Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4a/847d17-ba7c-4eae-9d55-25846d59fd60/1/Xx-gbV262kPeRPTksdyUkrsofJ0.mft
File:                     Xx-gbV262kPeRPTksdyUkrsofJ0.mft (raw, json)
Hash identifier:          XC6Wu2KXQMqruR10ESIge2mDsCGQg6XokGxWEz7yiBg=
Subject key identifier:   BC:3B:E3:05:53:45:6E:B7:28:1F:B4:22:DF:C1:72:13:2A:6C:7B:D9
Authority key identifier: 5F:1F:A0:6D:5D:BA:DA:43:DE:44:F4:E4:B1:DC:94:92:BB:28:7C:9D
Certificate issuer:       /CN=5f1fa06d5dbada43de44f4e4b1dc9492bb287c9d
Certificate serial:       01962DF3943C36219C11F1360DABD54F3586
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/Xx-gbV262kPeRPTksdyUkrsofJ0.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/4a/847d17-ba7c-4eae-9d55-25846d59fd60/1/Xx-gbV262kPeRPTksdyUkrsofJ0.mft
Manifest number:          1456
Signing time:             Sun 13 Apr 2025 07:00:59 +0000
Manifest this update:     Sun 13 Apr 2025 07:00:59 +0000
Manifest next update:     Mon 14 Apr 2025 07:00:59 +0000
Files and hashes:         1: 2-ZT3D_TT57WgEPZaHLs56UG0Yg.roa (hash: NyVeJy4V1X4eJ9opwnQRbcNHZ8PbRqXsdUICPp/i7rs=)
                          2: Xx-gbV262kPeRPTksdyUkrsofJ0.crl (hash: fCB42M2ESnlXKGQNTDHFSJfswLEvKvep47rF5Yu9UJA=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2d:f3:94:3c:36:21:9c:11:f1:36:0d:ab:d5:4f:35:86
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5f1fa06d5dbada43de44f4e4b1dc9492bb287c9d
        Validity
            Not Before: Apr 13 07:00:59 2025 GMT
            Not After : Apr 14 07:00:59 2025 GMT
        Subject: CN=bc3be30553456eb7281fb422dfc172132a6c7bd9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c1:78:8e:dd:65:2d:53:fd:80:8d:38:62:6c:1d:
                    57:60:70:61:d4:ed:7e:34:c4:a0:d5:2c:7c:04:c7:
                    b2:51:b3:b7:fa:82:0c:5a:42:33:27:3b:7e:2a:fb:
                    a7:aa:cd:31:22:ee:dd:3f:69:0d:5b:9f:37:db:8f:
                    55:26:83:32:24:7b:9c:e7:19:cf:9b:d8:dd:ed:d3:
                    14:3e:36:ae:98:2d:d6:da:2c:6b:9d:4d:62:cf:5a:
                    a0:93:04:fc:28:9e:6e:f7:3c:aa:cd:cc:6a:49:ff:
                    cb:c9:8b:a8:7c:0c:1f:3d:4c:77:eb:ab:62:b8:48:
                    38:11:01:0c:b4:ae:69:3b:1f:59:21:5a:d6:76:ad:
                    68:e4:28:5f:4f:11:74:43:29:2b:33:1d:24:7b:d0:
                    c4:e2:a5:e4:07:0c:f4:c4:38:aa:9a:df:df:7b:70:
                    a3:61:1c:f8:94:71:03:66:a3:1d:67:45:b2:65:07:
                    e3:22:00:38:f9:aa:a0:f6:72:b6:e2:bd:96:35:83:
                    d0:5f:fc:a6:08:cf:23:da:a0:c8:eb:ca:36:0d:bb:
                    7e:e2:c6:95:ad:70:f7:2d:34:30:f6:f1:0f:8f:c6:
                    03:e6:2f:8f:b4:fb:93:f7:4d:b6:ad:34:84:27:fc:
                    b0:18:47:4b:95:34:3b:1b:e4:1e:09:37:c7:57:b0:
                    ab:ff
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BC:3B:E3:05:53:45:6E:B7:28:1F:B4:22:DF:C1:72:13:2A:6C:7B:D9
            X509v3 Authority Key Identifier:
                keyid:5F:1F:A0:6D:5D:BA:DA:43:DE:44:F4:E4:B1:DC:94:92:BB:28:7C:9D

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Xx-gbV262kPeRPTksdyUkrsofJ0.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4a/847d17-ba7c-4eae-9d55-25846d59fd60/1/Xx-gbV262kPeRPTksdyUkrsofJ0.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/4a/847d17-ba7c-4eae-9d55-25846d59fd60/1/Xx-gbV262kPeRPTksdyUkrsofJ0.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         33:4b:03:7c:e4:76:2d:fd:e3:72:97:d8:7a:c9:97:62:32:7c:
         d8:14:bc:72:30:31:7f:25:93:98:c3:3e:3f:70:ed:4e:48:47:
         ee:27:97:91:26:bc:f7:5c:d4:9f:6d:cf:5c:b8:ef:31:3b:c9:
         8d:49:a7:15:14:d0:8f:65:d9:e4:dc:42:1e:6e:a1:f4:89:7a:
         cf:de:77:03:f9:73:3f:a0:8c:7c:79:8c:e2:ac:8b:98:c0:b1:
         6e:1b:f5:2b:bc:10:d9:11:79:c6:88:98:28:9b:07:84:cb:c0:
         ae:31:ce:1c:da:94:8b:a2:b8:f3:bd:f0:83:fa:07:17:8b:99:
         ef:ec:04:51:d0:53:79:23:6b:cf:7b:cc:55:db:d7:e5:09:e5:
         b4:53:5c:ef:b0:47:de:8a:9f:64:63:6c:74:2e:bd:e1:64:b4:
         3b:be:8a:50:83:04:9e:72:72:c5:dc:8e:4f:89:9a:8e:b1:7f:
         57:2b:e2:3e:2e:27:29:57:a0:ae:c9:4d:85:d3:b5:ac:cc:fd:
         06:d5:fc:4a:77:d5:f8:70:92:18:59:30:65:5f:d7:35:54:a7:
         fb:df:7d:54:e7:06:38:8d:be:83:94:ff:53:93:84:1c:0f:65:
         73:e9:10:31:f7:c6:9b:9c:f4:06:46:7b:97:be:1d:8d:84:00:
         9e:f7:11:6d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 14 20:28:04 2025 by rpki-client on console.sobornost.net