Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/71/e82d2a-4041-4811-87a5-783469269b35/1/SvrK0nmIVvDwZaJloQlwaUGsqOo.mft
File:                     SvrK0nmIVvDwZaJloQlwaUGsqOo.mft (raw, json)
Hash identifier:          cjmSlYYHbEIjbQmHadUqf6epK4JKBcLggeSNOS392q4=
Subject key identifier:   FB:58:01:06:3E:DA:A6:9A:DE:DB:02:BA:AA:A3:ED:A8:80:77:60:93
Authority key identifier: 4A:FA:CA:D2:79:88:56:F0:F0:65:A2:65:A1:09:70:69:41:AC:A8:EA
Certificate issuer:       /CN=4afacad2798856f0f065a265a109706941aca8ea
Certificate serial:       01962E987A31D7C17D4516E27381E5560218
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/SvrK0nmIVvDwZaJloQlwaUGsqOo.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/71/e82d2a-4041-4811-87a5-783469269b35/1/SvrK0nmIVvDwZaJloQlwaUGsqOo.mft
Manifest number:          1083
Signing time:             Sun 13 Apr 2025 10:01:06 +0000
Manifest this update:     Sun 13 Apr 2025 10:01:06 +0000
Manifest next update:     Mon 14 Apr 2025 10:01:06 +0000
Files and hashes:         1: SvrK0nmIVvDwZaJloQlwaUGsqOo.crl (hash: fBgwYlMQhw4/7dnY4L2ks+BVF4BSjzL3/+kNgK8gWkw=)
                          2: rKZbB3iW2mhQrV3B7dzkdgnj7Hg.roa (hash: bzWIX1UDDDSaemHwck5e4pimDCRd9S56ZPwPBB+GA2A=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2e:98:7a:31:d7:c1:7d:45:16:e2:73:81:e5:56:02:18
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4afacad2798856f0f065a265a109706941aca8ea
        Validity
            Not Before: Apr 13 10:01:06 2025 GMT
            Not After : Apr 14 10:01:06 2025 GMT
        Subject: CN=fb5801063edaa69adedb02baaaa3eda880776093
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:95:a4:92:55:fa:bc:32:6d:0d:86:07:21:55:ca:
                    9c:25:55:93:99:a1:fc:d0:de:4d:4f:0c:41:9a:4a:
                    02:15:c9:eb:e7:a6:6c:ce:04:b5:df:22:13:b8:c7:
                    e8:0e:3b:84:3c:40:62:58:f2:8a:cd:0e:45:9b:7d:
                    f1:cc:c7:34:82:ff:c2:a8:52:80:38:c3:a5:0d:39:
                    81:b3:f1:da:e6:f9:09:aa:7d:34:89:f9:6a:94:68:
                    35:65:be:81:23:72:5e:92:b5:62:40:39:28:85:81:
                    62:7f:17:1e:89:b7:bc:d4:97:73:94:0c:c7:fe:2f:
                    d4:bf:55:3d:0f:12:c9:e5:3f:76:a0:28:16:24:06:
                    9f:18:b7:83:7a:31:4c:8c:7c:3a:9f:0e:d1:f8:2b:
                    fc:6c:25:c3:f8:a3:f2:6f:f9:f3:26:f2:7d:73:7a:
                    f2:d8:14:90:f8:5e:75:52:da:b9:4c:68:f8:35:19:
                    d8:3b:12:35:cb:c6:81:58:26:60:ac:68:3d:9c:6d:
                    a5:de:59:0c:78:a1:ae:22:3c:74:00:fc:6b:b7:3f:
                    38:37:e3:16:9f:2c:56:4a:55:c7:f6:5c:54:38:13:
                    56:1f:0e:da:9f:96:86:a6:13:d7:20:5a:aa:8c:b6:
                    df:2d:e8:eb:9c:48:1e:58:ad:16:46:7f:bf:14:e0:
                    a4:bd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FB:58:01:06:3E:DA:A6:9A:DE:DB:02:BA:AA:A3:ED:A8:80:77:60:93
            X509v3 Authority Key Identifier:
                keyid:4A:FA:CA:D2:79:88:56:F0:F0:65:A2:65:A1:09:70:69:41:AC:A8:EA

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/SvrK0nmIVvDwZaJloQlwaUGsqOo.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/71/e82d2a-4041-4811-87a5-783469269b35/1/SvrK0nmIVvDwZaJloQlwaUGsqOo.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/71/e82d2a-4041-4811-87a5-783469269b35/1/SvrK0nmIVvDwZaJloQlwaUGsqOo.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         99:ae:22:0e:0b:82:4a:fd:fa:b1:1c:d2:14:17:91:26:f9:15:
         6f:b4:7a:99:02:4b:c5:ab:b9:4a:06:ca:a4:ce:9e:6b:e0:05:
         b2:2e:bf:5a:bc:18:2a:3b:4c:0c:e1:3d:00:2b:29:75:ef:cc:
         08:8d:16:9e:48:c9:19:c9:c2:28:9c:bb:76:e0:da:77:25:2f:
         30:45:ab:f9:e0:45:17:4c:64:b7:02:40:4f:13:4e:96:0b:6e:
         3d:c2:06:d9:78:41:93:b1:c5:eb:cd:ec:1f:07:4c:aa:c6:28:
         5a:2c:da:71:f2:34:25:6f:5f:d5:9b:60:40:0b:ea:97:b2:a0:
         78:15:03:1d:65:43:c9:09:a6:6c:03:b6:e6:c0:cd:0c:4f:40:
         fd:3a:33:7c:b1:12:86:65:c0:d8:18:f8:be:35:27:66:a4:00:
         9b:4f:c3:ba:a5:d2:62:9c:65:c5:1a:3f:25:c9:8d:c2:90:59:
         f6:1e:41:65:f1:90:43:c2:22:ef:80:24:dc:99:1a:6b:00:0c:
         1e:64:05:a6:28:ec:e7:ef:b7:5d:e5:a0:34:a3:02:10:6a:12:
         4d:51:20:9d:62:b0:1c:75:34:7d:4f:9b:73:a8:d5:6b:cd:f0:
         46:9e:e4:62:76:95:50:72:0c:f9:db:83:e2:0b:06:d4:bb:3a:
         00:22:8f:ff
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZYumHox18F9RRbic4HlVgIYMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDRhZmFjYWQyNzk4ODU2ZjBmMDY1YTI2NWExMDk3MDY5NDFh
Y2E4ZWEwHhcNMjUwNDEzMTAwMTA2WhcNMjUwNDE0MTAwMTA2WjAzMTEwLwYDVQQD
EyhmYjU4MDEwNjNlZGFhNjlhZGVkYjAyYmFhYWEzZWRhODgwNzc2MDkzMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlaSSVfq8Mm0NhgchVcqcJVWTmaH8
0N5NTwxBmkoCFcnr56ZszgS13yITuMfoDjuEPEBiWPKKzQ5Fm33xzMc0gv/CqFKA
OMOlDTmBs/Ha5vkJqn00iflqlGg1Zb6BI3JekrViQDkohYFifxceibe81JdzlAzH
/i/Uv1U9DxLJ5T92oCgWJAafGLeDejFMjHw6nw7R+Cv8bCXD+KPyb/nzJvJ9c3ry
2BSQ+F51Utq5TGj4NRnYOxI1y8aBWCZgrGg9nG2l3lkMeKGuIjx0APxrtz84N+MW
nyxWSlXH9lxUOBNWHw7an5aGphPXIFqqjLbfLejrnEgeWK0WRn+/FOCkvQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFPtYAQY+2qaa3tsCuqqj7aiAd2CTMB8GA1UdIwQY
MBaAFEr6ytJ5iFbw8GWiZaEJcGlBrKjqMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvU3ZySzBubUlWdkR3WmFKbG9RbHdhVUdzcU9vLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC83MS9lODJkMmEtNDA0MS00ODExLTg3YTUt
NzgzNDY5MjY5YjM1LzEvU3ZySzBubUlWdkR3WmFKbG9RbHdhVUdzcU9vLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC83MS9lODJkMmEtNDA0MS00ODExLTg3YTUtNzgzNDY5MjY5YjM1
LzEvU3ZySzBubUlWdkR3WmFKbG9RbHdhVUdzcU9vLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAma4iDguC
Sv36sRzSFBeRJvkVb7R6mQJLxau5SgbKpM6ea+AFsi6/WrwYKjtMDOE9ACspde/M
CI0WnkjJGcnCKJy7duDadyUvMEWr+eBFF0xktwJATxNOlgtuPcIG2XhBk7HF683s
HwdMqsYoWizacfI0JW9f1ZtgQAvql7KgeBUDHWVDyQmmbAO25sDNDE9A/TozfLES
hmXA2Bj4vjUnZqQAm0/DuqXSYpxlxRo/JcmNwpBZ9h5BZfGQQ8Ii74Ak3JkaawAM
HmQFpijs5++3XeWgNKMCEGoSTVEgnWKwHHU0fU+bc6jVa83wRp7kYnaVUHIM+duD
4gsG1Ls6ACKP/w==
-----END CERTIFICATE-----
Generated at Mon Apr 14 20:28:54 2025 by rpki-client on console.sobornost.net