Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2a/a282cd-ee30-49c3-9c9e-471db7eb719e/1/xdXOafzPDGu44rJmfh44-5QPPSY.mft
File:                     xdXOafzPDGu44rJmfh44-5QPPSY.mft (raw, json)
Hash identifier:          4aMADLX38n/OgsO/fpYKSwd1f7WllS0Vkw1ulfd4GW8=
Subject key identifier:   7D:8F:A9:C9:6F:BE:CA:93:8D:6C:9C:B0:05:B7:AE:38:77:7E:17:6D
Authority key identifier: C5:D5:CE:69:FC:CF:0C:6B:B8:E2:B2:66:7E:1E:38:FB:94:0F:3D:26
Certificate issuer:       /CN=c5d5ce69fccf0c6bb8e2b2667e1e38fb940f3d26
Certificate serial:       01962E2B49B549BF9BFB3D678BC13A3C97D6
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/xdXOafzPDGu44rJmfh44-5QPPSY.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/2a/a282cd-ee30-49c3-9c9e-471db7eb719e/1/xdXOafzPDGu44rJmfh44-5QPPSY.mft
Manifest number:          0955
Signing time:             Sun 13 Apr 2025 08:01:50 +0000
Manifest this update:     Sun 13 Apr 2025 08:01:50 +0000
Manifest next update:     Mon 14 Apr 2025 08:01:50 +0000
Files and hashes:         1: 6dkBUwL-mhaODMyRqo4g1V5Aqm0.roa (hash: Qmi5vwRBC8G/em6HsgOnkDIH/4egeMg5iAbwYtXG1+s=)
                          2: xdXOafzPDGu44rJmfh44-5QPPSY.crl (hash: +AWp8u7kXFQL6XZFga2eanslT8QvN7Mk3BO34TE0K80=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2e:2b:49:b5:49:bf:9b:fb:3d:67:8b:c1:3a:3c:97:d6
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c5d5ce69fccf0c6bb8e2b2667e1e38fb940f3d26
        Validity
            Not Before: Apr 13 08:01:50 2025 GMT
            Not After : Apr 14 08:01:50 2025 GMT
        Subject: CN=7d8fa9c96fbeca938d6c9cb005b7ae38777e176d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:83:85:c4:b6:19:cc:84:ae:24:19:e8:c6:38:f0:
                    c1:61:65:1c:e1:c2:c9:0c:4a:7e:1f:2c:bf:88:c3:
                    f0:a4:d3:66:2d:60:15:14:d7:5a:eb:29:31:0b:21:
                    d0:b2:38:86:39:22:51:73:b1:39:5f:e8:8d:9a:fd:
                    53:44:2d:4c:04:6c:b0:34:85:4e:d6:04:37:d3:ae:
                    d8:9a:b0:8d:02:d6:f7:29:90:e6:c0:43:c6:84:34:
                    81:b1:a0:ef:a6:21:e3:a0:d6:57:73:53:4b:0c:28:
                    c1:f7:ac:ea:e9:a8:99:f5:ba:e3:c0:32:1b:3f:3a:
                    de:2d:1c:2c:5e:76:4b:57:8f:ce:ab:cd:a3:a4:05:
                    58:71:46:86:a2:87:f7:f4:b3:5f:67:b6:bd:8b:aa:
                    27:c3:2a:13:8a:f0:b2:1b:d5:46:b1:1a:3f:af:0d:
                    d5:90:e3:d4:b6:5a:c7:3d:14:14:c1:05:cf:44:ad:
                    07:c3:96:ef:db:d3:b8:e4:17:86:d9:a0:95:05:76:
                    40:bf:6e:61:bc:72:63:e6:3a:ff:fa:97:e7:93:b7:
                    71:5c:b7:1e:31:17:fa:06:0c:e5:07:bd:c7:d0:40:
                    1d:15:74:db:af:17:db:da:cc:05:be:99:27:84:6d:
                    94:31:49:54:2c:1e:e5:28:42:72:27:7f:30:af:96:
                    a0:77
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7D:8F:A9:C9:6F:BE:CA:93:8D:6C:9C:B0:05:B7:AE:38:77:7E:17:6D
            X509v3 Authority Key Identifier:
                keyid:C5:D5:CE:69:FC:CF:0C:6B:B8:E2:B2:66:7E:1E:38:FB:94:0F:3D:26

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xdXOafzPDGu44rJmfh44-5QPPSY.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2a/a282cd-ee30-49c3-9c9e-471db7eb719e/1/xdXOafzPDGu44rJmfh44-5QPPSY.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/2a/a282cd-ee30-49c3-9c9e-471db7eb719e/1/xdXOafzPDGu44rJmfh44-5QPPSY.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         33:3f:01:53:3d:2e:cc:01:a6:15:a1:8e:2b:20:54:7f:3f:08:
         35:de:be:2e:a4:7c:5c:ef:e5:0b:ec:57:f8:3d:e2:69:7d:97:
         9b:5f:9f:67:ae:18:bc:15:c8:c1:e8:9f:b6:2a:a9:2a:00:95:
         6a:55:b1:31:9e:86:e1:e3:de:67:4d:d2:cb:0b:f7:96:f1:ca:
         08:28:81:b3:be:5d:d2:f3:51:66:19:5f:4c:3e:bd:ce:31:09:
         98:eb:3b:7f:e9:d9:6a:b3:60:04:99:2b:c4:3c:b4:fc:66:0c:
         b0:57:5d:f8:4b:de:a3:ba:76:d8:c2:8c:00:44:1a:21:71:e0:
         be:9a:60:be:36:92:3c:07:5b:79:19:a7:68:20:f8:82:54:36:
         75:0c:3d:28:74:d4:f5:6a:e8:11:fb:5e:ce:9c:25:f8:3c:02:
         6b:34:fa:de:ce:6b:ce:d2:06:b0:9d:5c:e9:7a:c1:da:90:b2:
         88:e0:73:c0:14:6c:f5:b2:80:8b:46:fd:13:b9:21:37:e8:6d:
         d6:d9:b6:0b:b4:48:15:d7:0a:67:f6:85:57:6a:2a:44:24:6e:
         5b:3d:22:cc:b6:db:a7:e5:cf:af:67:70:cc:95:5a:1d:d3:52:
         46:a2:22:6a:d5:f3:1b:bb:f8:a7:81:e1:4a:ec:33:5e:f8:89:
         94:30:db:d3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 14 20:27:29 2025 by rpki-client on console.sobornost.net