Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4f/95c08b-5056-4386-a42b-bf03dc837900/1/ahh8pbiu4ZXMjK3PtIxUSxgUd-8.mft
File:                     ahh8pbiu4ZXMjK3PtIxUSxgUd-8.mft (raw, json)
Hash identifier:          6gro1psWXYHC3vIndX21A/3XzDe8nM/4CeJcOo95RKg=
Subject key identifier:   58:1A:8C:66:9F:66:6C:CE:FC:F8:C5:5E:21:89:B3:69:11:7D:CE:FB
Authority key identifier: 6A:18:7C:A5:B8:AE:E1:95:CC:8C:AD:CF:B4:8C:54:4B:18:14:77:EF
Certificate issuer:       /CN=6a187ca5b8aee195cc8cadcfb48c544b181477ef
Certificate serial:       01962F06FBF93180C94A749A791374CA39E6
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/ahh8pbiu4ZXMjK3PtIxUSxgUd-8.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/4f/95c08b-5056-4386-a42b-bf03dc837900/1/ahh8pbiu4ZXMjK3PtIxUSxgUd-8.mft
Manifest number:          1182
Signing time:             Sun 13 Apr 2025 12:01:48 +0000
Manifest this update:     Sun 13 Apr 2025 12:01:48 +0000
Manifest next update:     Mon 14 Apr 2025 12:01:48 +0000
Files and hashes:         1: NCqzEDAkcdOF_5QXBG8yJjG5C8E.roa (hash: 3y6ZaPdmVv7AeJPbPV9rY47Ckca5BlO8ayxRNoPx1Jg=)
                          2: ahh8pbiu4ZXMjK3PtIxUSxgUd-8.crl (hash: HKF+FbLoMSR2o4AjvhXxgB5pIK4x8/uZPqMOaUYKidM=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2f:06:fb:f9:31:80:c9:4a:74:9a:79:13:74:ca:39:e6
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6a187ca5b8aee195cc8cadcfb48c544b181477ef
        Validity
            Not Before: Apr 13 12:01:48 2025 GMT
            Not After : Apr 14 12:01:48 2025 GMT
        Subject: CN=581a8c669f666ccefcf8c55e2189b369117dcefb
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b2:f9:7e:7d:a5:4c:14:08:37:26:16:65:18:9e:
                    cf:3e:cf:07:6b:6d:9e:7b:2d:f1:6d:69:d6:52:8e:
                    bf:eb:7a:a6:24:a9:e6:d7:e8:a2:71:b8:43:e0:b0:
                    f1:d2:ec:2b:46:d5:98:d3:e3:b4:a6:66:14:1d:96:
                    d5:91:a2:a5:e8:6c:30:b4:76:dd:28:b0:72:74:c7:
                    37:4e:4c:bd:bd:07:da:10:2e:5d:9c:10:f0:bb:9a:
                    67:56:4b:7c:d9:19:00:7b:1e:66:0b:94:16:c5:30:
                    c7:36:e9:59:c1:2a:e7:6c:2a:41:6c:2e:14:bc:b2:
                    61:e2:76:29:91:8e:5c:ce:20:56:3f:22:65:3d:7f:
                    82:0d:4a:00:24:6a:2d:9b:22:77:1b:75:ff:7e:22:
                    75:df:b6:8e:00:01:b9:50:f2:60:fe:00:ec:7e:d6:
                    e4:ce:10:42:d0:cc:a0:fd:da:91:89:5d:ca:2f:d3:
                    99:30:d8:3d:84:0d:8d:83:b3:17:93:86:69:44:57:
                    d0:2b:d4:94:94:b2:2b:01:e4:76:16:f8:d6:e1:86:
                    08:ae:a2:65:6c:e4:ab:3f:3a:b5:99:ca:a4:44:26:
                    17:5d:8a:6a:ff:f3:5f:b5:05:e4:6d:bc:bf:34:3e:
                    12:64:52:ef:c1:7a:db:da:ba:fd:b7:9c:4f:14:54:
                    e2:b5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                58:1A:8C:66:9F:66:6C:CE:FC:F8:C5:5E:21:89:B3:69:11:7D:CE:FB
            X509v3 Authority Key Identifier:
                keyid:6A:18:7C:A5:B8:AE:E1:95:CC:8C:AD:CF:B4:8C:54:4B:18:14:77:EF

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ahh8pbiu4ZXMjK3PtIxUSxgUd-8.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4f/95c08b-5056-4386-a42b-bf03dc837900/1/ahh8pbiu4ZXMjK3PtIxUSxgUd-8.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/4f/95c08b-5056-4386-a42b-bf03dc837900/1/ahh8pbiu4ZXMjK3PtIxUSxgUd-8.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         6c:1e:6d:6a:67:64:05:3c:82:81:ce:94:5f:f5:b6:cd:54:07:
         f6:f5:ef:5c:c2:80:5d:79:86:7f:e6:0a:6a:d1:d0:4c:bf:99:
         44:49:00:e1:61:a2:4b:dd:1e:55:72:47:f9:89:85:bf:be:b3:
         35:eb:e1:f8:5a:e4:b0:d0:db:b4:bb:41:a7:c3:7d:79:c7:dc:
         f8:3c:ae:d2:0a:e0:9e:82:34:8a:3c:39:5a:c7:77:82:7e:7c:
         ea:b8:9c:d9:59:57:80:0a:ab:f1:fe:93:9a:f8:a2:28:f8:be:
         1b:53:bf:b2:1f:5f:8a:30:03:0a:0c:c4:6b:c6:a2:09:74:db:
         d7:a6:3a:44:bc:55:5e:46:15:c8:ef:c5:9c:17:c5:92:46:35:
         9c:3a:c1:8f:c9:ac:52:1b:3d:4b:05:3b:6c:25:aa:26:c9:80:
         a0:5f:26:26:c0:20:42:71:9b:9d:75:df:ee:3b:f8:b1:fa:44:
         e7:55:b1:fa:85:a7:ef:ab:d8:4d:99:da:04:eb:95:0d:d0:5d:
         e6:86:26:67:fc:30:9f:a2:81:c1:11:35:dc:e2:52:40:87:cf:
         68:c0:27:3b:86:8c:93:5b:9e:cb:aa:08:ba:4a:31:7c:03:1c:
         a2:7e:02:73:43:89:e8:8c:bd:08:ae:13:bb:98:34:bf:75:ed:
         14:00:e5:90
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 14 20:28:07 2025 by rpki-client on console.sobornost.net