Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0f/b0bdbd-801c-4b0b-9fbe-ae15d507590e/1/t72OrhZp3rOj-kGGSR4FyzLOCSo.mft
File:                     t72OrhZp3rOj-kGGSR4FyzLOCSo.mft (raw, json)
Hash identifier:          oIdpOYVlEMSVo/spRG2J2vzn1kOPLZy9C0E0qxuCdr0=
Subject key identifier:   55:A5:AF:FE:95:12:C6:A4:7C:E5:6B:98:C4:31:28:65:6C:29:AA:D6
Authority key identifier: B7:BD:8E:AE:16:69:DE:B3:A3:FA:41:86:49:1E:05:CB:32:CE:09:2A
Certificate issuer:       /CN=b7bd8eae1669deb3a3fa4186491e05cb32ce092a
Certificate serial:       01962E997185AE08CCA8618CBDEB44DF1C9F
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/t72OrhZp3rOj-kGGSR4FyzLOCSo.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/0f/b0bdbd-801c-4b0b-9fbe-ae15d507590e/1/t72OrhZp3rOj-kGGSR4FyzLOCSo.mft
Manifest number:          0FA8
Signing time:             Sun 13 Apr 2025 10:02:10 +0000
Manifest this update:     Sun 13 Apr 2025 10:02:10 +0000
Manifest next update:     Mon 14 Apr 2025 10:02:10 +0000
Files and hashes:         1: 0CceuujOUN7fI6SJWiU4I3JvZeo.roa (hash: ReNIag9nA9bjr82rfcj5JjzPGdjpj3RK7GRwiAamY6Q=)
                          2: t72OrhZp3rOj-kGGSR4FyzLOCSo.crl (hash: EsJQtgV/V7uqhH7xwb4EjzZ4MP74gDM3xY9I0+1a5gw=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2e:99:71:85:ae:08:cc:a8:61:8c:bd:eb:44:df:1c:9f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b7bd8eae1669deb3a3fa4186491e05cb32ce092a
        Validity
            Not Before: Apr 13 10:02:10 2025 GMT
            Not After : Apr 14 10:02:10 2025 GMT
        Subject: CN=55a5affe9512c6a47ce56b98c43128656c29aad6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a4:1c:ad:3a:47:8b:31:4a:c8:df:fe:2f:8e:e7:
                    ab:72:32:23:9e:d0:df:0e:7c:64:67:d2:f2:8b:82:
                    98:0d:eb:3a:14:f2:62:8e:24:a4:b0:98:51:dc:e9:
                    09:e2:26:a4:58:0f:2d:31:19:6f:f3:62:16:55:e1:
                    c3:91:f4:49:7f:e1:e0:f5:91:cb:27:9d:39:cb:82:
                    75:59:3f:6e:6a:da:ce:11:44:a2:f0:7f:b3:fb:7f:
                    14:a9:cf:cb:ae:ee:f0:fa:7f:5a:7b:66:2a:1a:13:
                    1e:0a:c3:a0:a4:f6:ba:f9:ad:a7:07:6e:91:e9:2d:
                    3d:f9:a2:25:20:b0:c4:ac:50:06:95:7f:e7:cd:be:
                    2b:b3:7e:93:ae:ae:eb:5c:2f:ba:f2:4d:e2:4d:94:
                    2a:c8:48:ba:ef:ad:1b:c2:1c:1f:64:ce:11:2a:3c:
                    93:17:76:02:10:ad:f3:f0:d9:f8:af:ca:95:ea:7c:
                    90:ad:3d:6c:bb:48:eb:4f:bf:98:a1:e5:1d:5c:01:
                    16:f6:48:9e:54:3f:62:69:67:04:da:da:0c:50:6a:
                    b8:47:10:01:d2:b7:23:03:15:5b:7c:de:69:3f:6a:
                    64:6d:ff:8e:3b:a8:7b:58:fb:c2:d0:0e:f7:dc:43:
                    da:23:1a:f3:67:64:10:76:f6:f7:c4:e0:a9:a3:5d:
                    d2:43
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                55:A5:AF:FE:95:12:C6:A4:7C:E5:6B:98:C4:31:28:65:6C:29:AA:D6
            X509v3 Authority Key Identifier:
                keyid:B7:BD:8E:AE:16:69:DE:B3:A3:FA:41:86:49:1E:05:CB:32:CE:09:2A

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/t72OrhZp3rOj-kGGSR4FyzLOCSo.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0f/b0bdbd-801c-4b0b-9fbe-ae15d507590e/1/t72OrhZp3rOj-kGGSR4FyzLOCSo.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/0f/b0bdbd-801c-4b0b-9fbe-ae15d507590e/1/t72OrhZp3rOj-kGGSR4FyzLOCSo.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         7d:24:24:8f:65:91:8f:d6:54:ab:47:76:10:87:62:5e:db:23:
         6b:3c:4e:d7:43:ad:62:2b:7e:60:60:6b:c2:38:cc:43:66:70:
         8e:83:9e:cc:a6:af:0e:43:21:dd:f6:d8:ae:3b:ec:64:17:df:
         75:19:ae:d4:60:f5:ba:fb:42:c0:62:4c:b4:94:87:7a:e7:ff:
         95:75:2a:8b:1f:21:b1:43:ff:43:bd:29:01:bd:1a:12:be:8d:
         4a:c6:52:df:4a:44:b2:12:bc:7b:43:97:ca:4e:53:39:f5:52:
         46:6e:fe:a1:17:f2:d6:6e:c0:2e:70:ad:d7:79:02:53:42:99:
         a8:17:86:4a:af:70:10:b8:4a:58:59:25:e4:d1:9a:28:f3:0f:
         aa:6b:d7:3f:bf:06:ef:8f:73:b8:5d:0b:11:40:6f:55:cb:3a:
         0f:91:e5:9d:57:13:44:1e:17:3e:9e:23:b7:fd:08:14:59:a2:
         a0:be:ea:2d:e8:cb:30:84:bf:ce:bf:6e:58:bf:4f:2c:e8:5d:
         ce:e2:46:e0:fe:24:77:f4:e0:aa:47:8d:59:1e:39:34:9f:e0:
         26:95:04:d5:eb:ed:7f:01:cd:8d:10:b5:a6:39:65:ac:41:24:
         09:32:53:89:be:ad:66:bc:6e:08:75:0c:60:ec:2c:1d:24:5c:
         0d:8c:6e:db
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 14 20:26:52 2025 by rpki-client on console.sobornost.net