Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/40/6b6335-0439-47f2-ae34-7424fdee210e/1/b87cvaA8OzbNfXA36tM5vLiMmiQ.mft
File:                     b87cvaA8OzbNfXA36tM5vLiMmiQ.mft (raw, json)
Hash identifier:          N9ac3hMbkixQcZNeDJk5Kt9fGf6UX0yIVofumMmT00g=
Subject key identifier:   97:E3:CE:80:76:D1:20:A3:D2:FB:D9:C6:38:AD:05:81:FD:BD:BF:8F
Authority key identifier: 6F:CE:DC:BD:A0:3C:3B:36:CD:7D:70:37:EA:D3:39:BC:B8:8C:9A:24
Certificate issuer:       /CN=6fcedcbda03c3b36cd7d7037ead339bcb88c9a24
Certificate serial:       01962F74EE3ECC0FEE53F88794098B88380A
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/b87cvaA8OzbNfXA36tM5vLiMmiQ.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/40/6b6335-0439-47f2-ae34-7424fdee210e/1/b87cvaA8OzbNfXA36tM5vLiMmiQ.mft
Manifest number:          08AE
Signing time:             Sun 13 Apr 2025 14:01:54 +0000
Manifest this update:     Sun 13 Apr 2025 14:01:54 +0000
Manifest next update:     Mon 14 Apr 2025 14:01:54 +0000
Files and hashes:         1: b87cvaA8OzbNfXA36tM5vLiMmiQ.crl (hash: NjL8dT38wMacx/HXwaxlFCmBYQESSa2qHEO/Q7BQT28=)
                          2: pMbs7XGdo_xSX6txJyvIyBbRMlo.roa (hash: 98SgzoxY6svU/NSUJNYIa8/zWjIUUc01QOY2lQs4JFE=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2f:74:ee:3e:cc:0f:ee:53:f8:87:94:09:8b:88:38:0a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6fcedcbda03c3b36cd7d7037ead339bcb88c9a24
        Validity
            Not Before: Apr 13 14:01:54 2025 GMT
            Not After : Apr 14 14:01:54 2025 GMT
        Subject: CN=97e3ce8076d120a3d2fbd9c638ad0581fdbdbf8f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d1:cf:32:e6:fb:86:32:84:cf:a8:c5:77:3c:29:
                    44:fa:ab:3a:42:9f:d7:92:5b:03:f1:34:5c:d5:ff:
                    0c:36:4c:a3:69:8c:a7:11:7f:3a:44:32:81:e5:75:
                    5d:0d:7d:8f:19:c0:ff:46:59:9c:c6:88:32:fb:55:
                    25:11:48:11:d5:70:73:b2:d1:6c:db:6e:29:cc:99:
                    df:67:6a:69:43:0c:a4:3e:fe:10:ca:6f:32:ce:93:
                    db:6f:00:d0:98:5d:38:6b:7c:5c:3d:56:7b:c8:24:
                    d8:64:2a:5a:c5:04:60:92:9d:17:63:61:8e:6f:3e:
                    7a:ca:e3:66:24:f2:24:05:ab:2c:00:2d:31:c2:eb:
                    ef:08:d6:2a:f7:e3:d4:77:ac:02:e7:ff:b6:f3:34:
                    fe:1c:02:20:89:d4:ce:23:23:cf:d6:9a:28:31:cc:
                    68:3b:cd:6b:0f:2e:72:de:21:bd:82:3f:57:cc:5c:
                    95:96:81:14:43:e2:7b:20:68:f3:7d:01:1a:f0:32:
                    d0:b5:77:9a:f7:80:20:35:13:a2:ef:05:74:c3:f1:
                    eb:ae:8f:86:50:95:f2:d8:24:06:dd:9f:03:7e:2f:
                    66:04:82:d3:46:cc:16:61:62:8d:02:3d:71:00:cb:
                    30:af:a1:39:dc:b9:99:0f:ec:4e:30:48:3a:9f:e6:
                    a0:8f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                97:E3:CE:80:76:D1:20:A3:D2:FB:D9:C6:38:AD:05:81:FD:BD:BF:8F
            X509v3 Authority Key Identifier:
                keyid:6F:CE:DC:BD:A0:3C:3B:36:CD:7D:70:37:EA:D3:39:BC:B8:8C:9A:24

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/b87cvaA8OzbNfXA36tM5vLiMmiQ.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/40/6b6335-0439-47f2-ae34-7424fdee210e/1/b87cvaA8OzbNfXA36tM5vLiMmiQ.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/40/6b6335-0439-47f2-ae34-7424fdee210e/1/b87cvaA8OzbNfXA36tM5vLiMmiQ.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         a1:cb:0e:b8:3c:ef:04:c7:64:84:09:21:7a:23:be:6e:1c:f0:
         d7:f6:58:be:61:36:ee:40:5c:c8:19:5f:ad:60:27:3c:93:bb:
         ce:2b:44:13:07:82:27:14:ae:95:cb:65:85:dc:45:d1:a3:e8:
         ab:96:08:58:d4:e3:42:ea:f6:a6:a3:d2:6a:0e:1a:0b:0f:32:
         6f:a4:c2:78:d3:ca:40:d6:84:0e:5f:15:9b:04:63:41:29:bc:
         bf:2e:de:ac:5c:24:ac:1e:f4:51:a4:34:bd:14:87:73:53:c3:
         02:52:5d:4d:5f:f5:09:dc:74:60:93:45:c2:a8:c6:17:ed:26:
         f3:ca:5f:0c:fd:b7:50:82:71:ac:b2:5b:7e:22:f4:b2:3b:77:
         bc:7c:ce:24:c9:b8:1d:ad:d0:57:a7:1a:85:70:a6:ce:d6:b6:
         4f:21:6c:b2:62:e5:7e:c0:2b:c4:bd:8c:a6:33:3e:87:c2:cd:
         ff:d4:95:d8:95:e2:6f:57:d9:49:bf:58:ce:aa:55:59:d6:b6:
         21:b2:31:8b:d1:bb:4e:80:81:c7:f0:48:c6:4a:51:e4:72:b9:
         79:80:23:98:b4:29:bc:51:b2:6a:cb:b6:90:42:76:2c:82:80:
         5a:3b:c5:5a:8a:6a:94:dc:ff:98:05:7b:4e:cd:b8:46:86:63:
         56:8c:10:3b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 14 20:27:53 2025 by rpki-client on console.sobornost.net