Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/03/af4e4b-2026-4bbb-9628-f08a0ae92b8d/1/sYxKQwCDfE6hetHjghoJrVN2QIc.mft
File:                     sYxKQwCDfE6hetHjghoJrVN2QIc.mft (raw, json)
Hash identifier:          C+Cuq8HLMw9e0T3+I1/Ejrn64DL4+RV3r5rnNxSUATM=
Subject key identifier:   EF:87:FA:52:4A:8A:9C:6E:55:89:AA:5B:EC:18:7D:CE:1A:6F:5E:A6
Authority key identifier: B1:8C:4A:43:00:83:7C:4E:A1:7A:D1:E3:82:1A:09:AD:53:76:40:87
Certificate issuer:       /CN=b18c4a4300837c4ea17ad1e3821a09ad53764087
Certificate serial:       01962E99767E6EFE9D22F421B6C6B6E33855
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/sYxKQwCDfE6hetHjghoJrVN2QIc.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/03/af4e4b-2026-4bbb-9628-f08a0ae92b8d/1/sYxKQwCDfE6hetHjghoJrVN2QIc.mft
Manifest number:          0D82
Signing time:             Sun 13 Apr 2025 10:02:11 +0000
Manifest this update:     Sun 13 Apr 2025 10:02:11 +0000
Manifest next update:     Mon 14 Apr 2025 10:02:11 +0000
Files and hashes:         1: 2pelV4FedV45XCLKgpg6a9aqnGU.roa (hash: JAMnQ7Ljsuvl5vUTIxSzwNI1IGVq+RkAOKUEPceEiRc=)
                          2: sYxKQwCDfE6hetHjghoJrVN2QIc.crl (hash: VU7PB652paxdb7fKas4qoozH0TLP2qw7cF2BoqHetq0=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2e:99:76:7e:6e:fe:9d:22:f4:21:b6:c6:b6:e3:38:55
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b18c4a4300837c4ea17ad1e3821a09ad53764087
        Validity
            Not Before: Apr 13 10:02:11 2025 GMT
            Not After : Apr 14 10:02:11 2025 GMT
        Subject: CN=ef87fa524a8a9c6e5589aa5bec187dce1a6f5ea6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ea:87:0f:52:c5:3f:e5:0d:c7:24:fa:bc:b4:12:
                    14:d7:08:dc:d7:1a:ef:8c:46:32:68:8b:71:a1:e6:
                    3d:7d:8f:f5:40:5e:06:e8:59:11:f2:fd:95:6a:86:
                    d7:ee:81:d5:3c:68:3e:cc:b6:7e:e1:6c:63:95:f0:
                    7b:1c:f8:e8:ec:2d:93:16:91:a7:66:22:d5:db:68:
                    82:98:ea:18:a0:b3:9b:fe:f5:57:ee:82:11:52:bd:
                    bf:69:1b:9a:f1:bc:65:0c:8d:65:56:80:b8:6e:fe:
                    8d:83:bc:37:b9:f8:bc:68:c9:b8:a8:e7:f4:d1:34:
                    64:b9:44:7c:c0:fb:63:a1:8b:66:25:86:50:54:28:
                    66:0b:f4:a6:53:7b:4f:ee:7b:05:c5:e3:8c:9f:55:
                    de:e7:d2:24:61:95:eb:70:ab:fb:09:59:83:f2:a7:
                    84:fd:73:a2:21:08:4b:2d:e6:3a:67:15:55:fa:16:
                    7f:78:62:f7:06:fd:8a:82:04:25:cf:1c:f6:7f:eb:
                    44:a1:00:94:5c:f8:6f:c4:34:2b:b6:2e:16:2c:bb:
                    9f:31:db:fb:e1:01:44:33:af:f0:a5:20:08:32:50:
                    d0:44:25:fc:ac:21:9f:0b:52:5b:05:15:2e:1b:2a:
                    fb:ef:e6:66:4f:a3:40:9b:15:b7:b8:16:e8:3e:a5:
                    8f:15
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                EF:87:FA:52:4A:8A:9C:6E:55:89:AA:5B:EC:18:7D:CE:1A:6F:5E:A6
            X509v3 Authority Key Identifier:
                keyid:B1:8C:4A:43:00:83:7C:4E:A1:7A:D1:E3:82:1A:09:AD:53:76:40:87

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/sYxKQwCDfE6hetHjghoJrVN2QIc.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/03/af4e4b-2026-4bbb-9628-f08a0ae92b8d/1/sYxKQwCDfE6hetHjghoJrVN2QIc.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/03/af4e4b-2026-4bbb-9628-f08a0ae92b8d/1/sYxKQwCDfE6hetHjghoJrVN2QIc.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         80:d2:94:1a:49:3c:df:bc:e1:b8:83:ea:0f:ee:f7:64:c4:35:
         32:91:26:1d:3f:23:ee:7c:c5:74:be:32:9a:52:09:11:f9:e3:
         0e:c0:c7:97:ba:d7:ff:db:33:61:dd:93:31:6e:9a:b3:8b:92:
         4c:99:98:12:fa:19:aa:2b:8c:13:22:bc:bd:86:f7:b2:b7:9b:
         31:d0:4b:46:7c:13:db:ff:82:2d:14:55:6b:8d:65:d3:d1:8b:
         1f:28:b0:d1:68:4e:c9:c4:f8:9b:fe:6d:4c:b1:48:de:e8:bd:
         78:29:92:da:d4:dd:73:65:17:31:c5:8c:ec:db:a0:f1:17:94:
         72:fb:1c:fa:9a:e1:eb:2d:58:83:73:03:15:2f:7c:18:2f:97:
         44:c5:de:d3:90:f6:d7:68:7c:73:bb:17:92:d4:96:d9:08:87:
         73:83:64:63:e3:27:5d:06:ed:f0:32:57:70:ff:15:b7:e9:65:
         47:2f:4d:bc:b1:c5:9f:8c:c7:66:15:57:0f:29:8f:f7:cd:7f:
         1a:45:94:cb:78:60:b0:d0:d2:7d:fa:35:15:0c:9c:f8:b3:15:
         6a:19:d6:e1:99:83:3f:68:f3:79:3a:a7:a7:76:b0:b7:89:b3:
         9e:5e:30:d0:bf:9f:61:a1:27:2e:0c:98:19:d7:60:5b:9b:f0:
         90:e5:ec:71
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 14 20:26:44 2025 by rpki-client on console.sobornost.net