Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/68/c26458-fda8-4f0a-957a-7756438544ca/1/AwsA5gdFAuZTg5H-qxg1goGjJ5s.mft
File:                     AwsA5gdFAuZTg5H-qxg1goGjJ5s.mft (raw, json)
Hash identifier:          8Fcwj2YBd3DiLhi+VGHjid3vgrv1Waj8epbC0U2Clu4=
Subject key identifier:   19:AE:E5:C4:48:AF:D6:14:BC:1D:89:D1:A1:9B:27:9B:6C:30:2D:14
Authority key identifier: 03:0B:00:E6:07:45:02:E6:53:83:91:FE:AB:18:35:82:81:A3:27:9B
Certificate issuer:       /CN=030b00e6074502e6538391feab18358281a3279b
Certificate serial:       01962DF41B8F89E4485C45EFA039ADF172F2
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/AwsA5gdFAuZTg5H-qxg1goGjJ5s.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/68/c26458-fda8-4f0a-957a-7756438544ca/1/AwsA5gdFAuZTg5H-qxg1goGjJ5s.mft
Manifest number:          C2
Signing time:             Sun 13 Apr 2025 07:01:34 +0000
Manifest this update:     Sun 13 Apr 2025 07:01:34 +0000
Manifest next update:     Mon 14 Apr 2025 07:01:34 +0000
Files and hashes:         1: AwsA5gdFAuZTg5H-qxg1goGjJ5s.crl (hash: Y3lc6Omh2BA2QGO4bQlh/ubF+LU7HcTsGl8+lxNm4GQ=)
                          2: uFe0wHxAH2UJDFtywnXN56bE3x8.roa (hash: 9rxLZS+5H9kGmYpmtTMn6ZZUIBXYa1LvDlimXlk6PXU=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2d:f4:1b:8f:89:e4:48:5c:45:ef:a0:39:ad:f1:72:f2
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=030b00e6074502e6538391feab18358281a3279b
        Validity
            Not Before: Apr 13 07:01:34 2025 GMT
            Not After : Apr 14 07:01:34 2025 GMT
        Subject: CN=19aee5c448afd614bc1d89d1a19b279b6c302d14
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c7:2e:a1:75:59:fe:f4:e0:2d:e9:cb:39:d0:8b:
                    ea:f8:27:87:5b:e4:ce:43:86:8a:47:ef:b3:bc:41:
                    95:29:f1:e8:c9:15:47:60:12:3d:11:3b:9f:8a:05:
                    8d:09:e8:b5:3f:b0:0b:69:04:6a:76:4d:15:2d:be:
                    a2:d8:fa:25:ce:42:63:26:64:da:8b:cd:03:f0:12:
                    ac:42:c4:f9:11:f0:7f:eb:49:be:75:6d:e3:fc:4c:
                    78:4d:f6:d0:31:c5:f2:1c:9a:59:48:c3:cb:b8:d3:
                    2c:0c:a9:e9:9e:5f:64:35:88:88:14:a4:60:00:f7:
                    52:19:00:10:58:93:38:a8:45:9b:99:68:d6:9c:3b:
                    db:e2:66:65:bd:c1:91:e1:55:52:3e:a3:7f:cd:39:
                    f8:e6:b1:49:fe:dd:71:35:dd:51:ff:49:29:a7:e8:
                    3b:a7:3f:0c:ce:d2:89:19:d1:2e:90:0d:6e:14:a6:
                    b1:67:35:e5:35:5f:41:66:f3:d2:1a:01:92:60:6a:
                    f0:be:ce:8d:4b:8d:77:8f:6e:83:b1:35:18:fa:73:
                    aa:f3:ff:32:67:62:36:6a:85:e4:93:8b:00:7e:b8:
                    96:d6:b7:02:8c:23:81:2f:ee:e4:fd:67:56:dc:97:
                    d8:09:ea:dc:74:93:df:87:91:19:e4:d6:8e:6a:27:
                    d1:09
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                19:AE:E5:C4:48:AF:D6:14:BC:1D:89:D1:A1:9B:27:9B:6C:30:2D:14
            X509v3 Authority Key Identifier:
                keyid:03:0B:00:E6:07:45:02:E6:53:83:91:FE:AB:18:35:82:81:A3:27:9B

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/AwsA5gdFAuZTg5H-qxg1goGjJ5s.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/68/c26458-fda8-4f0a-957a-7756438544ca/1/AwsA5gdFAuZTg5H-qxg1goGjJ5s.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/68/c26458-fda8-4f0a-957a-7756438544ca/1/AwsA5gdFAuZTg5H-qxg1goGjJ5s.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         7c:fa:b9:c4:02:a1:ea:1f:f6:3c:50:58:1f:b5:07:54:d4:b4:
         80:56:f9:50:9d:5c:33:38:1b:0f:9d:c9:b0:f6:90:c9:c7:7a:
         41:8a:bb:2e:c1:09:fa:8d:90:88:7f:51:b4:a6:58:34:fd:77:
         57:00:d0:33:b4:61:70:db:0f:96:5a:b0:11:d7:92:51:51:d0:
         1e:06:02:c7:43:32:40:d4:df:64:f3:7e:9b:2c:83:16:a3:51:
         ad:ed:08:7a:6d:18:01:c4:e9:3e:ba:e8:5a:0d:09:93:2c:56:
         e1:87:23:2d:b9:6b:77:72:f8:66:d5:06:bf:14:13:ff:f8:fd:
         2d:ae:69:7f:2c:bc:b5:9a:20:5c:c2:0a:17:82:bb:79:c1:4f:
         ee:f2:52:38:e6:5e:66:54:56:44:7e:73:1c:a9:ae:38:8a:36:
         28:ae:80:b9:08:15:21:63:80:8a:7f:5e:e5:cc:0b:ac:5b:d4:
         1a:65:91:ac:62:9e:74:68:ad:4d:49:81:d7:a4:31:13:a5:6c:
         00:0e:90:d7:50:bb:f9:a8:45:16:b1:bf:dc:ae:45:1f:f2:b1:
         13:7b:23:5d:5c:df:78:e0:f9:fd:1d:32:71:ae:06:e2:6f:b1:
         1a:19:68:7e:61:93:eb:22:9c:c5:8a:df:64:33:d2:51:fd:01:
         59:c0:ad:f2
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZYt9BuPieRIXEXvoDmt8XLyMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDAzMGIwMGU2MDc0NTAyZTY1MzgzOTFmZWFiMTgzNTgyODFh
MzI3OWIwHhcNMjUwNDEzMDcwMTM0WhcNMjUwNDE0MDcwMTM0WjAzMTEwLwYDVQQD
EygxOWFlZTVjNDQ4YWZkNjE0YmMxZDg5ZDFhMTliMjc5YjZjMzAyZDE0MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxy6hdVn+9OAt6cs50Ivq+CeHW+TO
Q4aKR++zvEGVKfHoyRVHYBI9ETufigWNCei1P7ALaQRqdk0VLb6i2PolzkJjJmTa
i80D8BKsQsT5EfB/60m+dW3j/Ex4TfbQMcXyHJpZSMPLuNMsDKnpnl9kNYiIFKRg
APdSGQAQWJM4qEWbmWjWnDvb4mZlvcGR4VVSPqN/zTn45rFJ/t1xNd1R/0kpp+g7
pz8MztKJGdEukA1uFKaxZzXlNV9BZvPSGgGSYGrwvs6NS413j26DsTUY+nOq8/8y
Z2I2aoXkk4sAfriW1rcCjCOBL+7k/WdW3JfYCercdJPfh5EZ5NaOaifRCQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFBmu5cRIr9YUvB2J0aGbJ5tsMC0UMB8GA1UdIwQY
MBaAFAMLAOYHRQLmU4OR/qsYNYKBoyebMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvQXdzQTVnZEZBdVpUZzVILXF4ZzFnb0dqSjVzLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82OC9jMjY0NTgtZmRhOC00ZjBhLTk1N2Et
Nzc1NjQzODU0NGNhLzEvQXdzQTVnZEZBdVpUZzVILXF4ZzFnb0dqSjVzLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC82OC9jMjY0NTgtZmRhOC00ZjBhLTk1N2EtNzc1NjQzODU0NGNh
LzEvQXdzQTVnZEZBdVpUZzVILXF4ZzFnb0dqSjVzLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAfPq5xAKh
6h/2PFBYH7UHVNS0gFb5UJ1cMzgbD53JsPaQycd6QYq7LsEJ+o2QiH9RtKZYNP13
VwDQM7RhcNsPllqwEdeSUVHQHgYCx0MyQNTfZPN+myyDFqNRre0Iem0YAcTpPrro
Wg0JkyxW4YcjLblrd3L4ZtUGvxQT//j9La5pfyy8tZogXMIKF4K7ecFP7vJSOOZe
ZlRWRH5zHKmuOIo2KK6AuQgVIWOAin9e5cwLrFvUGmWRrGKedGitTUmB16QxE6Vs
AA6Q11C7+ahFFrG/3K5FH/KxE3sjXVzfeOD5/R0yca4G4m+xGhlofmGT6yKcxYrf
ZDPSUf0BWcCt8g==
-----END CERTIFICATE-----
Generated at Mon Apr 14 20:28:43 2025 by rpki-client on console.sobornost.net