Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/51/b4ad85-16a8-487a-8a77-8852a532ad45/1/o3JENI5x7Bvl9QB8jV7-cSWSByI.mft
File:                     o3JENI5x7Bvl9QB8jV7-cSWSByI.mft (raw, json)
Hash identifier:          bH6RU0j3gBk5HO5Hf3h4crtTs0YLhymjQM3JiiFLqaM=
Subject key identifier:   E2:BA:28:AF:FD:57:AC:5C:6C:2C:C7:4B:A8:0B:B9:4D:3E:07:B1:B3
Authority key identifier: A3:72:44:34:8E:71:EC:1B:E5:F5:00:7C:8D:5E:FE:71:25:92:07:22
Certificate issuer:       /CN=a37244348e71ec1be5f5007c8d5efe7125920722
Certificate serial:       01962E2AC8DB1B36121FDD5E46DA6F677DC1
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/o3JENI5x7Bvl9QB8jV7-cSWSByI.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/51/b4ad85-16a8-487a-8a77-8852a532ad45/1/o3JENI5x7Bvl9QB8jV7-cSWSByI.mft
Manifest number:          0815
Signing time:             Sun 13 Apr 2025 08:01:17 +0000
Manifest this update:     Sun 13 Apr 2025 08:01:17 +0000
Manifest next update:     Mon 14 Apr 2025 08:01:17 +0000
Files and hashes:         1: LRjWG2C0sY70ttFU6yLHd0oTEf4.roa (hash: gpuwglO/L9B/Dx0skWM1NYemBuVCYqyVGsOPd2w2KjA=)
                          2: o3JENI5x7Bvl9QB8jV7-cSWSByI.crl (hash: qA9kMdj15gcxwIz7Xwt0l2V6GZDMgYlgXbkgaq4fcnY=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2e:2a:c8:db:1b:36:12:1f:dd:5e:46:da:6f:67:7d:c1
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=a37244348e71ec1be5f5007c8d5efe7125920722
        Validity
            Not Before: Apr 13 08:01:17 2025 GMT
            Not After : Apr 14 08:01:17 2025 GMT
        Subject: CN=e2ba28affd57ac5c6c2cc74ba80bb94d3e07b1b3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c2:76:d1:51:4a:32:6f:21:90:0a:d5:8c:82:04:
                    9b:b6:61:e2:d9:87:50:dc:18:2a:10:02:17:b2:64:
                    45:4e:2f:e2:1a:6c:b7:05:66:2b:5d:90:aa:63:79:
                    24:63:3d:11:59:20:37:ca:1e:96:df:d1:a7:44:10:
                    e4:fd:a9:00:e1:dd:17:39:9d:47:23:22:f4:48:22:
                    dd:f6:6d:fd:a2:e8:af:b6:fb:54:5f:bf:70:3d:e6:
                    c0:46:71:f5:f1:83:4b:e1:22:1f:0b:69:0f:bc:cf:
                    81:cb:c4:0d:e7:3b:c1:8d:30:a7:d5:fc:6e:95:52:
                    b5:94:75:92:30:9c:9c:15:eb:4e:c1:2d:07:85:3f:
                    e7:51:6d:d1:d4:fc:ca:92:5f:ed:32:21:25:2c:c7:
                    f3:46:c5:84:ef:30:34:8d:82:9d:3e:8e:8a:f6:97:
                    9d:7b:13:6f:21:61:ae:b2:d0:b2:ba:1d:ac:50:5a:
                    d7:7b:d1:eb:21:22:b3:62:a4:29:63:3a:4c:56:98:
                    ec:f0:f4:c9:96:f0:6a:37:52:9f:5d:a6:46:51:13:
                    b6:2a:2f:7a:e7:45:c3:d6:f1:a5:5c:16:cf:7d:8d:
                    34:ef:de:34:19:97:a6:c3:79:68:37:07:e1:37:a1:
                    2f:a4:ad:06:04:19:5f:79:5d:02:4c:ed:b2:44:8b:
                    56:d9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E2:BA:28:AF:FD:57:AC:5C:6C:2C:C7:4B:A8:0B:B9:4D:3E:07:B1:B3
            X509v3 Authority Key Identifier:
                keyid:A3:72:44:34:8E:71:EC:1B:E5:F5:00:7C:8D:5E:FE:71:25:92:07:22

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/o3JENI5x7Bvl9QB8jV7-cSWSByI.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/51/b4ad85-16a8-487a-8a77-8852a532ad45/1/o3JENI5x7Bvl9QB8jV7-cSWSByI.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/51/b4ad85-16a8-487a-8a77-8852a532ad45/1/o3JENI5x7Bvl9QB8jV7-cSWSByI.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         77:c0:cb:df:6f:4b:5c:cc:1e:a3:d2:8f:ab:24:c2:05:be:62:
         8a:0f:cb:e5:8f:d1:67:ff:82:c3:4f:a9:87:6a:9c:4f:73:d6:
         a6:be:d2:5a:60:19:02:d7:77:9e:32:b7:4f:d0:ee:f2:33:1e:
         74:6c:c1:b2:53:1f:b8:1b:c7:0b:bb:9d:39:c7:49:d7:15:f4:
         ca:3a:72:d3:46:c7:a8:4f:6a:51:ba:04:14:7f:a4:79:a0:a1:
         6e:1d:87:8f:11:a9:c9:b1:56:ac:20:55:b1:0d:ad:37:f0:3e:
         6c:8c:a9:f6:a4:45:cc:50:a4:95:2a:b9:1e:d7:6c:5c:6b:da:
         c3:90:83:4c:ab:4e:40:77:0b:b1:81:da:9c:94:3c:a6:87:51:
         2e:e5:44:2d:ac:ba:64:d1:1c:5f:fb:c2:53:22:54:04:c2:c1:
         25:51:52:1a:b4:e7:9f:9c:cb:f1:51:10:48:db:44:42:12:b0:
         22:20:51:c2:df:50:56:1a:cc:69:e3:fb:f2:7e:c3:3f:b5:3b:
         ff:c8:8c:2f:c7:52:3b:cb:27:6c:03:4f:8b:16:b3:16:47:43:
         46:19:f3:91:b2:b5:0d:46:40:4e:6e:fc:8e:ec:a0:9d:cc:e5:
         0a:fa:09:64:55:de:a7:dc:86:99:af:66:70:50:8f:6e:8e:aa:
         0b:ba:5a:37
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 14 20:28:10 2025 by rpki-client on console.sobornost.net