Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d8/64722b-2995-40de-8b87-226b8d4a5f60/1/IP7vOR8WMAFXu3iy6uoG1hwgyUU.mft
File:                     IP7vOR8WMAFXu3iy6uoG1hwgyUU.mft (raw, json)
Hash identifier:          lyWmlrgpoJ08h8aKmqeKBH04jtRRnU2XtNsSNjLCnxU=
Subject key identifier:   0F:03:63:89:07:B9:05:26:91:D5:72:C4:4A:F6:E1:20:8D:9A:B8:49
Authority key identifier: 20:FE:EF:39:1F:16:30:01:57:BB:78:B2:EA:EA:06:D6:1C:20:C9:45
Certificate issuer:       /CN=20feef391f16300157bb78b2eaea06d61c20c945
Certificate serial:       01962E99A334A656F05DE47FE7F2B0A31B09
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/IP7vOR8WMAFXu3iy6uoG1hwgyUU.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/d8/64722b-2995-40de-8b87-226b8d4a5f60/1/IP7vOR8WMAFXu3iy6uoG1hwgyUU.mft
Manifest number:          03FD
Signing time:             Sun 13 Apr 2025 10:02:22 +0000
Manifest this update:     Sun 13 Apr 2025 10:02:22 +0000
Manifest next update:     Mon 14 Apr 2025 10:02:22 +0000
Files and hashes:         1: IP7vOR8WMAFXu3iy6uoG1hwgyUU.crl (hash: hNVpdAtBxMI1JFnx5gxXh70peTPg4RWlGU20mDV04Ok=)
                          2: bMgRIHfe9czZPsPUKpcmfdHESeA.roa (hash: xt+uVWCgpmniCKO9lfh4KPFwtigjOiclhRJVmau9h3E=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2e:99:a3:34:a6:56:f0:5d:e4:7f:e7:f2:b0:a3:1b:09
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=20feef391f16300157bb78b2eaea06d61c20c945
        Validity
            Not Before: Apr 13 10:02:22 2025 GMT
            Not After : Apr 14 10:02:22 2025 GMT
        Subject: CN=0f03638907b9052691d572c44af6e1208d9ab849
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b5:11:2b:6c:27:14:62:5c:72:24:57:e9:b0:3e:
                    02:79:60:48:7f:db:09:67:e5:a2:d1:d8:61:80:2e:
                    8b:5a:06:da:40:2a:a0:e6:80:78:f0:1f:eb:b3:1d:
                    38:5e:99:33:6f:21:77:29:33:6e:4c:e3:8d:df:d3:
                    1d:f1:4f:6f:15:7c:fb:b1:ff:07:8b:3e:60:0a:54:
                    40:2e:06:4e:05:c8:56:53:d7:48:3b:19:af:b0:02:
                    5c:57:3a:b8:cb:56:1c:36:36:d2:d7:63:9b:d4:60:
                    fd:e2:10:0e:fe:f1:46:5a:6c:a5:34:df:00:49:d1:
                    fd:54:19:07:c4:9f:b1:34:34:d4:3c:4e:ad:1d:aa:
                    43:8c:8c:82:46:7b:f0:0b:ec:0d:49:ac:07:cc:57:
                    e7:62:bb:35:d6:9e:e4:70:bb:85:52:54:df:bc:97:
                    29:85:21:88:76:89:5a:12:81:ef:86:16:96:26:5f:
                    b9:ad:b8:d3:7b:df:b7:e0:5d:6c:70:8f:bc:2f:7b:
                    b6:24:d2:d0:f5:6d:80:56:6f:07:40:4c:0e:3e:2b:
                    2c:e0:3c:88:15:dc:25:2a:66:e2:d3:55:2f:c2:b2:
                    be:38:f9:08:e7:df:b6:bc:ab:66:2c:6e:3a:e0:75:
                    f1:2e:23:0b:1e:f2:30:9e:ac:7d:64:c3:f9:d9:8e:
                    bd:55
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0F:03:63:89:07:B9:05:26:91:D5:72:C4:4A:F6:E1:20:8D:9A:B8:49
            X509v3 Authority Key Identifier:
                keyid:20:FE:EF:39:1F:16:30:01:57:BB:78:B2:EA:EA:06:D6:1C:20:C9:45

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/IP7vOR8WMAFXu3iy6uoG1hwgyUU.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d8/64722b-2995-40de-8b87-226b8d4a5f60/1/IP7vOR8WMAFXu3iy6uoG1hwgyUU.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/d8/64722b-2995-40de-8b87-226b8d4a5f60/1/IP7vOR8WMAFXu3iy6uoG1hwgyUU.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         62:6b:d0:f3:2b:ea:20:44:56:3e:47:ad:e2:80:74:d4:af:05:
         f7:a0:b3:01:46:77:f7:ca:bb:55:b4:02:97:50:07:4f:6b:cc:
         bf:e0:d3:de:68:84:cf:e1:a2:13:02:17:e4:f8:ec:7a:40:6c:
         e7:e5:3c:11:57:70:e4:f1:f4:fd:23:06:cf:d8:56:e8:ac:c3:
         28:a1:df:8e:71:16:0e:4e:9f:b6:c9:c3:5e:2c:df:b4:12:bf:
         59:5c:e3:e1:51:e3:49:cf:d9:bf:53:78:4f:df:bc:4f:5f:dc:
         2d:5e:80:8a:00:83:49:40:a1:ed:99:33:68:bc:9a:74:c6:64:
         54:f8:84:26:c1:4a:7b:92:ff:e4:a3:df:f4:8a:5c:13:30:8a:
         56:1f:bb:df:27:d4:3b:df:36:d7:00:2c:f1:6f:95:96:cf:02:
         f7:f7:e1:d7:6f:75:33:e8:b5:6c:25:3b:32:94:57:25:b0:9c:
         49:59:fe:d4:76:fb:4e:5d:93:66:26:e7:f0:99:b7:88:80:3d:
         67:f5:e0:d8:c3:a2:ef:ec:db:70:fe:31:58:49:a2:65:1d:ae:
         51:8b:74:5a:20:52:34:52:38:dd:85:65:7e:87:b0:52:75:d1:
         65:5d:cb:9d:a5:67:d5:de:19:8b:36:9e:7f:02:12:2d:5b:f9:
         3c:44:ae:ab
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 14 20:32:17 2025 by rpki-client on console.sobornost.net