Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0b/758467-6818-4e84-87ba-5d838668bebe/1/vygFmS5lMdPaMe4a9rzVwG0Ctso.mft
File:                     vygFmS5lMdPaMe4a9rzVwG0Ctso.mft (raw, json)
Hash identifier:          giuJSWAD365D9qsfiVkP500x96/iIFatcDLObu6vs7c=
Subject key identifier:   B0:DA:AB:32:95:85:E3:D5:1E:4F:CD:9C:BC:EF:75:F3:5E:E1:32:E5
Authority key identifier: BF:28:05:99:2E:65:31:D3:DA:31:EE:1A:F6:BC:D5:C0:6D:02:B6:CA
Certificate issuer:       /CN=bf2805992e6531d3da31ee1af6bcd5c06d02b6ca
Certificate serial:       01962FAB7B0B8EE25B8E2B6ADE8957EF0E76
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/vygFmS5lMdPaMe4a9rzVwG0Ctso.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/0b/758467-6818-4e84-87ba-5d838668bebe/1/vygFmS5lMdPaMe4a9rzVwG0Ctso.mft
Manifest number:          14EA
Signing time:             Sun 13 Apr 2025 15:01:29 +0000
Manifest this update:     Sun 13 Apr 2025 15:01:29 +0000
Manifest next update:     Mon 14 Apr 2025 15:01:29 +0000
Files and hashes:         1: ZA2eo4PhOO6YarPBjFuZYerlXM8.roa (hash: OaUR9ntwZSMTqF4rae/f45ntDF7DCdGD74N9a3x5n8s=)
                          2: iU6o8UX2fMqdnVT4GPBZLMHQUVk.roa (hash: L7qS2Pktcg+3MFOhFw0UCguQbXdIgIfJZ4PXXKIQFAI=)
                          3: vygFmS5lMdPaMe4a9rzVwG0Ctso.crl (hash: YYv7j1X7PkI3k+sm09MmwIFOC9Eb02lSNlqrukeokB8=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2f:ab:7b:0b:8e:e2:5b:8e:2b:6a:de:89:57:ef:0e:76
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=bf2805992e6531d3da31ee1af6bcd5c06d02b6ca
        Validity
            Not Before: Apr 13 15:01:29 2025 GMT
            Not After : Apr 14 15:01:29 2025 GMT
        Subject: CN=b0daab329585e3d51e4fcd9cbcef75f35ee132e5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:f2:1e:27:71:fe:04:90:1a:68:11:4b:f2:02:37:
                    c1:8b:bb:d2:1f:a5:7c:62:ab:17:46:86:cf:c0:31:
                    c9:4b:20:03:d9:4f:f1:21:1f:f0:b4:6e:4f:27:4d:
                    d2:79:54:e1:b7:38:a3:c2:65:79:51:61:1a:81:8d:
                    f1:57:ba:9c:9b:13:74:bc:da:ed:b7:a1:52:8d:bf:
                    44:68:63:f9:50:13:ff:65:34:02:b3:c9:6f:4b:b4:
                    79:b0:66:53:f2:4e:04:16:4c:f1:e3:c8:68:1b:a1:
                    00:b1:45:62:37:93:76:a1:79:4d:77:2c:c3:c9:9a:
                    12:ed:1a:68:79:3a:58:47:a8:ed:b4:cd:54:14:bf:
                    90:3f:e9:5b:aa:44:97:58:71:40:37:b5:63:2a:5b:
                    1f:03:7a:c2:c9:9e:f0:d9:2c:89:52:5a:15:e6:8f:
                    14:6d:2f:27:93:e6:8a:e2:0d:4d:b8:bf:41:e8:f4:
                    ee:fc:67:f3:11:8e:f0:d6:de:82:b9:c0:d2:34:0d:
                    ad:f7:d3:b7:d7:c5:d0:e7:45:5d:93:fd:13:d4:ed:
                    8e:e4:61:43:78:63:b2:3a:7a:8e:a5:9a:61:1e:42:
                    c8:70:cb:da:42:f3:a4:aa:5a:89:b0:03:3e:d8:61:
                    16:92:d7:1e:d5:8d:bd:a2:be:25:88:cc:c0:70:c1:
                    9d:2f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B0:DA:AB:32:95:85:E3:D5:1E:4F:CD:9C:BC:EF:75:F3:5E:E1:32:E5
            X509v3 Authority Key Identifier:
                keyid:BF:28:05:99:2E:65:31:D3:DA:31:EE:1A:F6:BC:D5:C0:6D:02:B6:CA

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/vygFmS5lMdPaMe4a9rzVwG0Ctso.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0b/758467-6818-4e84-87ba-5d838668bebe/1/vygFmS5lMdPaMe4a9rzVwG0Ctso.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/0b/758467-6818-4e84-87ba-5d838668bebe/1/vygFmS5lMdPaMe4a9rzVwG0Ctso.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         72:d3:d0:f1:cc:36:cc:8d:4c:10:05:76:67:e4:b1:bf:2e:53:
         c6:b6:24:2f:bb:54:00:29:86:df:d9:a1:5d:86:c1:64:8b:8a:
         45:2f:de:06:e0:58:d1:b6:d0:4a:10:58:5a:53:11:49:3b:38:
         ea:c1:a3:fe:e3:94:19:15:14:12:6d:e0:45:a8:50:fe:d4:52:
         3c:2c:d9:6c:62:b7:6d:b6:85:31:04:e6:6f:fa:b0:c4:35:42:
         b6:fd:41:5c:cb:96:c1:4f:9a:6c:b2:f5:02:2a:fa:fe:4f:05:
         c8:07:76:31:7f:c7:2a:7a:6f:9b:28:ef:2d:dc:c9:fb:94:29:
         b2:c0:6a:2c:eb:64:b1:65:97:f6:7a:5d:c3:17:25:69:24:24:
         22:2e:0d:1f:2e:f5:1c:f5:f6:e7:58:e7:42:93:16:96:ae:6e:
         c6:20:47:da:b8:7d:92:9a:25:5a:bc:a4:57:90:d2:4a:2f:da:
         a7:90:87:82:33:3a:71:83:09:20:0f:a3:fd:ca:1c:bb:3d:09:
         ad:94:b0:fa:b8:e6:5e:1f:53:b5:27:47:4a:7c:f2:4b:02:54:
         2e:57:f7:93:ef:65:50:1a:82:6e:14:12:49:94:9f:24:5f:5a:
         4d:1f:ec:fe:77:04:c7:a6:b7:05:ba:e7:65:27:ee:ea:d1:78:
         58:8d:83:a3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 14 20:26:49 2025 by rpki-client on console.sobornost.net