Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/70/f1c375-41da-4ea6-acd1-09bc92d4ed96/1/bd1C_9t-gncCPxAZtVT-sZ9cPyM.mft
File:                     bd1C_9t-gncCPxAZtVT-sZ9cPyM.mft (raw, json)
Hash identifier:          Ji3+v/LLkGmvYVnJwF6PIG1fj8f2jyFN16Fzz9JHzsE=
Subject key identifier:   83:19:65:88:30:E7:A1:91:06:92:80:6A:33:E5:47:1C:71:B4:E7:55
Authority key identifier: 6D:DD:42:FF:DB:7E:82:77:02:3F:10:19:B5:54:FE:B1:9F:5C:3F:23
Certificate issuer:       /CN=6ddd42ffdb7e8277023f1019b554feb19f5c3f23
Certificate serial:       01962E98DD870F43874377B22739874475CA
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/bd1C_9t-gncCPxAZtVT-sZ9cPyM.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/70/f1c375-41da-4ea6-acd1-09bc92d4ed96/1/bd1C_9t-gncCPxAZtVT-sZ9cPyM.mft
Manifest number:          0361
Signing time:             Sun 13 Apr 2025 10:01:32 +0000
Manifest this update:     Sun 13 Apr 2025 10:01:32 +0000
Manifest next update:     Mon 14 Apr 2025 10:01:32 +0000
Files and hashes:         1: KNlHZhzvj3c5evx_WYZ3PPymDMg.roa (hash: VIooQbblCXzCvlc89EdzqvODc1G/is8eypm36M8wtX0=)
                          2: bd1C_9t-gncCPxAZtVT-sZ9cPyM.crl (hash: x7DuCuLb6GLCvqHO4UF71xzADG/QgWfGwaJhmnQUt9M=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2e:98:dd:87:0f:43:87:43:77:b2:27:39:87:44:75:ca
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6ddd42ffdb7e8277023f1019b554feb19f5c3f23
        Validity
            Not Before: Apr 13 10:01:32 2025 GMT
            Not After : Apr 14 10:01:32 2025 GMT
        Subject: CN=8319658830e7a1910692806a33e5471c71b4e755
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a0:37:f3:c4:41:e7:f0:b5:c0:cc:89:9c:fc:99:
                    12:16:af:42:14:27:2e:ad:a6:88:f6:13:60:4c:29:
                    f4:13:ed:7e:33:d5:bc:65:0c:61:19:ee:f6:50:fe:
                    b5:96:77:91:c8:be:64:98:fb:dd:b1:1f:73:d9:77:
                    ff:34:9c:1a:f6:99:75:d5:39:83:65:67:73:7a:37:
                    34:96:2d:c8:ed:9c:4c:1b:fe:eb:f2:42:86:9c:fb:
                    b3:c7:e8:b5:15:c5:c8:6b:d3:2e:c2:99:04:f0:87:
                    1e:2b:aa:0c:22:67:1b:c8:b9:4a:1a:71:ce:16:ec:
                    8c:59:db:3b:9c:dd:fd:01:80:61:07:fd:08:49:8f:
                    87:f7:0f:f3:ea:f5:e5:95:4c:21:aa:c1:de:d9:14:
                    45:6e:ff:ab:99:23:1a:6f:17:27:b1:be:5f:e2:6d:
                    a0:eb:63:c2:83:12:19:c0:0b:6d:97:3c:61:7a:e2:
                    8d:c9:3f:64:08:64:10:3f:d6:85:43:19:d0:6d:67:
                    17:a4:2f:02:ef:db:fb:a2:35:4c:a1:d8:7d:8d:f2:
                    39:0e:38:61:4c:6f:5e:64:b0:70:fa:d2:dd:ea:31:
                    86:a7:35:ff:04:80:63:49:d3:3e:a7:ce:c5:5e:c6:
                    98:04:b8:9b:c3:d2:a8:60:89:06:52:81:94:cd:44:
                    90:4f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                83:19:65:88:30:E7:A1:91:06:92:80:6A:33:E5:47:1C:71:B4:E7:55
            X509v3 Authority Key Identifier:
                keyid:6D:DD:42:FF:DB:7E:82:77:02:3F:10:19:B5:54:FE:B1:9F:5C:3F:23

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/bd1C_9t-gncCPxAZtVT-sZ9cPyM.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/70/f1c375-41da-4ea6-acd1-09bc92d4ed96/1/bd1C_9t-gncCPxAZtVT-sZ9cPyM.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/70/f1c375-41da-4ea6-acd1-09bc92d4ed96/1/bd1C_9t-gncCPxAZtVT-sZ9cPyM.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         4a:42:34:9f:28:2e:74:9d:08:cf:2f:f8:18:00:65:4c:81:2d:
         da:6f:b3:ac:33:42:1f:ff:cf:8d:93:8d:9c:bc:dd:fd:27:b2:
         b8:f5:78:d0:cc:0c:08:98:c1:83:89:e5:9d:8f:d4:5b:24:37:
         05:67:ca:fd:3b:97:9d:23:bb:6e:1e:23:fd:5d:6f:b2:f6:e9:
         a2:d0:9d:e7:37:15:07:7f:8b:f9:c9:35:b9:08:86:0e:2d:b1:
         e5:41:da:91:c0:15:a1:f3:6d:0c:d1:7b:a2:ef:46:c7:d4:0b:
         3b:5e:bb:e5:f0:43:4f:3b:e1:b9:4c:c2:0f:10:d3:1e:4b:5a:
         e1:b8:4d:9d:ba:65:b6:4c:5d:94:1c:2d:2d:b3:0e:46:ff:2e:
         37:dc:e4:4d:c4:9d:e9:56:9a:4d:48:f2:26:c3:ef:51:34:82:
         c1:3f:9d:7a:b2:b6:60:b7:0d:a3:d1:8d:cb:9e:6b:17:a7:14:
         da:d7:5a:d6:44:27:2d:f2:8e:80:80:7b:e9:2b:5c:f7:7e:e6:
         be:4a:5a:42:da:d1:f2:7c:be:a9:9f:7a:1a:5e:ad:0c:2e:f6:
         4f:19:18:28:90:cd:61:25:00:1f:90:02:eb:03:69:f1:cd:23:
         0b:39:e6:a3:73:06:33:75:5b:6c:50:37:6e:d2:b6:5d:f9:ef:
         94:e8:15:93
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 14 20:28:53 2025 by rpki-client on console.sobornost.net