Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a0/2744d0-41a0-4434-b690-3244546f8cbf/1/7jcJhfg_QTMBEcNQzWseHurVJqo.mft
File:                     7jcJhfg_QTMBEcNQzWseHurVJqo.mft (raw, json)
Hash identifier:          hsbF4qC7MxisDG9MayCaEZyNNJoAQ/CJ9KnQbse9/SM=
Subject key identifier:   23:3F:08:7A:42:66:64:06:70:EC:D1:18:A5:51:6F:73:E9:E0:73:D1
Authority key identifier: EE:37:09:85:F8:3F:41:33:01:11:C3:50:CD:6B:1E:1E:EA:D5:26:AA
Certificate issuer:       /CN=ee370985f83f41330111c350cd6b1e1eead526aa
Certificate serial:       01962F746F755BA512B318383089EA4AC7F1
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/7jcJhfg_QTMBEcNQzWseHurVJqo.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/a0/2744d0-41a0-4434-b690-3244546f8cbf/1/7jcJhfg_QTMBEcNQzWseHurVJqo.mft
Manifest number:          14EC
Signing time:             Sun 13 Apr 2025 14:01:21 +0000
Manifest this update:     Sun 13 Apr 2025 14:01:21 +0000
Manifest next update:     Mon 14 Apr 2025 14:01:21 +0000
Files and hashes:         1: 7jcJhfg_QTMBEcNQzWseHurVJqo.crl (hash: 3U+oji6L/eMIPGp616Bsb4/yP7EK0b0dbFhuscULfvc=)
                          2: 9aUDpcgA6maCgt07Eahm-5WcaJs.roa (hash: X/S54nVM9EqnKhRT8BDrMFb0JIJWk3STHP7cN6TfAmc=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2f:74:6f:75:5b:a5:12:b3:18:38:30:89:ea:4a:c7:f1
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=ee370985f83f41330111c350cd6b1e1eead526aa
        Validity
            Not Before: Apr 13 14:01:21 2025 GMT
            Not After : Apr 14 14:01:21 2025 GMT
        Subject: CN=233f087a4266640670ecd118a5516f73e9e073d1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ea:1b:3e:be:1e:61:68:15:b1:fb:8f:6d:90:61:
                    a9:53:4c:09:2d:1b:12:f9:72:45:af:cf:ee:75:5e:
                    b8:d0:2f:6b:a9:56:0b:d7:e9:1c:ac:b6:e6:7f:83:
                    d8:d0:bc:1a:49:bf:b9:5f:07:7e:e1:2a:c9:16:73:
                    18:d6:c0:b2:99:ad:d7:79:21:23:72:fa:29:ab:bf:
                    71:0e:69:ac:33:3c:15:bb:4f:a3:25:32:9e:45:62:
                    db:ac:77:cb:a7:90:4b:24:f1:db:7f:9d:02:fa:8f:
                    8c:ba:12:d9:83:ee:70:60:dd:32:6a:dc:df:f4:d2:
                    57:51:e9:48:b7:45:c8:76:0b:c3:60:d8:74:09:ef:
                    31:72:28:c0:a0:47:07:3a:ef:03:c3:30:02:60:a3:
                    78:b6:1a:50:ff:d4:68:8e:db:2c:51:cb:93:6b:a3:
                    a1:41:f5:35:11:eb:ff:a8:8c:c7:07:97:b6:02:55:
                    64:57:d9:49:ba:de:4b:f2:d2:2a:16:fd:c7:86:73:
                    37:43:62:f0:ad:05:e6:bd:7b:1e:0a:a1:49:6f:22:
                    21:31:b8:99:99:7b:02:53:74:76:88:51:a0:27:be:
                    e5:6a:be:9a:fe:87:45:d6:6c:05:1d:db:68:44:63:
                    a6:07:bf:f8:5f:cb:42:1e:62:9b:ee:77:22:bc:80:
                    7c:85
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                23:3F:08:7A:42:66:64:06:70:EC:D1:18:A5:51:6F:73:E9:E0:73:D1
            X509v3 Authority Key Identifier:
                keyid:EE:37:09:85:F8:3F:41:33:01:11:C3:50:CD:6B:1E:1E:EA:D5:26:AA

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/7jcJhfg_QTMBEcNQzWseHurVJqo.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a0/2744d0-41a0-4434-b690-3244546f8cbf/1/7jcJhfg_QTMBEcNQzWseHurVJqo.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/a0/2744d0-41a0-4434-b690-3244546f8cbf/1/7jcJhfg_QTMBEcNQzWseHurVJqo.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         3c:7e:54:f7:b4:f5:0d:63:8d:f6:dd:88:2f:93:f8:e9:81:83:
         92:7b:ac:f0:b3:7a:10:1c:d9:c6:39:23:44:94:4b:15:2f:c3:
         a5:0a:49:12:17:c3:5a:b0:77:c5:a2:96:25:64:53:aa:29:a2:
         d7:87:9d:fb:85:be:b3:4b:ed:c8:49:82:21:00:c5:0a:28:be:
         3e:17:bc:34:bf:a9:58:bb:01:a9:7e:1e:70:83:e9:66:78:8f:
         05:9f:96:13:29:df:42:c0:97:82:b1:31:da:af:e0:19:b5:82:
         db:93:f3:32:96:79:b2:7a:cc:88:ac:c8:5e:fd:85:93:58:59:
         a6:3e:60:1d:e7:0b:4f:dd:45:17:84:08:48:c3:8c:20:f3:b2:
         d3:d1:ac:ce:98:e4:01:bb:25:e9:68:8f:b5:20:94:82:78:8d:
         08:24:97:04:83:80:f9:f8:a4:50:63:b3:85:34:ca:05:14:8d:
         26:38:08:3b:d8:57:ee:a6:e4:c0:cc:f0:cd:13:b1:54:47:02:
         9d:fa:de:df:3b:f1:05:19:00:3f:e5:24:f5:91:67:f2:b2:c1:
         24:3c:a0:8c:00:84:73:d2:36:2e:48:8b:10:95:ea:57:2a:e3:
         51:22:6b:68:56:7c:fc:2c:37:97:f5:a0:79:7e:e6:98:f0:73:
         ab:ac:ea:1b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 14 20:31:19 2025 by rpki-client on console.sobornost.net