Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5c/8eb453-a3eb-4500-a7e0-32de5858ba6c/1/RTGtRuC5wBDNKIXmACwaW5PNURI.mft
File:                     RTGtRuC5wBDNKIXmACwaW5PNURI.mft (raw, json)
Hash identifier:          ymXedHiKHBs1TvGZDYTPFBHyvmiYjdjJBXBGKzHF8MY=
Subject key identifier:   C4:74:4A:9D:91:9A:B6:E4:06:FC:90:54:1C:E4:C0:A9:AB:7C:C7:52
Authority key identifier: 45:31:AD:46:E0:B9:C0:10:CD:28:85:E6:00:2C:1A:5B:93:CD:51:12
Certificate issuer:       /CN=4531ad46e0b9c010cd2885e6002c1a5b93cd5112
Certificate serial:       01962F0643501B86487F66A3783D46A642A9
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/RTGtRuC5wBDNKIXmACwaW5PNURI.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/5c/8eb453-a3eb-4500-a7e0-32de5858ba6c/1/RTGtRuC5wBDNKIXmACwaW5PNURI.mft
Manifest number:          143E
Signing time:             Sun 13 Apr 2025 12:01:01 +0000
Manifest this update:     Sun 13 Apr 2025 12:01:01 +0000
Manifest next update:     Mon 14 Apr 2025 12:01:01 +0000
Files and hashes:         1: N4NMmlfe9DF5a3SAVtfSEbM2wfQ.roa (hash: 8UZlWmjB6Dnz8NNshRUlMhAJBpkzaL1ZPtLOI64Gvsw=)
                          2: RTGtRuC5wBDNKIXmACwaW5PNURI.crl (hash: FKc/wfAyZJYBJ/XvrXCjmcBlJ3P37MO8FDWZFBTB4fI=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2f:06:43:50:1b:86:48:7f:66:a3:78:3d:46:a6:42:a9
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4531ad46e0b9c010cd2885e6002c1a5b93cd5112
        Validity
            Not Before: Apr 13 12:01:01 2025 GMT
            Not After : Apr 14 12:01:01 2025 GMT
        Subject: CN=c4744a9d919ab6e406fc90541ce4c0a9ab7cc752
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8a:f9:2c:ae:98:aa:64:6a:fa:52:ff:5b:20:a3:
                    c6:ff:8f:50:b3:28:e5:6a:5e:13:a1:7d:9a:be:e5:
                    24:42:ec:e1:a5:b9:6f:24:89:12:d9:14:d8:24:94:
                    14:97:a3:74:2e:c0:98:f7:04:86:4f:77:f8:93:4a:
                    35:92:13:43:34:67:3c:7e:b5:0e:5a:cb:d4:ae:4b:
                    e8:da:15:e4:16:5d:68:69:df:79:37:31:0b:9a:fb:
                    16:51:67:ec:45:c9:1c:ac:29:e9:b4:62:45:1d:4d:
                    c3:df:24:0c:02:35:99:4b:b8:44:43:6b:81:0a:ee:
                    51:5c:60:46:90:a9:61:b8:40:48:8c:ce:46:dd:89:
                    0c:53:47:0f:7d:38:42:77:8a:39:fb:a9:53:a7:6a:
                    a4:54:87:e6:a2:eb:40:bb:f1:50:5c:37:44:af:2c:
                    00:a7:c1:55:d9:8a:80:90:2e:c5:84:20:e9:00:8b:
                    43:1e:40:10:a2:59:13:f4:07:db:6e:78:e0:34:98:
                    f7:55:80:a1:de:9d:67:9f:a4:56:4a:c4:ab:a4:5b:
                    de:c3:57:fd:a2:5b:19:80:7f:61:26:79:7a:5c:7b:
                    7a:a7:96:1f:96:c1:57:09:8e:0f:4c:47:b4:6a:fd:
                    13:98:41:b4:ad:cc:a3:25:a3:89:de:b0:96:12:42:
                    fe:81
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C4:74:4A:9D:91:9A:B6:E4:06:FC:90:54:1C:E4:C0:A9:AB:7C:C7:52
            X509v3 Authority Key Identifier:
                keyid:45:31:AD:46:E0:B9:C0:10:CD:28:85:E6:00:2C:1A:5B:93:CD:51:12

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/RTGtRuC5wBDNKIXmACwaW5PNURI.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5c/8eb453-a3eb-4500-a7e0-32de5858ba6c/1/RTGtRuC5wBDNKIXmACwaW5PNURI.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/5c/8eb453-a3eb-4500-a7e0-32de5858ba6c/1/RTGtRuC5wBDNKIXmACwaW5PNURI.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         9b:df:0e:f8:12:93:98:f6:d0:0e:f8:85:a2:ed:ac:04:41:36:
         61:df:0b:9f:80:9d:47:d9:76:79:34:c0:3a:5a:fc:d4:75:e3:
         72:40:7d:ef:1a:31:5a:4a:58:77:2d:77:1a:11:ad:74:55:ab:
         bd:ff:dd:ee:32:0a:ff:9b:29:84:2f:86:d6:05:e8:21:2e:5c:
         0d:a8:ea:8b:28:25:b6:76:be:46:0c:f0:a1:10:fc:67:6a:e2:
         50:09:cb:9b:3c:52:af:54:35:09:e7:03:01:6a:c9:31:71:0f:
         cd:1e:3e:4e:36:68:0f:47:e1:29:d4:e9:44:1b:fe:f2:dc:f1:
         c4:af:85:d0:fc:59:86:8a:bb:6e:a6:5e:c7:0a:02:a3:eb:76:
         70:8a:d6:59:c4:a0:ac:e1:6b:0c:74:a7:09:1f:c4:86:69:19:
         28:30:f6:f3:34:1f:86:20:8e:2f:9d:bb:95:8b:9c:da:43:ad:
         36:52:c5:31:91:6e:36:e1:be:98:7b:48:4e:e8:3a:f3:05:5d:
         8c:49:61:59:61:1b:de:2d:31:8e:9e:84:cf:9c:10:d3:9c:41:
         94:ff:3c:d1:16:22:09:a7:55:4b:9e:5c:f4:1d:e7:4a:8e:32:
         fd:4d:64:f4:01:cf:85:ab:a3:c7:32:dc:53:8d:cf:da:5a:5d:
         b8:4b:70:69
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 14 20:28:30 2025 by rpki-client on console.sobornost.net