Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c7/745768-ba80-4e76-a1d8-bdbe16806616/1/5HZ7Uea0grnnp0g2YqXb7huNhaA.mft
File:                     5HZ7Uea0grnnp0g2YqXb7huNhaA.mft (raw, json)
Hash identifier:          9FwxF7LrovlOshwnMyLHmH1Tj+SulszfpGgX6RpdAP4=
Subject key identifier:   0F:FA:43:BF:32:18:DB:03:AA:9A:06:E8:6D:E0:0B:2A:41:BF:6E:85
Authority key identifier: E4:76:7B:51:E6:B4:82:B9:E7:A7:48:36:62:A5:DB:EE:1B:8D:85:A0
Certificate issuer:       /CN=e4767b51e6b482b9e7a7483662a5dbee1b8d85a0
Certificate serial:       01962F74B9075C1D7FC889C5B6D923245820
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/5HZ7Uea0grnnp0g2YqXb7huNhaA.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/c7/745768-ba80-4e76-a1d8-bdbe16806616/1/5HZ7Uea0grnnp0g2YqXb7huNhaA.mft
Manifest number:          14E9
Signing time:             Sun 13 Apr 2025 14:01:40 +0000
Manifest this update:     Sun 13 Apr 2025 14:01:40 +0000
Manifest next update:     Mon 14 Apr 2025 14:01:40 +0000
Files and hashes:         1: 1-2kAM8E1UL_Pvf9Vzt6AdGfyh8o.roa (hash: Ohp9jg/lWKCAW1pqYiDBNHfJGsbI7n6Nnedeq9nVw0Y=)
                          2: 5HZ7Uea0grnnp0g2YqXb7huNhaA.crl (hash: 0nV5qlH736r88xgF99JpbrUNSG8vxZsUFqJVld/gMNU=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2f:74:b9:07:5c:1d:7f:c8:89:c5:b6:d9:23:24:58:20
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e4767b51e6b482b9e7a7483662a5dbee1b8d85a0
        Validity
            Not Before: Apr 13 14:01:40 2025 GMT
            Not After : Apr 14 14:01:40 2025 GMT
        Subject: CN=0ffa43bf3218db03aa9a06e86de00b2a41bf6e85
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:85:35:4b:cb:f8:58:bf:7a:77:ec:8f:ed:14:46:
                    99:cd:12:a2:de:56:d3:b0:1d:57:70:66:4c:c1:d6:
                    f0:a7:10:a9:65:98:ce:bf:3f:fb:8d:5f:47:cb:a6:
                    fc:bf:57:4b:ea:fa:00:fc:cb:85:32:7f:51:58:48:
                    06:1e:90:1d:fb:9c:8a:4d:67:b0:78:c8:d1:72:87:
                    d1:c6:34:a9:d7:5b:f6:68:e4:af:48:33:4e:6d:5a:
                    e7:24:54:2c:4b:bd:23:22:93:10:b1:04:b0:8f:bf:
                    f2:88:c7:f0:0d:af:1a:aa:3f:09:88:fc:59:69:8c:
                    8a:4c:a8:03:90:ec:1c:f7:a1:cf:10:38:dc:8e:6c:
                    3c:47:c6:90:d1:d9:e6:af:f0:e2:2c:80:95:57:1a:
                    5d:9f:34:4c:06:26:b7:de:02:33:dc:1c:9f:cf:ac:
                    71:c9:e2:e5:51:b8:d3:c9:0e:31:4b:53:47:56:da:
                    b2:7d:3a:e8:e2:ca:3e:1e:fa:fd:3e:78:92:19:0e:
                    d6:7d:f1:5f:14:0c:53:4c:90:3b:b4:4a:ef:8d:26:
                    3f:ab:13:dd:07:70:88:22:a8:23:93:e2:cc:da:fa:
                    59:a9:c7:63:38:98:ed:50:9a:20:07:dc:03:f1:60:
                    bc:f2:02:64:ea:39:9a:42:e8:c8:0d:2b:1f:dd:59:
                    d4:11
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0F:FA:43:BF:32:18:DB:03:AA:9A:06:E8:6D:E0:0B:2A:41:BF:6E:85
            X509v3 Authority Key Identifier:
                keyid:E4:76:7B:51:E6:B4:82:B9:E7:A7:48:36:62:A5:DB:EE:1B:8D:85:A0

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/5HZ7Uea0grnnp0g2YqXb7huNhaA.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c7/745768-ba80-4e76-a1d8-bdbe16806616/1/5HZ7Uea0grnnp0g2YqXb7huNhaA.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/c7/745768-ba80-4e76-a1d8-bdbe16806616/1/5HZ7Uea0grnnp0g2YqXb7huNhaA.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         77:d8:f0:e8:e2:22:d9:db:d5:ee:eb:90:ac:a5:07:fd:4a:5e:
         3d:73:1c:4c:d9:c6:c7:ab:f0:3e:11:51:2e:96:ee:e8:e3:43:
         99:2e:e0:9b:b2:84:01:7b:75:ab:90:c9:65:58:df:86:72:98:
         be:0d:fb:da:c9:16:8a:74:cd:f7:bc:18:cc:4f:98:c9:f1:aa:
         8a:07:38:97:3d:f2:4e:5d:81:3d:61:26:9b:ae:b2:18:3f:39:
         2c:df:26:a7:3d:fe:a3:4d:3c:5c:d6:d8:cf:a3:7d:a7:04:a6:
         16:17:bc:93:fd:bc:69:3e:af:6f:56:39:12:14:cc:0a:d5:6f:
         20:cb:ad:76:50:37:f7:23:d9:ca:87:b6:24:96:b0:74:48:5b:
         d0:51:c8:64:ea:09:30:9d:99:dd:74:6e:e9:b3:d6:f3:af:16:
         21:5f:f2:1f:bd:14:5b:0f:9c:b3:20:17:f5:ed:f0:87:b8:89:
         fe:b4:2f:c4:1c:fa:21:9b:60:a3:8f:75:44:29:e9:a1:d4:9e:
         77:6a:c8:60:d5:29:d8:53:d7:31:64:1e:05:52:0d:a4:05:03:
         dc:34:96:0d:5b:84:ae:11:48:b1:c2:25:31:24:37:e2:6a:80:
         1c:e4:c6:42:8b:6e:d4:c8:4c:fd:38:d7:b6:fb:87:52:be:09:
         16:bf:90:9b
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZYvdLkHXB1/yInFttkjJFggMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGU0NzY3YjUxZTZiNDgyYjllN2E3NDgzNjYyYTVkYmVlMWI4
ZDg1YTAwHhcNMjUwNDEzMTQwMTQwWhcNMjUwNDE0MTQwMTQwWjAzMTEwLwYDVQQD
EygwZmZhNDNiZjMyMThkYjAzYWE5YTA2ZTg2ZGUwMGIyYTQxYmY2ZTg1MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAhTVLy/hYv3p37I/tFEaZzRKi3lbT
sB1XcGZMwdbwpxCpZZjOvz/7jV9Hy6b8v1dL6voA/MuFMn9RWEgGHpAd+5yKTWew
eMjRcofRxjSp11v2aOSvSDNObVrnJFQsS70jIpMQsQSwj7/yiMfwDa8aqj8JiPxZ
aYyKTKgDkOwc96HPEDjcjmw8R8aQ0dnmr/DiLICVVxpdnzRMBia33gIz3Byfz6xx
yeLlUbjTyQ4xS1NHVtqyfTro4so+Hvr9PniSGQ7WffFfFAxTTJA7tErvjSY/qxPd
B3CIIqgjk+LM2vpZqcdjOJjtUJogB9wD8WC88gJk6jmaQujIDSsf3VnUEQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFA/6Q78yGNsDqpoG6G3gCypBv26FMB8GA1UdIwQY
MBaAFOR2e1HmtIK556dINmKl2+4bjYWgMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvNUhaN1VlYTBncm5ucDBnMllxWGI3aHVOaGFBLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jNy83NDU3NjgtYmE4MC00ZTc2LWExZDgt
YmRiZTE2ODA2NjE2LzEvNUhaN1VlYTBncm5ucDBnMllxWGI3aHVOaGFBLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9jNy83NDU3NjgtYmE4MC00ZTc2LWExZDgtYmRiZTE2ODA2NjE2
LzEvNUhaN1VlYTBncm5ucDBnMllxWGI3aHVOaGFBLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAd9jw6OIi
2dvV7uuQrKUH/UpePXMcTNnGx6vwPhFRLpbu6ONDmS7gm7KEAXt1q5DJZVjfhnKY
vg372skWinTN97wYzE+YyfGqigc4lz3yTl2BPWEmm66yGD85LN8mpz3+o008XNbY
z6N9pwSmFhe8k/28aT6vb1Y5EhTMCtVvIMutdlA39yPZyoe2JJawdEhb0FHIZOoJ
MJ2Z3XRu6bPW868WIV/yH70UWw+csyAX9e3wh7iJ/rQvxBz6IZtgo491RCnpodSe
d2rIYNUp2FPXMWQeBVINpAUD3DSWDVuErhFIscIlMSQ34mqAHOTGQotu1MhM/TjX
tvuHUr4JFr+Qmw==
-----END CERTIFICATE-----
Generated at Mon Apr 14 20:32:01 2025 by rpki-client on console.sobornost.net