Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3b/278398-7339-44b2-b0b0-73a01ae5de8f/1/TNcfWgBQ-K5kRMY4dpujdf3bzhk.mft
File:                     TNcfWgBQ-K5kRMY4dpujdf3bzhk.mft (raw, json)
Hash identifier:          kKZgzA4zLXwULF8Dz5wPIAWRwd1Ijrv861TAvffiF5M=
Subject key identifier:   5C:F8:EE:37:A8:DE:B5:CF:F0:CE:D9:A5:FD:50:55:FD:82:E6:2D:AE
Authority key identifier: 4C:D7:1F:5A:00:50:F8:AE:64:44:C6:38:76:9B:A3:75:FD:DB:CE:19
Certificate issuer:       /CN=4cd71f5a0050f8ae6444c638769ba375fddbce19
Certificate serial:       01962DF3F3B907696BC390BD1242C306AD3F
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/TNcfWgBQ-K5kRMY4dpujdf3bzhk.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/3b/278398-7339-44b2-b0b0-73a01ae5de8f/1/TNcfWgBQ-K5kRMY4dpujdf3bzhk.mft
Manifest number:          11D5
Signing time:             Sun 13 Apr 2025 07:01:24 +0000
Manifest this update:     Sun 13 Apr 2025 07:01:24 +0000
Manifest next update:     Mon 14 Apr 2025 07:01:24 +0000
Files and hashes:         1: R8OfYueHd1P1AWWtdGiixwllIMs.roa (hash: ZKzgreBUlCJXbuPQDDLtfbqfZaf5YaZJohzFfYmemPA=)
                          2: TNcfWgBQ-K5kRMY4dpujdf3bzhk.crl (hash: cY+mtxaLkhHXtBo0MEiTu1aeYvfPeXY7JMZQd/uhq+8=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2d:f3:f3:b9:07:69:6b:c3:90:bd:12:42:c3:06:ad:3f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4cd71f5a0050f8ae6444c638769ba375fddbce19
        Validity
            Not Before: Apr 13 07:01:24 2025 GMT
            Not After : Apr 14 07:01:24 2025 GMT
        Subject: CN=5cf8ee37a8deb5cff0ced9a5fd5055fd82e62dae
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bb:a2:67:c7:c4:02:e1:ed:c2:d4:b4:46:03:2e:
                    fc:5c:18:13:f7:dc:5f:8a:65:79:12:13:60:8e:af:
                    73:de:35:ab:b7:3e:c0:a8:64:e9:40:d8:1e:82:6a:
                    5c:a7:cd:05:74:88:28:e2:75:45:a2:d9:56:d4:ef:
                    31:fc:94:b5:c0:c7:5e:5d:81:f9:23:44:fe:b3:d9:
                    4d:a0:5f:bb:8b:05:45:8a:7a:78:ee:41:8a:27:70:
                    78:34:cb:e2:4d:66:21:79:d5:11:a2:a6:9f:e6:27:
                    cb:d7:84:2e:5d:79:a5:d3:91:5c:6e:bd:6f:45:55:
                    92:86:c3:68:be:de:1f:c5:90:c8:56:6d:7c:af:bd:
                    6e:da:21:0b:e3:ab:af:67:9d:df:02:de:45:5a:e5:
                    69:0d:b9:60:37:93:fd:f5:c4:e1:84:14:e2:8d:d0:
                    fb:39:ee:13:ad:aa:e7:ae:54:0e:61:82:a6:c3:9d:
                    00:98:2e:a3:c0:bd:5a:b8:27:6f:28:f1:4d:fd:35:
                    dc:6a:f7:2f:5d:2f:aa:1d:72:25:c0:29:81:23:c6:
                    87:2b:32:16:c8:fe:f3:fb:08:78:41:13:9d:62:a7:
                    24:7d:f1:50:43:a6:63:14:a9:07:fd:61:68:84:ab:
                    d4:bd:19:73:65:21:61:97:1a:ba:00:64:35:4f:c7:
                    db:29
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5C:F8:EE:37:A8:DE:B5:CF:F0:CE:D9:A5:FD:50:55:FD:82:E6:2D:AE
            X509v3 Authority Key Identifier:
                keyid:4C:D7:1F:5A:00:50:F8:AE:64:44:C6:38:76:9B:A3:75:FD:DB:CE:19

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/TNcfWgBQ-K5kRMY4dpujdf3bzhk.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3b/278398-7339-44b2-b0b0-73a01ae5de8f/1/TNcfWgBQ-K5kRMY4dpujdf3bzhk.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/3b/278398-7339-44b2-b0b0-73a01ae5de8f/1/TNcfWgBQ-K5kRMY4dpujdf3bzhk.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         94:59:6a:1c:e4:47:c5:57:8d:bc:88:44:7e:44:05:90:6a:e8:
         bb:97:95:0d:d4:a1:c6:c4:55:6d:d0:75:d3:ae:fc:36:c4:1d:
         62:32:b6:a9:b6:ed:39:6a:96:55:3a:49:e7:69:0b:9e:cc:0d:
         f8:a6:d1:27:5c:0c:f4:eb:b5:f6:2b:ed:62:a4:52:ef:d7:3f:
         22:a9:aa:a6:13:14:ec:92:36:35:27:bd:6f:d6:57:7b:a4:22:
         22:d5:8d:c3:db:0f:08:d4:ad:f7:90:6f:18:26:cd:a0:8f:ea:
         81:9f:cd:44:e1:c1:42:aa:0d:a2:36:88:96:84:59:f0:67:e4:
         85:f6:6b:a2:bf:c5:10:bb:d0:cd:52:cf:92:6f:05:a5:1c:23:
         7e:ae:cc:b1:eb:f2:2a:75:da:70:34:d3:87:2c:86:f8:3c:95:
         82:b3:f5:89:cd:dd:da:2d:21:9a:a6:f4:c1:f2:d2:83:9d:5c:
         6f:9f:d8:e4:bf:2a:a6:a2:da:e0:2c:c5:1e:87:75:ff:93:ac:
         fd:c0:6c:3a:76:72:0e:fe:11:66:a6:ff:fd:30:97:9b:de:48:
         12:0a:84:ef:f5:a6:a8:56:c5:c6:c6:cf:8e:77:f2:b7:aa:24:
         b0:ad:06:3e:1d:85:a8:6f:1f:20:de:06:de:a3:d7:02:f3:19:
         33:b5:6a:0d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 14 20:27:50 2025 by rpki-client on console.sobornost.net