Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0d/2ddd39-e7bd-44ba-ab21-2f0655f01029/1/VKwN3sMOJORX4W5lB9IZcoMQiT0.mft
File:                     VKwN3sMOJORX4W5lB9IZcoMQiT0.mft (raw, json)
Hash identifier:          Ln56d1/LewHTel+z87kX9uUYxfxtmWaODsfvlIf52GU=
Subject key identifier:   F2:6C:B8:F1:8F:80:B9:40:80:F1:BD:79:67:E4:AD:BA:0F:1E:C6:33
Authority key identifier: 54:AC:0D:DE:C3:0E:24:E4:57:E1:6E:65:07:D2:19:72:83:10:89:3D
Certificate issuer:       /CN=54ac0ddec30e24e457e16e6507d219728310893d
Certificate serial:       01962E61EA3BEEECE4B877A1D3CCBDD0928A
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/VKwN3sMOJORX4W5lB9IZcoMQiT0.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/0d/2ddd39-e7bd-44ba-ab21-2f0655f01029/1/VKwN3sMOJORX4W5lB9IZcoMQiT0.mft
Manifest number:          52
Signing time:             Sun 13 Apr 2025 09:01:30 +0000
Manifest this update:     Sun 13 Apr 2025 09:01:30 +0000
Manifest next update:     Mon 14 Apr 2025 09:01:30 +0000
Files and hashes:         1: 3gl-l3qU8MpI3MVFIGvCINJyADE.roa (hash: utYF7PoXBqNr3o1w6VDP9HkMKeBzXvpa+DHx3iRNsmk=)
                          2: VKwN3sMOJORX4W5lB9IZcoMQiT0.crl (hash: b3teOs2yHT5vZO8vXFORZkq6VWXR3IL/25TR4pABSvg=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2e:61:ea:3b:ee:ec:e4:b8:77:a1:d3:cc:bd:d0:92:8a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=54ac0ddec30e24e457e16e6507d219728310893d
        Validity
            Not Before: Apr 13 09:01:30 2025 GMT
            Not After : Apr 14 09:01:30 2025 GMT
        Subject: CN=f26cb8f18f80b94080f1bd7967e4adba0f1ec633
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d9:1a:6d:3a:bf:08:2a:7b:a2:6d:32:2c:be:d9:
                    9b:5c:07:d8:72:9a:33:f7:d0:11:0f:33:b6:f3:1f:
                    07:05:0e:a9:dd:d2:08:c4:7d:bb:c7:d5:4c:05:bd:
                    08:da:ad:27:ed:a2:18:13:23:4d:1c:90:c2:34:80:
                    77:8a:7e:5f:a9:14:e7:7e:cc:3a:fb:e2:39:c7:e1:
                    41:34:38:9d:3b:30:77:cc:8d:6d:0f:10:01:a7:8b:
                    bb:8c:72:ff:63:eb:54:85:9a:07:b1:6d:7a:37:e9:
                    65:ff:91:17:7f:fb:dc:9b:ef:53:90:d5:85:a8:c9:
                    e5:22:28:24:32:65:3f:1c:70:9b:44:df:4a:de:17:
                    1f:45:77:07:f0:73:19:a4:9e:c1:83:01:3b:5c:78:
                    a4:b9:c7:e9:32:d0:d1:9b:02:a4:39:50:5b:a1:cb:
                    4a:bf:3c:86:47:e4:29:81:9f:97:b4:c2:29:cf:1a:
                    3c:74:83:d6:a3:fb:ff:55:19:93:97:6d:d5:f1:9c:
                    64:97:59:e5:d4:28:20:8f:7a:df:4a:16:0f:71:6d:
                    60:9d:8a:21:bf:7b:b1:7f:d3:09:ec:29:2d:ab:f7:
                    68:34:06:81:0b:3f:ff:ed:35:3a:a7:ab:13:67:b5:
                    2b:e8:8a:bb:ea:e7:3c:de:85:9f:ff:50:bd:8b:d1:
                    1f:7b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F2:6C:B8:F1:8F:80:B9:40:80:F1:BD:79:67:E4:AD:BA:0F:1E:C6:33
            X509v3 Authority Key Identifier:
                keyid:54:AC:0D:DE:C3:0E:24:E4:57:E1:6E:65:07:D2:19:72:83:10:89:3D

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/VKwN3sMOJORX4W5lB9IZcoMQiT0.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0d/2ddd39-e7bd-44ba-ab21-2f0655f01029/1/VKwN3sMOJORX4W5lB9IZcoMQiT0.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/0d/2ddd39-e7bd-44ba-ab21-2f0655f01029/1/VKwN3sMOJORX4W5lB9IZcoMQiT0.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         7c:d3:fa:11:0a:5f:cf:f0:0e:3c:ae:ce:84:5d:1f:bb:72:a0:
         52:61:b1:63:dc:c2:3e:a1:a5:f3:64:d4:2d:58:12:35:c1:eb:
         cb:1e:ac:df:b5:c7:28:de:47:90:66:3c:c4:d6:d4:eb:45:18:
         a7:e1:15:58:8f:23:e5:ff:c1:51:39:3c:37:20:eb:f1:bf:d5:
         77:61:b6:22:01:42:a9:20:91:80:7c:eb:8b:cc:fd:42:2e:47:
         1f:d3:1d:89:c6:75:2e:24:a3:00:8e:86:f4:18:93:46:8f:e5:
         51:11:d3:1c:fe:d1:61:37:e6:7e:4c:91:45:05:16:a4:05:04:
         53:89:d8:ef:ce:db:69:17:1b:55:5a:90:88:7c:b4:32:0c:da:
         fe:38:d1:df:26:60:6e:2e:6e:df:14:e8:80:c4:39:fc:46:76:
         b4:ff:da:9d:f1:57:41:9f:99:0e:41:9d:9a:85:0d:55:f5:ee:
         b4:c6:56:18:74:84:09:1a:57:04:bf:ea:b8:c3:e6:62:31:fa:
         06:ae:8a:c0:84:3b:0e:80:04:19:af:4d:92:27:42:dd:3d:d4:
         a4:be:bf:87:cd:ed:74:7d:99:ad:01:e8:ee:64:16:9b:40:88:
         99:17:3a:1a:3f:00:31:e8:ad:f9:52:bf:eb:f8:39:7f:36:92:
         f7:94:80:7f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 14 20:26:50 2025 by rpki-client on console.sobornost.net