Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/76/031100-458a-474e-927c-df027916ce50/1/fNFi3seCCbwDrdCBUn1Usn6E0m4.mft
File:                     fNFi3seCCbwDrdCBUn1Usn6E0m4.mft (raw, json)
Hash identifier:          9JiLapISoS2HzDo7zByuSAne6SIKg1xnunKL6djA5VM=
Subject key identifier:   47:8B:C7:41:EA:07:CE:2F:36:12:1C:1D:59:D3:50:20:E6:43:83:74
Authority key identifier: 7C:D1:62:DE:C7:82:09:BC:03:AD:D0:81:52:7D:54:B2:7E:84:D2:6E
Certificate issuer:       /CN=7cd162dec78209bc03add081527d54b27e84d26e
Certificate serial:       01962F7439A905DBF31F320ECA0D53C2702A
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/fNFi3seCCbwDrdCBUn1Usn6E0m4.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/76/031100-458a-474e-927c-df027916ce50/1/fNFi3seCCbwDrdCBUn1Usn6E0m4.mft
Manifest number:          14EE
Signing time:             Sun 13 Apr 2025 14:01:08 +0000
Manifest this update:     Sun 13 Apr 2025 14:01:08 +0000
Manifest next update:     Mon 14 Apr 2025 14:01:08 +0000
Files and hashes:         1: fNFi3seCCbwDrdCBUn1Usn6E0m4.crl (hash: HdXV4Ei9AwejDDdfIKVG5saSPehILHWWi4IbaQCSI+8=)
                          2: p62St_0MRIeBUvHxqOmIuKO2S0g.roa (hash: V3Cr5hnF6tOsq5Vm2VEjfSqOP5RKmdhFpUZAhs7o/b4=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2f:74:39:a9:05:db:f3:1f:32:0e:ca:0d:53:c2:70:2a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7cd162dec78209bc03add081527d54b27e84d26e
        Validity
            Not Before: Apr 13 14:01:08 2025 GMT
            Not After : Apr 14 14:01:08 2025 GMT
        Subject: CN=478bc741ea07ce2f36121c1d59d35020e6438374
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:af:63:40:66:aa:79:22:7b:be:64:57:36:d6:2d:
                    b1:04:e8:da:a7:b2:e6:f5:6e:eb:0e:fd:7b:b8:42:
                    36:92:b3:bf:91:55:ae:87:80:e1:fa:43:55:02:aa:
                    0e:2d:26:28:43:85:fb:f1:ea:9e:c2:0c:bc:be:6c:
                    ea:a8:0f:66:36:67:62:d7:b2:f6:19:32:44:56:26:
                    e3:a1:eb:bf:db:af:93:1d:3b:c8:ab:50:2a:3a:6c:
                    44:a1:ab:d1:2a:88:cb:98:ec:71:ed:4c:4b:16:30:
                    45:37:2d:79:a8:76:16:40:ac:fd:2a:99:25:53:8a:
                    f0:99:b8:16:a7:c3:76:2c:48:82:dd:c6:af:91:7d:
                    57:b1:9a:24:6e:1d:89:b9:ca:c0:ae:97:c8:22:4d:
                    68:aa:88:67:08:1b:d2:2c:d9:1b:7e:8c:1b:7a:5d:
                    b2:84:98:d6:ba:57:6d:74:a7:a7:b3:55:0f:af:f8:
                    f0:92:2b:c2:04:4d:fe:9c:9f:f9:f9:2a:60:50:ed:
                    c3:eb:81:d2:11:84:81:51:67:01:95:06:d7:40:89:
                    98:38:dd:42:5e:82:6e:55:6b:99:39:7c:00:6e:f4:
                    1b:52:52:a7:7f:1a:05:4c:67:c8:22:27:8c:99:0e:
                    b9:b8:47:73:58:4f:e6:b7:0b:cd:aa:14:97:0f:c0:
                    d3:7b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                47:8B:C7:41:EA:07:CE:2F:36:12:1C:1D:59:D3:50:20:E6:43:83:74
            X509v3 Authority Key Identifier:
                keyid:7C:D1:62:DE:C7:82:09:BC:03:AD:D0:81:52:7D:54:B2:7E:84:D2:6E

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/fNFi3seCCbwDrdCBUn1Usn6E0m4.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/76/031100-458a-474e-927c-df027916ce50/1/fNFi3seCCbwDrdCBUn1Usn6E0m4.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/76/031100-458a-474e-927c-df027916ce50/1/fNFi3seCCbwDrdCBUn1Usn6E0m4.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         a9:64:6f:58:02:eb:a7:60:25:25:15:31:12:e0:82:14:18:7d:
         e3:6d:ab:2b:ba:65:7a:db:29:e5:df:b3:cf:22:27:94:32:ef:
         2e:f5:e8:47:26:47:06:ee:4a:35:58:a7:4c:24:24:25:7e:75:
         fc:d8:45:4b:29:a7:f5:34:7c:2d:d3:c3:3f:0f:81:5b:22:9e:
         89:af:88:ce:cd:61:2c:d8:0c:e5:3b:81:da:df:d4:6b:5c:d4:
         63:b1:28:5c:a9:2b:83:19:74:af:92:5b:74:db:ba:66:2c:7d:
         7e:1d:15:02:84:1f:bf:a1:e9:d3:20:d2:5e:69:c6:45:21:19:
         ab:e5:ed:0c:06:40:74:31:b9:28:b9:48:e7:73:a5:24:1b:cb:
         50:fe:8a:21:32:ff:e9:8b:98:5e:f2:a4:e3:a0:dc:d3:d4:ef:
         b4:ab:83:49:03:5d:7b:3d:ce:91:2a:6b:6b:78:7a:18:6e:1d:
         05:cf:53:ce:d9:d1:47:17:87:6d:8b:a2:0b:15:b8:1c:00:4a:
         f1:11:c1:c4:ae:16:42:e0:67:34:be:ec:06:d0:d2:bf:1e:a6:
         75:dc:16:e9:8f:e5:a7:42:13:1f:ae:36:a7:a5:68:f4:b3:8d:
         d8:13:32:a4:95:21:3f:3f:71:cb:e3:0f:f0:34:07:cd:2c:eb:
         7f:27:26:01
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZYvdDmpBdvzHzIOyg1TwnAqMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDdjZDE2MmRlYzc4MjA5YmMwM2FkZDA4MTUyN2Q1NGIyN2U4
NGQyNmUwHhcNMjUwNDEzMTQwMTA4WhcNMjUwNDE0MTQwMTA4WjAzMTEwLwYDVQQD
Eyg0NzhiYzc0MWVhMDdjZTJmMzYxMjFjMWQ1OWQzNTAyMGU2NDM4Mzc0MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAr2NAZqp5Inu+ZFc21i2xBOjap7Lm
9W7rDv17uEI2krO/kVWuh4Dh+kNVAqoOLSYoQ4X78eqewgy8vmzqqA9mNmdi17L2
GTJEVibjoeu/26+THTvIq1AqOmxEoavRKojLmOxx7UxLFjBFNy15qHYWQKz9Kpkl
U4rwmbgWp8N2LEiC3cavkX1XsZokbh2JucrArpfIIk1oqohnCBvSLNkbfowbel2y
hJjWuldtdKens1UPr/jwkivCBE3+nJ/5+SpgUO3D64HSEYSBUWcBlQbXQImYON1C
XoJuVWuZOXwAbvQbUlKnfxoFTGfIIieMmQ65uEdzWE/mtwvNqhSXD8DTewIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFEeLx0HqB84vNhIcHVnTUCDmQ4N0MB8GA1UdIwQY
MBaAFHzRYt7Hggm8A63QgVJ9VLJ+hNJuMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvZk5GaTNzZUNDYndEcmRDQlVuMVVzbjZFMG00LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC83Ni8wMzExMDAtNDU4YS00NzRlLTkyN2Mt
ZGYwMjc5MTZjZTUwLzEvZk5GaTNzZUNDYndEcmRDQlVuMVVzbjZFMG00Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC83Ni8wMzExMDAtNDU4YS00NzRlLTkyN2MtZGYwMjc5MTZjZTUw
LzEvZk5GaTNzZUNDYndEcmRDQlVuMVVzbjZFMG00LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAqWRvWALr
p2AlJRUxEuCCFBh9422rK7pletsp5d+zzyInlDLvLvXoRyZHBu5KNVinTCQkJX51
/NhFSymn9TR8LdPDPw+BWyKeia+Izs1hLNgM5TuB2t/Ua1zUY7EoXKkrgxl0r5Jb
dNu6Zix9fh0VAoQfv6Hp0yDSXmnGRSEZq+XtDAZAdDG5KLlI53OlJBvLUP6KITL/
6YuYXvKk46Dc09TvtKuDSQNdez3OkSpra3h6GG4dBc9TztnRRxeHbYuiCxW4HABK
8RHBxK4WQuBnNL7sBtDSvx6mddwW6Y/lp0ITH642p6Vo9LON2BMypJUhPz9xy+MP
8DQHzSzrfycmAQ==
-----END CERTIFICATE-----
Generated at Mon Apr 14 20:28:58 2025 by rpki-client on console.sobornost.net