Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/03/6679f4-9165-4a8b-8892-7dea8fff2e08/1/uG3av8SJUr7ibW1fgogx9ZahVOk.mft
File:                     uG3av8SJUr7ibW1fgogx9ZahVOk.mft (raw, json)
Hash identifier:          mbQVgmXqwf3dkLOZv7hyGPVGZmS9nZ8l1OrrEXPr2LI=
Subject key identifier:   DE:28:8C:94:4C:82:0C:94:66:F5:77:DD:07:89:4B:DE:14:40:3F:26
Authority key identifier: B8:6D:DA:BF:C4:89:52:BE:E2:6D:6D:5F:82:88:31:F5:96:A1:54:E9
Certificate issuer:       /CN=b86ddabfc48952bee26d6d5f828831f596a154e9
Certificate serial:       01962F06A9AFF7184DD43C0AC07B6704629C
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/uG3av8SJUr7ibW1fgogx9ZahVOk.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/03/6679f4-9165-4a8b-8892-7dea8fff2e08/1/uG3av8SJUr7ibW1fgogx9ZahVOk.mft
Manifest number:          0340
Signing time:             Sun 13 Apr 2025 12:01:27 +0000
Manifest this update:     Sun 13 Apr 2025 12:01:27 +0000
Manifest next update:     Mon 14 Apr 2025 12:01:27 +0000
Files and hashes:         1: XAkJAeMsm3qGc5VmVm5cet8IGU0.roa (hash: lDEEW1AxkG0v1QYe+CdCiOCSdsED9l+6Ar+8XrHNs4Y=)
                          2: uG3av8SJUr7ibW1fgogx9ZahVOk.crl (hash: Ox4xKpDATSw5RRFCBEK7e2mSZJMhIwdJ2nF8M/ZksYk=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2f:06:a9:af:f7:18:4d:d4:3c:0a:c0:7b:67:04:62:9c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b86ddabfc48952bee26d6d5f828831f596a154e9
        Validity
            Not Before: Apr 13 12:01:27 2025 GMT
            Not After : Apr 14 12:01:27 2025 GMT
        Subject: CN=de288c944c820c9466f577dd07894bde14403f26
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c1:07:8a:c1:38:e5:e8:ce:b8:96:4d:67:62:5a:
                    e6:ac:85:90:07:9d:6f:c6:10:d3:45:01:b3:83:a6:
                    04:b3:c6:ea:89:35:24:72:d2:03:ce:c5:a5:d6:7e:
                    c0:bc:fb:6b:dc:ff:5d:96:bc:13:92:16:09:c4:0f:
                    d9:53:cf:9d:ca:0f:f3:f9:64:f0:0a:0b:7d:05:66:
                    dd:c2:08:f1:4b:54:87:d4:88:e5:1c:10:69:6c:06:
                    60:41:6a:13:10:3c:4a:a3:8b:88:ff:c7:2b:b7:01:
                    cd:e1:b6:92:cd:ec:fa:bb:89:ce:1a:92:fc:ff:18:
                    d0:83:42:f8:86:23:05:1d:d2:ca:ed:e6:9c:39:f6:
                    3d:e5:4d:63:56:51:2b:d9:70:2c:14:6a:5c:66:1c:
                    1e:44:6c:97:e0:4f:ac:a9:4c:ae:16:69:1a:03:90:
                    4b:49:f5:4f:c1:d0:c3:66:d7:c7:68:d5:cf:69:ba:
                    d8:5f:c8:1a:c4:70:23:57:8b:ad:44:00:35:c5:e1:
                    07:ac:a4:ca:2f:47:f1:1d:56:5f:c6:12:bb:ce:85:
                    3d:0d:e0:e6:22:9e:43:42:1c:ef:4c:24:58:d7:50:
                    04:78:6d:5c:8d:58:47:fd:36:7c:af:ce:18:cc:06:
                    63:78:d7:1a:f1:22:7d:c7:bc:89:1e:d0:06:a5:82:
                    d7:8b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DE:28:8C:94:4C:82:0C:94:66:F5:77:DD:07:89:4B:DE:14:40:3F:26
            X509v3 Authority Key Identifier:
                keyid:B8:6D:DA:BF:C4:89:52:BE:E2:6D:6D:5F:82:88:31:F5:96:A1:54:E9

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/uG3av8SJUr7ibW1fgogx9ZahVOk.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/03/6679f4-9165-4a8b-8892-7dea8fff2e08/1/uG3av8SJUr7ibW1fgogx9ZahVOk.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/03/6679f4-9165-4a8b-8892-7dea8fff2e08/1/uG3av8SJUr7ibW1fgogx9ZahVOk.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         7f:a5:9f:c7:40:2e:96:21:bf:98:81:4d:f5:ea:5a:0a:1b:fa:
         38:62:e0:a0:d3:29:c4:a6:5e:9f:c7:24:99:d6:e6:86:7c:b4:
         2b:7d:33:e4:b8:5b:73:3e:05:6a:30:b1:ff:95:32:22:cb:46:
         25:76:de:20:27:19:18:71:88:58:cf:6c:d2:53:a3:42:3b:db:
         fd:83:89:0a:c2:97:29:92:36:fc:33:59:ab:c7:8f:14:22:b5:
         98:03:f8:b6:2d:bd:6d:fe:db:57:c2:29:04:cd:cc:1d:a7:91:
         e2:7b:85:20:4c:91:ac:d7:e4:9b:8e:bd:4c:c9:58:44:8a:c7:
         7c:80:fa:fd:12:74:06:49:e5:a2:08:1a:8a:4e:a8:f5:e7:c6:
         86:77:a3:52:18:a3:66:b2:e0:cb:2d:42:d6:d9:87:9f:97:6f:
         4b:43:a1:59:fe:63:f5:c2:55:8b:89:51:cf:d6:c4:b5:f4:52:
         53:7a:3b:b4:7c:9a:b5:e8:7c:8a:d3:0a:c8:b0:43:bf:0e:50:
         e7:0b:6a:85:16:a7:f4:4a:54:8b:8d:64:e3:12:0a:a8:db:d8:
         74:08:1d:e8:51:48:d6:0a:2f:82:30:c7:d1:a7:d5:70:d5:0d:
         c7:c4:17:25:f2:92:34:f3:bc:95:a6:ed:23:90:90:f2:75:31:
         c1:51:35:dc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 14 20:26:43 2025 by rpki-client on console.sobornost.net