Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/39/96f9a0-8746-4b32-83ee-f62320951a36/1/_2szYaGioA284xkBmCf-u3Fb0EQ.mft
File:                     _2szYaGioA284xkBmCf-u3Fb0EQ.mft (raw, json)
Hash identifier:          piOgSjUYiCyIH3W9PICubEXJH4TLjivtU2jmhgd4lug=
Subject key identifier:   EF:3D:37:93:50:C1:1C:FD:A7:52:93:E5:89:34:BD:C5:04:AA:3D:D5
Authority key identifier: FF:6B:33:61:A1:A2:A0:0D:BC:E3:19:01:98:27:FE:BB:71:5B:D0:44
Certificate issuer:       /CN=ff6b3361a1a2a00dbce319019827febb715bd044
Certificate serial:       01962F3D783CBA33B6A277B7F7889096C3DF
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/_2szYaGioA284xkBmCf-u3Fb0EQ.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/39/96f9a0-8746-4b32-83ee-f62320951a36/1/_2szYaGioA284xkBmCf-u3Fb0EQ.mft
Manifest number:          144D
Signing time:             Sun 13 Apr 2025 13:01:19 +0000
Manifest this update:     Sun 13 Apr 2025 13:01:19 +0000
Manifest next update:     Mon 14 Apr 2025 13:01:19 +0000
Files and hashes:         1: WWNEma98vqvt3aWub4KvZrisRPY.roa (hash: 8ej/FxtmoHvT2+4JYPncO9OF+5JwUWMEm2sRynTw/0U=)
                          2: _2szYaGioA284xkBmCf-u3Fb0EQ.crl (hash: oaL/HpE1NZsGv2cGC0wjegIyqi5G5+ZxUlS8W74p5cU=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2f:3d:78:3c:ba:33:b6:a2:77:b7:f7:88:90:96:c3:df
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=ff6b3361a1a2a00dbce319019827febb715bd044
        Validity
            Not Before: Apr 13 13:01:19 2025 GMT
            Not After : Apr 14 13:01:19 2025 GMT
        Subject: CN=ef3d379350c11cfda75293e58934bdc504aa3dd5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c0:17:88:a8:63:a9:02:0d:aa:76:90:74:25:00:
                    39:13:02:cf:90:b4:95:af:e3:3e:b9:e9:82:61:28:
                    fe:06:0a:ec:a4:2d:4f:20:e2:bb:f6:64:03:e5:14:
                    09:5c:a1:09:00:c2:04:d3:7d:1a:98:07:5a:00:bc:
                    54:2a:5f:a5:b2:c6:29:89:f8:57:ca:7a:00:a5:b9:
                    c2:5b:ba:18:7d:cb:66:2d:67:87:66:27:fb:70:35:
                    e2:60:3d:10:dc:51:2d:04:77:e7:e8:72:2d:55:5b:
                    28:eb:13:78:9d:21:81:a4:a9:12:a7:c3:ba:f7:50:
                    e4:f8:ab:6d:ad:70:23:27:a6:8c:cd:ce:a8:c0:04:
                    34:0b:c2:03:2b:b0:ea:87:fd:29:c9:fd:04:13:ca:
                    82:10:85:e8:16:e0:08:b7:6f:be:c3:d0:91:81:55:
                    0a:53:b1:82:f4:1b:bc:50:50:3f:6d:8c:58:65:80:
                    c9:a6:d8:45:45:dd:19:e0:78:ec:9a:40:db:4c:56:
                    25:f0:ae:a4:d1:78:5e:c6:1d:32:e5:b5:fb:96:d3:
                    a4:17:29:8c:cb:6c:9a:e0:f6:3b:68:a2:8d:d9:5c:
                    17:82:73:70:f9:e0:82:ef:55:d8:30:18:33:bd:28:
                    96:a4:bb:16:56:01:3c:14:9f:b6:2a:4a:75:b4:17:
                    ee:81
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                EF:3D:37:93:50:C1:1C:FD:A7:52:93:E5:89:34:BD:C5:04:AA:3D:D5
            X509v3 Authority Key Identifier:
                keyid:FF:6B:33:61:A1:A2:A0:0D:BC:E3:19:01:98:27:FE:BB:71:5B:D0:44

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/_2szYaGioA284xkBmCf-u3Fb0EQ.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/39/96f9a0-8746-4b32-83ee-f62320951a36/1/_2szYaGioA284xkBmCf-u3Fb0EQ.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/39/96f9a0-8746-4b32-83ee-f62320951a36/1/_2szYaGioA284xkBmCf-u3Fb0EQ.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         8c:7f:c3:76:f5:cd:aa:62:c5:07:0b:f1:8b:7b:a7:e1:e1:dc:
         de:d1:13:be:11:fe:fc:49:96:99:ee:fc:b7:79:97:45:23:b8:
         06:4c:46:b7:e3:5d:4c:52:4c:6d:62:9e:2f:fe:b0:23:cb:67:
         0c:36:9b:08:4d:2e:c0:b5:c9:79:d7:86:d3:80:9c:b5:5e:c2:
         e5:62:c3:2f:e1:ec:4f:87:c6:45:17:b2:cb:52:e3:26:39:03:
         6a:d3:f0:4a:3a:84:07:5a:a8:6e:dd:2b:e0:32:37:95:07:1b:
         f9:e1:51:9c:07:58:58:1f:8c:66:13:62:9e:09:be:80:09:4e:
         9c:a7:9a:cb:1f:57:49:48:c2:0b:d7:43:18:59:f1:60:bd:da:
         14:ac:59:d7:c3:d8:57:e7:ae:30:e2:8b:e7:bd:20:6e:62:1f:
         51:be:84:4f:50:c1:0d:9e:6d:a3:7d:c7:23:61:78:75:e3:d0:
         73:2e:81:15:6d:67:dd:28:15:80:68:bf:ea:bf:cf:13:7a:22:
         52:d0:22:3e:59:41:76:a9:7a:57:d1:77:08:98:13:c2:e3:92:
         81:dc:e1:38:7c:1a:c1:48:8b:b2:12:6c:c6:9c:ea:2c:7d:58:
         25:a6:c2:13:d1:20:4c:e5:3e:e5:74:0e:fc:71:7b:84:ed:b4:
         c8:4e:79:8b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 14 20:27:48 2025 by rpki-client on console.sobornost.net