Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/cf/b74aa2-25e0-4ad5-8cc3-69061ef2c499/1/uNI7HmwH5iry0ufrbeCJOwkRmrs.mft
File:                     uNI7HmwH5iry0ufrbeCJOwkRmrs.mft (raw, json)
Hash identifier:          bobZEOXiZ3E++u9ZtQ3JrE3tN1z6snsrd9zqh8zS+eA=
Subject key identifier:   29:25:2D:B1:7F:7A:9A:F6:ED:DB:7A:1F:65:21:7A:62:71:BA:B4:F7
Authority key identifier: B8:D2:3B:1E:6C:07:E6:2A:F2:D2:E7:EB:6D:E0:89:3B:09:11:9A:BB
Certificate issuer:       /CN=b8d23b1e6c07e62af2d2e7eb6de0893b09119abb
Certificate serial:       01962DF3E35F3CA95E24B56DC8057953E66C
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/uNI7HmwH5iry0ufrbeCJOwkRmrs.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/cf/b74aa2-25e0-4ad5-8cc3-69061ef2c499/1/uNI7HmwH5iry0ufrbeCJOwkRmrs.mft
Manifest number:          14AF
Signing time:             Sun 13 Apr 2025 07:01:20 +0000
Manifest this update:     Sun 13 Apr 2025 07:01:20 +0000
Manifest next update:     Mon 14 Apr 2025 07:01:20 +0000
Files and hashes:         1: i2eJrEfelYQqyMxjfIMrwo3xZoE.roa (hash: bJaj1yoLKIUnxfE/GQdxLjgX2i4lI/zxxe1rr7T/GTo=)
                          2: uNI7HmwH5iry0ufrbeCJOwkRmrs.crl (hash: U74qMj3edqHHMXRLCj+stNhTJGptxs/g0GGPS+jhkLw=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2d:f3:e3:5f:3c:a9:5e:24:b5:6d:c8:05:79:53:e6:6c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b8d23b1e6c07e62af2d2e7eb6de0893b09119abb
        Validity
            Not Before: Apr 13 07:01:20 2025 GMT
            Not After : Apr 14 07:01:20 2025 GMT
        Subject: CN=29252db17f7a9af6eddb7a1f65217a6271bab4f7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:89:8e:96:66:66:d3:65:bd:94:f2:69:a0:84:34:
                    9b:8f:3b:d3:c3:6e:eb:00:3b:a1:93:8c:72:ae:8d:
                    c5:ab:ea:5c:9d:d5:c8:6e:e9:37:b6:1a:fc:86:f0:
                    00:f4:8d:8c:c6:5b:ce:7a:ad:bb:93:a1:44:62:dc:
                    eb:e1:c1:93:ee:b4:91:e3:50:de:49:98:ae:25:46:
                    c2:f9:7f:9e:c0:14:0d:12:6b:97:4e:66:8d:a8:af:
                    8a:35:86:71:95:2a:5f:b4:cf:95:35:7b:09:22:bf:
                    38:76:db:90:0a:b6:7e:a1:c5:ea:b3:91:49:26:b4:
                    75:99:41:74:45:a9:bd:8e:87:36:f8:4f:65:5a:ad:
                    48:df:0c:38:df:eb:07:75:24:45:31:de:0a:c2:fe:
                    0b:05:32:ac:6e:87:9a:06:df:43:bd:a8:ed:50:b6:
                    2e:45:e3:56:c7:9b:43:06:38:d5:e6:08:2e:1d:f3:
                    b7:92:ea:6d:78:dc:76:8a:9a:d3:97:7d:3a:90:03:
                    13:ce:0b:9b:62:a0:6f:b6:f8:6c:40:38:6e:6a:2d:
                    ea:af:d3:40:f6:d1:d4:40:04:9b:27:c5:00:e0:9b:
                    17:97:d8:03:fd:5b:a5:1c:dc:d7:7f:ce:6c:7c:59:
                    23:f4:4d:fb:d5:92:98:8e:c2:9d:9a:36:fd:d3:b5:
                    23:0d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                29:25:2D:B1:7F:7A:9A:F6:ED:DB:7A:1F:65:21:7A:62:71:BA:B4:F7
            X509v3 Authority Key Identifier:
                keyid:B8:D2:3B:1E:6C:07:E6:2A:F2:D2:E7:EB:6D:E0:89:3B:09:11:9A:BB

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/uNI7HmwH5iry0ufrbeCJOwkRmrs.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/cf/b74aa2-25e0-4ad5-8cc3-69061ef2c499/1/uNI7HmwH5iry0ufrbeCJOwkRmrs.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/cf/b74aa2-25e0-4ad5-8cc3-69061ef2c499/1/uNI7HmwH5iry0ufrbeCJOwkRmrs.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         63:f9:01:cd:af:0f:19:e5:53:77:08:10:a6:a0:13:c0:7c:e7:
         07:1c:41:c0:ae:86:b5:53:5e:21:58:15:0e:8e:d9:11:80:c1:
         6c:04:41:10:4e:27:83:56:85:a3:aa:40:5b:92:9c:9c:dd:06:
         aa:48:9c:55:b8:42:4c:74:a9:7e:f9:f4:f2:7e:f0:3a:54:bd:
         ff:d0:86:fd:1d:68:d6:9d:d6:db:79:ce:45:b2:bb:83:b7:8e:
         1d:7e:90:31:d6:a2:d9:42:01:a0:16:52:28:ee:52:c8:8f:06:
         e5:95:de:9e:91:80:c8:55:74:e7:7c:41:34:96:24:02:12:95:
         4c:0a:92:58:17:cb:54:d6:16:93:c2:92:d2:77:60:2e:e1:69:
         52:06:86:f6:da:34:12:ec:5f:29:54:64:9b:ae:3e:f8:8e:97:
         a7:64:d2:88:58:3a:41:bf:53:46:e3:e1:a5:1a:87:97:94:8b:
         55:d2:fe:93:49:5b:fb:d2:aa:8b:a9:93:bb:c1:cd:d5:59:8c:
         0f:0d:34:2d:bd:44:83:3d:7f:62:71:df:bc:a6:be:c1:4d:0f:
         15:09:9a:8f:0c:cc:51:62:b6:49:27:20:e7:29:12:cb:34:e2:
         28:7f:18:4b:ec:c0:79:fe:fc:cf:b9:81:96:68:61:0b:6e:7f:
         71:1e:1a:56
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 14 20:32:11 2025 by rpki-client on console.sobornost.net