Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/cf/cf11b4-797b-4820-bfea-53cd91b28c4f/1/Aj9j-yv8YxxE9LttlL3yiz7J3_c.mft
File:                     Aj9j-yv8YxxE9LttlL3yiz7J3_c.mft (raw, json)
Hash identifier:          AJwnEhuZ25YWwvT7tCgXPtbj3P7y21C4ZsglpC/wo6Y=
Subject key identifier:   68:E2:35:6B:66:1F:36:50:4A:FC:4B:29:AE:02:C3:66:23:75:87:F8
Authority key identifier: 02:3F:63:FB:2B:FC:63:1C:44:F4:BB:6D:94:BD:F2:8B:3E:C9:DF:F7
Certificate issuer:       /CN=023f63fb2bfc631c44f4bb6d94bdf28b3ec9dff7
Certificate serial:       01962E61B4F9F14234848C1822EF3DA280D9
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/Aj9j-yv8YxxE9LttlL3yiz7J3_c.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/cf/cf11b4-797b-4820-bfea-53cd91b28c4f/1/Aj9j-yv8YxxE9LttlL3yiz7J3_c.mft
Manifest number:          02F5
Signing time:             Sun 13 Apr 2025 09:01:17 +0000
Manifest this update:     Sun 13 Apr 2025 09:01:17 +0000
Manifest next update:     Mon 14 Apr 2025 09:01:17 +0000
Files and hashes:         1: Aj9j-yv8YxxE9LttlL3yiz7J3_c.crl (hash: nBaWwtIAwZ4Kvu+Q7wmhBdTjIqtZtXxVV/dEyHmb24w=)
                          2: q-0tOhbXBE8z7Hlp7AMLHyIkH0o.roa (hash: clCq9CQNeepLFI/InJwVfW2jsbdMuqRrXN6npNkjGNE=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2e:61:b4:f9:f1:42:34:84:8c:18:22:ef:3d:a2:80:d9
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=023f63fb2bfc631c44f4bb6d94bdf28b3ec9dff7
        Validity
            Not Before: Apr 13 09:01:17 2025 GMT
            Not After : Apr 14 09:01:17 2025 GMT
        Subject: CN=68e2356b661f36504afc4b29ae02c366237587f8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9a:68:bb:63:19:47:8a:66:c3:51:15:8f:a0:b7:
                    13:51:d3:2a:33:10:61:a4:98:32:09:41:f7:f6:36:
                    05:aa:a6:4f:29:87:42:c4:a0:5f:c1:9f:2a:41:d5:
                    8b:a9:15:52:de:54:d8:d7:2e:5a:42:b8:e3:c2:4c:
                    ab:fb:29:a2:21:b0:ae:cb:8d:5b:f3:4a:1e:ab:e1:
                    46:29:6d:d5:9a:06:e9:00:ae:2b:98:2d:1b:c1:2f:
                    ff:b1:56:de:a8:16:e4:8e:e9:ab:e3:dd:1f:15:52:
                    7d:80:a0:9a:cf:b9:d2:79:01:7b:ec:ee:a2:5a:89:
                    e3:58:4a:21:61:34:41:84:f0:d9:e7:a6:f4:38:bb:
                    73:88:bb:f3:ee:73:4d:7c:35:50:f5:97:48:24:22:
                    9c:b0:ac:ed:69:a9:6b:c7:66:60:37:3a:76:cc:b5:
                    7e:7d:73:84:58:0f:43:2d:05:a6:2a:6b:90:a4:a5:
                    a8:6b:f9:c2:cc:d9:40:ca:2f:72:26:fd:f3:db:35:
                    31:25:ef:30:20:b0:84:f4:35:77:44:75:f9:33:d7:
                    5e:d4:66:ea:f3:4c:d1:16:6f:d3:33:2d:6b:53:4d:
                    9b:fb:51:8a:06:ae:52:eb:45:e4:07:11:34:29:eb:
                    d0:31:67:b3:f0:62:9b:d0:a5:3a:0b:e7:4d:62:9b:
                    d0:93
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                68:E2:35:6B:66:1F:36:50:4A:FC:4B:29:AE:02:C3:66:23:75:87:F8
            X509v3 Authority Key Identifier:
                keyid:02:3F:63:FB:2B:FC:63:1C:44:F4:BB:6D:94:BD:F2:8B:3E:C9:DF:F7

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Aj9j-yv8YxxE9LttlL3yiz7J3_c.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/cf/cf11b4-797b-4820-bfea-53cd91b28c4f/1/Aj9j-yv8YxxE9LttlL3yiz7J3_c.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/cf/cf11b4-797b-4820-bfea-53cd91b28c4f/1/Aj9j-yv8YxxE9LttlL3yiz7J3_c.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         3d:3a:13:00:b6:9b:d8:81:48:d6:9c:05:4b:0f:83:b8:54:53:
         a5:95:6f:31:1e:b8:35:44:11:66:70:19:89:55:4b:54:c7:5a:
         4f:36:84:bd:8a:13:4d:9d:dc:28:3a:f3:85:b0:3e:ae:0b:b7:
         ff:37:19:46:97:b0:c6:6e:75:dc:c3:e3:96:5c:a7:43:33:9d:
         b4:a2:b8:88:2b:c4:93:ff:8e:61:da:6f:b8:08:cc:6f:30:1e:
         bc:02:b6:95:ea:2a:32:da:56:e9:4a:2e:ea:37:b8:03:19:6b:
         54:57:02:d1:2e:47:05:23:d5:95:b5:d9:25:ef:c2:fe:7d:e9:
         67:04:1d:ff:4f:06:f4:57:a8:15:25:d8:b7:5a:54:62:10:c7:
         91:c0:ce:3a:f9:8e:aa:0c:0f:e2:a4:ce:05:0c:69:06:4d:35:
         e3:bc:d7:e6:69:fd:28:da:67:d9:ef:7a:29:32:b2:7e:09:ed:
         30:71:af:f8:e3:c2:53:4c:ff:73:0f:03:13:9c:6e:c1:8d:c2:
         35:18:cc:1c:3e:84:ef:62:b2:61:e2:fc:83:03:62:1b:f5:62:
         ce:d4:88:e8:6c:3f:27:33:79:0f:73:d7:f3:f9:31:da:5b:fd:
         23:26:e7:3b:c1:35:bf:68:81:b0:89:f6:94:eb:fa:be:72:c5:
         0c:a1:37:3f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 14 20:32:11 2025 by rpki-client on console.sobornost.net