Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/60/0d55e7-1677-4b92-9e66-2d34dc6e5656/1/RZrS7OPlkRCT2WR1O2VkWcm8Bac.mft
File:                     RZrS7OPlkRCT2WR1O2VkWcm8Bac.mft (raw, json)
Hash identifier:          12aeV7ypG1GR3F1MlUBXhZ33PY7HnPOz4GLbEYMHE9k=
Subject key identifier:   EB:AB:25:B0:0B:92:07:5A:79:E2:BF:EB:81:BB:D1:AA:D4:07:4B:A8
Authority key identifier: 45:9A:D2:EC:E3:E5:91:10:93:D9:64:75:3B:65:64:59:C9:BC:05:A7
Certificate issuer:       /CN=459ad2ece3e5911093d964753b656459c9bc05a7
Certificate serial:       01962F3D5A6BC34DAB8A9A1662C8C3EF2E29
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/RZrS7OPlkRCT2WR1O2VkWcm8Bac.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/60/0d55e7-1677-4b92-9e66-2d34dc6e5656/1/RZrS7OPlkRCT2WR1O2VkWcm8Bac.mft
Manifest number:          0D70
Signing time:             Sun 13 Apr 2025 13:01:11 +0000
Manifest this update:     Sun 13 Apr 2025 13:01:11 +0000
Manifest next update:     Mon 14 Apr 2025 13:01:11 +0000
Files and hashes:         1: 2W83qhPrVeT0ZBOGqzAyh11jqS4.roa (hash: nMU/AsGlDwVQqnZ4iKRGkAD06J73vEEF7NUQRjWCaME=)
                          2: RZrS7OPlkRCT2WR1O2VkWcm8Bac.crl (hash: gQl15540y0EG6dOsJz9U28WJkQ45/PLQIvYtRqJ0mN8=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2f:3d:5a:6b:c3:4d:ab:8a:9a:16:62:c8:c3:ef:2e:29
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=459ad2ece3e5911093d964753b656459c9bc05a7
        Validity
            Not Before: Apr 13 13:01:11 2025 GMT
            Not After : Apr 14 13:01:11 2025 GMT
        Subject: CN=ebab25b00b92075a79e2bfeb81bbd1aad4074ba8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ba:7b:93:01:bc:df:d2:3a:cd:a1:99:2d:d1:a1:
                    68:50:8a:cc:f5:4b:cd:8d:71:55:a1:42:06:6c:5d:
                    b5:73:db:b4:72:ce:29:9d:56:39:11:01:fe:f5:0c:
                    40:1f:0f:f8:3b:1c:00:53:5b:39:b4:72:b3:16:c6:
                    55:0e:ad:c1:6b:31:42:10:84:30:17:a9:ad:31:7e:
                    08:9c:0d:35:71:a5:bf:48:61:06:f7:60:ec:8b:ba:
                    14:a7:64:f2:f9:1f:40:f4:7a:f5:01:f1:b3:29:fa:
                    83:c7:7c:05:0c:36:69:5c:45:76:4d:5e:22:f5:f0:
                    73:55:b5:b3:e0:03:ff:86:9f:c3:8f:66:cc:87:9f:
                    8e:dc:bf:41:bd:d1:ff:7a:d7:bb:20:83:bd:12:8a:
                    df:4c:96:47:63:69:1a:40:93:61:0d:d4:a9:a0:3f:
                    b8:6a:9d:35:1b:90:aa:89:96:70:f0:80:eb:a4:b1:
                    5d:2a:2c:1c:66:cf:85:59:7a:d9:e6:53:70:3a:88:
                    41:ce:bb:2c:87:93:30:02:01:bd:0e:b6:c5:0d:ff:
                    e5:f5:00:49:84:71:af:a6:13:00:1b:e9:01:cd:e7:
                    55:86:e6:6b:ea:c8:77:69:f7:9b:59:6b:73:9c:9d:
                    1a:1e:97:65:8c:0e:69:e2:94:69:db:be:c9:d3:3f:
                    6d:5b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                EB:AB:25:B0:0B:92:07:5A:79:E2:BF:EB:81:BB:D1:AA:D4:07:4B:A8
            X509v3 Authority Key Identifier:
                keyid:45:9A:D2:EC:E3:E5:91:10:93:D9:64:75:3B:65:64:59:C9:BC:05:A7

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/RZrS7OPlkRCT2WR1O2VkWcm8Bac.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/60/0d55e7-1677-4b92-9e66-2d34dc6e5656/1/RZrS7OPlkRCT2WR1O2VkWcm8Bac.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/60/0d55e7-1677-4b92-9e66-2d34dc6e5656/1/RZrS7OPlkRCT2WR1O2VkWcm8Bac.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         6b:1a:7e:fb:a1:d8:44:a3:79:11:08:83:17:f0:4c:1d:ff:ab:
         70:9e:20:b7:e6:02:cc:29:d1:89:41:7c:44:e9:fc:ee:3f:42:
         83:35:e0:f7:8d:35:8c:04:30:55:e2:9c:15:df:ec:f2:f6:29:
         b0:95:db:3c:83:f6:48:40:03:65:f0:6b:4a:2f:49:3f:60:58:
         7e:e8:ba:75:20:2e:a1:97:c1:48:67:16:b6:3a:75:d7:70:17:
         5c:24:b1:21:54:39:f7:ee:bc:85:09:e9:61:2a:97:1c:01:b7:
         8c:e3:a8:a8:a8:4b:ff:10:35:28:03:c8:8a:c0:16:91:0a:9d:
         3f:07:f8:4e:4a:ba:04:f0:11:e4:87:e3:a4:4d:26:b9:cf:c2:
         6d:a9:10:18:d3:f4:63:f1:c9:33:a4:8e:48:a4:bb:45:ec:fb:
         54:ec:58:dd:67:31:6b:71:b3:d5:39:83:fb:42:28:e2:60:85:
         dd:75:8a:27:62:dc:0c:ca:6b:48:90:8e:c2:ff:77:10:54:c8:
         e1:16:4a:f1:22:53:0f:1d:61:af:7c:63:b1:73:64:4c:1e:65:
         f9:53:df:aa:bd:ab:3e:0c:7a:c7:fd:53:02:b3:09:f6:35:bc:
         2c:c4:d1:ee:85:e6:83:06:fe:fe:a3:2c:37:e2:5c:3c:88:b4:
         7e:08:cb:a3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 14 20:28:33 2025 by rpki-client on console.sobornost.net