Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6c/533416-5192-4944-ab50-813c76ff40b4/1/tUXkNLukc3BtqDNv2gFrsuaLNiM.mft
File:                     tUXkNLukc3BtqDNv2gFrsuaLNiM.mft (raw, json)
Hash identifier:          440rqErUD3lEOMP5QoDzu5xqYYQmZiyL4m3Adtpz1H4=
Subject key identifier:   64:14:79:79:C8:78:2C:BD:D5:2A:BE:A5:5A:C9:06:1E:88:8A:42:45
Authority key identifier: B5:45:E4:34:BB:A4:73:70:6D:A8:33:6F:DA:01:6B:B2:E6:8B:36:23
Certificate issuer:       /CN=b545e434bba473706da8336fda016bb2e68b3623
Certificate serial:       01962E61FD2B668E89C5E19D97BF24914DFD
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/tUXkNLukc3BtqDNv2gFrsuaLNiM.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/6c/533416-5192-4944-ab50-813c76ff40b4/1/tUXkNLukc3BtqDNv2gFrsuaLNiM.mft
Manifest number:          14EA
Signing time:             Sun 13 Apr 2025 09:01:35 +0000
Manifest this update:     Sun 13 Apr 2025 09:01:35 +0000
Manifest next update:     Mon 14 Apr 2025 09:01:35 +0000
Files and hashes:         1: 8c1jWLNSWx4cTuK9ZEnAPJAmwwU.roa (hash: zNldb7jsDCF4ycQz0X2hLLJLeALZnhbBqN35ToOj1oI=)
                          2: tUXkNLukc3BtqDNv2gFrsuaLNiM.crl (hash: hxKlBxi72d/iILp8NYlMbXzuty5xfZlJzQ5A5CswJgk=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2e:61:fd:2b:66:8e:89:c5:e1:9d:97:bf:24:91:4d:fd
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b545e434bba473706da8336fda016bb2e68b3623
        Validity
            Not Before: Apr 13 09:01:35 2025 GMT
            Not After : Apr 14 09:01:35 2025 GMT
        Subject: CN=64147979c8782cbdd52abea55ac9061e888a4245
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bf:7a:fc:65:d1:80:49:9d:22:d7:d5:de:6b:6a:
                    03:c5:62:d7:b4:95:2b:96:ce:51:7a:58:c6:83:31:
                    d8:75:47:21:90:4e:7d:ca:df:f7:bc:a1:90:31:8c:
                    0b:14:f7:9d:6a:c8:33:89:5e:55:72:74:ef:3c:f0:
                    54:8d:8a:86:25:94:ee:58:98:94:b5:8f:72:7c:b3:
                    63:8b:02:48:c3:40:7d:3e:a9:15:cc:0d:8e:a7:9b:
                    38:94:4a:8c:dd:59:6b:a9:07:af:9d:70:1b:39:4a:
                    4f:0f:8b:29:03:dd:95:11:04:22:ac:40:48:4e:cc:
                    fe:d4:65:7d:54:cd:b1:1d:5b:f4:38:91:0d:cd:6f:
                    84:81:14:da:b4:94:72:ab:ba:16:7b:ee:f5:c0:f7:
                    7d:b6:52:f4:75:2d:27:b8:2d:f7:12:13:17:83:cc:
                    71:99:d5:a4:f4:29:3c:b7:fe:ea:14:f4:28:89:2e:
                    2e:f9:c8:6a:cf:eb:c7:b0:c4:19:06:43:ee:d8:e9:
                    63:6b:83:2e:48:61:3e:6f:c8:b3:b6:53:38:fe:fe:
                    3a:27:88:db:51:c3:17:b9:77:dc:93:c5:94:1d:36:
                    61:1d:62:7b:4a:c6:86:d3:b9:39:9c:c1:5e:d4:60:
                    a4:42:46:a5:61:c3:7f:a9:77:b8:14:7b:7d:c7:f7:
                    30:db
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                64:14:79:79:C8:78:2C:BD:D5:2A:BE:A5:5A:C9:06:1E:88:8A:42:45
            X509v3 Authority Key Identifier:
                keyid:B5:45:E4:34:BB:A4:73:70:6D:A8:33:6F:DA:01:6B:B2:E6:8B:36:23

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/tUXkNLukc3BtqDNv2gFrsuaLNiM.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6c/533416-5192-4944-ab50-813c76ff40b4/1/tUXkNLukc3BtqDNv2gFrsuaLNiM.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/6c/533416-5192-4944-ab50-813c76ff40b4/1/tUXkNLukc3BtqDNv2gFrsuaLNiM.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         14:96:46:7b:80:d5:7c:c7:c2:47:dd:a8:5e:0e:47:7a:94:2c:
         6e:37:fd:f8:00:f5:75:49:2b:1c:ae:55:00:a8:5e:be:69:ab:
         ff:83:02:13:6d:50:f9:a4:e4:81:a9:c8:8d:32:92:1b:47:ee:
         be:ca:e1:87:19:a7:83:de:73:8a:9f:db:68:9d:28:e3:07:16:
         e1:10:ca:8e:2e:29:99:a7:e3:bd:16:24:fb:1f:14:d8:68:bf:
         2b:fd:1e:c8:88:50:ed:72:81:bb:d5:c2:fc:ac:65:89:da:ec:
         75:11:2b:74:19:21:31:58:6a:ce:35:61:fd:64:1c:95:8a:a9:
         05:39:5b:22:ea:df:73:af:ee:a0:e2:7f:2b:4c:9f:52:ab:35:
         e6:f4:1b:f1:c2:75:d5:ae:ae:86:65:2a:ee:3d:58:78:a8:19:
         14:ca:d9:29:28:d6:4b:e7:f9:6d:3b:5c:04:e0:4c:5e:8a:8e:
         32:20:13:a4:45:6e:c7:ec:ae:df:f1:f7:9a:f0:81:f5:c3:f2:
         48:5b:0f:7b:a1:32:62:f9:35:e1:0e:20:af:a7:28:bb:2c:cc:
         d8:b8:76:85:84:87:fe:5d:de:06:fd:3c:14:55:3a:bc:7d:c1:
         22:5d:9e:f5:70:28:47:f0:8a:8e:a7:57:e2:9f:e7:f7:11:71:
         52:f5:29:33
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 14 20:28:46 2025 by rpki-client on console.sobornost.net