Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d4/953550-0266-4f2e-8dc3-7f4bd9b54e62/1/ckUYpXBpyv2D4htcYPsmLY7fNCs.mft
File:                     ckUYpXBpyv2D4htcYPsmLY7fNCs.mft (raw, json)
Hash identifier:          LVXlzHjDudrZIRXPan8Cn97qgP9QbAVckhr6Jk5v7gc=
Subject key identifier:   3A:D2:13:98:9C:77:8D:19:40:4D:1D:8E:A6:AF:5A:91:8E:F6:4A:0C
Authority key identifier: 72:45:18:A5:70:69:CA:FD:83:E2:1B:5C:60:FB:26:2D:8E:DF:34:2B
Certificate issuer:       /CN=724518a57069cafd83e21b5c60fb262d8edf342b
Certificate serial:       01962E997CFE0283BDA1E0A30EB84F323D87
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/ckUYpXBpyv2D4htcYPsmLY7fNCs.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/d4/953550-0266-4f2e-8dc3-7f4bd9b54e62/1/ckUYpXBpyv2D4htcYPsmLY7fNCs.mft
Manifest number:          14ED
Signing time:             Sun 13 Apr 2025 10:02:12 +0000
Manifest this update:     Sun 13 Apr 2025 10:02:12 +0000
Manifest next update:     Mon 14 Apr 2025 10:02:12 +0000
Files and hashes:         1: VntpOhfdioRatCH4o3GkTZdOjlc.roa (hash: gcIiYrJNp2HrQ1a0bBTw3kNV/tkPu/21t2SyNmL8svY=)
                          2: ckUYpXBpyv2D4htcYPsmLY7fNCs.crl (hash: egyp27rs3YHCShR1IBentig6nD5w2c9cfF9RP/a0ke4=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2e:99:7c:fe:02:83:bd:a1:e0:a3:0e:b8:4f:32:3d:87
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=724518a57069cafd83e21b5c60fb262d8edf342b
        Validity
            Not Before: Apr 13 10:02:12 2025 GMT
            Not After : Apr 14 10:02:12 2025 GMT
        Subject: CN=3ad213989c778d19404d1d8ea6af5a918ef64a0c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b6:d4:fb:29:a1:55:b6:5f:5a:75:61:52:75:a4:
                    a3:40:cf:0c:83:fd:56:29:92:16:2e:5d:0a:02:2f:
                    62:fb:23:8e:3b:c8:29:1e:d4:b3:fa:48:d9:e8:c0:
                    aa:8e:cd:0b:3e:1e:43:20:32:2c:8b:9b:e8:03:a1:
                    39:5c:1f:d8:c4:5a:52:52:bb:d9:f7:a1:eb:f4:65:
                    66:de:14:c7:96:f4:8b:4a:7b:84:9a:7e:d0:71:2e:
                    8b:f1:c7:e4:71:5e:a1:12:6b:7d:f5:7b:88:3c:59:
                    85:04:86:61:18:94:db:01:cf:53:d4:57:c1:f7:29:
                    b4:fe:40:1a:22:50:d9:86:4f:fb:1e:74:4a:64:78:
                    d6:c0:57:aa:3a:bd:c1:48:e7:24:34:41:06:4c:5a:
                    61:fc:a4:4a:66:e1:ff:dc:c9:8c:7f:d0:18:24:5e:
                    6b:0e:4d:12:d2:2c:5a:30:72:cb:75:95:13:45:ce:
                    01:f8:9c:88:b0:82:21:ce:f5:5f:a8:19:76:c3:ec:
                    33:36:a9:fe:c4:c3:0c:6b:04:41:b9:06:0b:8b:cf:
                    64:56:8f:5d:b6:6b:36:a0:52:6b:1f:a2:22:46:37:
                    b4:03:a1:25:79:0d:f5:96:56:7a:17:46:20:e2:62:
                    6e:87:dd:98:63:a3:17:4b:a5:e4:23:67:2f:3a:2a:
                    0f:55
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3A:D2:13:98:9C:77:8D:19:40:4D:1D:8E:A6:AF:5A:91:8E:F6:4A:0C
            X509v3 Authority Key Identifier:
                keyid:72:45:18:A5:70:69:CA:FD:83:E2:1B:5C:60:FB:26:2D:8E:DF:34:2B

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ckUYpXBpyv2D4htcYPsmLY7fNCs.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d4/953550-0266-4f2e-8dc3-7f4bd9b54e62/1/ckUYpXBpyv2D4htcYPsmLY7fNCs.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/d4/953550-0266-4f2e-8dc3-7f4bd9b54e62/1/ckUYpXBpyv2D4htcYPsmLY7fNCs.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         75:c4:50:65:7e:83:9c:12:42:a0:c8:ae:7b:81:4e:4b:d2:9c:
         7b:7c:8e:cf:d5:0d:48:ca:0b:d6:ef:ed:b5:97:e5:ad:b2:6b:
         81:8d:a3:d5:90:12:8c:25:97:c3:de:d4:2c:01:1a:28:e5:9a:
         e1:2b:c1:a3:18:06:88:28:28:b0:9b:f1:5c:26:54:4a:9d:7a:
         99:08:11:eb:b6:5a:98:c3:b0:b3:e7:f2:70:8b:79:c4:76:f7:
         8a:84:59:2e:33:c4:4f:cd:f6:14:11:3c:ff:e7:3c:4e:81:12:
         81:eb:28:e5:ea:9c:2e:de:a8:80:98:98:59:c7:44:88:0c:13:
         c9:0d:f1:35:d4:3f:6a:cd:6c:f3:83:60:53:60:35:86:11:37:
         e6:bc:95:41:1a:26:3c:72:50:fe:bf:33:e9:3a:1d:e4:27:76:
         00:15:d8:87:89:78:23:9a:07:e9:04:ad:ed:fb:41:75:c2:2c:
         64:d5:db:c2:68:d0:48:5f:7b:8c:14:d6:45:8f:e6:ee:76:fd:
         7d:69:7c:c8:71:e8:26:4f:52:4c:fd:61:9a:fb:75:42:6c:67:
         d0:17:ba:bc:23:67:b7:73:0e:48:79:c5:ab:12:72:bf:98:30:
         67:ec:5c:dc:99:db:b0:00:cf:45:3a:cc:c6:68:d6:2f:b3:41:
         12:4a:df:ce
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 14 20:32:15 2025 by rpki-client on console.sobornost.net