Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a0/5dfd89-4d79-4bb6-8bf3-0d38dddb0780/1/XDIxGVJWbRzhjwiOi7bOq-fnk1o.mft
File:                     XDIxGVJWbRzhjwiOi7bOq-fnk1o.mft (raw, json)
Hash identifier:          rocPEsY6XTwvSVoiwz2ihd28M9MEVFpjKxX2A1vlzy8=
Subject key identifier:   15:21:68:CC:3D:9B:E4:FD:31:D8:CE:45:4E:5E:6F:10:C4:1F:F0:C4
Authority key identifier: 5C:32:31:19:52:56:6D:1C:E1:8F:08:8E:8B:B6:CE:AB:E7:E7:93:5A
Certificate issuer:       /CN=5c32311952566d1ce18f088e8bb6ceabe7e7935a
Certificate serial:       01962F3DBC4E8D9E731BE0320141BB0C3CDB
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/XDIxGVJWbRzhjwiOi7bOq-fnk1o.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/a0/5dfd89-4d79-4bb6-8bf3-0d38dddb0780/1/XDIxGVJWbRzhjwiOi7bOq-fnk1o.mft
Manifest number:          07B4
Signing time:             Sun 13 Apr 2025 13:01:36 +0000
Manifest this update:     Sun 13 Apr 2025 13:01:36 +0000
Manifest next update:     Mon 14 Apr 2025 13:01:36 +0000
Files and hashes:         1: XDIxGVJWbRzhjwiOi7bOq-fnk1o.crl (hash: MD3vaccqWWNrIGU0wH3iOwkg5otxBP01OoGerfGMsBs=)
                          2: gZbuhHcsb_1lO2Xiu3dypyQrrvI.roa (hash: K0MEtWJdFKd4YOcyYI4uKnZtszhLsEQLNua4LTuOi4s=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2f:3d:bc:4e:8d:9e:73:1b:e0:32:01:41:bb:0c:3c:db
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5c32311952566d1ce18f088e8bb6ceabe7e7935a
        Validity
            Not Before: Apr 13 13:01:36 2025 GMT
            Not After : Apr 14 13:01:36 2025 GMT
        Subject: CN=152168cc3d9be4fd31d8ce454e5e6f10c41ff0c4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:87:03:2f:e0:8a:25:32:d9:0e:cf:d7:e4:22:3f:
                    b3:e8:eb:d0:3f:e6:2f:fa:24:e2:36:77:76:d2:93:
                    a7:5e:a9:0b:c3:d3:a1:66:04:ed:4a:4e:09:0f:56:
                    5a:1b:a6:23:44:85:6d:fd:19:c3:b4:39:3b:fe:c3:
                    30:c4:cd:e3:72:85:30:84:6b:01:81:fe:d8:b8:91:
                    38:ec:ea:e1:dd:2b:a2:0f:02:18:c3:21:71:d1:c2:
                    e8:f7:c0:e8:c9:d8:f4:59:92:c1:20:03:92:08:f3:
                    c1:e3:8a:ea:de:42:bc:75:d5:c6:6b:c4:bc:b3:ed:
                    b2:bd:e3:d7:f6:c9:ea:f8:ae:77:4f:3e:22:c9:d2:
                    db:b7:67:01:17:79:40:fe:a5:38:0c:a9:96:a4:06:
                    70:88:ae:09:75:fd:6a:d0:26:c8:c2:61:4d:0f:61:
                    91:3a:83:53:f2:ef:7a:9c:1e:16:e9:c5:54:38:96:
                    61:06:8e:ff:77:d8:48:8f:75:47:04:04:2f:4c:61:
                    eb:d2:88:ad:9c:56:e1:b1:b5:69:da:d1:e1:69:3a:
                    9e:16:b2:9e:26:fe:7f:a7:32:cd:81:e7:35:10:ed:
                    b7:0d:a4:e1:8b:7e:1e:36:44:6e:9e:16:ab:f7:4e:
                    51:61:44:f3:c9:bf:bd:78:99:9c:2b:4e:45:6d:a1:
                    75:f5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                15:21:68:CC:3D:9B:E4:FD:31:D8:CE:45:4E:5E:6F:10:C4:1F:F0:C4
            X509v3 Authority Key Identifier:
                keyid:5C:32:31:19:52:56:6D:1C:E1:8F:08:8E:8B:B6:CE:AB:E7:E7:93:5A

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/XDIxGVJWbRzhjwiOi7bOq-fnk1o.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a0/5dfd89-4d79-4bb6-8bf3-0d38dddb0780/1/XDIxGVJWbRzhjwiOi7bOq-fnk1o.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/a0/5dfd89-4d79-4bb6-8bf3-0d38dddb0780/1/XDIxGVJWbRzhjwiOi7bOq-fnk1o.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         2a:a4:ce:92:17:f7:24:d8:59:ad:9f:75:72:df:a2:4f:18:d4:
         2d:64:7d:45:29:97:66:5d:7a:6c:f1:a1:15:d4:29:70:a3:c4:
         e0:76:42:00:fc:27:c2:53:63:cf:88:94:16:9f:5a:c3:25:bb:
         c1:fc:0a:6b:fc:d6:4c:6f:2d:ad:b4:24:90:db:f8:0a:94:47:
         29:71:ef:be:20:f7:d2:3d:7b:9f:ee:fe:7e:14:cb:ba:24:2b:
         5f:0e:93:5d:15:d9:70:e3:18:d0:cb:e4:a1:f4:f6:29:d5:ae:
         b6:77:81:e8:2b:fc:d8:5d:ae:6e:06:97:c1:6f:f4:23:e8:c3:
         fb:6b:41:c1:15:98:98:d0:5c:35:c2:b5:50:66:24:ad:fe:c3:
         16:df:c3:00:57:c4:69:18:eb:11:43:fd:3c:c2:ed:22:fb:ef:
         6c:64:f8:a5:d3:a1:cf:aa:0b:01:3e:1f:ce:0a:3e:e9:73:8e:
         fc:8d:6b:c2:b6:c0:63:9e:a1:4d:2e:8b:b5:92:16:ef:3c:bd:
         38:62:d5:b7:8a:b7:93:26:3a:d3:aa:28:49:1c:fe:8c:6d:62:
         5f:e0:35:36:cb:8e:ce:a4:ed:c7:39:bb:5e:e9:c0:18:96:c1:
         04:34:8c:65:be:23:b9:ae:39:0f:10:de:09:c7:86:be:f3:a6:
         b6:82:d6:b7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 14 20:31:19 2025 by rpki-client on console.sobornost.net