Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/66/1b7968-ca4d-45f4-b671-2e7f78489cd3/1/fxePr2QB4vNxbjF2RWnfcx31jyI.mft
File:                     fxePr2QB4vNxbjF2RWnfcx31jyI.mft (raw, json)
Hash identifier:          q8KtY05F5n0gGWAe7W8zQ1XCgPQYfpkDE9LV0hxqqwo=
Subject key identifier:   11:AC:0C:A5:0B:68:BF:3E:FF:70:DE:EA:A7:51:15:FF:13:A8:95:5F
Authority key identifier: 7F:17:8F:AF:64:01:E2:F3:71:6E:31:76:45:69:DF:73:1D:F5:8F:22
Certificate issuer:       /CN=7f178faf6401e2f3716e31764569df731df58f22
Certificate serial:       01962F06BB359A684635BF94ED65C4DB4331
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/fxePr2QB4vNxbjF2RWnfcx31jyI.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/66/1b7968-ca4d-45f4-b671-2e7f78489cd3/1/fxePr2QB4vNxbjF2RWnfcx31jyI.mft
Manifest number:          0F5D
Signing time:             Sun 13 Apr 2025 12:01:32 +0000
Manifest this update:     Sun 13 Apr 2025 12:01:32 +0000
Manifest next update:     Mon 14 Apr 2025 12:01:32 +0000
Files and hashes:         1: aO3R8Yo3eBCEfuvERnCJCw4GHKw.roa (hash: 0+s8Oxr+vc9N7zEky4ZV5zDnUpXVmpiBsxhTGsefbzg=)
                          2: fxePr2QB4vNxbjF2RWnfcx31jyI.crl (hash: nIU3+sO9bRdHBQ25yg+rLRkp2NcQCpSS0HeFV52UwLs=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2f:06:bb:35:9a:68:46:35:bf:94:ed:65:c4:db:43:31
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7f178faf6401e2f3716e31764569df731df58f22
        Validity
            Not Before: Apr 13 12:01:32 2025 GMT
            Not After : Apr 14 12:01:32 2025 GMT
        Subject: CN=11ac0ca50b68bf3eff70deeaa75115ff13a8955f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c9:f1:3e:20:18:c5:1c:53:b8:22:a9:7c:a1:a0:
                    2b:50:06:6d:a2:c6:7b:98:ea:8e:fc:71:64:1c:56:
                    40:8b:32:2a:be:fd:fd:af:c7:b7:81:c7:d0:a8:71:
                    c2:89:b8:a3:2c:de:fd:6c:9b:55:25:29:6b:1c:8d:
                    1a:12:2f:b8:18:a6:85:38:1d:aa:6d:e8:0c:08:4c:
                    89:12:e8:61:aa:61:d4:32:2d:d8:c0:c5:53:c9:8c:
                    08:56:15:83:4d:01:3f:d7:64:ab:e2:c0:2b:31:e9:
                    72:0e:d6:cb:9e:64:e5:c8:e0:69:f9:33:40:98:da:
                    67:3f:9a:aa:11:c1:6e:91:90:d2:af:57:eb:79:92:
                    0b:50:32:67:b4:6b:d9:c3:db:3c:48:bf:dc:c2:22:
                    82:f1:5c:99:ce:02:8f:12:03:9b:c5:79:b8:34:51:
                    6a:8c:fe:b2:a1:02:77:40:7a:c6:fd:ca:56:9e:7c:
                    25:15:13:a5:56:a8:6f:b6:62:66:9a:e9:e4:5e:35:
                    22:b6:29:7c:d9:de:93:44:70:bd:b1:ac:97:ee:13:
                    4c:80:59:68:10:ff:3a:db:ff:9c:c4:80:0b:9b:32:
                    84:a5:39:b7:2c:75:df:94:11:48:c2:e6:65:0a:03:
                    3a:27:d7:9e:38:8d:ce:a3:df:81:84:86:91:a6:71:
                    d0:51
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                11:AC:0C:A5:0B:68:BF:3E:FF:70:DE:EA:A7:51:15:FF:13:A8:95:5F
            X509v3 Authority Key Identifier:
                keyid:7F:17:8F:AF:64:01:E2:F3:71:6E:31:76:45:69:DF:73:1D:F5:8F:22

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/fxePr2QB4vNxbjF2RWnfcx31jyI.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/66/1b7968-ca4d-45f4-b671-2e7f78489cd3/1/fxePr2QB4vNxbjF2RWnfcx31jyI.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/66/1b7968-ca4d-45f4-b671-2e7f78489cd3/1/fxePr2QB4vNxbjF2RWnfcx31jyI.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         14:5c:03:1f:13:6b:82:74:78:7e:4b:7e:f3:4d:7e:c9:b6:02:
         07:9e:11:b0:29:90:fd:04:2f:df:8c:c5:f7:12:04:63:b5:91:
         1c:5c:36:fe:0d:3b:c1:a9:27:c0:3a:63:8d:36:af:95:b0:5d:
         3e:eb:84:b4:4f:9e:ed:dd:e5:11:1f:bc:92:8c:92:c5:b6:46:
         cc:ef:15:44:03:4f:46:69:32:89:c4:29:57:07:e0:a3:82:c9:
         6b:3b:78:6a:da:30:4b:0a:5b:19:ac:93:73:09:9f:02:ad:3f:
         04:9c:92:85:f1:d2:b2:34:c4:34:ec:fc:51:06:cf:a5:c5:b9:
         da:d3:52:08:da:cf:71:d6:76:59:f2:66:b6:cc:b7:70:7a:fd:
         f8:8c:da:fa:b0:84:44:dc:11:30:44:2a:5b:5b:9c:ce:3e:e9:
         99:04:1e:fc:70:10:e2:67:e6:09:65:e7:e6:cb:7c:64:7e:7b:
         b0:d3:02:89:62:8f:9f:a1:9e:9f:58:87:64:60:98:b4:c8:b6:
         04:a7:2f:04:f2:5b:55:35:31:0b:d8:39:e9:36:c9:50:67:7b:
         36:d9:3d:a5:80:36:f1:f1:6a:ea:d4:db:4b:ff:a3:e9:68:2c:
         30:6b:c2:1c:03:e7:30:10:d6:36:73:30:4e:a4:31:b6:5e:78:
         b1:4f:d6:5b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 14 20:28:41 2025 by rpki-client on console.sobornost.net