Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/09/16eb59-68a3-4215-809f-79b2e40e2bd8/1/qb4Wzn2zvmkFsavvi-IaIxmw5D4.mft
File:                     qb4Wzn2zvmkFsavvi-IaIxmw5D4.mft (raw, json)
Hash identifier:          M9A31jwbZxWhjU2IH7MKpbK8a5dSGr3AMgTfaBhawj8=
Subject key identifier:   4F:20:D7:2E:DB:C1:2C:21:5F:D5:75:48:5C:09:20:2C:99:8F:78:9C
Authority key identifier: A9:BE:16:CE:7D:B3:BE:69:05:B1:AB:EF:8B:E2:1A:23:19:B0:E4:3E
Certificate issuer:       /CN=a9be16ce7db3be6905b1abef8be21a2319b0e43e
Certificate serial:       01962FAB944D7BED72134C121D0B3DF4971A
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/qb4Wzn2zvmkFsavvi-IaIxmw5D4.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/09/16eb59-68a3-4215-809f-79b2e40e2bd8/1/qb4Wzn2zvmkFsavvi-IaIxmw5D4.mft
Manifest number:          14EB
Signing time:             Sun 13 Apr 2025 15:01:35 +0000
Manifest this update:     Sun 13 Apr 2025 15:01:35 +0000
Manifest next update:     Mon 14 Apr 2025 15:01:35 +0000
Files and hashes:         1: 1qwW0uRF0uaIMOZUzvFdP6iUIGc.roa (hash: XnlKdK7HSE5Z4YnaNQLgBs+MxP6gmaSDYHLIExtRWFg=)
                          2: qb4Wzn2zvmkFsavvi-IaIxmw5D4.crl (hash: 49Q6DvtFy2euHMWxFR3VsXlP9+vMyLTARzjKsO7ZUYQ=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2f:ab:94:4d:7b:ed:72:13:4c:12:1d:0b:3d:f4:97:1a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=a9be16ce7db3be6905b1abef8be21a2319b0e43e
        Validity
            Not Before: Apr 13 15:01:35 2025 GMT
            Not After : Apr 14 15:01:35 2025 GMT
        Subject: CN=4f20d72edbc12c215fd575485c09202c998f789c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d8:dc:9b:4b:47:67:fa:b7:e3:a2:cd:c6:15:5a:
                    07:96:2a:a6:23:a6:71:8a:a2:0e:61:ce:08:34:dc:
                    3b:c5:0c:d6:ea:c9:ac:ee:cb:d0:c1:10:60:ad:56:
                    b0:b1:32:36:24:84:92:8d:07:7c:6d:51:ec:2e:f3:
                    66:a6:fb:81:d0:c5:77:f8:6e:69:19:56:ed:56:07:
                    9b:b6:e4:03:60:2d:69:eb:27:c7:b4:ef:f8:1f:4c:
                    9b:bb:48:10:cd:08:da:a6:ab:8b:09:e0:b3:f2:1b:
                    5d:81:89:39:bd:ca:c8:89:30:50:a1:d3:2a:72:c7:
                    2d:b3:51:1f:fa:1b:19:11:56:f9:0e:d2:86:d0:66:
                    e7:9a:af:68:02:4d:c5:50:ae:11:9f:d0:49:15:1c:
                    14:8d:49:c4:d1:be:4b:5a:04:d4:9b:c6:e0:2c:b6:
                    26:17:58:5b:6d:57:c3:ed:34:ed:a9:3a:58:0f:13:
                    97:0a:2b:c7:c0:8a:7a:49:b3:18:8c:bd:09:b3:c6:
                    40:59:fa:01:48:29:7a:2d:af:bd:6b:2f:5d:4b:26:
                    2c:b0:06:77:c9:bc:4e:0c:00:f0:19:1d:f8:17:83:
                    19:2c:55:d0:cd:9c:ed:8a:d8:08:2d:9d:90:ae:40:
                    7f:2e:50:bb:8d:d7:d8:e0:71:6f:81:fb:ba:d7:d3:
                    38:0b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4F:20:D7:2E:DB:C1:2C:21:5F:D5:75:48:5C:09:20:2C:99:8F:78:9C
            X509v3 Authority Key Identifier:
                keyid:A9:BE:16:CE:7D:B3:BE:69:05:B1:AB:EF:8B:E2:1A:23:19:B0:E4:3E

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qb4Wzn2zvmkFsavvi-IaIxmw5D4.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/09/16eb59-68a3-4215-809f-79b2e40e2bd8/1/qb4Wzn2zvmkFsavvi-IaIxmw5D4.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/09/16eb59-68a3-4215-809f-79b2e40e2bd8/1/qb4Wzn2zvmkFsavvi-IaIxmw5D4.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         23:e7:ce:f5:58:be:d1:2d:32:87:72:e7:42:a0:47:2f:87:13:
         c1:e8:ed:53:ea:3a:33:e2:7f:37:0c:76:c4:ba:a9:d6:83:3a:
         13:f1:6e:8e:83:d7:89:47:df:b2:80:3e:c3:52:f4:60:d3:99:
         ab:23:d8:75:37:4c:ae:36:fa:bf:6c:71:00:d2:6a:be:1e:ac:
         ce:1a:ef:bf:76:3e:73:a4:20:1e:8c:c0:6b:d7:b8:3d:42:51:
         33:88:d9:1c:22:d7:69:e7:9e:dd:8b:8d:bd:4a:24:5b:42:b9:
         89:e9:16:2a:27:61:86:d4:dd:37:14:84:30:3e:ef:88:12:4b:
         63:e3:23:62:90:35:05:d0:ef:c5:b5:a1:dd:8f:80:7b:0f:97:
         39:da:42:46:c0:3f:aa:f3:b4:4e:dd:74:98:ab:69:c3:23:25:
         45:74:c8:25:fb:04:8f:b1:af:48:e1:27:d4:fd:45:99:a4:8b:
         1c:2d:10:fe:af:a1:18:5c:22:a2:bf:a3:22:c3:93:86:ec:65:
         2f:70:8c:88:97:2f:e8:c8:ec:70:d9:30:03:9e:60:44:57:dd:
         34:38:a9:2e:2b:98:9e:c2:e1:d8:8f:1c:55:33:0d:e9:b5:b4:
         8c:26:cf:83:92:f2:ca:77:9b:45:98:1e:66:77:07:49:5c:38:
         cd:e6:8a:d3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 14 20:26:47 2025 by rpki-client on console.sobornost.net