Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d4/50013a-fb19-45cf-ad8a-326c1e370bcf/1/ggYltmnomnWueN8AgdbwG2fHs88.mft
File:                     ggYltmnomnWueN8AgdbwG2fHs88.mft (raw, json)
Hash identifier:          UVxFwAoE6bNXX3HUGp6cAIhyvFEW8Q3gRhjsRS7dnvw=
Subject key identifier:   0E:0E:5A:35:51:A0:B8:AC:6D:82:21:59:7C:30:71:6E:F0:19:9C:25
Authority key identifier: 82:06:25:B6:69:E8:9A:75:AE:78:DF:00:81:D6:F0:1B:67:C7:B3:CF
Certificate issuer:       /CN=820625b669e89a75ae78df0081d6f01b67c7b3cf
Certificate serial:       0195C874D485D740201912DD17649A920E22
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/ggYltmnomnWueN8AgdbwG2fHs88.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/d4/50013a-fb19-45cf-ad8a-326c1e370bcf/1/ggYltmnomnWueN8AgdbwG2fHs88.mft
Manifest number:          07F6
Signing time:             Mon 24 Mar 2025 14:00:54 +0000
Manifest this update:     Mon 24 Mar 2025 14:00:54 +0000
Manifest next update:     Tue 25 Mar 2025 14:00:54 +0000
Files and hashes:         1: 9I-u6ADQVIEsYEnt-98udkV7KQs.roa (hash: G/Ydupvv9a8XmxtOC6F7xHpIIcne60flzttt+W4vJNA=)
                          2: ggYltmnomnWueN8AgdbwG2fHs88.crl (hash: nh+vajw1LXRgazkF+khkcMPx9LEQI+JiZZjPzW00pzw=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:95:c8:74:d4:85:d7:40:20:19:12:dd:17:64:9a:92:0e:22
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=820625b669e89a75ae78df0081d6f01b67c7b3cf
        Validity
            Not Before: Mar 24 14:00:54 2025 GMT
            Not After : Mar 25 14:00:54 2025 GMT
        Subject: CN=0e0e5a3551a0b8ac6d8221597c30716ef0199c25
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8d:80:79:11:2c:f0:79:31:8a:e9:28:15:18:63:
                    d9:ae:d2:bb:b6:c8:ee:0c:86:aa:a9:8d:09:a5:06:
                    1c:d0:03:fe:76:d8:09:fa:a0:c8:6c:07:cd:56:1d:
                    8e:b5:d5:d8:0f:c2:79:92:07:db:f0:63:5f:c8:cd:
                    30:ed:aa:1f:a4:6c:78:c5:d3:8c:a5:ab:7e:76:0d:
                    d9:5f:4f:0d:b3:0c:90:1c:23:88:79:a8:30:a0:06:
                    6e:dd:f8:e6:14:f4:f3:0c:e5:32:5d:a3:f3:5d:c1:
                    90:0d:9c:6c:6e:d4:a8:98:90:34:aa:05:4a:d5:7f:
                    0a:f7:88:27:80:4d:a3:60:dc:6c:6f:5d:b7:c1:bb:
                    b5:9d:90:84:ba:59:d6:0f:9c:69:54:49:d8:4b:79:
                    af:64:18:fd:8c:b7:de:73:1a:05:64:37:f5:07:84:
                    4c:9b:40:62:1a:c3:a4:a7:12:36:2a:f2:8a:72:51:
                    f0:95:3b:1c:e4:17:3a:93:f7:ae:a8:e2:65:83:f8:
                    30:13:85:be:0a:51:91:2a:9f:98:66:89:dc:30:c5:
                    ab:33:f8:cc:18:fb:8b:af:cd:1b:d3:51:9f:2e:3f:
                    3a:31:07:8c:e0:af:a7:cb:0e:d1:71:c8:7c:5b:ab:
                    85:1c:e0:9b:b1:e8:e9:2a:0d:51:a3:a6:f1:fd:df:
                    8e:51
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0E:0E:5A:35:51:A0:B8:AC:6D:82:21:59:7C:30:71:6E:F0:19:9C:25
            X509v3 Authority Key Identifier:
                keyid:82:06:25:B6:69:E8:9A:75:AE:78:DF:00:81:D6:F0:1B:67:C7:B3:CF

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ggYltmnomnWueN8AgdbwG2fHs88.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d4/50013a-fb19-45cf-ad8a-326c1e370bcf/1/ggYltmnomnWueN8AgdbwG2fHs88.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/d4/50013a-fb19-45cf-ad8a-326c1e370bcf/1/ggYltmnomnWueN8AgdbwG2fHs88.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         bc:0a:ad:a7:20:23:05:f8:81:ad:b7:af:38:77:7c:8b:fb:ca:
         d7:af:58:6b:6c:da:86:84:68:a2:70:ff:71:4e:5c:8e:5a:4e:
         f1:d9:90:e6:3d:12:bc:2f:24:c7:a3:2b:14:4f:97:ff:43:e3:
         24:f8:ae:35:07:91:7f:2d:c4:5f:9a:db:5f:20:04:d1:e6:0e:
         8f:a4:df:5e:59:5d:6b:0d:3d:80:91:c6:cf:1f:c1:9b:99:74:
         c8:98:e2:1c:19:3e:c3:75:6e:30:4a:6c:ab:5c:8d:7a:9d:a1:
         1e:1a:51:04:2b:73:2f:0d:ef:00:ae:dd:29:42:66:2a:19:d7:
         dd:5a:92:75:99:de:fc:5f:04:cb:61:ca:b9:c1:b8:aa:99:9f:
         b6:a3:90:b5:61:45:fc:c8:78:f0:11:af:3a:40:db:60:b3:42:
         30:ee:49:84:92:8d:f3:be:70:91:9b:e3:ae:a2:d2:90:9b:96:
         f8:87:66:a0:3d:67:7f:ec:7c:d8:b3:d3:ae:78:1b:d2:0e:1b:
         c4:0f:90:79:64:0e:16:a3:30:3f:61:77:5d:8e:34:aa:d1:c7:
         96:0e:c1:30:d4:d9:78:87:78:30:47:da:ae:11:52:c8:e0:01:
         4e:13:65:87:46:15:26:de:fd:4c:9d:79:59:e3:ae:5d:bb:86:
         63:c1:5b:86
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Mar 25 22:17:15 2025 by rpki-client on console.sobornost.net