Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/cb/c03eae-39ae-4002-b66e-04ac0a5e8143/1/FxnQvARM2qI0GAnQAPD8Th3ts0U.mft
File:                     FxnQvARM2qI0GAnQAPD8Th3ts0U.mft (raw, json)
Hash identifier:          a2DvnjbRTuagEf95QxfX4lQr+NrDLDxHpMDAKwDWeR8=
Subject key identifier:   BF:6E:F3:70:DB:CA:71:A4:FE:04:42:0C:63:3D:96:97:11:9B:00:2E
Authority key identifier: 17:19:D0:BC:04:4C:DA:A2:34:18:09:D0:00:F0:FC:4E:1D:ED:B3:45
Certificate issuer:       /CN=1719d0bc044cdaa2341809d000f0fc4e1dedb345
Certificate serial:       01962ECFD60B1BE1F40FA94CE193A6FD0FB7
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/FxnQvARM2qI0GAnQAPD8Th3ts0U.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/cb/c03eae-39ae-4002-b66e-04ac0a5e8143/1/FxnQvARM2qI0GAnQAPD8Th3ts0U.mft
Manifest number:          14EC
Signing time:             Sun 13 Apr 2025 11:01:34 +0000
Manifest this update:     Sun 13 Apr 2025 11:01:34 +0000
Manifest next update:     Mon 14 Apr 2025 11:01:34 +0000
Files and hashes:         1: FxnQvARM2qI0GAnQAPD8Th3ts0U.crl (hash: 74ivv3QwuCbj3sd448cgZn0optJt+TJ6Lp+LKhwLpVM=)
                          2: qrHcalRy_JXYvUIS1tkkzHH6ZPM.roa (hash: B5LhQQeMhbxhyP/euiUVZeJTjZ4f803srjRMUk59y8Q=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2e:cf:d6:0b:1b:e1:f4:0f:a9:4c:e1:93:a6:fd:0f:b7
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1719d0bc044cdaa2341809d000f0fc4e1dedb345
        Validity
            Not Before: Apr 13 11:01:34 2025 GMT
            Not After : Apr 14 11:01:34 2025 GMT
        Subject: CN=bf6ef370dbca71a4fe04420c633d9697119b002e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8e:0b:76:cf:0b:7e:3b:66:9f:bb:dc:31:33:7f:
                    9b:08:8e:e7:4d:66:1e:a2:2c:9f:a3:e0:ef:0b:c3:
                    b5:cf:3a:a9:56:ff:d6:6f:8d:ae:99:9d:0b:ed:34:
                    93:cf:6d:4b:b2:a7:a0:01:f9:9c:ad:20:fd:c9:c2:
                    8f:66:57:7d:a5:2c:90:b6:ff:9a:23:f3:da:26:ab:
                    ac:09:cd:c9:4f:ec:ae:49:42:be:20:ed:d1:a8:4f:
                    a4:a6:de:58:38:e3:43:e0:7a:bf:08:13:f4:ed:98:
                    b3:8b:de:9e:a2:00:92:2a:19:0d:c9:4c:74:b6:63:
                    a3:9e:a6:46:f5:31:93:2f:e0:25:7b:4d:d6:37:8a:
                    3a:64:f1:4e:d7:3a:ba:29:16:32:70:09:5c:37:3a:
                    6e:ae:c9:6e:37:1c:f8:df:da:88:df:6e:aa:01:03:
                    1a:fe:ef:0e:68:cb:7b:6b:66:08:f6:9d:9d:1d:f3:
                    e7:ec:41:b9:7a:1a:d4:cf:48:62:12:84:9e:63:ab:
                    3e:32:99:56:fa:4a:5b:d7:4d:80:f8:b0:2a:38:e1:
                    cb:d1:10:c5:72:37:8f:13:98:a7:c3:38:c3:b1:82:
                    3f:85:17:9e:05:95:9a:77:03:89:d9:16:0c:42:10:
                    b9:3c:57:78:a4:61:2a:dc:a5:45:00:c4:57:f7:be:
                    7e:c9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BF:6E:F3:70:DB:CA:71:A4:FE:04:42:0C:63:3D:96:97:11:9B:00:2E
            X509v3 Authority Key Identifier:
                keyid:17:19:D0:BC:04:4C:DA:A2:34:18:09:D0:00:F0:FC:4E:1D:ED:B3:45

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/FxnQvARM2qI0GAnQAPD8Th3ts0U.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/cb/c03eae-39ae-4002-b66e-04ac0a5e8143/1/FxnQvARM2qI0GAnQAPD8Th3ts0U.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/cb/c03eae-39ae-4002-b66e-04ac0a5e8143/1/FxnQvARM2qI0GAnQAPD8Th3ts0U.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         67:7c:69:57:17:7f:f6:0e:94:86:89:55:df:47:ef:cc:af:b9:
         2f:b6:c4:7f:bc:f5:ad:a8:63:f5:90:8d:33:b3:93:60:27:68:
         e5:2e:59:15:61:1b:06:6a:3e:d7:d0:9f:2e:86:da:9f:bb:6d:
         de:57:94:0f:6c:99:a0:e9:1b:8b:81:65:4e:83:a7:cb:f8:a3:
         8d:0e:75:5a:37:84:95:48:01:56:f2:a4:6f:75:f9:bd:26:35:
         ad:29:ab:40:5b:c3:33:90:5a:05:9a:74:b6:29:d3:4d:a2:b2:
         0d:f6:b5:fc:79:f7:2b:0b:88:22:f4:73:76:63:79:2e:f7:71:
         7b:41:0b:97:0a:0b:58:95:0b:3e:77:db:45:7e:88:a8:64:d9:
         11:cd:22:c2:c5:fe:1b:75:95:f7:18:07:62:80:b8:c0:76:73:
         ca:76:14:af:fb:67:5c:9a:1f:84:52:b5:3b:88:a9:43:02:76:
         77:fd:7f:89:62:00:db:e6:b6:00:fa:ad:d5:89:33:94:34:3c:
         a5:e0:7d:04:e3:66:d6:4a:89:58:77:53:23:30:49:fa:0c:59:
         78:dc:f0:3d:e3:7b:8f:fd:37:4b:cc:7d:ba:1e:ef:3f:2c:b2:
         ca:1d:ef:f3:3c:64:38:3c:f1:92:bc:c7:f1:5f:ba:d2:92:66:
         c3:0f:18:80
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 14 20:32:04 2025 by rpki-client on console.sobornost.net