Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8f/57c6ea-1bb5-42a0-8679-d07fa3e6b3d3/1/aMFmY2kvbGhFdPZGCqzmJX-3kqI.mft
File:                     aMFmY2kvbGhFdPZGCqzmJX-3kqI.mft (raw, json)
Hash identifier:          ULMdoZ5dlpRkyhfjj3LR8e71YCHolrNzDpeRobFihHw=
Subject key identifier:   CA:24:9E:93:D0:87:AD:4C:2A:B5:0E:9A:C4:1F:7B:87:6C:8D:C3:33
Authority key identifier: 68:C1:66:63:69:2F:6C:68:45:74:F6:46:0A:AC:E6:25:7F:B7:92:A2
Certificate issuer:       /CN=68c16663692f6c684574f6460aace6257fb792a2
Certificate serial:       01962E61FDEA2B875695F5B6490EFB130BDC
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/aMFmY2kvbGhFdPZGCqzmJX-3kqI.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/8f/57c6ea-1bb5-42a0-8679-d07fa3e6b3d3/1/aMFmY2kvbGhFdPZGCqzmJX-3kqI.mft
Manifest number:          32
Signing time:             Sun 13 Apr 2025 09:01:35 +0000
Manifest this update:     Sun 13 Apr 2025 09:01:35 +0000
Manifest next update:     Mon 14 Apr 2025 09:01:35 +0000
Files and hashes:         1: D4h91o5D5LpRFiTgm7RzTo2LaNw.roa (hash: Zr6sYgO/qCLvQUpUT/a9F1ZpmzMHKgAzXVdmByDQ8A4=)
                          2: aMFmY2kvbGhFdPZGCqzmJX-3kqI.crl (hash: tQBK+jnWA/xVyuCBPkmDsmOILf52HzCOWSzZ2tKBpdo=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2e:61:fd:ea:2b:87:56:95:f5:b6:49:0e:fb:13:0b:dc
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=68c16663692f6c684574f6460aace6257fb792a2
        Validity
            Not Before: Apr 13 09:01:35 2025 GMT
            Not After : Apr 14 09:01:35 2025 GMT
        Subject: CN=ca249e93d087ad4c2ab50e9ac41f7b876c8dc333
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d1:c4:80:55:54:05:b3:6e:3b:65:b9:a5:4c:33:
                    83:1f:7d:67:cc:97:35:8a:a5:1b:d5:1f:36:76:80:
                    91:47:6a:82:a6:fb:08:0c:6d:3b:4f:bf:f8:12:47:
                    a3:8a:f8:8a:cb:2c:c0:22:e5:99:0e:43:08:3d:75:
                    9d:62:5e:c2:f7:c0:5a:4a:02:a0:3e:85:4b:23:d0:
                    0e:5c:d1:ce:74:27:38:7e:b1:47:0e:f4:d3:5c:2e:
                    22:87:23:1b:6c:ee:6f:da:52:aa:49:ac:7a:7e:a4:
                    19:16:eb:fc:cb:dc:0b:ab:6e:1e:ef:57:79:8e:da:
                    67:18:d1:ad:08:79:40:49:4d:80:90:7c:42:73:8f:
                    9e:7c:a8:81:68:7c:2b:44:62:3f:1b:32:84:c0:20:
                    a4:51:4e:ee:c9:1e:e6:ee:30:16:96:f0:a6:2d:a0:
                    5a:84:a5:c3:64:f9:fa:27:25:fc:47:aa:92:8e:cc:
                    02:bb:41:96:23:d7:e3:42:2b:15:4a:e1:60:58:c0:
                    5a:23:bb:7f:62:dd:a9:dd:d0:04:20:41:01:8c:ee:
                    c4:d3:af:ba:6c:bd:63:4f:f2:4a:27:31:c0:51:18:
                    78:2d:bf:f9:55:bf:79:ee:75:92:c9:b5:bd:ab:85:
                    85:73:ad:fe:66:31:0b:02:d5:8b:a7:e1:93:35:0e:
                    6a:6d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CA:24:9E:93:D0:87:AD:4C:2A:B5:0E:9A:C4:1F:7B:87:6C:8D:C3:33
            X509v3 Authority Key Identifier:
                keyid:68:C1:66:63:69:2F:6C:68:45:74:F6:46:0A:AC:E6:25:7F:B7:92:A2

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/aMFmY2kvbGhFdPZGCqzmJX-3kqI.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8f/57c6ea-1bb5-42a0-8679-d07fa3e6b3d3/1/aMFmY2kvbGhFdPZGCqzmJX-3kqI.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/8f/57c6ea-1bb5-42a0-8679-d07fa3e6b3d3/1/aMFmY2kvbGhFdPZGCqzmJX-3kqI.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         c9:22:1f:92:73:0a:f8:ff:e8:a3:33:d0:5a:21:3b:41:77:7d:
         b4:5b:53:c8:29:bb:96:ac:d6:54:67:01:f2:ee:0a:85:ab:a8:
         04:2b:5e:d9:57:af:e6:27:b2:52:28:f9:04:e2:f1:82:6d:47:
         fe:61:30:03:b9:b5:1b:f2:16:7b:0f:4f:1e:07:62:20:0e:5c:
         e2:9b:29:1a:0e:58:ab:95:8b:68:dd:d7:52:05:48:03:49:1f:
         99:57:ba:b7:40:3a:20:39:9d:4a:89:d7:7e:71:4d:8c:ff:3d:
         bc:89:a0:08:41:cd:c3:da:2e:2b:99:53:1a:5f:90:bf:97:ca:
         bc:07:dc:7a:12:78:e6:6d:12:57:83:90:0b:43:af:3d:72:26:
         15:12:b5:12:fa:60:80:47:51:7f:a7:3c:45:15:b8:f0:bf:7a:
         67:41:16:31:53:72:86:d4:c7:12:e6:c0:3a:88:04:ad:b8:ce:
         08:53:71:2d:07:e9:99:09:36:40:b0:43:12:80:58:5e:d4:46:
         38:26:a3:08:00:19:4f:ab:d5:16:b4:01:fa:77:85:c3:cb:6d:
         23:2e:02:3f:51:e4:b3:df:e9:70:d1:13:19:f6:57:de:a8:c6:
         06:8b:a8:1f:7f:5f:ec:fa:57:7f:44:c1:94:f5:36:1a:d2:32:
         2e:26:62:1f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 14 20:29:24 2025 by rpki-client on console.sobornost.net