Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/72/c6d6be-bf4a-43e5-a908-5ca016a10054/1/rKH0cTAkgExEVAOvY_pkSyqTXSQ.mft
File:                     rKH0cTAkgExEVAOvY_pkSyqTXSQ.mft (raw, json)
Hash identifier:          c9ivBNBamtIyvdg+8nyZx7JWyFQCxlbIh6AoVfggxj0=
Subject key identifier:   8F:1D:E0:86:05:10:DE:4F:C6:08:68:12:E2:A1:C3:1E:0E:14:25:83
Authority key identifier: AC:A1:F4:71:30:24:80:4C:44:54:03:AF:63:FA:64:4B:2A:93:5D:24
Certificate issuer:       /CN=aca1f4713024804c445403af63fa644b2a935d24
Certificate serial:       01962ECFE7A43E80BAA054FC4DDAA30CB826
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/rKH0cTAkgExEVAOvY_pkSyqTXSQ.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/72/c6d6be-bf4a-43e5-a908-5ca016a10054/1/rKH0cTAkgExEVAOvY_pkSyqTXSQ.mft
Manifest number:          14F4
Signing time:             Sun 13 Apr 2025 11:01:39 +0000
Manifest this update:     Sun 13 Apr 2025 11:01:39 +0000
Manifest next update:     Mon 14 Apr 2025 11:01:39 +0000
Files and hashes:         1: N8PiG76ntwKAGaSP3YzYnQGkLVI.roa (hash: nUQC/UxGj4cDa5TMObsdW9+d18vToeDUb/QlHw0eCHA=)
                          2: V_r_ROOdvw6x3g5Jz-742T3rIbU.roa (hash: S0q7P5LnXINS1vQh7LQXUQWUqtUOHV0qMrb+2gHbmYs=)
                          3: i44JVxMTVgkMbhmNJMaUgaK-WQI.roa (hash: cxxt5MnNL7SzuLLNZDQp6rhtaTD9wJRJZPKAxjU7gO4=)
                          4: n4Mf2ZoxRDO4Gbl-YZdYsqIz4OI.roa (hash: aS1o0h1e6vPqOWTx/X2krBGlRAa3LkoHQcee6mx6EEg=)
                          5: n5ezRtY4HdRn5eOQaSjM39yuOLw.roa (hash: 7DnT8ONh2IhPxXugcMnND4xb2A+XWyVQLCBzgtEEbM4=)
                          6: rKH0cTAkgExEVAOvY_pkSyqTXSQ.crl (hash: +b2ET9/qzmu4i6X04Dx9bNZFetFopSa3H3Frwo8SsGI=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2e:cf:e7:a4:3e:80:ba:a0:54:fc:4d:da:a3:0c:b8:26
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=aca1f4713024804c445403af63fa644b2a935d24
        Validity
            Not Before: Apr 13 11:01:39 2025 GMT
            Not After : Apr 14 11:01:39 2025 GMT
        Subject: CN=8f1de0860510de4fc6086812e2a1c31e0e142583
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9f:76:ab:44:9b:10:85:9f:98:e3:52:d5:70:37:
                    df:18:23:36:0e:83:ef:4f:f2:64:a5:98:a4:f6:68:
                    80:4a:4f:79:93:b9:fe:f1:99:00:82:6d:77:cb:95:
                    b8:14:e7:2b:a6:a9:80:35:44:5e:d8:29:72:4a:10:
                    c7:7c:e0:96:51:29:e2:69:bb:0d:b2:98:c2:cd:c1:
                    33:06:40:05:71:ec:28:1b:13:7d:0b:d7:e5:f4:17:
                    07:a3:c2:c6:66:50:39:26:3e:99:1d:3a:03:5e:95:
                    69:4a:d3:64:d3:36:13:84:96:16:6e:25:55:49:8c:
                    c6:68:c7:fa:2b:68:a0:2d:57:80:14:db:d1:66:6a:
                    a1:04:4d:0c:22:f0:8f:5f:ae:a6:6d:0d:a9:55:8e:
                    a3:5a:f3:66:8e:6e:f3:98:0d:b0:e1:28:66:d8:bb:
                    55:0d:9a:b0:6f:d8:65:61:88:6e:0f:32:a7:61:f8:
                    ae:65:49:9c:96:83:d5:58:83:69:0f:6f:0b:87:0c:
                    47:33:22:e8:f2:45:0c:c5:fd:87:e8:a8:e1:f7:7f:
                    2d:07:d5:43:3b:f6:bb:f5:c5:24:4f:23:06:92:33:
                    49:ea:ca:47:82:d2:5a:ab:72:af:44:af:45:a9:a9:
                    a6:c0:bf:db:18:2b:b5:72:89:4a:e5:9c:e2:6a:a3:
                    6d:8b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8F:1D:E0:86:05:10:DE:4F:C6:08:68:12:E2:A1:C3:1E:0E:14:25:83
            X509v3 Authority Key Identifier:
                keyid:AC:A1:F4:71:30:24:80:4C:44:54:03:AF:63:FA:64:4B:2A:93:5D:24

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/rKH0cTAkgExEVAOvY_pkSyqTXSQ.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/72/c6d6be-bf4a-43e5-a908-5ca016a10054/1/rKH0cTAkgExEVAOvY_pkSyqTXSQ.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/72/c6d6be-bf4a-43e5-a908-5ca016a10054/1/rKH0cTAkgExEVAOvY_pkSyqTXSQ.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         25:17:8a:de:32:c1:ea:b2:fa:d4:eb:d4:b7:25:7b:43:8c:70:
         d6:e2:dd:38:27:5d:59:ae:b7:d9:f5:f4:c6:04:df:de:f5:05:
         93:43:10:d3:cc:96:a6:97:11:76:91:58:fe:ac:92:e9:2b:f8:
         48:c3:ce:36:cc:76:2b:1d:92:f3:2d:74:2f:a1:2c:56:1b:78:
         2c:b9:c0:a6:29:dc:49:73:03:92:e5:66:4c:f3:0a:3a:ea:49:
         63:5d:94:29:1f:22:10:28:57:a3:fa:72:a6:26:a0:d1:8f:d0:
         64:ef:24:3b:27:42:af:1b:ea:fd:4f:a8:7a:c7:31:69:6e:63:
         0a:eb:21:b7:c7:92:26:97:4c:29:46:a4:f8:a9:59:ff:16:cb:
         6a:57:e2:b0:48:ac:bd:28:9a:e8:c9:4d:2c:7c:b6:d4:66:76:
         6a:23:22:87:64:fd:f4:b5:1b:3f:78:3c:6c:1d:30:5e:32:0d:
         36:5c:a3:99:93:0e:f6:60:23:7b:1a:e4:36:a3:de:ad:f3:49:
         94:83:b2:fb:be:23:13:30:fb:9c:bf:99:7e:f1:dd:18:ab:af:
         bf:df:0b:11:6d:c2:17:57:a8:41:11:54:b2:1d:53:e1:8b:58:
         4b:4d:3b:aa:82:74:6f:24:1e:4a:e6:a8:57:b3:88:67:6a:22:
         9d:7a:26:b4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 14 20:28:55 2025 by rpki-client on console.sobornost.net