Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6e/dafef8-e227-42d3-807f-be810a050944/1/XaWsO7omBTjDM-bIYPI2ASyYZ10.mft
File:                     XaWsO7omBTjDM-bIYPI2ASyYZ10.mft (raw, json)
Hash identifier:          ldrrenWTo5j2NFHt89CLwXphBL6tmxw60OA54A9M46o=
Subject key identifier:   E7:D4:1F:27:DB:92:DB:17:C1:92:93:AD:94:1F:17:35:BB:53:A3:16
Authority key identifier: 5D:A5:AC:3B:BA:26:05:38:C3:33:E6:C8:60:F2:36:01:2C:98:67:5D
Certificate issuer:       /CN=5da5ac3bba260538c333e6c860f236012c98675d
Certificate serial:       01962F3DDC6A138FF5D9FDF07561FF155026
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/XaWsO7omBTjDM-bIYPI2ASyYZ10.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/6e/dafef8-e227-42d3-807f-be810a050944/1/XaWsO7omBTjDM-bIYPI2ASyYZ10.mft
Manifest number:          0F44
Signing time:             Sun 13 Apr 2025 13:01:45 +0000
Manifest this update:     Sun 13 Apr 2025 13:01:45 +0000
Manifest next update:     Mon 14 Apr 2025 13:01:45 +0000
Files and hashes:         1: Lirq-zsF2DJ9HSd8FBwZm-dq_PM.roa (hash: DEsCxQ0UWNIneJAQeHuxPuouMfS+o3gP/21W0HHwfiM=)
                          2: XaWsO7omBTjDM-bIYPI2ASyYZ10.crl (hash: jwesTjrOjiDa3+wb89eJBSNLBMpK8YJx3n0amXVne78=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2f:3d:dc:6a:13:8f:f5:d9:fd:f0:75:61:ff:15:50:26
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5da5ac3bba260538c333e6c860f236012c98675d
        Validity
            Not Before: Apr 13 13:01:45 2025 GMT
            Not After : Apr 14 13:01:45 2025 GMT
        Subject: CN=e7d41f27db92db17c19293ad941f1735bb53a316
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c0:0e:91:40:d0:4a:64:b7:da:6f:75:cf:a0:3b:
                    8e:e5:93:cc:93:ba:31:10:e4:df:51:12:3d:74:a4:
                    d2:43:cf:f3:d5:6b:3b:7c:4d:f5:a7:56:c9:13:72:
                    cb:80:3f:81:6c:a3:82:4d:de:30:54:0e:bd:08:e6:
                    0e:8e:5e:05:8f:69:d0:ae:ff:f8:aa:17:7e:df:5e:
                    b6:be:03:f4:9a:99:2e:75:69:0f:41:5d:6b:88:60:
                    8c:c0:c4:33:f3:72:c7:23:8f:c0:0a:00:0a:11:ab:
                    75:69:2f:7a:db:a1:f4:9b:81:69:b5:34:1e:8b:82:
                    f4:21:57:64:42:88:cb:6e:1e:b8:56:86:db:5d:1a:
                    d2:27:f7:d0:9a:46:41:ca:bd:5b:31:6a:2b:54:60:
                    34:e5:9c:13:c7:62:04:31:24:13:f6:89:1d:1b:49:
                    05:e3:dc:30:02:ee:89:3f:b6:35:c0:ef:34:73:52:
                    d7:98:12:c7:0e:36:6c:6d:c6:2a:90:91:7e:ef:08:
                    8f:84:0a:4f:5f:e8:e5:26:b1:f6:6f:af:8e:98:4d:
                    fb:ba:96:fe:c7:83:ed:c1:0d:4b:07:c7:a6:43:70:
                    35:71:f8:63:a5:d1:54:8b:7f:cb:d5:41:d6:4c:0a:
                    7e:c5:14:1a:45:ce:12:9a:2a:97:50:3e:95:77:e8:
                    d5:8d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E7:D4:1F:27:DB:92:DB:17:C1:92:93:AD:94:1F:17:35:BB:53:A3:16
            X509v3 Authority Key Identifier:
                keyid:5D:A5:AC:3B:BA:26:05:38:C3:33:E6:C8:60:F2:36:01:2C:98:67:5D

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/XaWsO7omBTjDM-bIYPI2ASyYZ10.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6e/dafef8-e227-42d3-807f-be810a050944/1/XaWsO7omBTjDM-bIYPI2ASyYZ10.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/6e/dafef8-e227-42d3-807f-be810a050944/1/XaWsO7omBTjDM-bIYPI2ASyYZ10.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         43:ab:d9:4b:6b:f9:41:08:37:db:b0:68:a3:da:d0:5b:75:8b:
         fb:93:72:32:c9:23:9c:e5:0a:5d:0f:65:85:e7:06:9d:dd:0d:
         bf:fd:7e:c3:07:1c:00:7a:82:c9:5d:db:30:7e:be:5b:c1:a8:
         78:0a:fa:21:4c:12:fd:f7:fa:4b:ac:24:8b:bc:2e:ae:1e:a8:
         3c:a5:67:4e:d1:90:ba:b2:f2:6e:40:99:d5:23:56:4b:a9:db:
         db:9a:d5:07:ca:56:84:83:a6:25:ed:d7:03:a4:09:7a:b5:5a:
         e4:ab:ad:67:06:91:08:7d:8d:47:57:e7:a9:20:0a:0c:c3:b5:
         2e:64:b0:b9:bf:58:aa:d6:96:19:fa:c9:29:d8:71:6e:94:b8:
         3b:0b:ba:7e:48:e8:9e:f2:87:a4:d4:de:26:98:33:33:87:27:
         fd:53:a2:7e:c7:70:e2:03:a7:34:3a:b0:17:88:50:2f:51:50:
         ff:fb:02:e2:90:88:68:3f:8f:b1:de:54:be:ac:27:2c:3d:f2:
         90:da:c1:d9:14:20:70:22:9e:96:85:58:3c:62:4b:9e:61:13:
         29:0d:94:48:3b:63:0b:fd:ae:db:25:6a:a8:42:1a:de:c7:13:
         8d:42:40:3e:d1:5f:63:8f:6e:14:2d:5a:7e:29:e8:6d:28:29:
         36:24:5d:90
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 14 20:28:47 2025 by rpki-client on console.sobornost.net