Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8b/a28b5c-88d7-4ad4-9e1d-8ac17e9c40db/1/UHDcUgTez3q-pQcNdfoFjIrAE9U.mft
File:                     UHDcUgTez3q-pQcNdfoFjIrAE9U.mft (raw, json)
Hash identifier:          gRvf8EXzryitqupyPDcpqfVLEO4g2yTF41356VZRpKE=
Subject key identifier:   F5:39:1B:FD:47:93:B9:AC:E9:1E:01:0B:1D:04:21:7F:2F:81:97:07
Authority key identifier: 50:70:DC:52:04:DE:CF:7A:BE:A5:07:0D:75:FA:05:8C:8A:C0:13:D5
Certificate issuer:       /CN=5070dc5204decf7abea5070d75fa058c8ac013d5
Certificate serial:       01962E989CF5433AFD0B6A92339992485BF0
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/UHDcUgTez3q-pQcNdfoFjIrAE9U.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/8b/a28b5c-88d7-4ad4-9e1d-8ac17e9c40db/1/UHDcUgTez3q-pQcNdfoFjIrAE9U.mft
Manifest number:          120B
Signing time:             Sun 13 Apr 2025 10:01:15 +0000
Manifest this update:     Sun 13 Apr 2025 10:01:15 +0000
Manifest next update:     Mon 14 Apr 2025 10:01:15 +0000
Files and hashes:         1: 1qF2qpZ4KDEQgCHi8Zz6Mofp1Bw.roa (hash: ZUGdPkmwhsuvGIfhBFvpGPh0RIr8NwcoDU94MyjHlG0=)
                          2: UHDcUgTez3q-pQcNdfoFjIrAE9U.crl (hash: XYPCsVtCnY09BYul8pauFeVUdpkILpPyM9l+nepfK24=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2e:98:9c:f5:43:3a:fd:0b:6a:92:33:99:92:48:5b:f0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5070dc5204decf7abea5070d75fa058c8ac013d5
        Validity
            Not Before: Apr 13 10:01:15 2025 GMT
            Not After : Apr 14 10:01:15 2025 GMT
        Subject: CN=f5391bfd4793b9ace91e010b1d04217f2f819707
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ab:5c:ee:1a:00:79:88:38:a3:07:67:5f:3a:ec:
                    4a:be:85:26:d1:10:78:13:dd:64:f9:05:a4:78:61:
                    20:d2:31:ab:e0:40:bf:62:2d:1f:2e:0f:79:86:e1:
                    cb:d0:7c:12:00:77:52:d6:ff:85:0b:53:17:2f:01:
                    6e:b5:35:eb:9f:68:45:15:b4:0a:dd:a5:ea:f4:de:
                    84:c9:30:ff:a1:a8:38:66:b7:5c:74:4c:56:d4:6c:
                    52:09:78:06:9a:19:9d:ab:98:46:d2:40:32:56:f3:
                    34:f5:66:f8:77:fd:00:59:fc:6b:91:ad:0b:2a:de:
                    e6:14:0e:ae:73:3d:5a:4c:32:71:cf:15:0f:d2:49:
                    63:65:b3:56:3d:14:f5:b3:df:48:cc:7f:eb:a7:d7:
                    7b:9b:ac:f0:71:7a:c2:5b:03:76:c3:af:c3:7d:4b:
                    53:1d:09:b1:a7:0b:82:69:a8:0c:b1:ec:9e:88:41:
                    84:37:5f:90:b2:13:c0:e5:33:04:60:f8:1b:48:dc:
                    f2:91:c4:99:a4:8e:5b:39:3e:47:13:75:12:76:1a:
                    32:8c:dd:db:34:09:05:ef:3b:dd:e2:1f:ee:26:c5:
                    75:da:fa:7d:83:99:f4:69:20:ab:50:97:e8:df:71:
                    68:19:d3:b4:72:26:0b:c9:46:ac:7e:6f:00:bf:5d:
                    53:c9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F5:39:1B:FD:47:93:B9:AC:E9:1E:01:0B:1D:04:21:7F:2F:81:97:07
            X509v3 Authority Key Identifier:
                keyid:50:70:DC:52:04:DE:CF:7A:BE:A5:07:0D:75:FA:05:8C:8A:C0:13:D5

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/UHDcUgTez3q-pQcNdfoFjIrAE9U.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8b/a28b5c-88d7-4ad4-9e1d-8ac17e9c40db/1/UHDcUgTez3q-pQcNdfoFjIrAE9U.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/8b/a28b5c-88d7-4ad4-9e1d-8ac17e9c40db/1/UHDcUgTez3q-pQcNdfoFjIrAE9U.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         64:7c:82:49:59:3d:81:87:0e:36:69:88:b7:79:4a:95:b9:75:
         76:20:2e:42:9f:69:3f:bb:e0:cc:89:92:0f:0d:58:06:a6:06:
         28:13:d7:72:5a:d2:f2:74:0e:fc:f9:bd:64:db:76:93:b8:a6:
         70:38:24:e8:ba:e4:9a:a2:1b:b0:27:12:96:6a:66:87:2c:95:
         9a:72:53:ec:c8:eb:8a:49:8f:1a:6d:22:ff:24:56:ee:10:52:
         67:59:39:d4:a8:85:b4:5d:fe:16:e2:5b:ef:61:6a:c6:b9:d3:
         d8:22:8e:83:3d:0b:a3:05:fe:2b:88:6f:6a:a2:c7:96:ee:a7:
         49:b9:bd:27:82:80:e8:45:90:82:b7:18:9a:1a:60:b4:55:73:
         24:e9:2e:df:28:17:8a:09:85:f5:e4:04:87:be:f3:b8:a7:ab:
         46:dd:62:02:b4:2b:83:69:79:34:df:c6:65:d6:28:66:dd:d9:
         6f:15:ee:34:90:0a:fa:31:e7:45:fd:f8:b0:3f:1a:44:c7:2e:
         85:25:ed:8a:83:58:7a:81:c4:8b:8e:1b:53:60:74:8a:d1:14:
         17:a7:c6:89:3d:0b:b9:16:ea:67:3b:cc:ba:61:4e:0c:e9:76:
         bf:fb:45:6d:68:a3:43:b0:46:06:45:e4:34:de:35:69:81:19:
         4e:47:71:02
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 14 20:29:17 2025 by rpki-client on console.sobornost.net