Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/52/7a48f5-bd24-4dc4-8cca-6ba0a0ce01ed/1/2vtkXxNPT9raRecLz82TuJfb1yU.mft
File:                     2vtkXxNPT9raRecLz82TuJfb1yU.mft (raw, json)
Hash identifier:          uDuoBr7GhFQcRyJ3IsAD3X5usCBYspYknFtwUb4yBqY=
Subject key identifier:   35:EE:AA:99:9B:3C:6E:A7:A4:A5:0D:38:79:08:A4:B4:33:7A:3E:75
Authority key identifier: DA:FB:64:5F:13:4F:4F:DA:DA:45:E7:0B:CF:CD:93:B8:97:DB:D7:25
Certificate issuer:       /CN=dafb645f134f4fdada45e70bcfcd93b897dbd725
Certificate serial:       01962FAB86A44B3A794D02A9E136AADE0368
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/2vtkXxNPT9raRecLz82TuJfb1yU.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/52/7a48f5-bd24-4dc4-8cca-6ba0a0ce01ed/1/2vtkXxNPT9raRecLz82TuJfb1yU.mft
Manifest number:          14FB
Signing time:             Sun 13 Apr 2025 15:01:32 +0000
Manifest this update:     Sun 13 Apr 2025 15:01:32 +0000
Manifest next update:     Mon 14 Apr 2025 15:01:32 +0000
Files and hashes:         1: 1-ANTwxkMiMKQB8xGwWXlceOK28w.roa (hash: CGGHdGVU7wSNMOEYT0PFZuvvNwO+aPmiIHIahEg7OsM=)
                          2: 2vtkXxNPT9raRecLz82TuJfb1yU.crl (hash: 4onqJqnaVVPHPxcHEBtDUL+zx+HAfORDKo0yXla3NIM=)
                          3: OVvSE0umfCafdF8GBhnUzkw6GgQ.roa (hash: uBO3ZxlAsPptAYBmUB8o0+apZBCG8SM73O12SZ0wtoI=)
                          4: PB7iIGKrDK97LW2R8MB2s86RYac.roa (hash: WmZvf5hoyroankBIMBpV0PHxkWR9+aExsWVo3nYOgg0=)
                          5: S7t59LlNCvxgMI7DsGNSR4qMw34.roa (hash: 4sO8Qj6ryDL8EQZQIGGVCpEKJDIwq55BmcA8TSzv0hc=)
                          6: bPTKlYF7fifjOqSTQNeQoeP_kuk.roa (hash: Ig5CuSUtEUSpLkPiPPlcB0rfKh8VZMxcp4q355338uk=)
                          7: k2MwpYy3078S260mykYqGyjDM9M.roa (hash: B5YQnM96hhYb/liddrILOeInZbquc/XQMtKwLnspcOk=)
                          8: tDMe4xxusG4_nRn5fi_c_u7WdKk.roa (hash: mHno5k7JcmFvfoqPEzv0djEKAYVxO3uLY89gsIjau0U=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2f:ab:86:a4:4b:3a:79:4d:02:a9:e1:36:aa:de:03:68
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=dafb645f134f4fdada45e70bcfcd93b897dbd725
        Validity
            Not Before: Apr 13 15:01:32 2025 GMT
            Not After : Apr 14 15:01:32 2025 GMT
        Subject: CN=35eeaa999b3c6ea7a4a50d387908a4b4337a3e75
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9c:c3:f1:b3:cc:eb:d4:aa:a5:25:a3:81:7c:e8:
                    0a:20:6e:14:8e:6d:8d:e9:ad:94:fd:5e:74:d2:9e:
                    a8:6f:67:e1:0a:ad:95:02:0b:a6:c6:03:0d:89:ea:
                    1f:ae:ef:9a:d6:39:b7:56:65:e3:1f:03:ec:c0:f5:
                    39:6b:b5:77:1c:56:39:6b:88:a5:50:8f:6a:d8:a2:
                    a7:e5:c3:d6:b9:12:57:5e:db:99:b2:59:2a:33:78:
                    bc:db:8e:9a:e8:ea:aa:3d:ec:77:25:2e:93:78:cf:
                    42:5d:ff:40:1a:92:7c:ff:d9:ea:8f:7b:24:e8:fe:
                    48:78:96:63:50:47:90:f5:42:a0:d1:e8:82:45:f0:
                    c8:dc:89:3d:e3:77:f8:05:84:09:b2:06:55:3b:40:
                    25:4d:fe:3b:5d:6d:3d:a6:08:6a:6b:80:09:60:28:
                    79:8b:f7:47:e8:25:94:91:9a:da:fd:ee:90:39:06:
                    a8:e3:7f:76:09:e8:e6:32:d1:47:52:09:58:5d:e1:
                    9b:22:03:65:2c:63:6f:59:ea:ce:63:58:2e:8e:72:
                    82:7a:42:4f:92:25:9f:45:f4:b3:71:13:32:f5:86:
                    8c:d7:5f:aa:d5:50:b9:6f:61:f1:2f:f1:49:8d:d5:
                    33:c7:83:9f:f8:1c:a2:91:94:33:83:4d:bc:3e:c5:
                    e0:4f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                35:EE:AA:99:9B:3C:6E:A7:A4:A5:0D:38:79:08:A4:B4:33:7A:3E:75
            X509v3 Authority Key Identifier:
                keyid:DA:FB:64:5F:13:4F:4F:DA:DA:45:E7:0B:CF:CD:93:B8:97:DB:D7:25

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/2vtkXxNPT9raRecLz82TuJfb1yU.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/52/7a48f5-bd24-4dc4-8cca-6ba0a0ce01ed/1/2vtkXxNPT9raRecLz82TuJfb1yU.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/52/7a48f5-bd24-4dc4-8cca-6ba0a0ce01ed/1/2vtkXxNPT9raRecLz82TuJfb1yU.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         63:a4:7f:57:68:9e:64:b2:6a:3a:bb:57:09:07:e6:f3:6b:ed:
         7f:a5:68:35:0e:d5:83:90:81:76:a9:fd:cc:24:b3:4c:61:75:
         71:3e:bd:bc:96:7f:f3:c2:a5:07:70:2b:08:12:48:b7:5f:5d:
         39:71:6c:12:e8:12:e1:67:7f:39:4d:f3:b0:07:b2:71:dd:72:
         2c:b3:8a:2e:ab:87:e6:1a:8d:89:07:71:3e:70:cf:23:74:08:
         60:10:b0:c1:15:6b:25:cd:1b:81:ac:49:02:b4:0a:02:d3:a1:
         16:ca:12:f6:41:13:71:e6:1d:a3:03:54:e2:48:e1:88:a1:78:
         49:cc:64:ab:70:8c:24:37:0a:34:8a:a5:fd:31:2a:90:e8:e1:
         46:ac:a1:2e:12:f4:9c:c5:44:04:5d:6b:ae:e8:f3:65:2f:99:
         c7:f8:56:d2:3d:9e:28:a4:26:fa:ee:31:b0:1b:6c:09:27:b4:
         a1:ef:cc:88:9b:35:c7:71:9e:58:05:57:93:f9:77:07:89:95:
         74:1d:1b:21:35:85:8c:7e:0e:dd:cf:4e:e1:12:98:8e:58:f6:
         46:06:2c:c2:91:c3:9f:fe:a5:6f:30:67:97:1c:4e:9a:54:70:
         76:03:62:0a:c2:e2:f4:a3:b8:b4:c6:f1:6d:d5:31:dc:03:7e:
         8f:74:45:e1
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZYvq4akSzp5TQKp4Taq3gNoMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGRhZmI2NDVmMTM0ZjRmZGFkYTQ1ZTcwYmNmY2Q5M2I4OTdk
YmQ3MjUwHhcNMjUwNDEzMTUwMTMyWhcNMjUwNDE0MTUwMTMyWjAzMTEwLwYDVQQD
EygzNWVlYWE5OTliM2M2ZWE3YTRhNTBkMzg3OTA4YTRiNDMzN2EzZTc1MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnMPxs8zr1KqlJaOBfOgKIG4Ujm2N
6a2U/V500p6ob2fhCq2VAgumxgMNieofru+a1jm3VmXjHwPswPU5a7V3HFY5a4il
UI9q2KKn5cPWuRJXXtuZslkqM3i8246a6OqqPex3JS6TeM9CXf9AGpJ8/9nqj3sk
6P5IeJZjUEeQ9UKg0eiCRfDI3Ik943f4BYQJsgZVO0AlTf47XW09pghqa4AJYCh5
i/dH6CWUkZra/e6QOQao4392CejmMtFHUglYXeGbIgNlLGNvWerOY1gujnKCekJP
kiWfRfSzcRMy9YaM11+q1VC5b2HxL/FJjdUzx4Of+ByikZQzg028PsXgTwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFDXuqpmbPG6npKUNOHkIpLQzej51MB8GA1UdIwQY
MBaAFNr7ZF8TT0/a2kXnC8/Nk7iX29clMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvMnZ0a1h4TlBUOXJhUmVjTHo4MlR1SmZiMXlVLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81Mi83YTQ4ZjUtYmQyNC00ZGM0LThjY2Et
NmJhMGEwY2UwMWVkLzEvMnZ0a1h4TlBUOXJhUmVjTHo4MlR1SmZiMXlVLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC81Mi83YTQ4ZjUtYmQyNC00ZGM0LThjY2EtNmJhMGEwY2UwMWVk
LzEvMnZ0a1h4TlBUOXJhUmVjTHo4MlR1SmZiMXlVLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAY6R/V2ie
ZLJqOrtXCQfm82vtf6VoNQ7Vg5CBdqn9zCSzTGF1cT69vJZ/88KlB3ArCBJIt19d
OXFsEugS4Wd/OU3zsAeycd1yLLOKLquH5hqNiQdxPnDPI3QIYBCwwRVrJc0bgaxJ
ArQKAtOhFsoS9kETceYdowNU4kjhiKF4Scxkq3CMJDcKNIql/TEqkOjhRqyhLhL0
nMVEBF1rrujzZS+Zx/hW0j2eKKQm+u4xsBtsCSe0oe/MiJs1x3GeWAVXk/l3B4mV
dB0bITWFjH4O3c9O4RKYjlj2RgYswpHDn/6lbzBnlxxOmlRwdgNiCsLi9KO4tMbx
bdUx3AN+j3RF4Q==
-----END CERTIFICATE-----
Generated at Mon Apr 14 20:28:11 2025 by rpki-client on console.sobornost.net