Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c3/2854f2-82d7-42bd-acbc-d08a9cdec986/1/mmIOaR2Vqs6zJi29_LDKUJnuJEQ.mft
File:                     mmIOaR2Vqs6zJi29_LDKUJnuJEQ.mft (raw, json)
Hash identifier:          4AvhF5/MR//PbP416455lgJAFDvZN4tp6rss62Ddlbs=
Subject key identifier:   59:10:D1:E9:53:5E:D6:CE:B8:4B:6B:6A:92:DE:45:ED:16:29:E0:77
Authority key identifier: 9A:62:0E:69:1D:95:AA:CE:B3:26:2D:BD:FC:B0:CA:50:99:EE:24:44
Certificate issuer:       /CN=9a620e691d95aaceb3262dbdfcb0ca5099ee2444
Certificate serial:       01962E9920A070E4565E51162B6936A72AC0
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/mmIOaR2Vqs6zJi29_LDKUJnuJEQ.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/c3/2854f2-82d7-42bd-acbc-d08a9cdec986/1/mmIOaR2Vqs6zJi29_LDKUJnuJEQ.mft
Manifest number:          0C4B
Signing time:             Sun 13 Apr 2025 10:01:49 +0000
Manifest this update:     Sun 13 Apr 2025 10:01:49 +0000
Manifest next update:     Mon 14 Apr 2025 10:01:49 +0000
Files and hashes:         1: 0qrwU3AHf3uhnYK1JVGdBCRu6z8.roa (hash: /kYhLDLgGmD/nuK1uy52fNBM98m/fU6G1KeanfyrJjY=)
                          2: mmIOaR2Vqs6zJi29_LDKUJnuJEQ.crl (hash: DhlFavbgTmcVNDmpeDUnYsKPvMj12cQ+FKrcxY7UlQ0=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2e:99:20:a0:70:e4:56:5e:51:16:2b:69:36:a7:2a:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9a620e691d95aaceb3262dbdfcb0ca5099ee2444
        Validity
            Not Before: Apr 13 10:01:49 2025 GMT
            Not After : Apr 14 10:01:49 2025 GMT
        Subject: CN=5910d1e9535ed6ceb84b6b6a92de45ed1629e077
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b8:43:32:fd:3d:3b:35:43:6e:c7:07:fc:a0:0d:
                    bf:c2:80:7d:b7:df:f4:41:4b:b0:8f:73:34:a3:4e:
                    28:0f:cf:72:db:19:0a:f0:78:ff:0e:dc:77:45:95:
                    08:46:5b:dd:57:b5:74:99:7b:ae:98:dc:14:2d:85:
                    70:1b:76:02:b2:18:f0:1a:6c:df:c3:55:a9:2e:b0:
                    c3:fc:c1:f9:be:89:4e:b1:85:97:58:6a:8a:3e:59:
                    32:6a:bd:c6:01:e4:2e:02:0d:5b:bf:c3:e8:09:2e:
                    1d:62:3a:8b:b3:aa:b7:0a:03:9e:7e:dc:bb:a0:da:
                    b9:f9:14:a3:0d:06:25:b6:2f:d5:35:25:ff:68:e1:
                    52:db:97:41:9a:d4:fe:c8:86:f2:38:27:fb:70:21:
                    fb:b7:f9:a8:69:61:d5:39:1c:45:cb:2d:92:71:a0:
                    f1:67:98:9f:42:a8:39:99:26:80:4d:15:60:6e:50:
                    9d:10:37:f9:1d:e6:63:b3:bf:50:49:b3:d2:e3:e7:
                    11:be:b1:18:22:b9:49:f5:15:6f:bf:a6:7d:74:15:
                    ed:0d:1e:44:df:46:6c:9f:8c:6e:d7:3e:b8:08:c5:
                    f3:d8:cd:7c:bd:69:48:e5:ca:b0:be:0c:16:d6:a9:
                    d1:95:b2:60:ff:f7:9c:22:e0:2c:12:bf:de:8d:0d:
                    c5:bd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                59:10:D1:E9:53:5E:D6:CE:B8:4B:6B:6A:92:DE:45:ED:16:29:E0:77
            X509v3 Authority Key Identifier:
                keyid:9A:62:0E:69:1D:95:AA:CE:B3:26:2D:BD:FC:B0:CA:50:99:EE:24:44

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/mmIOaR2Vqs6zJi29_LDKUJnuJEQ.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c3/2854f2-82d7-42bd-acbc-d08a9cdec986/1/mmIOaR2Vqs6zJi29_LDKUJnuJEQ.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/c3/2854f2-82d7-42bd-acbc-d08a9cdec986/1/mmIOaR2Vqs6zJi29_LDKUJnuJEQ.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         10:94:7d:7d:92:11:83:9b:75:c1:5c:69:37:28:f8:fd:cf:58:
         af:ee:fe:de:fb:46:66:bd:2e:be:db:41:ab:06:d4:91:ea:9f:
         64:16:38:20:7a:e1:4e:ff:b6:4a:d3:af:32:d9:de:32:9c:f4:
         60:80:64:38:a0:c0:98:6f:d7:60:59:a2:7d:90:6c:49:79:8e:
         cc:92:93:37:21:ed:8f:2c:4a:fe:bb:fa:e0:e3:be:45:ea:84:
         70:15:a6:b4:93:0f:60:08:f4:a6:19:e7:d4:f8:84:ea:33:87:
         8e:4e:8b:0c:c4:1f:bd:d2:36:8e:15:d0:b4:fe:03:ec:e2:5d:
         6c:c1:28:28:63:7f:68:e9:30:fd:d3:70:8a:8a:e2:df:17:25:
         7d:01:a1:a6:c3:65:89:ab:2b:e7:5e:f9:ea:4c:50:fe:24:ef:
         55:2e:da:35:d1:55:02:33:61:e6:85:86:ae:27:4c:af:75:ff:
         43:72:e6:cb:37:87:26:76:75:d6:cc:ee:04:43:9e:63:7b:c3:
         3a:e3:10:78:22:e9:ba:74:80:a1:c7:27:bc:84:70:94:1d:c6:
         68:e8:05:2a:bc:50:5e:76:6c:b9:39:df:95:e6:58:b4:06:e6:
         10:13:0b:4d:59:df:74:d2:53:43:93:c1:fc:25:b6:2e:ba:69:
         fa:aa:d1:46
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 14 20:31:58 2025 by rpki-client on console.sobornost.net