D15EB580044BE7CB572ED4682539
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/F3jPwJo2OnPMjdo2KiyegiPX2tY.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/03/09012f-b4f6-4df7-b562-010cf2dd40af/1/F3jPwJo2OnPMjdo2KiyegiPX2tY.mft
Manifest number:          0DBB
Signing time:             Sun 13 Apr 2025 09:01:24 +0000
Manifest this update:     Sun 13 Apr 2025 09:01:24 +0000
Manifest next update:     Mon 14 Apr 2025 09:01:24 +0000
Files and hashes:         1: 7fUo-oGUyRn9-9ANdyLLV4IAEzs.roa (hash: WPPCtKBHs3yDruufjrRdI5i0kryHgilSWp2pBoxruxg=)
                          2: F3jPwJo2OnPMjdo2KiyegiPX2tY.crl (hash: vOT43WtAThBP72synsgXqcYz906YoLuJ7+tzwqKdyek=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2e:61:d1:5e:b5:80:04:4b:e7:cb:57:2e:d4:68:25:39
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1778cfc09a363a73cc8dda362a2c9e8223d7dad6
        Validity
            Not Before: Apr 13 09:01:24 2025 GMT
            Not After : Apr 14 09:01:24 2025 GMT
        Subject: CN=21ef0d390e658003c6903a0c3a7c58be9d662755
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ac:0d:da:b9:82:0f:fb:65:14:70:b1:98:f5:e8:
                    d4:0b:03:38:e0:e9:c7:17:50:c7:54:e6:88:eb:15:
                    a0:ee:74:22:48:22:a7:02:83:60:04:ed:4a:c9:a6:
                    20:27:7f:ec:71:60:58:1a:7a:88:60:51:79:ab:85:
                    91:81:f4:4b:e7:ac:18:da:b1:2c:d3:71:44:85:7d:
                    93:c7:d7:b2:92:28:b0:b8:b4:72:fe:d7:99:f1:c0:
                    c0:70:8d:0e:5f:bf:b3:e9:5f:dc:1a:63:41:9c:be:
                    56:01:24:85:14:63:a1:53:16:d3:cd:c0:c7:7c:f5:
                    35:0d:a4:47:2c:40:7d:46:37:4d:f7:4c:c7:0e:41:
                    a6:58:dc:6d:d6:a1:bb:43:c8:95:9e:f1:1f:f7:1a:
                    21:23:12:68:76:a2:4a:39:d7:67:48:5c:74:88:d7:
                    d9:87:cd:98:b9:ef:fc:6a:4d:c2:f2:33:49:e7:91:
                    11:2c:2c:2b:ee:b6:27:e5:1c:21:06:9e:ac:c0:b0:
                    b9:59:09:84:b5:6b:eb:c1:41:04:df:bf:5c:bc:00:
                    0d:b8:80:ad:a5:69:8c:00:a7:7d:e0:da:91:5f:cc:
                    23:40:88:37:8c:65:32:9a:1a:81:81:2a:e6:b6:6f:
                    65:ce:77:51:24:b7:63:e8:92:67:25:4e:53:7b:36:
                    29:87
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                21:EF:0D:39:0E:65:80:03:C6:90:3A:0C:3A:7C:58:BE:9D:66:27:55
            X509v3 Authority Key Identifier:
                keyid:17:78:CF:C0:9A:36:3A:73:CC:8D:DA:36:2A:2C:9E:82:23:D7:DA:D6

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/F3jPwJo2OnPMjdo2KiyegiPX2tY.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/03/09012f-b4f6-4df7-b562-010cf2dd40af/1/F3jPwJo2OnPMjdo2KiyegiPX2tY.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/03/09012f-b4f6-4df7-b562-010cf2dd40af/1/F3jPwJo2OnPMjdo2KiyegiPX2tY.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         9f:3a:bd:a4:14:ce:7b:d3:f5:12:1e:f6:9d:33:05:9d:ab:7d:
         45:7b:6d:96:c6:46:22:bf:4f:79:cd:9b:9a:b3:18:14:85:3f:
         29:ae:c6:ce:7c:ec:68:36:18:95:4e:4f:3a:d8:6b:bc:c8:02:
         6a:90:94:a1:c2:bc:ab:e0:b4:e5:7a:81:23:46:0d:17:c6:77:
         c6:01:eb:6d:33:18:e1:5b:f5:15:b4:74:64:bb:87:1d:74:bb:
         db:8b:a5:f7:84:5e:9c:41:3e:02:7a:e4:e7:44:42:a8:fe:be:
         0c:0e:92:87:f4:a0:d6:b5:14:5f:d4:ac:7e:2b:4f:2b:6f:24:
         25:71:13:88:20:36:9a:8e:31:bc:49:e6:91:b2:1b:8b:17:f4:
         2e:40:b0:30:d1:5f:e8:a4:98:1e:df:9d:f8:e5:d3:af:27:33:
         f1:a7:39:07:3b:f6:a2:b6:13:62:67:fd:31:03:a4:29:f7:4f:
         21:69:0f:6d:32:b3:54:07:e0:06:3e:30:6a:e1:74:4c:ca:be:
         c3:1c:7f:25:89:31:fd:73:c9:9b:16:2c:7c:2a:78:1a:76:b1:
         4b:04:c3:57:93:11:c5:3f:7f:4c:52:5d:32:35:8d:4b:1d:18:
         54:2c:11:af:75:22:af:b4:5d:d4:6d:a2:d8:68:1f:e5:45:25:
         dd:23:78:03
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 14 20:26:43 2025 by rpki-client on console.sobornost.net