Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1d/290789-1922-4eb0-8ad4-fed89d170da4/1/gOtx0BmkgyJcMkyIxsSAIO-fEWg.mft
File:                     gOtx0BmkgyJcMkyIxsSAIO-fEWg.mft (raw, json)
Hash identifier:          NEF+9ZAWjOt2KcSf6wqQGKNWvk582DzpYlbdUmC3USY=
Subject key identifier:   E4:09:5B:14:92:FC:94:BC:B0:A8:2C:90:5C:85:04:3F:7E:B8:6D:AB
Authority key identifier: 80:EB:71:D0:19:A4:83:22:5C:32:4C:88:C6:C4:80:20:EF:9F:11:68
Certificate issuer:       /CN=80eb71d019a483225c324c88c6c48020ef9f1168
Certificate serial:       01962F3D7E452DA6318A69A53E215F914FF1
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/gOtx0BmkgyJcMkyIxsSAIO-fEWg.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/1d/290789-1922-4eb0-8ad4-fed89d170da4/1/gOtx0BmkgyJcMkyIxsSAIO-fEWg.mft
Manifest number:          14E7
Signing time:             Sun 13 Apr 2025 13:01:21 +0000
Manifest this update:     Sun 13 Apr 2025 13:01:21 +0000
Manifest next update:     Mon 14 Apr 2025 13:01:21 +0000
Files and hashes:         1: gOtx0BmkgyJcMkyIxsSAIO-fEWg.crl (hash: XaUpbNyjwY1Q9SAr4Uvy/LxCaEv3aw2bvXU8JA5eG2I=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2f:3d:7e:45:2d:a6:31:8a:69:a5:3e:21:5f:91:4f:f1
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=80eb71d019a483225c324c88c6c48020ef9f1168
        Validity
            Not Before: Apr 13 13:01:21 2025 GMT
            Not After : Apr 14 13:01:21 2025 GMT
        Subject: CN=e4095b1492fc94bcb0a82c905c85043f7eb86dab
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:df:8a:39:ab:90:c2:ac:04:00:a2:2d:5b:d2:75:
                    56:36:c0:ef:bc:60:4b:81:8b:61:56:36:87:27:aa:
                    fa:05:11:2c:62:17:b2:85:ee:cf:20:44:0e:6b:10:
                    73:41:5e:40:a0:5a:9b:12:0a:20:96:bf:b8:5d:04:
                    43:0e:a6:24:62:d5:0a:fb:7b:f2:44:5e:37:12:ec:
                    a8:43:0f:39:11:fc:61:75:87:23:8b:ae:7b:fb:47:
                    b5:91:8c:95:63:0e:90:8e:dc:d3:77:eb:a9:34:95:
                    eb:33:e4:55:23:9a:a9:86:bf:8e:a7:50:56:03:0d:
                    20:3a:0e:ca:64:6a:72:f0:0a:8c:39:21:28:3d:db:
                    ce:80:ea:5b:28:bc:7e:e6:c6:98:81:09:3e:8b:87:
                    e6:0e:51:f5:ed:d2:de:a5:c0:47:ad:6d:d3:47:11:
                    3d:ed:77:f7:fc:dc:dd:d9:1d:42:46:8c:2c:2c:71:
                    b2:97:60:e7:85:85:60:9a:83:63:59:a2:b9:5f:ab:
                    c7:98:f6:ec:01:9b:76:84:91:9c:b6:bf:5e:5b:c2:
                    b6:44:96:8f:6c:d9:19:eb:9c:46:8b:d3:69:57:f0:
                    a6:64:0e:bc:e5:f1:4d:15:01:04:e5:0e:e7:b9:42:
                    9c:72:b9:7e:6a:61:c7:f0:bf:ad:f2:01:fe:7d:a7:
                    1e:23
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E4:09:5B:14:92:FC:94:BC:B0:A8:2C:90:5C:85:04:3F:7E:B8:6D:AB
            X509v3 Authority Key Identifier:
                keyid:80:EB:71:D0:19:A4:83:22:5C:32:4C:88:C6:C4:80:20:EF:9F:11:68

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/gOtx0BmkgyJcMkyIxsSAIO-fEWg.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1d/290789-1922-4eb0-8ad4-fed89d170da4/1/gOtx0BmkgyJcMkyIxsSAIO-fEWg.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/1d/290789-1922-4eb0-8ad4-fed89d170da4/1/gOtx0BmkgyJcMkyIxsSAIO-fEWg.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         a4:b8:cd:be:fc:27:3c:cd:14:02:62:32:2c:67:d4:6f:aa:14:
         1a:08:0c:fd:50:c9:31:16:15:3e:6e:c6:f0:15:7d:2a:9f:93:
         67:77:c4:92:20:63:9e:2d:8b:2d:6b:2a:e5:c5:5e:e1:13:a2:
         32:47:76:2d:fb:63:2d:97:cd:a9:aa:cc:dc:7e:36:70:3f:95:
         3e:03:6d:9d:77:bb:d7:5e:48:06:2c:5d:0e:3c:1d:b5:19:b7:
         64:35:72:2d:e4:69:29:26:80:4e:1a:58:21:da:1a:18:1e:42:
         2c:b2:39:8b:26:f9:a7:af:1b:d1:3e:5b:c0:38:f2:4e:cd:74:
         70:35:0e:3c:cf:04:4a:2e:e7:5a:8d:31:63:90:ea:bc:5d:e5:
         31:45:9d:4e:bc:f4:6b:b2:c6:9f:70:49:ec:be:f7:2d:d8:ec:
         06:f9:ab:d4:f9:4e:23:c0:d5:22:ec:6e:04:8f:c1:57:3f:02:
         ad:96:74:46:25:1e:4c:2c:ab:95:df:5b:d7:e8:36:73:f8:ee:
         26:72:5e:c0:08:86:24:3d:ae:5c:87:36:4e:36:c6:2a:5e:b7:
         71:6f:12:96:f4:92:89:88:3c:5f:e1:4f:61:06:bb:3a:ce:59:
         9a:3d:e9:ad:46:99:eb:93:33:86:02:65:95:8a:b5:18:bb:8a:
         f3:bf:fe:d4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 14 20:27:16 2025 by rpki-client on console.sobornost.net