Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/05/9a6cf5-1342-4c3b-87af-160c24c66630/1/iJjbjLhhu73R-3Vi3vTXfYZCwyQ.mft
File:                     iJjbjLhhu73R-3Vi3vTXfYZCwyQ.mft (raw, json)
Hash identifier:          td7sxnfzYyb4y4N3q0y6Xycm8s7RIEFbZg81JSlrpqc=
Subject key identifier:   28:D0:EA:8A:34:4D:BD:57:91:F9:77:1E:A2:59:F3:DD:85:E8:B2:D1
Authority key identifier: 88:98:DB:8C:B8:61:BB:BD:D1:FB:75:62:DE:F4:D7:7D:86:42:C3:24
Certificate issuer:       /CN=8898db8cb861bbbdd1fb7562def4d77d8642c324
Certificate serial:       01962F743DB6CE8A0B8D3D76795CF188F7BE
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/iJjbjLhhu73R-3Vi3vTXfYZCwyQ.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/05/9a6cf5-1342-4c3b-87af-160c24c66630/1/iJjbjLhhu73R-3Vi3vTXfYZCwyQ.mft
Manifest number:          120C
Signing time:             Sun 13 Apr 2025 14:01:09 +0000
Manifest this update:     Sun 13 Apr 2025 14:01:09 +0000
Manifest next update:     Mon 14 Apr 2025 14:01:09 +0000
Files and hashes:         1: hIJG4JYkLEhwraYEYvL-fraByuk.roa (hash: 5YFKdkA5FRK1IPjfHxOUcAbA5SZ2reBZq68WODkSIGA=)
                          2: iJjbjLhhu73R-3Vi3vTXfYZCwyQ.crl (hash: OWrkKzN2K2nYNr3wnHZ8JWFp5yrHqstRqJTO9d8hZZo=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2f:74:3d:b6:ce:8a:0b:8d:3d:76:79:5c:f1:88:f7:be
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8898db8cb861bbbdd1fb7562def4d77d8642c324
        Validity
            Not Before: Apr 13 14:01:09 2025 GMT
            Not After : Apr 14 14:01:09 2025 GMT
        Subject: CN=28d0ea8a344dbd5791f9771ea259f3dd85e8b2d1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c9:4b:ac:b7:ac:eb:08:2b:df:26:bc:89:6e:49:
                    49:0d:1a:f4:9b:7a:08:5d:78:6e:7a:ce:9b:89:fa:
                    cb:d1:7b:48:b0:ee:16:f2:fe:17:ee:a4:a7:79:38:
                    a9:1d:ad:bf:0e:b1:48:73:26:de:e9:c9:cd:b5:24:
                    1e:ba:d2:ee:5e:9f:c9:aa:57:fb:85:b0:60:ae:4c:
                    5e:48:32:e8:1f:0c:2f:34:cf:c3:de:5a:5b:85:b8:
                    0b:27:e5:7f:fd:bc:27:96:36:d0:cb:bf:36:e6:bb:
                    5a:73:e7:61:ce:03:11:be:22:2d:8b:2a:ef:29:e9:
                    f4:37:82:c2:9e:2b:57:e1:20:10:3a:36:83:9c:96:
                    db:e5:3f:86:37:3f:05:b8:cf:de:20:06:b9:5d:3d:
                    98:a9:91:62:79:a3:16:ff:0c:fb:6a:fb:6f:69:f2:
                    d7:34:5f:a2:b8:ab:ec:91:9f:a4:f3:6d:af:66:49:
                    2e:ad:4f:d8:90:1c:33:63:fc:c6:5d:a8:70:10:51:
                    b5:fb:fd:f2:a9:5d:95:29:8d:d9:49:be:b1:2c:fa:
                    a3:f3:88:2f:7c:14:e3:52:b5:fe:bd:60:56:ea:d4:
                    1e:80:2e:7b:cf:3e:d5:34:cb:7c:21:10:39:2c:9b:
                    1c:68:e7:9d:92:c9:e9:e7:df:b3:03:ac:d9:36:ab:
                    a1:c7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                28:D0:EA:8A:34:4D:BD:57:91:F9:77:1E:A2:59:F3:DD:85:E8:B2:D1
            X509v3 Authority Key Identifier:
                keyid:88:98:DB:8C:B8:61:BB:BD:D1:FB:75:62:DE:F4:D7:7D:86:42:C3:24

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/iJjbjLhhu73R-3Vi3vTXfYZCwyQ.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/05/9a6cf5-1342-4c3b-87af-160c24c66630/1/iJjbjLhhu73R-3Vi3vTXfYZCwyQ.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/05/9a6cf5-1342-4c3b-87af-160c24c66630/1/iJjbjLhhu73R-3Vi3vTXfYZCwyQ.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         ac:ce:aa:5b:d4:2d:68:60:10:27:bc:30:1c:03:b5:3f:b3:bc:
         f4:12:8c:88:68:39:94:e0:28:f7:b5:3c:19:1c:31:51:be:95:
         42:3b:57:3c:36:d4:58:38:83:4b:96:9d:58:28:77:61:b8:61:
         c0:30:67:7f:6e:78:b9:d0:ae:50:11:8c:ef:e8:02:ab:1e:be:
         2f:5e:b1:50:b8:e2:8d:70:17:2a:a2:a1:f3:3c:b0:c4:9f:9e:
         2e:cf:08:b7:14:a0:31:b3:39:51:c3:6f:e2:fe:5d:b2:1e:db:
         36:e4:10:92:25:54:1f:39:c4:ef:f7:0c:77:14:07:ba:bf:0d:
         de:0b:6f:a1:b7:08:a9:3a:eb:e9:b3:06:a8:95:f4:48:13:d1:
         5f:9a:1b:4b:ca:28:5c:03:96:c3:b2:d9:5e:38:a1:f5:86:fd:
         e0:b6:89:18:b7:0b:09:3a:48:33:10:42:46:3a:11:7a:e4:bf:
         a9:5e:80:6b:e5:74:51:5e:14:57:33:80:91:52:cc:ae:3d:b9:
         49:df:c4:0f:10:d6:82:b0:2b:4d:ba:34:a4:f8:a6:ca:66:be:
         83:67:d5:1d:32:f5:e0:b3:2d:b0:69:b9:b6:71:1c:c5:76:54:
         04:36:b2:dc:30:a5:e8:45:cd:a0:f4:af:a3:88:8e:04:9b:87:
         bd:b7:c3:42
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 14 20:26:45 2025 by rpki-client on console.sobornost.net