Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/76/971558-ed66-4b83-8fa4-d4a4f34717f0/1/4-oU0TQ7mSUGvubD2Q4ZppeYsBg.mft
File:                     4-oU0TQ7mSUGvubD2Q4ZppeYsBg.mft (raw, json)
Hash identifier:          spsZ6LcDLto0odXrtBx+V7F2ncm0qiEX1HFJvpY4SpY=
Subject key identifier:   73:BE:C1:2A:99:7C:59:DE:FD:1D:E4:14:6D:59:DE:8D:55:C5:28:E4
Authority key identifier: E3:EA:14:D1:34:3B:99:25:06:BE:E6:C3:D9:0E:19:A6:97:98:B0:18
Certificate issuer:       /CN=e3ea14d1343b992506bee6c3d90e19a69798b018
Certificate serial:       01962F3D32A72551494E76E5A2A43590DFBE
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/4-oU0TQ7mSUGvubD2Q4ZppeYsBg.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/76/971558-ed66-4b83-8fa4-d4a4f34717f0/1/4-oU0TQ7mSUGvubD2Q4ZppeYsBg.mft
Manifest number:          0E29
Signing time:             Sun 13 Apr 2025 13:01:01 +0000
Manifest this update:     Sun 13 Apr 2025 13:01:01 +0000
Manifest next update:     Mon 14 Apr 2025 13:01:01 +0000
Files and hashes:         1: 4-oU0TQ7mSUGvubD2Q4ZppeYsBg.crl (hash: q1vmeVkdgtk2g3xh2S2Ap+FXn2ziHj/AVEw7bekPoqA=)
                          2: GLpHbmgk_HKZm99_6XW1zFhPnQ0.roa (hash: L9ftFB4BS92bIq/ClzkGPs+4wSqKQ5UFQA3ipP2ayPk=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2f:3d:32:a7:25:51:49:4e:76:e5:a2:a4:35:90:df:be
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e3ea14d1343b992506bee6c3d90e19a69798b018
        Validity
            Not Before: Apr 13 13:01:01 2025 GMT
            Not After : Apr 14 13:01:01 2025 GMT
        Subject: CN=73bec12a997c59defd1de4146d59de8d55c528e4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b0:80:f5:06:b9:f2:77:7d:5e:32:83:22:7f:8a:
                    64:5d:a3:d4:33:07:0a:13:b8:82:5c:d3:f1:bd:87:
                    2a:29:de:aa:78:d5:8d:98:53:23:51:da:56:7a:85:
                    c3:76:c2:72:d3:72:2b:e7:3e:4e:22:77:df:61:ac:
                    ab:64:09:97:78:b3:ec:c6:17:0b:3a:de:a2:ef:df:
                    c8:a9:4e:a3:36:19:94:a4:56:ef:fd:06:6b:e5:e6:
                    cc:d0:60:3c:95:e0:be:b8:ce:73:77:f5:80:cf:4f:
                    7a:14:dd:d8:91:be:9b:d8:a8:85:08:d2:42:41:ee:
                    99:50:cf:89:df:ac:05:60:1d:71:08:1c:31:ce:47:
                    48:92:e1:62:06:bb:81:bc:71:1e:8f:cb:d4:2d:c1:
                    6f:ec:88:aa:00:83:6c:25:68:f5:26:72:64:f7:a8:
                    3c:5d:bc:67:84:47:09:b0:14:a3:93:0c:d5:05:ca:
                    fe:d4:ec:e8:c1:33:fb:e6:66:ac:d8:55:d1:af:07:
                    74:e0:ac:57:97:cd:c7:76:22:2c:dc:0f:f6:b4:e6:
                    79:62:9a:4e:f3:15:13:09:53:82:6c:94:b0:bd:c9:
                    28:8b:a4:b0:bd:b5:e3:0c:a2:70:de:36:a0:d5:6b:
                    db:2b:b3:7c:f1:f6:3f:95:c5:b7:45:7d:8a:3c:d8:
                    68:65
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                73:BE:C1:2A:99:7C:59:DE:FD:1D:E4:14:6D:59:DE:8D:55:C5:28:E4
            X509v3 Authority Key Identifier:
                keyid:E3:EA:14:D1:34:3B:99:25:06:BE:E6:C3:D9:0E:19:A6:97:98:B0:18

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/4-oU0TQ7mSUGvubD2Q4ZppeYsBg.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/76/971558-ed66-4b83-8fa4-d4a4f34717f0/1/4-oU0TQ7mSUGvubD2Q4ZppeYsBg.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/76/971558-ed66-4b83-8fa4-d4a4f34717f0/1/4-oU0TQ7mSUGvubD2Q4ZppeYsBg.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         59:c5:af:c1:46:a6:6e:0a:53:b1:4e:f4:9a:fb:dc:57:d9:9e:
         3e:25:f9:c7:fd:00:ff:96:74:01:a7:48:64:be:e0:27:ae:77:
         bf:5e:1e:03:00:7a:e9:6b:c2:df:1a:91:69:a0:e8:8b:78:9b:
         bf:29:60:f8:8a:a5:ed:14:ae:c4:72:9c:7b:53:73:cb:a5:17:
         64:fc:0c:c7:1b:b5:81:8f:be:71:95:a6:e4:ec:8d:b5:54:3b:
         08:94:9f:9c:f8:76:27:b2:9a:4e:28:5a:37:5c:5f:09:8e:69:
         4f:fc:25:93:cc:bd:30:9c:47:67:41:4d:5b:88:48:ee:1c:8d:
         fd:48:20:a3:bd:b0:7e:62:c5:36:f6:82:51:e0:c2:1b:0a:57:
         47:b7:45:e6:7b:28:07:87:00:b7:6b:d1:79:44:b9:70:62:24:
         20:77:2d:66:1d:27:eb:11:31:fb:ca:8b:0f:1e:d3:24:93:5d:
         40:58:7b:35:99:09:ab:b9:27:d2:f5:cf:16:bb:f2:c9:41:f5:
         de:ae:dd:5f:4d:1f:f6:ae:3f:ef:bd:66:43:95:4b:9b:42:9b:
         29:d2:08:c5:a1:4a:db:b3:a7:bd:c7:45:be:53:c4:fc:7e:35:
         e9:85:c5:95:db:87:62:27:6d:87:e0:e5:5b:aa:d2:d9:cf:81:
         86:37:8d:79
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 14 20:28:58 2025 by rpki-client on console.sobornost.net