Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/87/64879b-6c68-4597-9fab-6fbe293171fe/1/xU3YgoUsxFhrH-40wFAdXbfWDws.mft
File:                     xU3YgoUsxFhrH-40wFAdXbfWDws.mft (raw, json)
Hash identifier:          DlTF0bfIqK9PlfGqcDsjdsG4OImw3RuQoEs4IRFvyIQ=
Subject key identifier:   C1:D3:6A:A9:8B:A8:82:83:08:6F:BC:D6:82:BF:AA:FA:FB:7A:B1:E1
Authority key identifier: C5:4D:D8:82:85:2C:C4:58:6B:1F:EE:34:C0:50:1D:5D:B7:D6:0F:0B
Certificate issuer:       /CN=c54dd882852cc4586b1fee34c0501d5db7d60f0b
Certificate serial:       01962DF3A387E89FBB78A7FF0E528765ACF9
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/xU3YgoUsxFhrH-40wFAdXbfWDws.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/87/64879b-6c68-4597-9fab-6fbe293171fe/1/xU3YgoUsxFhrH-40wFAdXbfWDws.mft
Manifest number:          06AE
Signing time:             Sun 13 Apr 2025 07:01:03 +0000
Manifest this update:     Sun 13 Apr 2025 07:01:03 +0000
Manifest next update:     Mon 14 Apr 2025 07:01:03 +0000
Files and hashes:         1: XArLVttX_wCBnKO2u8bWM8Vk3NU.roa (hash: BE5h5QGSzKEJoBRH8Cvw/x+Z7DD6UePHMldATT7VyV4=)
                          2: xU3YgoUsxFhrH-40wFAdXbfWDws.crl (hash: DsjGqTLbkOjTUYFouwYVpQikALIPhvawlIJNEJYARLA=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2d:f3:a3:87:e8:9f:bb:78:a7:ff:0e:52:87:65:ac:f9
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c54dd882852cc4586b1fee34c0501d5db7d60f0b
        Validity
            Not Before: Apr 13 07:01:03 2025 GMT
            Not After : Apr 14 07:01:03 2025 GMT
        Subject: CN=c1d36aa98ba88283086fbcd682bfaafafb7ab1e1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a4:5c:26:f4:4d:24:46:6e:cc:7e:5d:c6:27:7a:
                    95:02:03:35:de:96:5b:38:20:ce:11:b4:75:80:ca:
                    76:26:bf:a5:e4:e1:1a:56:1f:5e:fc:6d:8d:bf:45:
                    af:5f:8b:f9:20:e0:31:5e:11:9a:b7:d9:dd:3e:55:
                    b9:e8:e8:0d:bb:11:6e:02:c6:1c:b9:09:16:fa:6f:
                    8a:b9:bb:5e:6f:ef:31:59:46:ef:28:8a:ee:83:7a:
                    9e:c8:09:b3:34:c6:9f:35:7c:9d:fb:99:4a:3b:7a:
                    31:5b:05:3f:26:be:0f:1b:85:8e:22:08:a2:4d:15:
                    2d:f8:46:db:91:b1:87:58:75:67:a7:1b:d8:e4:58:
                    10:3c:56:dc:e8:6f:41:67:92:c4:72:4b:16:d2:93:
                    48:ab:2c:d5:33:95:f0:2b:76:57:8a:e2:d5:78:79:
                    a7:fd:31:12:bf:1c:f7:82:19:e1:c8:27:19:c9:59:
                    2d:ce:b2:0d:b7:46:8c:ae:e4:e0:68:0f:f5:dd:3b:
                    10:34:f2:14:93:6f:df:76:0f:0f:43:fa:47:6a:97:
                    ec:5e:60:d4:2d:27:19:67:53:e2:18:3a:48:ff:cf:
                    63:28:d1:2e:83:50:8b:cb:01:67:0b:96:2c:56:d7:
                    04:a5:1e:15:91:1c:0b:0a:d0:9e:4e:b8:93:11:35:
                    68:49
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C1:D3:6A:A9:8B:A8:82:83:08:6F:BC:D6:82:BF:AA:FA:FB:7A:B1:E1
            X509v3 Authority Key Identifier:
                keyid:C5:4D:D8:82:85:2C:C4:58:6B:1F:EE:34:C0:50:1D:5D:B7:D6:0F:0B

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xU3YgoUsxFhrH-40wFAdXbfWDws.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/87/64879b-6c68-4597-9fab-6fbe293171fe/1/xU3YgoUsxFhrH-40wFAdXbfWDws.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/87/64879b-6c68-4597-9fab-6fbe293171fe/1/xU3YgoUsxFhrH-40wFAdXbfWDws.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         43:92:9f:ff:c7:a0:42:bc:f1:81:5a:51:ae:24:f9:61:09:d7:
         e2:7e:8a:9d:ee:04:58:5a:c7:af:b8:8c:46:20:49:a2:b0:3f:
         de:d2:26:ee:e6:a4:5e:cb:e7:7a:44:95:a8:c1:3b:1f:63:e4:
         ed:9c:c2:d5:b7:30:65:c6:bf:3a:09:71:85:27:3d:d7:7f:e2:
         d6:a4:cc:e7:7a:0a:73:26:52:a9:17:6b:f3:83:89:89:49:58:
         65:24:81:a4:4d:49:0f:43:c7:53:cc:e3:b6:92:5e:60:84:d9:
         53:26:e1:62:97:5e:5e:ef:70:8e:a6:6c:95:62:9b:4f:28:14:
         70:27:dd:ab:3b:b8:ad:6e:ae:b4:de:63:84:ab:f6:f0:c8:8a:
         7d:4d:19:e6:74:3a:09:e0:eb:9c:a1:99:ce:9f:ba:e5:91:74:
         eb:4b:09:0d:63:50:9f:f6:78:4f:c5:ec:9e:55:14:ba:45:09:
         aa:46:2a:58:dc:14:2c:2a:ba:25:18:4c:a8:8a:f5:d3:27:25:
         3d:6e:43:b4:c3:0e:3c:dd:e3:b8:a8:a5:19:98:3a:ae:c8:a5:
         8a:7e:92:6f:e5:58:f0:54:f9:7c:40:82:2e:66:95:cb:fa:5d:
         32:8e:7d:16:db:44:29:45:4f:69:d1:5c:2c:1a:d7:89:8d:fc:
         9a:51:93:d2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 14 20:29:14 2025 by rpki-client on console.sobornost.net