Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/04/10d5b2-85e3-49ed-bdc1-8069c46771cc/1/uiOwejwKyeMz9S6LXUGnaKPTkCU.mft
File:                     uiOwejwKyeMz9S6LXUGnaKPTkCU.mft (raw, json)
Hash identifier:          QHjj85ihTb86932Ds4KqvAy6J2ambSbR2P5l4Yo9Fa4=
Subject key identifier:   9F:AB:89:24:28:C8:82:02:00:D6:1E:36:F8:1A:BA:57:52:71:9F:88
Authority key identifier: BA:23:B0:7A:3C:0A:C9:E3:33:F5:2E:8B:5D:41:A7:68:A3:D3:90:25
Certificate issuer:       /CN=ba23b07a3c0ac9e333f52e8b5d41a768a3d39025
Certificate serial:       01962ECFCFC6FF11325DCAD913F683428B4D
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/uiOwejwKyeMz9S6LXUGnaKPTkCU.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/04/10d5b2-85e3-49ed-bdc1-8069c46771cc/1/uiOwejwKyeMz9S6LXUGnaKPTkCU.mft
Manifest number:          0490
Signing time:             Sun 13 Apr 2025 11:01:33 +0000
Manifest this update:     Sun 13 Apr 2025 11:01:33 +0000
Manifest next update:     Mon 14 Apr 2025 11:01:33 +0000
Files and hashes:         1: P3Ofhmz_sNehdh6r-5A9aHRvTwk.roa (hash: uFbK3pUhyEcyxB8HRUYhk8hEyAiHRXkZFNHVkwu5yUA=)
                          2: uiOwejwKyeMz9S6LXUGnaKPTkCU.crl (hash: KHCsxwgNh63FQXdThd5PgZz+1y0/Up3ASen0FMwfxoA=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2e:cf:cf:c6:ff:11:32:5d:ca:d9:13:f6:83:42:8b:4d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=ba23b07a3c0ac9e333f52e8b5d41a768a3d39025
        Validity
            Not Before: Apr 13 11:01:33 2025 GMT
            Not After : Apr 14 11:01:33 2025 GMT
        Subject: CN=9fab892428c8820200d61e36f81aba5752719f88
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c3:99:f4:40:63:e5:c5:ee:43:72:a2:6d:4f:a3:
                    14:78:52:89:2a:4d:e5:1c:18:b3:16:89:39:f0:dc:
                    31:49:0f:77:2c:43:d3:79:4c:8d:72:05:f2:12:ea:
                    5d:e4:04:31:bf:68:c7:7e:a7:65:57:7b:d2:3a:d6:
                    83:50:89:02:64:bf:a0:49:07:18:0d:9a:f3:1e:32:
                    eb:f2:b7:73:61:a5:88:31:9b:16:7b:e8:21:9c:e2:
                    a0:0f:be:9c:be:0e:ba:a6:b9:56:ec:57:7e:e2:e6:
                    da:d5:3c:02:02:64:9d:a5:bd:e6:c2:8c:5b:03:64:
                    12:66:97:6a:cb:17:f9:10:d7:bf:57:c4:8c:89:7a:
                    9b:e5:ff:a9:fd:be:e2:98:cf:1e:99:62:a5:ac:64:
                    c3:1a:ab:80:24:e8:7b:1f:7e:37:c9:01:00:71:52:
                    c8:a2:bc:15:de:c1:3d:49:93:4c:37:4d:cf:b2:a1:
                    94:4f:75:c1:07:d5:a3:b2:2d:4f:c9:af:be:b3:18:
                    bb:49:6f:c6:9d:82:55:86:bf:f6:41:e1:9d:53:07:
                    63:10:42:fa:a2:00:fa:ec:69:81:14:ca:00:cd:32:
                    ef:4a:54:cd:3f:0b:d4:3b:a6:8b:4c:30:59:bb:5f:
                    09:c6:04:ce:96:cd:69:3d:04:a5:3f:09:71:73:bf:
                    82:bf
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9F:AB:89:24:28:C8:82:02:00:D6:1E:36:F8:1A:BA:57:52:71:9F:88
            X509v3 Authority Key Identifier:
                keyid:BA:23:B0:7A:3C:0A:C9:E3:33:F5:2E:8B:5D:41:A7:68:A3:D3:90:25

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/uiOwejwKyeMz9S6LXUGnaKPTkCU.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/04/10d5b2-85e3-49ed-bdc1-8069c46771cc/1/uiOwejwKyeMz9S6LXUGnaKPTkCU.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/04/10d5b2-85e3-49ed-bdc1-8069c46771cc/1/uiOwejwKyeMz9S6LXUGnaKPTkCU.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         35:10:b0:19:a9:ee:d3:c7:b7:57:4e:57:5c:08:a5:07:7f:58:
         87:42:c6:6a:74:f3:ba:62:00:bd:77:d9:f7:8b:a7:2d:d6:80:
         3b:ce:d6:b3:6c:c7:3c:86:a6:aa:54:be:f5:11:bd:04:a4:61:
         12:c3:02:af:fa:3f:b0:75:59:78:25:5e:76:24:6a:47:4c:3f:
         59:8b:38:9b:3f:1c:13:01:2c:dd:46:67:c4:ee:02:e4:0c:40:
         62:fc:66:48:ce:ed:39:9e:ee:8e:12:39:d7:f2:b1:fc:39:7e:
         cf:3e:fa:0e:df:44:b1:e3:f0:b1:5e:6e:90:bd:f1:2b:82:d0:
         5a:0a:4c:a6:51:85:0c:22:3a:94:75:c2:8d:a8:a3:6b:4f:ec:
         1e:52:5b:34:89:01:0c:8d:74:34:81:6a:1c:0e:df:a7:ac:88:
         dd:0f:15:60:9c:53:56:9f:4a:22:74:74:ed:1a:20:5f:7b:36:
         dd:dc:60:05:93:de:3e:8e:aa:95:9c:bc:75:95:56:6c:43:5d:
         0a:c1:25:86:26:6a:ad:14:f0:96:e1:82:7d:3d:02:66:5d:c7:
         51:73:bb:d5:66:e1:34:33:79:78:03:3c:89:3e:09:b5:e1:06:
         20:8a:37:ae:36:b8:7d:e9:7f:31:1e:0b:7c:69:6f:25:77:60:
         1a:d3:e0:69
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 14 20:26:44 2025 by rpki-client on console.sobornost.net