Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/41/582242-0098-4b3f-80b0-dfa1c9b3fd1f/1/d411kki9lFxs44QujWQtzScxM00.mft
File:                     d411kki9lFxs44QujWQtzScxM00.mft (raw, json)
Hash identifier:          OeJYyXk4ewmH6idxcr5rJDDYEeqpffX0IRWM1BLEYhA=
Subject key identifier:   60:25:48:EF:AB:73:A8:0D:70:C9:85:82:9C:D3:3C:58:25:E1:61:9F
Authority key identifier: 77:8D:75:92:48:BD:94:5C:6C:E3:84:2E:8D:64:2D:CD:27:31:33:4D
Certificate issuer:       /CN=778d759248bd945c6ce3842e8d642dcd2731334d
Certificate serial:       01962E99797C6CBD613560162791F7E8242B
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/d411kki9lFxs44QujWQtzScxM00.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/41/582242-0098-4b3f-80b0-dfa1c9b3fd1f/1/d411kki9lFxs44QujWQtzScxM00.mft
Manifest number:          14ED
Signing time:             Sun 13 Apr 2025 10:02:12 +0000
Manifest this update:     Sun 13 Apr 2025 10:02:12 +0000
Manifest next update:     Mon 14 Apr 2025 10:02:12 +0000
Files and hashes:         1: 3qTzEcW6UJi2N2jS10ksOP0jGPg.roa (hash: bi68C3NI8kVP+jK95/ZZuCFpomCw8AVgobu4v38Zwn4=)
                          2: d411kki9lFxs44QujWQtzScxM00.crl (hash: OALNS6REIE0cTXXxP8FtS8nth2qrCa3XZU5s1FnN/hg=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2e:99:79:7c:6c:bd:61:35:60:16:27:91:f7:e8:24:2b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=778d759248bd945c6ce3842e8d642dcd2731334d
        Validity
            Not Before: Apr 13 10:02:12 2025 GMT
            Not After : Apr 14 10:02:12 2025 GMT
        Subject: CN=602548efab73a80d70c985829cd33c5825e1619f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c6:a8:c9:ef:4a:95:e0:e2:3c:33:d9:83:94:2f:
                    73:55:ba:37:5f:c0:04:64:d2:17:18:ab:31:a1:8e:
                    97:7b:73:97:86:69:44:0e:f8:30:69:94:8d:5e:11:
                    e0:78:b2:7b:5e:3e:29:02:3d:72:6a:6f:97:42:b4:
                    7f:95:f0:c8:68:c3:c5:b3:6e:da:a8:66:85:63:f3:
                    59:c0:93:09:f7:fe:4d:09:07:b9:bb:c5:48:7f:e9:
                    bb:8f:f0:cb:c5:8b:18:62:b8:31:33:cf:8b:50:c3:
                    d0:b9:8c:b4:3c:e7:16:95:90:c8:6c:6f:ca:f6:84:
                    aa:04:9c:2d:72:72:c5:f3:78:6c:89:5b:12:e5:b1:
                    8d:a3:be:3d:62:96:2f:df:91:ad:54:94:ec:9d:10:
                    92:d1:eb:7b:ed:bb:1d:8a:cc:3c:e6:c9:3c:98:e8:
                    e2:b4:40:2e:05:51:d7:24:06:33:96:3c:38:55:91:
                    3f:22:ac:c8:1d:06:2f:3c:14:f1:79:c9:04:5e:96:
                    c7:e8:fb:18:f2:04:4f:43:3b:76:23:50:e9:35:c5:
                    f1:02:85:2e:a9:07:9f:5e:44:d2:3b:68:27:8b:23:
                    86:a9:ef:ec:b7:f1:e3:c7:b1:51:73:b0:a3:a2:2e:
                    09:e6:9e:26:9d:87:19:03:de:81:59:fc:f5:ad:36:
                    39:b9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                60:25:48:EF:AB:73:A8:0D:70:C9:85:82:9C:D3:3C:58:25:E1:61:9F
            X509v3 Authority Key Identifier:
                keyid:77:8D:75:92:48:BD:94:5C:6C:E3:84:2E:8D:64:2D:CD:27:31:33:4D

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/d411kki9lFxs44QujWQtzScxM00.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/41/582242-0098-4b3f-80b0-dfa1c9b3fd1f/1/d411kki9lFxs44QujWQtzScxM00.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/41/582242-0098-4b3f-80b0-dfa1c9b3fd1f/1/d411kki9lFxs44QujWQtzScxM00.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         a8:92:41:98:51:24:fa:c3:97:49:8b:f7:dd:c7:56:14:31:be:
         d7:10:be:12:0f:29:69:69:44:26:d9:04:a3:3b:98:38:80:50:
         f0:28:c3:e3:db:74:8e:39:4d:dc:55:e7:96:f9:c0:69:2e:fb:
         d9:ae:00:21:b9:d6:19:3b:9d:1d:0d:2b:19:40:c8:eb:d5:10:
         c1:7f:cb:6e:7a:1a:d7:ff:1a:28:e4:cf:e8:f8:60:5a:19:77:
         bd:40:56:79:3b:45:80:77:35:fc:21:53:81:b4:93:56:44:2d:
         52:e6:df:52:39:4c:bb:39:2f:ba:5b:25:31:b0:1f:88:e9:66:
         97:59:48:95:a7:cd:bb:9b:1c:83:5c:a0:c6:04:5e:73:9f:1d:
         26:de:07:69:fc:35:7b:92:53:f2:ea:36:6a:8a:65:94:94:43:
         e3:95:52:a0:0c:b1:68:bc:bd:f7:f2:25:c6:bf:5b:d2:5b:32:
         9d:6f:ae:01:54:c7:60:f9:e2:a9:97:ca:ee:20:5c:71:b8:07:
         d7:66:65:90:29:a8:f2:e1:65:9d:ca:4e:55:1b:09:db:7c:f1:
         53:4f:5c:a7:e3:1c:94:7e:30:ec:c0:fc:a1:45:d5:15:83:c2:
         07:f1:59:59:47:e8:a0:fe:ff:ec:25:34:2f:88:4e:ca:1d:1c:
         f3:32:a0:a0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 14 20:27:54 2025 by rpki-client on console.sobornost.net