Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/53/204fae-f7bd-4f70-911a-1b192371f442/1/EjrZ5s4mUdla0YZW7LuTU2GJ-q8.mft
File:                     EjrZ5s4mUdla0YZW7LuTU2GJ-q8.mft (raw, json)
Hash identifier:          YFdAmDG47y1axjWgS8A7Y116YTLHXKtpcH+xgQazngQ=
Subject key identifier:   3D:68:98:DF:2C:9F:A3:55:9C:FD:D8:1E:9D:F1:A1:78:19:1D:3A:D1
Authority key identifier: 12:3A:D9:E6:CE:26:51:D9:5A:D1:86:56:EC:BB:93:53:61:89:FA:AF
Certificate issuer:       /CN=123ad9e6ce2651d95ad18656ecbb93536189faaf
Certificate serial:       01962ECF7A0F81130512E53A40B6AC83ECAD
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/EjrZ5s4mUdla0YZW7LuTU2GJ-q8.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/53/204fae-f7bd-4f70-911a-1b192371f442/1/EjrZ5s4mUdla0YZW7LuTU2GJ-q8.mft
Manifest number:          14E7
Signing time:             Sun 13 Apr 2025 11:01:11 +0000
Manifest this update:     Sun 13 Apr 2025 11:01:11 +0000
Manifest next update:     Mon 14 Apr 2025 11:01:11 +0000
Files and hashes:         1: 6FHQUBmvLail0AxeSMM8FFT8dQA.roa (hash: H5uT4+VjIdOpYm4p1Ez2YYLSN2170bhAaYGMnJDWIdk=)
                          2: EjrZ5s4mUdla0YZW7LuTU2GJ-q8.crl (hash: wVSopyjMQnJykThw9Pl9GMHs57nK00PzPZyrCk5zRok=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2e:cf:7a:0f:81:13:05:12:e5:3a:40:b6:ac:83:ec:ad
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=123ad9e6ce2651d95ad18656ecbb93536189faaf
        Validity
            Not Before: Apr 13 11:01:11 2025 GMT
            Not After : Apr 14 11:01:11 2025 GMT
        Subject: CN=3d6898df2c9fa3559cfdd81e9df1a178191d3ad1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9c:92:df:34:99:c0:19:3e:74:91:dc:a2:a5:92:
                    cc:df:42:84:a7:43:81:b0:21:18:fb:09:bd:33:50:
                    22:78:90:ea:92:6b:64:45:50:3c:03:21:1a:b5:7a:
                    dc:b7:af:94:25:e3:21:5b:d5:a9:9a:17:3c:46:5a:
                    66:a5:22:03:3e:20:9f:4b:69:c4:6a:4b:bc:0d:ec:
                    ea:ac:ca:2f:c2:6e:b7:e3:98:55:53:ea:e8:ee:be:
                    2f:97:dd:bf:8f:39:19:36:61:92:5e:e6:cd:8e:15:
                    fb:46:45:bd:bb:c5:6f:f1:91:00:a8:10:d5:6f:8f:
                    ed:23:d6:69:09:bc:04:67:1e:34:19:0d:dd:90:d9:
                    e3:00:5e:5b:6b:fa:00:53:bd:2a:21:5a:5a:e0:b5:
                    e7:fd:ff:98:27:88:39:7a:73:ee:8b:b0:2b:78:1a:
                    4a:65:da:18:65:24:b5:4d:47:ce:fd:45:91:80:e6:
                    f7:54:bf:f5:f9:9d:22:87:a0:58:3b:f4:6c:d0:ab:
                    ae:b8:83:95:2e:3f:71:03:1e:76:25:03:e9:af:b5:
                    fc:95:f5:6d:59:64:99:85:9b:ff:b0:32:83:10:58:
                    bc:4f:37:6b:08:1f:3b:c1:46:ec:1c:fe:f0:1d:60:
                    a6:a5:85:1f:04:6e:7b:a2:e5:45:a4:d6:63:16:cb:
                    ce:41
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3D:68:98:DF:2C:9F:A3:55:9C:FD:D8:1E:9D:F1:A1:78:19:1D:3A:D1
            X509v3 Authority Key Identifier:
                keyid:12:3A:D9:E6:CE:26:51:D9:5A:D1:86:56:EC:BB:93:53:61:89:FA:AF

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/EjrZ5s4mUdla0YZW7LuTU2GJ-q8.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/53/204fae-f7bd-4f70-911a-1b192371f442/1/EjrZ5s4mUdla0YZW7LuTU2GJ-q8.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/53/204fae-f7bd-4f70-911a-1b192371f442/1/EjrZ5s4mUdla0YZW7LuTU2GJ-q8.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         68:09:2d:6e:b5:a9:45:8f:36:22:86:94:9e:91:ab:3b:06:04:
         3a:00:d6:0b:5e:d4:a4:a3:be:62:86:29:16:5b:e7:eb:e7:c4:
         6e:58:bc:4f:93:37:a9:e4:67:64:36:b7:ad:64:74:b8:81:6f:
         36:a0:2b:1d:5f:e8:32:03:47:ba:d9:c5:f4:89:7d:19:68:8e:
         ca:17:42:33:4a:20:a9:a9:8b:87:6c:b4:34:da:a0:41:19:fa:
         b7:cf:b9:a7:03:04:8a:72:01:8a:02:00:75:b9:9d:f8:0d:d4:
         46:52:ae:df:9a:eb:fb:16:35:f7:ba:a0:fe:da:cd:96:de:14:
         42:b2:54:ce:c4:b9:1b:c8:6b:62:a9:27:5c:c2:7e:d8:27:89:
         8c:e2:49:f0:42:60:40:dc:3c:4b:44:4e:a5:a7:86:d1:d2:84:
         d0:c2:c8:d2:ce:c2:2a:ad:0a:8f:f3:48:ce:72:32:cd:e7:7b:
         1c:d2:ed:76:6a:da:48:cd:bd:23:77:5c:eb:82:93:e3:c5:6b:
         a9:50:69:9c:ec:ff:1e:8a:5f:67:bc:08:ab:67:1e:31:9d:68:
         06:83:d6:02:e1:c4:b3:64:7f:c7:75:7e:57:b6:04:9c:ad:c6:
         3d:ca:54:03:55:5a:b5:62:b7:d8:5b:db:fc:ce:4c:52:ec:45:
         30:17:75:37
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 14 20:28:11 2025 by rpki-client on console.sobornost.net