Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/13/509710-8815-4a20-8c2e-286adbdde6d3/1/Xozn6kHZTYedYkvDFUaZni23w-U.mft
File:                     Xozn6kHZTYedYkvDFUaZni23w-U.mft (raw, json)
Hash identifier:          wZfmNzNAL6pozwSfoMs3ODF6Ld7XLxOgtwqHL+wHNYE=
Subject key identifier:   AC:09:BA:11:74:57:4C:76:41:9D:20:03:74:85:7D:FF:9A:AC:68:EB
Authority key identifier: 5E:8C:E7:EA:41:D9:4D:87:9D:62:4B:C3:15:46:99:9E:2D:B7:C3:E5
Certificate issuer:       /CN=5e8ce7ea41d94d879d624bc31546999e2db7c3e5
Certificate serial:       01962E99A86771D831A7F445FD7FE009F840
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/Xozn6kHZTYedYkvDFUaZni23w-U.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/13/509710-8815-4a20-8c2e-286adbdde6d3/1/Xozn6kHZTYedYkvDFUaZni23w-U.mft
Manifest number:          EB
Signing time:             Sun 13 Apr 2025 10:02:24 +0000
Manifest this update:     Sun 13 Apr 2025 10:02:24 +0000
Manifest next update:     Mon 14 Apr 2025 10:02:24 +0000
Files and hashes:         1: Xozn6kHZTYedYkvDFUaZni23w-U.crl (hash: 3YYyF3FtO1yH2n4kUVGGHBfCKqyCkWsQRfvxqkcyi6k=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2e:99:a8:67:71:d8:31:a7:f4:45:fd:7f:e0:09:f8:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5e8ce7ea41d94d879d624bc31546999e2db7c3e5
        Validity
            Not Before: Apr 13 10:02:24 2025 GMT
            Not After : Apr 14 10:02:24 2025 GMT
        Subject: CN=ac09ba1174574c76419d200374857dff9aac68eb
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a6:95:f6:21:48:10:4a:88:4b:e0:18:03:78:40:
                    a0:5b:aa:a8:ef:77:e2:e0:99:7f:74:dd:38:d0:c4:
                    98:7e:c0:3a:bd:30:ca:3e:98:25:06:22:88:27:59:
                    e0:52:51:0c:6b:36:fc:85:28:17:fb:ea:aa:16:0f:
                    97:aa:d8:47:5c:d2:6c:26:a3:30:24:df:62:ad:da:
                    74:45:41:15:6f:a1:43:cb:73:5e:8a:bc:51:87:e3:
                    5c:bf:71:5d:86:22:36:c6:7b:6e:59:88:f6:03:35:
                    27:01:2a:95:96:81:24:4e:f9:cf:d0:1a:c8:23:5a:
                    ae:17:fb:7b:b7:c1:60:27:ca:16:8b:d4:cf:af:29:
                    84:a1:44:94:db:eb:ff:91:ec:a3:8d:bc:93:81:a4:
                    9a:a2:77:a5:1e:28:12:83:7c:6c:ed:f7:65:02:17:
                    03:96:9c:66:09:d3:ce:ae:a0:08:83:d3:18:fc:e3:
                    f3:03:21:db:a4:68:0d:f8:9e:ad:d9:ee:de:44:d5:
                    38:0f:0c:84:e3:9b:f9:05:6b:a6:75:fc:e5:4f:50:
                    0c:a4:bb:4b:a0:d6:f1:cb:d0:db:f5:27:54:82:fc:
                    13:79:84:83:01:2f:c9:e1:48:14:9a:0c:08:82:8e:
                    18:71:3d:dd:d4:2e:77:d7:fd:80:c8:c6:a9:65:41:
                    1a:a9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AC:09:BA:11:74:57:4C:76:41:9D:20:03:74:85:7D:FF:9A:AC:68:EB
            X509v3 Authority Key Identifier:
                keyid:5E:8C:E7:EA:41:D9:4D:87:9D:62:4B:C3:15:46:99:9E:2D:B7:C3:E5

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Xozn6kHZTYedYkvDFUaZni23w-U.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/13/509710-8815-4a20-8c2e-286adbdde6d3/1/Xozn6kHZTYedYkvDFUaZni23w-U.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/13/509710-8815-4a20-8c2e-286adbdde6d3/1/Xozn6kHZTYedYkvDFUaZni23w-U.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         81:05:33:ca:e0:85:66:45:e9:ee:87:6b:a9:b1:8f:75:40:a4:
         91:c8:62:e0:5d:77:28:de:ed:13:38:0c:50:62:bd:ba:0f:30:
         11:01:ac:c5:37:8e:b3:8b:24:d0:3e:8a:10:f8:f4:be:ab:6d:
         f3:83:00:9b:f1:64:3e:09:83:9e:67:65:19:83:08:2f:6e:36:
         7e:27:64:ce:90:7a:0d:91:64:94:14:05:50:c5:7d:8e:f4:e7:
         e2:ac:3e:a8:88:35:2e:46:d5:f2:a7:ed:83:f5:9c:8a:69:5c:
         82:6a:4a:e2:a7:2a:98:75:64:fa:2f:89:36:db:ba:d3:1b:ea:
         c1:f3:5f:8a:71:f5:cb:77:1f:7e:2f:4c:94:ed:3b:3c:a2:d5:
         e0:46:0c:19:bb:af:c6:8a:cf:06:06:62:7a:cd:c6:9b:f2:84:
         f4:a1:88:fb:b8:46:89:8d:34:32:99:c8:20:c7:13:4d:6f:16:
         39:c5:c4:98:63:42:54:d9:85:75:37:71:f8:64:ce:86:cd:c5:
         10:ba:83:d9:55:95:3a:14:c2:b5:51:e7:27:81:22:83:cd:05:
         3c:d6:8f:10:3d:25:e9:8e:48:65:b6:ee:6a:db:7d:59:75:48:
         ee:8b:1b:69:4c:e5:31:5a:d7:77:4a:dd:7b:86:7e:d2:45:4f:
         4a:5e:d6:aa
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 14 20:27:03 2025 by rpki-client on console.sobornost.net