Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/38/18c8d5-089a-470e-906d-dc4e7988a28a/1/tBuxzdW4a-d4BoidLhsgKswnsiU.mft
File:                     tBuxzdW4a-d4BoidLhsgKswnsiU.mft (raw, json)
Hash identifier:          0TaBaHfrrDHpRtvneT/JmEtYTlbpH5PpFNwTKuFGmuY=
Subject key identifier:   FF:F9:EC:D2:2D:B0:46:B7:94:4C:5C:B1:35:EB:81:49:1D:1B:FA:A5
Authority key identifier: B4:1B:B1:CD:D5:B8:6B:E7:78:06:88:9D:2E:1B:20:2A:CC:27:B2:25
Certificate issuer:       /CN=b41bb1cdd5b86be77806889d2e1b202acc27b225
Certificate serial:       01962ECF83D95AA3E5616F6B35D2A48A34A3
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/tBuxzdW4a-d4BoidLhsgKswnsiU.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/38/18c8d5-089a-470e-906d-dc4e7988a28a/1/tBuxzdW4a-d4BoidLhsgKswnsiU.mft
Manifest number:          01B8
Signing time:             Sun 13 Apr 2025 11:01:13 +0000
Manifest this update:     Sun 13 Apr 2025 11:01:13 +0000
Manifest next update:     Mon 14 Apr 2025 11:01:13 +0000
Files and hashes:         1: 7E7gyymF8j2toEenFO04AQuZbVQ.roa (hash: HKny0hIiEORMsHrCnF3pLBTGlpUFzpGxVsMxMmuOnho=)
                          2: tBuxzdW4a-d4BoidLhsgKswnsiU.crl (hash: 1ruqwnw74qr/Us82nhDVOsDJRR7RkBfKyOa2XgUILLM=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2e:cf:83:d9:5a:a3:e5:61:6f:6b:35:d2:a4:8a:34:a3
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b41bb1cdd5b86be77806889d2e1b202acc27b225
        Validity
            Not Before: Apr 13 11:01:13 2025 GMT
            Not After : Apr 14 11:01:13 2025 GMT
        Subject: CN=fff9ecd22db046b7944c5cb135eb81491d1bfaa5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b2:b2:04:b3:78:8b:e8:5b:6c:dd:d5:6e:81:a5:
                    f2:9a:07:b0:0a:44:6c:d0:e8:3a:fd:74:2b:83:52:
                    66:2c:d2:20:41:0a:8b:f1:35:f1:83:ed:a0:23:84:
                    73:96:e4:8f:86:f2:e6:e4:ad:cd:3f:be:bf:77:27:
                    04:ab:6c:10:52:72:3e:8c:fa:29:9a:71:1a:ea:4a:
                    be:71:d4:78:bf:ea:63:d5:de:c4:b4:29:0c:fd:5b:
                    db:f3:9c:4c:1e:6c:50:85:ea:39:32:4b:23:35:c4:
                    c6:20:41:e9:db:ec:4a:4e:43:b1:00:6f:c6:a7:7b:
                    d9:83:55:07:2a:3a:58:d8:37:79:5d:72:15:44:55:
                    52:3f:fe:ed:ab:fd:08:f4:eb:c8:3e:25:2f:23:aa:
                    7a:b1:fc:e3:f2:61:9e:a4:41:9c:56:42:db:10:de:
                    6f:c5:51:f1:4c:28:9f:18:01:e9:cd:48:0f:e0:01:
                    b4:c5:4a:c6:fc:30:bc:9a:3a:99:6c:fe:a4:21:0c:
                    89:fb:6f:f4:d0:3d:b9:f0:06:88:80:62:a6:5c:80:
                    0b:90:cd:e9:f9:08:37:04:c4:68:9c:5c:1f:96:03:
                    1d:88:be:46:77:89:86:d0:ca:33:30:44:a8:3e:d2:
                    6c:52:8e:04:37:21:3a:d6:f2:9a:39:b2:e4:3f:cf:
                    5e:77
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FF:F9:EC:D2:2D:B0:46:B7:94:4C:5C:B1:35:EB:81:49:1D:1B:FA:A5
            X509v3 Authority Key Identifier:
                keyid:B4:1B:B1:CD:D5:B8:6B:E7:78:06:88:9D:2E:1B:20:2A:CC:27:B2:25

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/tBuxzdW4a-d4BoidLhsgKswnsiU.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/38/18c8d5-089a-470e-906d-dc4e7988a28a/1/tBuxzdW4a-d4BoidLhsgKswnsiU.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/38/18c8d5-089a-470e-906d-dc4e7988a28a/1/tBuxzdW4a-d4BoidLhsgKswnsiU.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         02:ee:50:9d:37:11:d8:d2:aa:d0:39:aa:a6:cf:37:68:cf:3f:
         d0:cf:cb:df:36:05:7a:4c:59:78:b3:3e:fc:8d:9a:c1:9c:47:
         a5:ee:b1:49:05:2c:94:db:63:59:49:cd:f1:0e:e4:e2:9c:89:
         3f:e6:e4:c3:c1:07:bf:e5:38:95:9a:35:25:21:31:b8:54:ed:
         36:12:f3:15:b5:4a:c9:8f:6d:35:3f:d7:16:a8:52:46:90:0f:
         c1:5a:44:33:e1:ef:ff:e9:90:e5:61:14:ce:9c:c4:25:1d:cf:
         c6:49:e5:63:ff:6b:bf:18:a0:26:c0:ab:5f:1d:a2:07:01:cf:
         61:cb:95:c0:a9:b4:2f:38:90:21:c7:d5:d3:f4:df:f2:78:24:
         83:c1:02:31:68:1e:19:68:52:92:8c:48:50:b4:93:58:35:60:
         1f:14:0a:38:c8:7e:ff:02:de:9e:5b:4e:bc:4a:d3:84:8b:64:
         df:82:48:37:84:4a:52:0a:b1:14:86:ef:16:9b:3f:68:ce:1e:
         a6:b7:87:c8:e6:6f:36:e7:d3:f9:36:5e:7d:48:92:37:7a:9a:
         e4:d9:f0:45:71:03:6a:f5:99:93:97:c5:98:a6:5b:1b:49:03:
         6d:06:36:67:f9:ee:04:3e:3e:ac:cb:bb:48:7d:39:59:38:fd:
         23:4b:73:f3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 14 20:27:39 2025 by rpki-client on console.sobornost.net