Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1c/eb16eb-77f5-4003-b903-1c34afd9d50d/1/GRGmWD3HmkFVGxeutDFNspMRy-s.mft
File:                     GRGmWD3HmkFVGxeutDFNspMRy-s.mft (raw, json)
Hash identifier:          szWseOFa5xdPnA024cARfpj1eGPMIRh3mOvitjKp6vA=
Subject key identifier:   9A:77:36:8F:82:B1:24:26:B4:24:2D:0B:95:54:01:BF:39:FF:99:B6
Authority key identifier: 19:11:A6:58:3D:C7:9A:41:55:1B:17:AE:B4:31:4D:B2:93:11:CB:EB
Certificate issuer:       /CN=1911a6583dc79a41551b17aeb4314db29311cbeb
Certificate serial:       01962E618FEAC4DDBE338794BDDBB8FBEA60
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/GRGmWD3HmkFVGxeutDFNspMRy-s.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/1c/eb16eb-77f5-4003-b903-1c34afd9d50d/1/GRGmWD3HmkFVGxeutDFNspMRy-s.mft
Manifest number:          1400
Signing time:             Sun 13 Apr 2025 09:01:07 +0000
Manifest this update:     Sun 13 Apr 2025 09:01:07 +0000
Manifest next update:     Mon 14 Apr 2025 09:01:07 +0000
Files and hashes:         1: GRGmWD3HmkFVGxeutDFNspMRy-s.crl (hash: 76Jx7z+cqlAMk7FuH8mRD7ucbkaDtjLboLKAcCGwkVU=)
                          2: NGlvLAmeCUBqhZ9wnIddvIcLHQE.roa (hash: DjDvlZwqQlOEZrmGSn2/QarvAyBTsIXhSALa8HhYpv4=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2e:61:8f:ea:c4:dd:be:33:87:94:bd:db:b8:fb:ea:60
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1911a6583dc79a41551b17aeb4314db29311cbeb
        Validity
            Not Before: Apr 13 09:01:07 2025 GMT
            Not After : Apr 14 09:01:07 2025 GMT
        Subject: CN=9a77368f82b12426b4242d0b955401bf39ff99b6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a8:9b:ec:e4:b6:0b:b5:39:f7:ad:f1:a5:2c:20:
                    4a:f7:f2:fc:99:3e:69:8b:7e:c1:d6:08:02:23:95:
                    dc:67:c2:9c:16:e9:42:30:56:e1:bd:ab:f5:bc:28:
                    39:86:50:99:dc:0a:93:50:18:c5:3e:14:a0:38:ef:
                    a3:99:16:2c:4a:97:4c:ee:87:72:73:77:3f:e0:78:
                    34:6d:fd:ff:ff:e9:c3:f6:8d:f6:06:cb:0d:0d:78:
                    bf:1f:7a:84:40:21:80:0f:5b:fe:3f:fd:ef:39:48:
                    5f:e5:8f:b4:69:56:13:e4:f0:f3:f7:2e:7b:d6:87:
                    15:e4:55:9a:36:4c:73:6f:b0:95:ca:3f:1a:96:c0:
                    59:ed:26:70:0e:e4:51:9e:e2:5f:fc:47:95:4c:84:
                    1f:89:f4:cc:0b:4c:90:4b:1f:1b:7f:be:f3:b4:93:
                    5e:5f:e1:2c:19:38:70:b1:da:21:e1:a0:87:03:3a:
                    31:4c:07:41:5a:f4:79:cf:1d:73:4f:19:5e:5f:06:
                    e8:65:7f:69:39:82:5e:af:39:48:8a:30:30:38:43:
                    09:77:5e:fb:3c:f4:d2:d5:e5:0c:07:ff:bd:8f:87:
                    06:aa:68:6e:11:c9:1b:73:4f:9b:9c:28:d4:ad:3a:
                    12:f3:45:2e:f5:9c:23:a3:1a:b4:27:46:93:af:91:
                    6b:5f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9A:77:36:8F:82:B1:24:26:B4:24:2D:0B:95:54:01:BF:39:FF:99:B6
            X509v3 Authority Key Identifier:
                keyid:19:11:A6:58:3D:C7:9A:41:55:1B:17:AE:B4:31:4D:B2:93:11:CB:EB

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/GRGmWD3HmkFVGxeutDFNspMRy-s.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1c/eb16eb-77f5-4003-b903-1c34afd9d50d/1/GRGmWD3HmkFVGxeutDFNspMRy-s.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/1c/eb16eb-77f5-4003-b903-1c34afd9d50d/1/GRGmWD3HmkFVGxeutDFNspMRy-s.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         81:53:37:4c:e3:ba:52:40:b3:f9:78:2b:66:1e:62:ca:54:75:
         14:88:0f:40:39:95:90:de:2d:2f:c1:d6:6a:e1:6c:36:e7:75:
         58:9c:91:0b:12:94:2a:01:b4:d6:a3:c3:fd:30:33:a2:50:f2:
         38:ca:f6:f6:74:16:3b:45:81:87:dc:ce:7b:3b:3a:f4:de:21:
         56:8c:6a:d0:4e:c0:ea:38:38:76:f7:af:49:00:46:a8:53:93:
         60:50:3e:9b:3a:61:3a:98:3f:eb:fc:60:35:79:54:48:46:0c:
         a5:56:10:4f:d3:33:73:37:b2:bc:7c:b4:de:26:46:73:64:10:
         f6:81:31:c3:0d:70:b5:7d:f9:fc:63:4f:f2:e9:f4:59:c0:ce:
         4e:ed:5f:c6:b1:e1:9f:25:fa:ff:d5:f2:c9:4b:cc:af:dd:f8:
         4d:94:89:64:81:91:ce:7d:f1:a9:72:55:6f:87:02:40:96:3f:
         bc:07:3a:f5:00:2b:d7:c1:d7:77:9c:be:f9:a5:d0:46:2d:aa:
         fa:a8:50:50:d1:6b:20:fe:cd:90:74:c8:9b:cc:dd:57:a5:bd:
         33:51:9a:6e:7e:61:0b:c7:86:6c:d6:98:84:0b:0c:5f:1f:0a:
         59:86:6a:3b:be:74:b0:67:13:91:e6:cf:66:5c:e1:a3:ee:7c:
         51:1c:ef:02
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 14 20:27:16 2025 by rpki-client on console.sobornost.net