Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8e/09837c-98f3-4c9f-aebf-881488ffdbb0/1/UmIEFdJJCl7D9pJbn3kEDo4i3b8.mft
File:                     UmIEFdJJCl7D9pJbn3kEDo4i3b8.mft (raw, json)
Hash identifier:          LM0ALFGIdiCwOjfcGAYGTb7C9LsJaRvIlxokB7+flf0=
Subject key identifier:   8A:40:CB:B1:AA:F8:2B:07:8E:81:34:B8:87:9C:11:3C:46:35:B8:A2
Authority key identifier: 52:62:04:15:D2:49:0A:5E:C3:F6:92:5B:9F:79:04:0E:8E:22:DD:BF
Certificate issuer:       /CN=52620415d2490a5ec3f6925b9f79040e8e22ddbf
Certificate serial:       01954868C58C2C8BE4024C723F2C852A10F9
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/UmIEFdJJCl7D9pJbn3kEDo4i3b8.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/8e/09837c-98f3-4c9f-aebf-881488ffdbb0/1/UmIEFdJJCl7D9pJbn3kEDo4i3b8.mft
Manifest number:          343A
Signing time:             Thu 27 Feb 2025 17:16:19 +0000
Manifest this update:     Thu 27 Feb 2025 17:16:19 +0000
Manifest next update:     Fri 28 Feb 2025 17:16:19 +0000
Files and hashes:         1: 1-aPUi_d5vCf8feIg2a9dFVsRnOM.roa (hash: PupEsIXHB6rGqEymngMsBPy2Wh8A195/YgvNAUoFwO4=)
                          2: UmIEFdJJCl7D9pJbn3kEDo4i3b8.crl (hash: mXHKvGs0ioHFARqlO/YKrsbvwRH0+LeUITKLOXw9rYQ=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:95:48:68:c5:8c:2c:8b:e4:02:4c:72:3f:2c:85:2a:10:f9
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=52620415d2490a5ec3f6925b9f79040e8e22ddbf
        Validity
            Not Before: Feb 27 17:16:19 2025 GMT
            Not After : Feb 28 17:16:19 2025 GMT
        Subject: CN=8a40cbb1aaf82b078e8134b8879c113c4635b8a2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ef:10:3b:b9:1e:6b:ed:78:47:45:c0:ce:36:c4:
                    6e:5f:58:1f:70:9f:fe:3d:3f:45:98:7b:07:95:0c:
                    a5:e1:ce:d9:bb:4f:09:26:eb:eb:e0:db:f5:b5:ef:
                    79:d3:ed:21:d1:c6:c9:59:10:ec:ff:93:58:68:6d:
                    42:d9:fa:d9:5c:fd:4b:17:33:55:f6:c1:b7:bf:90:
                    a0:93:9b:6e:c2:65:a8:5e:6c:0a:1e:3c:a7:57:62:
                    39:2f:91:ea:81:26:85:eb:41:b4:41:20:a2:71:f3:
                    2e:61:e7:14:89:57:eb:49:09:84:3a:d3:ec:08:ce:
                    e0:2c:51:88:db:e3:82:97:e5:c1:b4:9a:f4:53:97:
                    a8:f0:76:1f:67:80:50:67:d5:f7:8a:50:3a:9d:ac:
                    87:75:e2:f1:29:53:88:bb:ac:68:6b:c4:16:0a:bb:
                    0d:b9:d9:d8:20:af:99:23:c3:f7:79:d8:c2:73:40:
                    fe:ab:74:ef:0e:ea:1d:68:e4:30:36:8d:5e:85:67:
                    bd:b3:44:0d:cd:fc:bf:7d:ee:12:ea:c1:39:0c:11:
                    04:ed:a3:59:67:6f:8d:b2:82:a8:5f:fd:e5:87:4b:
                    3e:3e:1c:d0:94:c9:2c:ab:f5:b6:cb:8c:85:85:82:
                    c2:37:b8:54:f1:5a:67:a3:74:1a:94:ae:13:58:1e:
                    ab:1f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8A:40:CB:B1:AA:F8:2B:07:8E:81:34:B8:87:9C:11:3C:46:35:B8:A2
            X509v3 Authority Key Identifier:
                keyid:52:62:04:15:D2:49:0A:5E:C3:F6:92:5B:9F:79:04:0E:8E:22:DD:BF

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/UmIEFdJJCl7D9pJbn3kEDo4i3b8.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/09837c-98f3-4c9f-aebf-881488ffdbb0/1/UmIEFdJJCl7D9pJbn3kEDo4i3b8.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/09837c-98f3-4c9f-aebf-881488ffdbb0/1/UmIEFdJJCl7D9pJbn3kEDo4i3b8.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         7a:42:0c:43:5f:64:e8:dc:2d:29:ba:b1:58:f1:c5:9f:37:e1:
         10:43:8e:4f:10:8f:02:0d:ba:79:15:fe:f9:8f:7e:1a:c6:88:
         fa:6c:b3:8e:09:37:9d:ac:02:52:cd:78:b8:13:5f:a3:82:da:
         fd:55:75:23:d8:27:ab:a0:f5:e4:c9:0f:a4:50:81:8e:d5:b0:
         30:90:b0:95:9c:97:c8:fa:6b:b0:bf:f3:93:78:d6:1c:9e:ef:
         5c:bb:22:34:25:82:81:5b:c3:de:11:1d:2a:9b:62:3c:8b:c1:
         46:30:75:6b:cf:24:45:bb:e7:ef:d7:fa:9c:20:1c:65:70:f1:
         12:a9:d4:40:c0:e2:c7:ba:91:90:c1:63:f2:47:98:a7:e8:0d:
         01:86:9c:fa:3f:63:17:e2:5a:8a:99:26:38:1f:e8:61:b6:c7:
         48:89:1a:80:a6:3b:45:4c:34:6c:eb:b2:7d:4f:3b:36:d0:ce:
         87:57:c9:86:eb:aa:b4:bf:8c:dd:5c:ac:8d:d0:3d:17:f6:07:
         f9:22:33:21:78:aa:1e:c3:ed:c0:89:1d:ba:14:46:64:1c:1b:
         63:cd:6a:99:31:96:b0:a4:b6:57:77:85:09:23:66:06:6a:eb:
         61:ff:52:b8:0d:ca:0c:93:51:1b:43:02:7c:1e:6c:42:8c:a0:
         35:af:96:ca
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZVIaMWMLIvkAkxyPyyFKhD5MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDUyNjIwNDE1ZDI0OTBhNWVjM2Y2OTI1YjlmNzkwNDBlOGUy
MmRkYmYwHhcNMjUwMjI3MTcxNjE5WhcNMjUwMjI4MTcxNjE5WjAzMTEwLwYDVQQD
Eyg4YTQwY2JiMWFhZjgyYjA3OGU4MTM0Yjg4NzljMTEzYzQ2MzViOGEyMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA7xA7uR5r7XhHRcDONsRuX1gfcJ/+
PT9FmHsHlQyl4c7Zu08JJuvr4Nv1te950+0h0cbJWRDs/5NYaG1C2frZXP1LFzNV
9sG3v5Cgk5tuwmWoXmwKHjynV2I5L5HqgSaF60G0QSCicfMuYecUiVfrSQmEOtPs
CM7gLFGI2+OCl+XBtJr0U5eo8HYfZ4BQZ9X3ilA6nayHdeLxKVOIu6xoa8QWCrsN
udnYIK+ZI8P3edjCc0D+q3TvDuodaOQwNo1ehWe9s0QNzfy/fe4S6sE5DBEE7aNZ
Z2+NsoKoX/3lh0s+PhzQlMksq/W2y4yFhYLCN7hU8Vpno3QalK4TWB6rHwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFIpAy7Gq+CsHjoE0uIecETxGNbiiMB8GA1UdIwQY
MBaAFFJiBBXSSQpew/aSW595BA6OIt2/MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvVW1JRUZkSkpDbDdEOXBKYm4za0VEbzRpM2I4LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84ZS8wOTgzN2MtOThmMy00YzlmLWFlYmYt
ODgxNDg4ZmZkYmIwLzEvVW1JRUZkSkpDbDdEOXBKYm4za0VEbzRpM2I4Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC84ZS8wOTgzN2MtOThmMy00YzlmLWFlYmYtODgxNDg4ZmZkYmIw
LzEvVW1JRUZkSkpDbDdEOXBKYm4za0VEbzRpM2I4LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAekIMQ19k
6NwtKbqxWPHFnzfhEEOOTxCPAg26eRX++Y9+GsaI+myzjgk3nawCUs14uBNfo4La
/VV1I9gnq6D15MkPpFCBjtWwMJCwlZyXyPprsL/zk3jWHJ7vXLsiNCWCgVvD3hEd
KptiPIvBRjB1a88kRbvn79f6nCAcZXDxEqnUQMDix7qRkMFj8keYp+gNAYac+j9j
F+JaipkmOB/oYbbHSIkagKY7RUw0bOuyfU87NtDOh1fJhuuqtL+M3VysjdA9F/YH
+SIzIXiqHsPtwIkduhRGZBwbY81qmTGWsKS2V3eFCSNmBmrrYf9SuA3KDJNRG0MC
fB5sQoygNa+Wyg==
-----END CERTIFICATE-----
Generated at Sat Mar 8 04:51:14 2025 by rpki-client on console.sobornost.net