Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/77/7e8848-1065-4386-8156-387c6c4d8f02/1/d2pYTSefAHBmo4tesPGOe-22FOs.mft
File:                     d2pYTSefAHBmo4tesPGOe-22FOs.mft (raw, json)
Hash identifier:          OwaxidB/ZtLUeMvTyvD+7UIIJdqzbdTr6ToGtEKCpJs=
Subject key identifier:   74:22:A6:37:3B:E8:E9:89:9C:2D:CD:CD:29:79:F1:20:B1:B0:88:1E
Authority key identifier: 77:6A:58:4D:27:9F:00:70:66:A3:8B:5E:B0:F1:8E:7B:ED:B6:14:EB
Certificate issuer:       /CN=776a584d279f007066a38b5eb0f18e7bedb614eb
Certificate serial:       01962F3DD466097D1ED1E3146DADF4D078EC
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/d2pYTSefAHBmo4tesPGOe-22FOs.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/77/7e8848-1065-4386-8156-387c6c4d8f02/1/d2pYTSefAHBmo4tesPGOe-22FOs.mft
Manifest number:          14EC
Signing time:             Sun 13 Apr 2025 13:01:43 +0000
Manifest this update:     Sun 13 Apr 2025 13:01:43 +0000
Manifest next update:     Mon 14 Apr 2025 13:01:43 +0000
Files and hashes:         1: WUTyK7BrRNi0uHZK_0QCE_Vt8SE.roa (hash: 4x8uT/6JZLvMnikfzpcnGLUs5znzoRWzxY13Odgg+MI=)
                          2: d2pYTSefAHBmo4tesPGOe-22FOs.crl (hash: 8LLigrnC569eR5jRZ6eWL41g6g2lYbkAt1ch5kg8AyA=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2f:3d:d4:66:09:7d:1e:d1:e3:14:6d:ad:f4:d0:78:ec
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=776a584d279f007066a38b5eb0f18e7bedb614eb
        Validity
            Not Before: Apr 13 13:01:43 2025 GMT
            Not After : Apr 14 13:01:43 2025 GMT
        Subject: CN=7422a6373be8e9899c2dcdcd2979f120b1b0881e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:dd:21:55:98:72:98:85:e0:2b:06:e7:15:1a:c4:
                    5e:82:c6:99:5b:23:9e:be:9c:a6:3f:37:d9:49:6e:
                    6b:6d:33:dd:54:c0:81:0f:b1:09:bb:c2:16:c5:c5:
                    d1:f1:5b:cc:ab:44:59:b1:aa:8d:01:be:a7:1a:28:
                    76:68:55:b8:1d:dd:d3:1b:53:6e:64:86:9a:2b:ac:
                    2c:d1:29:da:31:a5:be:49:e5:88:6b:80:af:fc:10:
                    4b:f9:dc:c4:e6:91:05:ba:f6:1f:4d:28:68:4a:20:
                    cd:3d:c5:be:f2:1e:60:68:46:1a:81:8e:2b:61:fd:
                    67:32:ee:a5:83:43:28:41:b3:e8:65:e7:ce:e2:39:
                    4f:34:b6:f8:d4:c0:af:de:64:34:92:bc:db:4b:9f:
                    20:3e:8d:65:32:4e:6c:c6:d5:91:bb:9d:99:ab:eb:
                    2f:2a:e7:37:9b:45:91:8c:49:7d:a5:60:ae:32:0d:
                    e1:c2:b6:ac:e1:b0:71:94:ab:5d:f3:12:fd:bb:1d:
                    2f:44:5d:a6:32:b1:65:b1:fa:b6:7c:32:ad:78:b5:
                    2f:40:dc:49:55:7f:4c:85:5d:a8:55:7b:4d:41:1d:
                    e5:36:5b:9b:28:55:08:7a:ea:ff:18:0d:d5:a8:4b:
                    1e:ad:09:86:e1:62:98:69:6a:5f:1c:8f:fe:a5:2c:
                    02:b1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                74:22:A6:37:3B:E8:E9:89:9C:2D:CD:CD:29:79:F1:20:B1:B0:88:1E
            X509v3 Authority Key Identifier:
                keyid:77:6A:58:4D:27:9F:00:70:66:A3:8B:5E:B0:F1:8E:7B:ED:B6:14:EB

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/d2pYTSefAHBmo4tesPGOe-22FOs.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/77/7e8848-1065-4386-8156-387c6c4d8f02/1/d2pYTSefAHBmo4tesPGOe-22FOs.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/77/7e8848-1065-4386-8156-387c6c4d8f02/1/d2pYTSefAHBmo4tesPGOe-22FOs.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         92:aa:1b:34:77:3a:58:65:2e:08:8c:0b:85:77:d8:2e:e9:4a:
         0b:f7:b9:a1:6f:5a:73:e7:cf:07:76:82:b0:85:96:82:cc:94:
         9d:14:74:d2:1e:3a:72:cb:18:eb:05:88:e1:c2:50:6e:07:35:
         3b:da:63:8a:73:be:80:27:90:c6:95:0b:72:6c:f9:53:d8:fe:
         e2:59:9d:83:bf:b1:d6:d5:b6:59:b9:fb:ba:57:76:47:c1:5a:
         b7:c3:4f:7b:dc:7d:c3:cd:6e:ee:d9:0a:29:09:cf:3e:93:d6:
         0e:72:70:0c:b1:0d:66:80:df:b6:60:13:2f:24:1f:cc:19:24:
         8e:1b:13:91:be:e1:e8:c1:1f:f8:cb:83:64:e6:68:f7:bb:0d:
         fd:6b:1a:33:4b:48:73:5a:d9:25:c4:15:5e:f8:11:52:54:66:
         47:bb:10:62:55:e3:50:90:07:f2:cc:f0:bc:23:46:60:d0:8c:
         88:d8:cc:9c:60:6b:02:e8:8e:3f:9b:22:2c:f1:65:09:06:64:
         43:fd:14:49:43:e8:b6:7e:db:55:1f:d5:42:34:20:fe:90:15:
         8a:ff:e0:07:37:10:5f:9c:00:0a:09:eb:31:b9:a2:ef:10:58:
         64:d6:26:57:64:8e:a8:ef:b9:b7:dc:45:95:5e:7e:0f:3e:53:
         e3:88:35:ff
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 14 20:28:58 2025 by rpki-client on console.sobornost.net