Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5a/d1c71d-aa50-4d78-8e52-5cf37a34830d/1/r3gchFM5kA9-ayAz5jiItTrleHU.mft
File:                     r3gchFM5kA9-ayAz5jiItTrleHU.mft (raw, json)
Hash identifier:          XIsSp5htCUYWElgYUZOaj6hDjYva5/Bx/02YfTi0ojY=
Subject key identifier:   69:62:75:54:69:99:77:02:70:DB:EC:28:7A:B5:DE:7E:DF:12:76:FF
Authority key identifier: AF:78:1C:84:53:39:90:0F:7E:6B:20:33:E6:38:88:B5:3A:E5:78:75
Certificate issuer:       /CN=af781c845339900f7e6b2033e63888b53ae57875
Certificate serial:       01962ECF7A08176ECCCCAF94E632CE5FFFB5
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/r3gchFM5kA9-ayAz5jiItTrleHU.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/5a/d1c71d-aa50-4d78-8e52-5cf37a34830d/1/r3gchFM5kA9-ayAz5jiItTrleHU.mft
Manifest number:          14EB
Signing time:             Sun 13 Apr 2025 11:01:11 +0000
Manifest this update:     Sun 13 Apr 2025 11:01:11 +0000
Manifest next update:     Mon 14 Apr 2025 11:01:11 +0000
Files and hashes:         1: qZsU012FOT7iNKmn0Q6fmLHg-jY.roa (hash: t+/X1ob1d2V1rnzYvMBrQBRc/+JtrsZ+AHNltw325kg=)
                          2: r3gchFM5kA9-ayAz5jiItTrleHU.crl (hash: mg7MI6ZzpigpSZFOTUN+ncO0kri/FhNV/1PVi7uE/AE=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2e:cf:7a:08:17:6e:cc:cc:af:94:e6:32:ce:5f:ff:b5
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=af781c845339900f7e6b2033e63888b53ae57875
        Validity
            Not Before: Apr 13 11:01:11 2025 GMT
            Not After : Apr 14 11:01:11 2025 GMT
        Subject: CN=696275546999770270dbec287ab5de7edf1276ff
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c8:aa:60:aa:8c:28:7d:e7:c6:62:42:22:1d:80:
                    da:fd:f7:18:be:83:b2:7b:56:4f:d7:4f:c4:59:f5:
                    5b:58:0c:e5:0a:9e:55:61:6a:a2:39:2c:23:15:88:
                    1f:3b:f5:a8:cc:52:f3:0f:2c:29:00:50:5f:b1:c9:
                    24:83:8e:51:fd:b7:b0:05:98:f0:a9:b4:1b:12:76:
                    24:9c:ac:1a:91:be:f1:15:9d:0c:99:28:43:fe:53:
                    1e:ab:d1:4c:81:b7:ba:8c:10:d7:36:71:83:8d:21:
                    8f:bf:13:ab:ec:1c:90:2d:57:f3:9f:c3:9b:ad:cf:
                    9b:da:6f:6f:10:c1:b6:73:77:52:fd:2e:b1:ec:b4:
                    cf:6f:93:1d:f6:e2:f9:2b:dd:de:bc:dd:58:b7:30:
                    5f:e1:47:5e:2c:a8:d1:23:43:44:a2:1c:da:ce:d6:
                    a8:98:36:9d:c3:b0:b2:05:38:fb:46:82:cc:42:93:
                    08:04:fb:27:92:69:7b:49:17:62:8c:31:e5:71:0b:
                    22:1c:00:ab:2c:d2:04:5f:67:43:73:e0:f0:9f:6c:
                    50:ad:39:7c:e8:e1:ed:43:ec:ba:45:c7:80:e7:c6:
                    b5:a7:aa:e6:71:91:25:a5:03:33:5d:fc:5c:af:68:
                    78:4c:8c:db:59:7f:53:6e:e1:cf:8b:12:d5:37:d1:
                    9e:b9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                69:62:75:54:69:99:77:02:70:DB:EC:28:7A:B5:DE:7E:DF:12:76:FF
            X509v3 Authority Key Identifier:
                keyid:AF:78:1C:84:53:39:90:0F:7E:6B:20:33:E6:38:88:B5:3A:E5:78:75

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/r3gchFM5kA9-ayAz5jiItTrleHU.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5a/d1c71d-aa50-4d78-8e52-5cf37a34830d/1/r3gchFM5kA9-ayAz5jiItTrleHU.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/5a/d1c71d-aa50-4d78-8e52-5cf37a34830d/1/r3gchFM5kA9-ayAz5jiItTrleHU.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         6d:d0:ac:2f:d6:03:1d:87:b2:6d:6f:96:96:d3:0a:6d:61:d8:
         9f:29:a7:88:22:eb:4d:84:bd:84:ff:ef:7c:c8:5e:98:86:0b:
         44:23:72:d5:8b:d8:de:a6:1b:35:28:7b:2b:97:df:34:7a:cb:
         b7:68:aa:34:47:f4:a6:25:28:3b:7c:0c:93:b9:40:de:12:25:
         90:69:39:af:31:7e:9f:47:b3:ac:14:24:36:5d:6d:cb:37:d1:
         e9:1c:2e:32:da:d5:80:60:4e:8d:fc:38:b2:bf:1d:4a:5e:14:
         29:45:5f:05:ea:dd:4a:f6:44:96:9a:21:7f:4a:35:1d:68:92:
         fc:59:d5:ca:c7:ca:38:72:5a:28:8d:8d:3d:eb:33:88:ec:b5:
         33:29:02:f6:c3:8c:4f:ea:e5:18:ad:19:5f:be:16:5a:3a:cc:
         7a:64:c2:56:d8:d1:48:ec:55:d9:b1:00:e6:8a:a6:3d:27:1d:
         f4:f6:85:2f:2e:0a:ae:34:85:55:02:dc:cd:c7:10:ab:35:24:
         3e:6f:18:4c:fc:ae:69:96:da:4e:e0:84:fa:ff:fe:d9:7b:a7:
         37:a7:41:ff:20:95:8d:7b:51:27:20:95:3e:a9:d5:17:92:78:
         6c:5e:53:18:82:a9:b5:b8:cd:d2:f7:56:7e:8a:81:52:89:91:
         95:03:08:04
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 14 20:28:29 2025 by rpki-client on console.sobornost.net