Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/38/45c862-9e33-45c8-a728-7a2fd10269be/1/yND8glkHXNZ18xnXr0-nEwSKUVw.mft
File:                     yND8glkHXNZ18xnXr0-nEwSKUVw.mft (raw, json)
Hash identifier:          kx86X+V5DxFMOJLrP541YNpyjsTb6X3pjBdLVL9chTU=
Subject key identifier:   A0:23:76:24:C5:02:82:99:DD:A6:A7:28:49:F8:23:37:3F:B0:16:5D
Authority key identifier: C8:D0:FC:82:59:07:5C:D6:75:F3:19:D7:AF:4F:A7:13:04:8A:51:5C
Certificate issuer:       /CN=c8d0fc8259075cd675f319d7af4fa713048a515c
Certificate serial:       01962F3DF136BE17474B44B4B2E38B3094AA
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/yND8glkHXNZ18xnXr0-nEwSKUVw.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/38/45c862-9e33-45c8-a728-7a2fd10269be/1/yND8glkHXNZ18xnXr0-nEwSKUVw.mft
Manifest number:          14E9
Signing time:             Sun 13 Apr 2025 13:01:50 +0000
Manifest this update:     Sun 13 Apr 2025 13:01:50 +0000
Manifest next update:     Mon 14 Apr 2025 13:01:50 +0000
Files and hashes:         1: Z406JsldDq5gjN_1Lio77tcegQc.roa (hash: M3kXHnMtNow14QpQkIkQl70hqTwzolvy5YYpOz5DGxs=)
                          2: yND8glkHXNZ18xnXr0-nEwSKUVw.crl (hash: mS9tDYHWwyGs70bSrNSHiOprSn52dt0lXMwdOmD3wxA=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2f:3d:f1:36:be:17:47:4b:44:b4:b2:e3:8b:30:94:aa
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c8d0fc8259075cd675f319d7af4fa713048a515c
        Validity
            Not Before: Apr 13 13:01:50 2025 GMT
            Not After : Apr 14 13:01:50 2025 GMT
        Subject: CN=a0237624c5028299dda6a72849f823373fb0165d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8d:06:ab:5a:d5:87:95:ac:98:11:d8:27:11:ea:
                    c9:44:84:f0:b7:87:93:04:fd:dc:68:63:7a:da:29:
                    3e:bf:4d:b0:2f:1f:53:ae:db:e9:4b:db:d3:88:04:
                    6d:2d:bd:a9:a0:70:5e:e0:48:da:d9:0b:3a:a8:13:
                    0c:80:a8:dd:6a:1b:9d:8b:ec:60:59:e6:c1:ac:78:
                    81:cc:47:6f:1f:d1:d9:37:e5:74:bb:f8:16:31:19:
                    19:0e:cb:93:6f:06:ca:49:2f:ea:45:3a:bf:b3:30:
                    47:5a:70:84:0e:9e:1e:09:8e:c5:b2:c4:91:8f:64:
                    ca:f1:d1:2f:e7:78:af:d1:f8:ec:6a:3c:c3:3d:a7:
                    74:3b:79:da:0c:7c:16:f2:8b:ee:73:b4:aa:82:85:
                    40:f5:6b:ed:1c:32:55:61:31:2b:2f:3d:c7:ff:51:
                    60:ed:be:80:26:ec:d8:44:d4:f0:51:75:99:95:41:
                    77:9a:fa:93:b3:b8:e6:9b:a9:e9:9c:d5:22:f1:93:
                    69:0c:6e:ba:b1:0a:0d:4e:2e:0d:63:9f:fa:87:36:
                    51:3c:16:02:f5:c8:91:a6:ee:17:fe:40:bf:b9:c9:
                    75:aa:6c:7a:e2:3d:26:53:1f:8f:9f:e3:57:5b:0d:
                    4b:b2:28:69:30:58:da:f1:10:f6:2b:b2:d1:66:c4:
                    87:97
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A0:23:76:24:C5:02:82:99:DD:A6:A7:28:49:F8:23:37:3F:B0:16:5D
            X509v3 Authority Key Identifier:
                keyid:C8:D0:FC:82:59:07:5C:D6:75:F3:19:D7:AF:4F:A7:13:04:8A:51:5C

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/yND8glkHXNZ18xnXr0-nEwSKUVw.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/38/45c862-9e33-45c8-a728-7a2fd10269be/1/yND8glkHXNZ18xnXr0-nEwSKUVw.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/38/45c862-9e33-45c8-a728-7a2fd10269be/1/yND8glkHXNZ18xnXr0-nEwSKUVw.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         5b:25:03:ce:5f:e7:72:04:46:62:19:4d:ef:ae:50:01:ff:6d:
         fa:4b:e7:37:15:42:89:1a:70:60:4e:5e:89:c7:40:9b:03:7a:
         14:e0:1a:72:af:f9:87:ca:01:90:f4:69:7a:bd:6b:5f:80:fa:
         f7:f4:5e:81:2d:98:59:8b:73:4c:37:f4:16:96:33:c6:e1:58:
         75:7d:2f:fd:68:59:19:ab:c3:ba:bf:7e:f0:dc:07:22:dc:df:
         13:74:db:c0:87:79:09:2f:29:6f:74:a1:5d:4f:f7:38:4b:b1:
         8c:16:28:4a:03:86:6d:73:22:1b:15:59:e0:71:8d:35:e4:92:
         32:e5:2f:62:9b:0e:fa:4d:a4:48:cb:aa:ed:24:e4:c1:c9:c0:
         0b:e8:a2:c6:70:50:7a:b0:ab:ca:b8:59:7d:6a:a2:03:84:15:
         05:66:38:87:e1:f2:1b:4f:b4:ff:60:80:7e:3e:b9:f6:eb:14:
         de:99:9f:4d:7e:e1:77:13:95:fd:b6:ef:e4:29:db:fc:bf:6b:
         60:2a:da:8b:43:fc:a9:3c:e9:ac:0f:69:8e:27:87:2f:00:10:
         10:ec:4f:20:2c:cb:b0:d0:ea:cb:ab:c6:ba:fd:b6:9a:e3:06:
         ef:ef:b6:04:b2:23:e1:8b:08:14:61:c3:72:51:e2:69:03:80:
         f0:21:5b:db
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 14 20:27:40 2025 by rpki-client on console.sobornost.net