Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0f/2430fb-412e-44c4-8fd3-5166b39a3e18/1/ztMMJRFB3bZI0FosKEszyHxRdSU.mft
File:                     ztMMJRFB3bZI0FosKEszyHxRdSU.mft (raw, json)
Hash identifier:          bsbCTPOVbASjPPpYhU933DT9RMMKMRkIQnGd80i2fmY=
Subject key identifier:   B1:49:AD:15:62:BF:87:C0:A7:DD:AA:4B:6D:BF:1C:CC:4A:27:3D:07
Authority key identifier: CE:D3:0C:25:11:41:DD:B6:48:D0:5A:2C:28:4B:33:C8:7C:51:75:25
Certificate issuer:       /CN=ced30c251141ddb648d05a2c284b33c87c517525
Certificate serial:       01962FAB6AA193EEE887D149AD1076681B3E
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/ztMMJRFB3bZI0FosKEszyHxRdSU.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/0f/2430fb-412e-44c4-8fd3-5166b39a3e18/1/ztMMJRFB3bZI0FosKEszyHxRdSU.mft
Manifest number:          1233
Signing time:             Sun 13 Apr 2025 15:01:25 +0000
Manifest this update:     Sun 13 Apr 2025 15:01:25 +0000
Manifest next update:     Mon 14 Apr 2025 15:01:25 +0000
Files and hashes:         1: ZPgVDRI_G_wgjVLd8kNTHtjE33Y.roa (hash: uiDFhkIkjuexDSnG2oE6Dq4+/FIv/1F+pVEhj9VaU8g=)
                          2: ztMMJRFB3bZI0FosKEszyHxRdSU.crl (hash: fSrKeGUBlG/yqeWlQneiuHwPNkV6PhKX5ym3eGsf1Rc=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2f:ab:6a:a1:93:ee:e8:87:d1:49:ad:10:76:68:1b:3e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=ced30c251141ddb648d05a2c284b33c87c517525
        Validity
            Not Before: Apr 13 15:01:25 2025 GMT
            Not After : Apr 14 15:01:25 2025 GMT
        Subject: CN=b149ad1562bf87c0a7ddaa4b6dbf1ccc4a273d07
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:92:41:03:df:b3:82:02:07:df:1b:30:d8:b0:1b:
                    27:21:4f:a5:3e:f6:b6:0a:98:43:35:7a:1c:07:7d:
                    66:05:96:9f:1c:83:23:76:a4:32:2a:e3:c5:0b:f6:
                    c4:4b:da:fc:0f:26:3c:4e:54:fd:2e:90:b6:5a:98:
                    bb:22:7c:44:fb:42:22:9d:1a:29:2c:83:f4:56:39:
                    52:15:dc:88:03:0a:41:2e:86:23:67:0e:4a:7f:dd:
                    40:c0:99:1c:47:08:cd:80:14:de:34:69:30:32:b9:
                    31:0f:b3:b0:9d:0a:3a:30:a6:16:d0:2d:11:54:79:
                    50:16:30:17:86:20:ee:ea:d8:ec:0a:4f:94:ac:fb:
                    fb:b5:df:d4:8d:48:bc:19:40:4d:2d:6a:cb:38:f9:
                    e6:20:ac:c9:7c:06:b5:45:39:3f:a1:ae:95:4f:89:
                    b7:c7:8a:86:a6:bd:96:18:a0:a2:d8:0f:af:7e:69:
                    2f:82:47:b8:e5:d7:03:30:fb:8a:a3:5c:4b:bd:13:
                    0f:a9:9b:82:6e:82:44:24:8f:95:88:29:55:5b:c4:
                    cf:e0:0e:e8:c3:17:1a:79:94:5b:7a:2d:40:11:71:
                    a0:35:a5:46:35:54:40:af:98:36:36:a9:4b:1e:59:
                    90:04:97:f1:39:04:f7:6f:27:29:39:e6:eb:7c:0c:
                    c6:eb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B1:49:AD:15:62:BF:87:C0:A7:DD:AA:4B:6D:BF:1C:CC:4A:27:3D:07
            X509v3 Authority Key Identifier:
                keyid:CE:D3:0C:25:11:41:DD:B6:48:D0:5A:2C:28:4B:33:C8:7C:51:75:25

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ztMMJRFB3bZI0FosKEszyHxRdSU.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0f/2430fb-412e-44c4-8fd3-5166b39a3e18/1/ztMMJRFB3bZI0FosKEszyHxRdSU.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/0f/2430fb-412e-44c4-8fd3-5166b39a3e18/1/ztMMJRFB3bZI0FosKEszyHxRdSU.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         c0:60:ba:84:18:3a:f7:44:09:49:20:b7:44:fa:d3:87:90:59:
         30:c7:f3:4d:0f:04:31:ff:17:c7:83:a3:6b:28:45:47:16:c6:
         07:aa:d7:6b:b2:ce:d3:d4:7a:14:72:f1:db:de:a3:18:1c:3e:
         79:f3:4e:d2:ad:b3:35:0c:bc:c5:28:5c:3e:9f:98:e2:ad:3b:
         d4:08:27:82:86:da:fb:01:9a:0f:d0:48:00:81:b6:01:cf:58:
         54:4c:69:26:f6:8a:cb:06:cd:5b:f0:42:7f:ac:ac:4f:40:81:
         f2:2d:a4:3e:28:81:ae:2b:66:06:d8:7a:4a:c4:e5:69:56:35:
         cd:c6:e6:11:42:d7:09:58:21:ab:db:66:99:ee:81:5b:f8:5d:
         93:ca:dd:db:75:18:96:12:b4:9e:e0:79:0d:7e:cc:c4:ec:de:
         d9:ee:a2:8e:06:fa:24:5f:47:62:0c:70:b4:f7:7d:35:a2:e2:
         62:44:43:f1:0c:06:ea:0d:73:47:62:02:89:d9:21:75:52:ad:
         a9:02:9a:ab:d6:5a:f3:6f:21:c1:b3:97:db:28:e4:7d:60:69:
         0c:ca:ea:1d:59:ef:83:6c:8c:59:a7:cf:05:d9:22:40:4f:a7:
         51:53:23:a4:41:3b:9b:fb:1a:83:19:00:e2:e9:b4:e5:0a:da:
         45:6d:65:f9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 14 20:26:52 2025 by rpki-client on console.sobornost.net