Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/55/b92d0d-36f1-46f6-a661-292fead12d59/1/ksQkhNda16Qn3PYbWsmsVlQ-nzM.mft
File:                     ksQkhNda16Qn3PYbWsmsVlQ-nzM.mft (raw, json)
Hash identifier:          e7jw6dTCC8ijuaUHfmoyRpuEhKR5ejaeAM9peQR24kA=
Subject key identifier:   0B:CA:69:44:25:70:BC:EB:00:AA:D7:79:DE:3E:58:CA:CE:C4:58:C7
Authority key identifier: 92:C4:24:84:D7:5A:D7:A4:27:DC:F6:1B:5A:C9:AC:56:54:3E:9F:33
Certificate issuer:       /CN=92c42484d75ad7a427dcf61b5ac9ac56543e9f33
Certificate serial:       01962E99AD0C4592B2B07B9223EF5AE6F32E
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/ksQkhNda16Qn3PYbWsmsVlQ-nzM.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/55/b92d0d-36f1-46f6-a661-292fead12d59/1/ksQkhNda16Qn3PYbWsmsVlQ-nzM.mft
Manifest number:          0180
Signing time:             Sun 13 Apr 2025 10:02:25 +0000
Manifest this update:     Sun 13 Apr 2025 10:02:25 +0000
Manifest next update:     Mon 14 Apr 2025 10:02:25 +0000
Files and hashes:         1: jOZUYryfotd3VTVGeBf6KTjWoz0.roa (hash: JyJSKW3JZ65ZSPqlG2CxfcAq5uNzQ++VbUTzOkT80MI=)
                          2: ksQkhNda16Qn3PYbWsmsVlQ-nzM.crl (hash: TSrjoxbuA5N3hlZGDpICC3jJc0RCS3/FvZxTwbkFNRs=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2e:99:ad:0c:45:92:b2:b0:7b:92:23:ef:5a:e6:f3:2e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=92c42484d75ad7a427dcf61b5ac9ac56543e9f33
        Validity
            Not Before: Apr 13 10:02:25 2025 GMT
            Not After : Apr 14 10:02:25 2025 GMT
        Subject: CN=0bca69442570bceb00aad779de3e58cacec458c7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a4:72:4b:f3:a0:8f:a5:26:a3:5c:1b:8b:ae:9f:
                    d2:6b:46:e4:12:b8:f6:c7:68:2e:21:b6:40:71:a9:
                    5f:2e:74:79:84:21:57:c1:90:4d:fb:e7:1e:94:c1:
                    c6:a9:f7:4d:83:25:9a:9a:78:81:df:04:61:78:50:
                    ca:ba:38:38:cc:88:0e:2b:e2:fe:89:dc:09:66:4e:
                    03:5b:dc:65:bb:e1:5d:46:fe:f6:ed:75:a3:8f:ee:
                    f5:58:04:e3:6c:fe:96:f3:9a:a7:63:61:8f:c7:8e:
                    79:7e:c8:9a:41:83:88:c6:1a:1b:a1:ad:83:b6:62:
                    af:1a:1b:c4:0c:72:b1:3b:4d:82:7f:21:ed:c9:36:
                    de:b2:6c:bd:43:9b:2f:ff:f1:61:e0:3b:63:72:45:
                    40:d9:d0:3a:31:59:fe:24:a2:ca:42:a9:b3:31:21:
                    3c:47:c1:29:67:6a:a0:2b:fc:fd:87:5e:c4:f1:03:
                    60:74:35:31:48:76:58:c0:49:06:40:44:22:77:75:
                    be:87:31:27:a8:4a:54:b5:5c:28:d2:69:f1:3f:79:
                    38:4c:c4:0b:88:a7:92:2a:31:dd:6a:0d:a2:be:f3:
                    e9:15:87:e4:86:f6:6f:41:10:05:b8:55:c8:a2:1a:
                    1c:3f:2b:66:00:a0:20:44:18:56:51:2b:0d:aa:bf:
                    f7:b9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0B:CA:69:44:25:70:BC:EB:00:AA:D7:79:DE:3E:58:CA:CE:C4:58:C7
            X509v3 Authority Key Identifier:
                keyid:92:C4:24:84:D7:5A:D7:A4:27:DC:F6:1B:5A:C9:AC:56:54:3E:9F:33

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ksQkhNda16Qn3PYbWsmsVlQ-nzM.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/55/b92d0d-36f1-46f6-a661-292fead12d59/1/ksQkhNda16Qn3PYbWsmsVlQ-nzM.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/55/b92d0d-36f1-46f6-a661-292fead12d59/1/ksQkhNda16Qn3PYbWsmsVlQ-nzM.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         b6:42:2d:49:71:18:f8:f7:55:09:fc:c7:ca:a8:5d:48:96:c0:
         e1:49:f9:ec:54:89:0f:74:cd:92:3e:6e:1d:dc:15:a3:bc:b7:
         bb:44:e4:f2:97:e5:a9:e7:e6:b2:ec:74:e7:f4:97:2f:17:e0:
         94:20:30:48:36:80:83:5b:95:b1:44:5f:5e:be:5f:36:26:94:
         4d:2e:da:8f:c0:c7:64:54:63:a8:0f:b0:02:18:42:87:7c:59:
         73:06:a3:20:29:64:0e:b0:5b:3e:fc:f9:d1:50:c0:f3:61:8e:
         c4:a9:b5:bf:e8:a8:1f:e4:2b:6b:41:13:76:eb:08:46:d1:b0:
         78:fd:fc:0f:e1:10:87:1b:93:85:97:c3:4e:94:b0:a9:b1:3f:
         a3:88:03:ce:2e:58:8b:89:09:00:12:79:90:9d:23:dc:b8:08:
         a6:d9:5a:27:f7:e2:c4:78:f8:15:aa:a5:91:c0:b8:b3:4e:d6:
         78:bf:67:e5:9b:1a:f6:48:7e:13:71:0f:07:bb:4a:67:c7:99:
         ae:52:18:12:e0:c4:f1:80:4c:c6:a9:84:13:24:dd:86:b2:6f:
         9e:8e:08:17:d1:59:78:73:3c:9b:c2:35:90:40:d9:36:9f:d1:
         db:dc:23:0d:59:a6:97:ac:e4:9f:5f:27:80:07:f1:15:6a:11:
         e8:bb:f4:38
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 14 20:28:13 2025 by rpki-client on console.sobornost.net