Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/90/b60d50-552a-44af-8ba5-36e4fb56fdb4/1/pstoJGZQvVjCKirgCtBmF4qB628.mft
File:                     pstoJGZQvVjCKirgCtBmF4qB628.mft (raw, json)
Hash identifier:          HFQrHsLgUMx+GoVJtHJ3HUP1ml5MhwJ9zM6gecDG3Jo=
Subject key identifier:   0A:93:E3:F0:9B:A7:93:25:8F:86:D3:6B:82:00:F8:37:3B:E2:4E:EA
Authority key identifier: A6:CB:68:24:66:50:BD:58:C2:2A:2A:E0:0A:D0:66:17:8A:81:EB:6F
Certificate issuer:       /CN=a6cb68246650bd58c22a2ae00ad066178a81eb6f
Certificate serial:       01962E988752A8638B59AF9E874B898B4C9F
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/pstoJGZQvVjCKirgCtBmF4qB628.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/90/b60d50-552a-44af-8ba5-36e4fb56fdb4/1/pstoJGZQvVjCKirgCtBmF4qB628.mft
Manifest number:          0D67
Signing time:             Sun 13 Apr 2025 10:01:10 +0000
Manifest this update:     Sun 13 Apr 2025 10:01:10 +0000
Manifest next update:     Mon 14 Apr 2025 10:01:10 +0000
Files and hashes:         1: PUpMBlY3y3LiEyvtN3mwZr7fC6o.roa (hash: 83wzwEaj6Lu4SVxQ13wsJpRArhNJgziukBIbApzP3jM=)
                          2: pstoJGZQvVjCKirgCtBmF4qB628.crl (hash: 97Nhe/jYI7B39IW+pPVDT9KlYVQxABr/mN2ccZIOGRE=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2e:98:87:52:a8:63:8b:59:af:9e:87:4b:89:8b:4c:9f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=a6cb68246650bd58c22a2ae00ad066178a81eb6f
        Validity
            Not Before: Apr 13 10:01:10 2025 GMT
            Not After : Apr 14 10:01:10 2025 GMT
        Subject: CN=0a93e3f09ba793258f86d36b8200f8373be24eea
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cd:77:c9:10:2b:20:26:aa:f9:ee:fa:b6:ed:5a:
                    00:86:c8:02:b2:40:ef:27:8f:c9:a4:c9:14:d3:8e:
                    4e:a0:e6:c6:01:cf:ed:23:0d:5a:9e:c2:fb:00:c9:
                    bd:59:a9:97:78:d4:04:62:11:bf:c7:93:ae:57:82:
                    d2:1d:8c:2b:92:68:d7:8a:1b:d4:e7:36:6e:38:3f:
                    4e:9c:98:44:8a:80:99:e4:ec:cd:10:9f:e0:8a:fe:
                    92:e0:32:15:cd:69:4e:6e:2b:75:39:57:f0:ac:3f:
                    32:98:96:a6:2f:55:7f:9e:0a:9b:a5:e5:c9:d6:9b:
                    60:14:38:d9:dc:5d:05:5a:b4:84:27:9c:ba:7f:8a:
                    0b:fa:de:1a:95:b0:dd:e2:e3:b0:47:d2:8f:de:de:
                    5e:9d:e2:b2:64:85:25:cd:42:f2:4c:81:66:71:aa:
                    d5:67:a3:a8:a7:4d:29:ea:b5:43:f1:a4:ff:80:87:
                    62:5a:d3:ba:32:f3:66:f9:09:62:41:12:d4:0c:36:
                    53:f6:7d:ff:2a:27:b9:fb:48:ca:e6:d6:9a:bb:62:
                    c5:86:db:0e:71:42:b4:28:c2:f3:e7:b5:01:ee:42:
                    8b:da:42:9f:85:7d:16:12:87:7f:63:88:00:c2:5d:
                    e0:f7:b7:5e:3d:8b:07:df:a5:67:63:87:5e:68:ee:
                    7e:b9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0A:93:E3:F0:9B:A7:93:25:8F:86:D3:6B:82:00:F8:37:3B:E2:4E:EA
            X509v3 Authority Key Identifier:
                keyid:A6:CB:68:24:66:50:BD:58:C2:2A:2A:E0:0A:D0:66:17:8A:81:EB:6F

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/pstoJGZQvVjCKirgCtBmF4qB628.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/90/b60d50-552a-44af-8ba5-36e4fb56fdb4/1/pstoJGZQvVjCKirgCtBmF4qB628.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/90/b60d50-552a-44af-8ba5-36e4fb56fdb4/1/pstoJGZQvVjCKirgCtBmF4qB628.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         b3:cb:84:d3:d2:6e:75:21:96:db:c0:53:db:5a:cc:78:dd:bc:
         3f:04:ac:38:ea:94:a1:5d:45:be:db:16:66:8c:bb:3e:8c:2b:
         96:31:94:ce:c5:69:b0:f6:73:99:85:a7:03:3e:c1:46:ad:51:
         41:a7:af:2f:bd:b0:11:32:17:1b:02:87:0b:6a:3e:ee:fd:fa:
         b3:0c:03:42:e8:a1:6b:82:23:fd:b3:ec:57:e4:84:16:21:10:
         a7:5a:8b:88:c6:ef:8d:cc:f4:8e:36:67:3d:4c:35:1e:14:db:
         df:03:a5:9b:59:de:8b:c3:66:9a:18:45:1f:e5:d7:fd:db:46:
         4d:51:09:6d:b4:83:84:50:ff:1a:a8:c5:2f:72:5c:6e:b3:b3:
         28:07:f7:2e:6d:3b:a4:93:62:78:c3:74:c4:06:20:de:07:5f:
         7d:3a:0e:95:4b:0d:56:27:14:11:a4:11:c8:5f:e6:bb:00:80:
         bc:1a:4c:5d:fd:d4:9f:66:69:4f:a9:b2:39:4b:b6:24:51:30:
         67:5e:4f:c6:21:60:44:cb:a9:5e:6b:e7:ea:c5:ab:42:b6:58:
         5d:cb:6b:d6:b7:08:fd:d1:ff:c0:96:8f:c4:66:16:63:bb:c3:
         e7:24:8f:b8:d3:ee:8c:2e:c1:a9:bb:4c:8c:2e:aa:62:bb:77:
         a3:ff:24:a8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 14 20:29:25 2025 by rpki-client on console.sobornost.net