Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6f/edc17a-427f-40bf-9ff4-be2b3eab4d74/1/jzZAFzNC-uiz0sjMH5td3RSUiT8.mft
File:                     jzZAFzNC-uiz0sjMH5td3RSUiT8.mft (raw, json)
Hash identifier:          lfxku9hQmvY+xDtvqDTyb+8yDi0xNOSz/fS0GgUc2WI=
Subject key identifier:   1D:C7:A5:1D:1B:5B:92:0C:B9:61:A6:50:20:C8:90:F6:E5:F1:8F:C6
Authority key identifier: 8F:36:40:17:33:42:FA:E8:B3:D2:C8:CC:1F:9B:5D:DD:14:94:89:3F
Certificate issuer:       /CN=8f3640173342fae8b3d2c8cc1f9b5ddd1494893f
Certificate serial:       01962E2B546CB6750B64BB706BE9F4E0BC49
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/jzZAFzNC-uiz0sjMH5td3RSUiT8.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/6f/edc17a-427f-40bf-9ff4-be2b3eab4d74/1/jzZAFzNC-uiz0sjMH5td3RSUiT8.mft
Manifest number:          12B2
Signing time:             Sun 13 Apr 2025 08:01:53 +0000
Manifest this update:     Sun 13 Apr 2025 08:01:53 +0000
Manifest next update:     Mon 14 Apr 2025 08:01:53 +0000
Files and hashes:         1: NS4aUYlRSBiLTkLyyg7u-X42X1Q.roa (hash: r06qcWYpFC8YgZh35Sp5HzeJjcmGRBfHKZK7KBnJFGA=)
                          2: jzZAFzNC-uiz0sjMH5td3RSUiT8.crl (hash: yrC6xAw5IbQUV8OaQQHNz8shud9qdOwDFkMzlkexcwg=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2e:2b:54:6c:b6:75:0b:64:bb:70:6b:e9:f4:e0:bc:49
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8f3640173342fae8b3d2c8cc1f9b5ddd1494893f
        Validity
            Not Before: Apr 13 08:01:53 2025 GMT
            Not After : Apr 14 08:01:53 2025 GMT
        Subject: CN=1dc7a51d1b5b920cb961a65020c890f6e5f18fc6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9e:42:f5:43:6d:7e:1c:a8:2a:f0:e3:3d:3f:a5:
                    a5:c5:33:d0:9d:1d:fb:5e:5b:5b:b7:75:d9:1c:2a:
                    b8:ad:d1:1a:e0:2f:99:c9:3d:c5:20:c5:1a:b6:0d:
                    bd:d1:2b:fa:ee:20:c6:94:16:53:02:6d:13:7b:cc:
                    54:e2:73:59:f8:b7:0f:85:e0:a1:d6:9a:53:3c:8f:
                    dc:b5:1d:02:95:11:b7:9a:0a:90:f5:84:55:b6:16:
                    88:da:5c:3e:a2:88:b7:bb:15:9c:eb:46:6b:c7:f2:
                    52:dc:3d:78:8f:2c:ce:c1:bd:a5:1b:50:80:f1:93:
                    21:f8:35:3b:de:b6:fd:a5:ad:dd:df:f5:79:96:88:
                    cd:fa:60:ff:09:a6:34:6c:c5:fd:d7:1b:ba:d5:a6:
                    df:b1:91:78:f7:2b:d4:13:8b:14:97:99:04:a7:5d:
                    34:21:bd:54:3d:73:c8:57:53:0a:46:83:6b:82:d2:
                    ff:0d:2d:32:8c:fd:b1:bb:45:16:c3:d2:54:93:11:
                    be:e8:93:67:5b:be:c7:7d:e6:d8:59:fc:9b:7a:4b:
                    8c:22:71:ec:14:3d:05:bf:97:24:2c:79:57:8c:28:
                    03:10:c2:46:82:85:22:2c:c3:dc:e8:ec:d7:29:e4:
                    c7:d9:43:27:58:3f:1b:54:09:3a:90:22:53:a0:80:
                    5c:f9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1D:C7:A5:1D:1B:5B:92:0C:B9:61:A6:50:20:C8:90:F6:E5:F1:8F:C6
            X509v3 Authority Key Identifier:
                keyid:8F:36:40:17:33:42:FA:E8:B3:D2:C8:CC:1F:9B:5D:DD:14:94:89:3F

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/jzZAFzNC-uiz0sjMH5td3RSUiT8.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6f/edc17a-427f-40bf-9ff4-be2b3eab4d74/1/jzZAFzNC-uiz0sjMH5td3RSUiT8.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/6f/edc17a-427f-40bf-9ff4-be2b3eab4d74/1/jzZAFzNC-uiz0sjMH5td3RSUiT8.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         89:68:1a:ef:59:bd:ad:46:4a:f9:0f:66:3c:5b:c9:d4:57:52:
         4a:16:35:91:8a:b6:04:57:34:71:8e:8c:9a:7d:c9:10:08:1e:
         64:01:a0:9d:b9:fa:11:56:2c:f3:12:6b:af:e7:92:7c:7f:43:
         6d:3f:f7:dc:dc:a9:bf:8c:1b:4a:db:7c:21:a0:60:76:ce:f3:
         7a:a6:ec:c2:e6:50:44:fe:c7:19:e3:b6:85:a5:a9:1a:b1:04:
         6d:0a:a1:fa:b9:0e:f1:a0:de:bc:f2:1e:57:5f:48:c9:45:b7:
         20:5c:71:06:79:db:2d:0a:f0:fd:23:b9:5d:ce:2e:5e:6b:25:
         27:28:79:e9:be:83:dc:ee:56:a1:e6:d8:d4:ab:96:62:cb:11:
         56:a3:a8:18:e1:f0:2d:3e:8a:77:e1:b2:38:c4:ff:f3:e3:ae:
         2e:aa:a3:e7:af:35:c3:26:59:b7:8a:70:fc:8e:85:e8:98:97:
         9d:8a:e6:b0:76:2e:59:5f:fa:07:95:c4:a6:a9:6f:3e:6d:15:
         3e:60:04:ef:21:93:ad:c5:47:18:0c:a8:13:95:49:f6:f1:db:
         54:80:2e:21:a1:e8:8e:b3:5d:4a:2d:3b:79:61:dc:d6:38:f4:
         b0:c2:47:2e:48:f8:42:be:7a:53:3c:07:4d:73:a0:5b:ce:c7:
         65:a6:2a:0f
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZYuK1RstnULZLtwa+n04LxJMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDhmMzY0MDE3MzM0MmZhZThiM2QyYzhjYzFmOWI1ZGRkMTQ5
NDg5M2YwHhcNMjUwNDEzMDgwMTUzWhcNMjUwNDE0MDgwMTUzWjAzMTEwLwYDVQQD
EygxZGM3YTUxZDFiNWI5MjBjYjk2MWE2NTAyMGM4OTBmNmU1ZjE4ZmM2MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnkL1Q21+HKgq8OM9P6WlxTPQnR37
Xltbt3XZHCq4rdEa4C+ZyT3FIMUatg290Sv67iDGlBZTAm0Te8xU4nNZ+LcPheCh
1ppTPI/ctR0ClRG3mgqQ9YRVthaI2lw+ooi3uxWc60Zrx/JS3D14jyzOwb2lG1CA
8ZMh+DU73rb9pa3d3/V5lojN+mD/CaY0bMX91xu61abfsZF49yvUE4sUl5kEp100
Ib1UPXPIV1MKRoNrgtL/DS0yjP2xu0UWw9JUkxG+6JNnW77HfebYWfybekuMInHs
FD0Fv5ckLHlXjCgDEMJGgoUiLMPc6OzXKeTH2UMnWD8bVAk6kCJToIBc+QIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFB3HpR0bW5IMuWGmUCDIkPbl8Y/GMB8GA1UdIwQY
MBaAFI82QBczQvros9LIzB+bXd0UlIk/MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvanpaQUZ6TkMtdWl6MHNqTUg1dGQzUlNVaVQ4LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82Zi9lZGMxN2EtNDI3Zi00MGJmLTlmZjQt
YmUyYjNlYWI0ZDc0LzEvanpaQUZ6TkMtdWl6MHNqTUg1dGQzUlNVaVQ4Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC82Zi9lZGMxN2EtNDI3Zi00MGJmLTlmZjQtYmUyYjNlYWI0ZDc0
LzEvanpaQUZ6TkMtdWl6MHNqTUg1dGQzUlNVaVQ4LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAiWga71m9
rUZK+Q9mPFvJ1FdSShY1kYq2BFc0cY6Mmn3JEAgeZAGgnbn6EVYs8xJrr+eSfH9D
bT/33Nypv4wbStt8IaBgds7zeqbswuZQRP7HGeO2haWpGrEEbQqh+rkO8aDevPIe
V19IyUW3IFxxBnnbLQrw/SO5Xc4uXmslJyh56b6D3O5WoebY1KuWYssRVqOoGOHw
LT6Kd+GyOMT/8+OuLqqj5681wyZZt4pw/I6F6JiXnYrmsHYuWV/6B5XEpqlvPm0V
PmAE7yGTrcVHGAyoE5VJ9vHbVIAuIaHojrNdSi07eWHc1jj0sMJHLkj4Qr56UzwH
TXOgW87HZaYqDw==
-----END CERTIFICATE-----
Generated at Mon Apr 14 20:28:48 2025 by rpki-client on console.sobornost.net