Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/cd/ba2857-c098-44d2-9c01-e720feb10103/1/I6Qkl5cNZVQd2xWWWOOwpuL1Frc.mft
File:                     I6Qkl5cNZVQd2xWWWOOwpuL1Frc.mft (raw, json)
Hash identifier:          BEz0+CM6nMWf+OoWBBWFWcgfMVd0WHjuqSz+NvOnORg=
Subject key identifier:   EE:1A:CA:ED:56:3D:A1:F3:E4:02:9C:F4:BD:0A:7A:8F:8A:FF:03:DE
Authority key identifier: 23:A4:24:97:97:0D:65:54:1D:DB:15:96:58:E3:B0:A6:E2:F5:16:B7
Certificate issuer:       /CN=23a42497970d65541ddb159658e3b0a6e2f516b7
Certificate serial:       01962F06FB06CE0C769060B92F9E1603530B
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/I6Qkl5cNZVQd2xWWWOOwpuL1Frc.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/cd/ba2857-c098-44d2-9c01-e720feb10103/1/I6Qkl5cNZVQd2xWWWOOwpuL1Frc.mft
Manifest number:          14EB
Signing time:             Sun 13 Apr 2025 12:01:48 +0000
Manifest this update:     Sun 13 Apr 2025 12:01:48 +0000
Manifest next update:     Mon 14 Apr 2025 12:01:48 +0000
Files and hashes:         1: I6Qkl5cNZVQd2xWWWOOwpuL1Frc.crl (hash: cCIg4aUD0NmuUQRavwLSBa35LCvNXwv+AccpGp9Ge1E=)
                          2: MTT1Ia9LOAm3voF-tKlGjmgFAPI.roa (hash: 4bP/TTzv7AEu1D5qKcmPGabc7tnqcf7nz+XM5tO/PTk=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2f:06:fb:06:ce:0c:76:90:60:b9:2f:9e:16:03:53:0b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=23a42497970d65541ddb159658e3b0a6e2f516b7
        Validity
            Not Before: Apr 13 12:01:48 2025 GMT
            Not After : Apr 14 12:01:48 2025 GMT
        Subject: CN=ee1acaed563da1f3e4029cf4bd0a7a8f8aff03de
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e8:43:e9:d2:c3:c3:12:ec:c2:bf:08:a0:28:a6:
                    d2:01:7c:62:e3:16:fe:16:1a:bb:2b:c0:1d:61:b6:
                    2c:5a:54:ec:48:87:a4:de:3e:d7:1a:df:8b:61:9a:
                    4a:83:d8:8e:b9:f7:c5:65:80:53:bb:03:70:a9:ab:
                    22:a1:8f:e8:54:62:c7:f2:e9:6c:73:90:89:bd:5d:
                    9a:c1:c4:74:05:a1:e4:b2:22:a8:9f:67:57:ae:05:
                    5d:bb:2b:68:10:99:95:a9:31:1e:9e:69:16:79:48:
                    05:e8:8f:27:6d:a1:18:7d:5a:5b:a8:86:18:29:83:
                    9f:f1:90:85:f1:a1:36:db:8e:b3:d2:09:1e:c2:38:
                    99:ea:51:08:d8:16:17:ef:88:8f:06:20:8e:07:ab:
                    2b:33:ba:e3:0a:cf:64:36:5b:30:de:c2:f6:65:0f:
                    64:0e:23:47:4f:26:03:73:37:06:24:90:b8:09:a5:
                    21:cf:a0:87:64:72:30:0b:5d:44:62:12:ac:0a:a7:
                    7c:41:a2:6e:f0:92:d3:af:af:ff:f7:6f:a9:97:90:
                    97:f2:4a:a6:63:22:b7:c7:86:d3:bb:ba:c1:d9:93:
                    ac:9e:e5:fc:9f:cc:a6:5c:72:6f:cf:66:b8:50:4f:
                    57:2d:35:59:e2:d3:c1:72:84:80:cf:1f:ad:3c:b5:
                    cf:03
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                EE:1A:CA:ED:56:3D:A1:F3:E4:02:9C:F4:BD:0A:7A:8F:8A:FF:03:DE
            X509v3 Authority Key Identifier:
                keyid:23:A4:24:97:97:0D:65:54:1D:DB:15:96:58:E3:B0:A6:E2:F5:16:B7

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/I6Qkl5cNZVQd2xWWWOOwpuL1Frc.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/cd/ba2857-c098-44d2-9c01-e720feb10103/1/I6Qkl5cNZVQd2xWWWOOwpuL1Frc.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/cd/ba2857-c098-44d2-9c01-e720feb10103/1/I6Qkl5cNZVQd2xWWWOOwpuL1Frc.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         5a:19:5f:6f:1e:c2:3e:d8:2b:a7:2c:cc:16:9c:f4:bf:97:59:
         85:bc:26:5d:d0:b5:62:63:92:be:d3:b9:f4:e4:50:a1:60:73:
         d3:9a:1e:21:c4:e9:eb:6f:11:21:d8:74:9d:a7:01:34:7a:79:
         ab:bd:ed:c8:fb:fa:d8:99:e8:99:b0:4f:41:a7:2d:4a:58:d7:
         27:ca:bc:60:75:1a:ea:cb:5e:08:77:c7:50:43:a2:35:c7:a7:
         bc:db:d6:9a:b8:c7:30:ae:88:96:b9:7a:cc:aa:a2:12:5a:26:
         8f:36:00:27:7c:2e:67:60:11:70:7c:ce:0b:bd:07:ac:73:ef:
         2e:5b:a2:0d:7d:38:10:3d:76:d0:fd:96:c4:97:7f:b9:e9:a7:
         31:2c:19:61:16:4f:57:ad:9f:d6:3e:26:e0:40:b6:9d:ad:9f:
         b4:93:5e:0a:39:26:8a:da:00:32:2e:2b:ff:27:e4:1c:20:97:
         65:32:f7:94:6b:0d:66:f6:3d:97:19:4b:b4:8e:a7:b7:8b:b6:
         7b:18:67:ed:ae:85:82:3a:24:16:7f:30:c3:af:3e:65:21:70:
         04:82:c8:bc:a6:bf:3c:3a:c7:18:59:02:de:e3:b1:27:2e:c7:
         18:80:88:a1:d3:dc:d7:4a:e8:95:06:54:f3:00:65:97:86:b2:
         e6:94:1d:5a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 14 20:32:09 2025 by rpki-client on console.sobornost.net