Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a6/b29205-0777-4eb0-8c13-3bc5dde542c3/1/JGDLdNAZgkw0siOu1McJqFeyxgY.mft
File:                     JGDLdNAZgkw0siOu1McJqFeyxgY.mft (raw, json)
Hash identifier:          bfqhily8UyoWOeo49tyDTDEgswHnkytyPSVDEel2WFc=
Subject key identifier:   32:DB:8E:60:69:AF:96:F6:13:29:B2:69:7C:71:04:5D:0C:C4:30:32
Authority key identifier: 24:60:CB:74:D0:19:82:4C:34:B2:23:AE:D4:C7:09:A8:57:B2:C6:06
Certificate issuer:       /CN=2460cb74d019824c34b223aed4c709a857b2c606
Certificate serial:       01962FAB9EF7ABDB85DA6BE2B1B308190723
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/JGDLdNAZgkw0siOu1McJqFeyxgY.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/a6/b29205-0777-4eb0-8c13-3bc5dde542c3/1/JGDLdNAZgkw0siOu1McJqFeyxgY.mft
Manifest number:          0368
Signing time:             Sun 13 Apr 2025 15:01:38 +0000
Manifest this update:     Sun 13 Apr 2025 15:01:38 +0000
Manifest next update:     Mon 14 Apr 2025 15:01:38 +0000
Files and hashes:         1: JGDLdNAZgkw0siOu1McJqFeyxgY.crl (hash: Q1+RmOC1GW/aSwCX0y+5t+40vSKc5YocYMYwSQxXduQ=)
                          2: Po9Kd95ItrzwaoslHVQ8GkKDEsg.roa (hash: TRai4O+tEgZgd6yxFrk6Ul1AehRTWxDzlup3pEvU2bY=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2f:ab:9e:f7:ab:db:85:da:6b:e2:b1:b3:08:19:07:23
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2460cb74d019824c34b223aed4c709a857b2c606
        Validity
            Not Before: Apr 13 15:01:38 2025 GMT
            Not After : Apr 14 15:01:38 2025 GMT
        Subject: CN=32db8e6069af96f61329b2697c71045d0cc43032
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bd:d1:33:e5:c6:5e:b5:b3:de:94:ab:d3:73:55:
                    c4:bf:58:5a:cb:12:e3:bc:d2:ce:53:35:ba:36:7f:
                    00:be:5a:7c:06:4e:8d:f8:3e:e4:7e:5d:56:e5:65:
                    3b:1b:e1:18:ab:f1:db:1a:ef:49:d2:80:1c:82:96:
                    9c:c8:2b:0c:e5:54:75:9a:70:8e:bb:6c:61:12:44:
                    0b:ae:28:ba:6b:b5:f4:31:8a:d7:62:7b:bf:2c:78:
                    82:3b:18:f3:6a:9a:c2:74:40:eb:0e:8d:05:db:44:
                    b5:42:54:6b:15:1d:15:69:74:ce:a4:e7:45:66:e6:
                    99:ac:e7:7f:21:53:bf:0c:05:19:c6:74:24:a1:95:
                    2d:30:d4:9f:82:91:7e:ee:63:16:e9:37:14:5a:6e:
                    65:03:ba:7d:e5:58:23:f5:b1:17:e5:ec:98:30:cd:
                    d2:65:fd:3a:d6:89:b4:29:8d:b3:24:50:d4:83:05:
                    c9:db:4e:21:bb:7f:0d:07:16:f2:07:9b:5d:5b:f2:
                    21:fc:cd:23:16:27:cb:57:45:6c:fd:b6:c9:2c:1a:
                    82:cd:ec:96:29:3a:6d:38:96:d6:9e:84:64:39:83:
                    a1:67:a4:4f:b4:6b:da:7e:9a:9a:4b:38:f7:8f:c4:
                    a7:62:35:53:35:58:a5:9d:cb:f0:6c:82:a9:89:13:
                    a0:69
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                32:DB:8E:60:69:AF:96:F6:13:29:B2:69:7C:71:04:5D:0C:C4:30:32
            X509v3 Authority Key Identifier:
                keyid:24:60:CB:74:D0:19:82:4C:34:B2:23:AE:D4:C7:09:A8:57:B2:C6:06

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/JGDLdNAZgkw0siOu1McJqFeyxgY.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a6/b29205-0777-4eb0-8c13-3bc5dde542c3/1/JGDLdNAZgkw0siOu1McJqFeyxgY.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/a6/b29205-0777-4eb0-8c13-3bc5dde542c3/1/JGDLdNAZgkw0siOu1McJqFeyxgY.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         0c:cd:3b:f1:9b:bb:7a:ee:82:ee:2d:c4:cd:a5:61:8b:cc:01:
         e8:cb:5e:d6:2f:3e:69:f4:02:9e:0d:39:88:09:b2:75:b8:57:
         0d:30:f1:5d:2c:be:d1:da:ff:fc:50:41:e1:86:28:65:d6:9b:
         17:96:19:6b:94:9e:09:8d:3b:b0:3c:30:ab:56:f0:07:7d:c6:
         1e:13:da:e5:e8:e7:df:5e:35:76:f8:b7:6b:dc:d5:aa:18:5e:
         07:53:e2:38:0d:c7:fa:ed:03:2f:c8:f8:d0:c6:4b:94:e8:6e:
         6b:30:16:70:48:16:91:e8:ca:3e:42:90:da:e0:95:2d:ed:ea:
         86:85:87:46:04:6d:7f:3f:97:ab:4b:3c:cb:0d:9f:3f:07:c7:
         79:b3:a4:6b:55:a9:72:10:d8:c8:fd:81:a0:bf:cd:45:bb:9c:
         7a:ca:17:d6:dc:75:d0:1c:63:22:f5:c8:a8:92:fc:13:b6:80:
         c9:f4:5e:8e:ed:95:bb:60:4e:8c:23:05:47:de:d9:2d:ce:31:
         20:29:64:32:ad:dc:91:6e:69:b2:cd:ad:8a:de:34:3a:1a:d6:
         e5:bc:a6:85:39:d7:b9:ec:bd:78:f0:fa:27:45:06:f0:74:e1:
         f0:50:36:e4:8b:d6:bd:3f:d4:65:08:76:8c:ce:9b:ed:a1:18:
         0d:32:8c:a1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 14 20:31:28 2025 by rpki-client on console.sobornost.net