Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/da/b34cb0-2f71-4f59-bd5e-67efcb3d86fe/1/QhuumJiY2UAkJKra-7R8Om1MJbM.mft
File:                     QhuumJiY2UAkJKra-7R8Om1MJbM.mft (raw, json)
Hash identifier:          qkvUXQkveBQjFyUEmAmNx7cglw+vlbwbkgejRC2Yex8=
Subject key identifier:   60:4B:59:67:A4:43:8A:81:BF:DD:1A:4D:3B:4E:DC:56:39:0D:EA:F8
Authority key identifier: 42:1B:AE:98:98:98:D9:40:24:24:AA:DA:FB:B4:7C:3A:6D:4C:25:B3
Certificate issuer:       /CN=421bae989898d9402424aadafbb47c3a6d4c25b3
Certificate serial:       01962F071D90FABBA8AFFE2588F47AC73A91
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/QhuumJiY2UAkJKra-7R8Om1MJbM.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/da/b34cb0-2f71-4f59-bd5e-67efcb3d86fe/1/QhuumJiY2UAkJKra-7R8Om1MJbM.mft
Manifest number:          14EC
Signing time:             Sun 13 Apr 2025 12:01:57 +0000
Manifest this update:     Sun 13 Apr 2025 12:01:57 +0000
Manifest next update:     Mon 14 Apr 2025 12:01:57 +0000
Files and hashes:         1: QLHEJas53oiAGzs_YSaCGuwaZeU.roa (hash: OfpByeH9dDyJ45cIcWM9guSmvu9MoGjj7YKQgKOyd/0=)
                          2: QhuumJiY2UAkJKra-7R8Om1MJbM.crl (hash: Ncee65DnSsnjn2kpJE9a5x0o8JQpT8WYULuw3ThdWiI=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2f:07:1d:90:fa:bb:a8:af:fe:25:88:f4:7a:c7:3a:91
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=421bae989898d9402424aadafbb47c3a6d4c25b3
        Validity
            Not Before: Apr 13 12:01:57 2025 GMT
            Not After : Apr 14 12:01:57 2025 GMT
        Subject: CN=604b5967a4438a81bfdd1a4d3b4edc56390deaf8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a3:89:d5:2d:93:c4:1b:57:d6:a5:0a:f2:c7:f9:
                    b9:46:b4:37:57:99:c5:a0:f3:14:7f:7b:05:f7:36:
                    d5:79:75:80:0e:3e:a1:d8:ab:f5:fe:09:b9:b5:cc:
                    d0:e6:b4:05:e3:eb:cb:0c:3c:a5:85:ff:90:47:33:
                    17:b2:bb:90:73:c9:70:8d:f1:8e:26:db:3d:3f:d7:
                    78:ae:0c:e9:7f:2d:09:03:7b:ff:d9:f2:8b:c8:e1:
                    d3:50:d2:a5:e3:77:c2:ef:e3:12:d2:9b:a2:1c:6d:
                    4e:63:49:b1:18:46:b0:67:69:df:9a:00:ed:14:27:
                    d5:5f:17:a2:5e:30:e9:38:39:84:68:7f:60:15:25:
                    19:fb:cc:86:ac:7c:2f:47:f4:72:21:73:70:04:1c:
                    e6:d4:67:fe:bc:fe:9f:71:86:15:5d:f2:a0:13:50:
                    df:5f:cb:ca:09:a5:12:1a:8e:8f:a5:89:fc:da:70:
                    69:1f:91:bc:a3:fc:4e:7f:65:93:5e:6c:06:c2:fb:
                    70:38:9a:71:63:7b:37:42:b7:1d:79:d6:60:51:bf:
                    92:fd:ba:4a:bd:8d:97:75:55:a9:db:a5:37:f6:d9:
                    75:b3:93:3c:86:6e:e2:26:df:2e:c8:68:f9:aa:5e:
                    ca:d7:5a:95:13:c2:1d:8a:7e:8c:d7:bf:b5:4d:75:
                    59:a7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                60:4B:59:67:A4:43:8A:81:BF:DD:1A:4D:3B:4E:DC:56:39:0D:EA:F8
            X509v3 Authority Key Identifier:
                keyid:42:1B:AE:98:98:98:D9:40:24:24:AA:DA:FB:B4:7C:3A:6D:4C:25:B3

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/QhuumJiY2UAkJKra-7R8Om1MJbM.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/da/b34cb0-2f71-4f59-bd5e-67efcb3d86fe/1/QhuumJiY2UAkJKra-7R8Om1MJbM.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/da/b34cb0-2f71-4f59-bd5e-67efcb3d86fe/1/QhuumJiY2UAkJKra-7R8Om1MJbM.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         83:28:ed:6b:51:3b:d7:28:86:bd:bb:1b:33:c7:15:8b:d5:ff:
         51:2b:27:c2:19:ba:a7:4b:38:b2:fd:b6:5d:4a:91:7d:a9:ef:
         e8:6f:2e:7b:ff:e3:01:1f:7e:81:65:23:d3:0a:86:a0:76:12:
         61:b9:8b:5c:d2:27:1c:ec:9e:41:98:6d:62:d1:d8:2c:42:f6:
         0d:c7:a9:d9:29:9f:fa:59:96:07:23:7d:96:2f:92:9c:9b:6f:
         f9:3d:b1:25:5f:f8:6e:4c:c0:5a:0d:13:96:25:b1:26:49:30:
         c0:18:92:3b:bc:20:31:0c:93:fe:91:a5:6b:b3:65:98:02:89:
         77:5a:3d:ec:23:a7:fa:79:c7:33:a4:ae:c7:cf:f6:61:be:c4:
         52:99:55:27:b3:c6:c4:8a:b1:e8:ac:b4:5d:15:24:da:04:c0:
         1b:6f:a1:40:50:db:b3:ba:cf:0e:96:3d:82:fc:d8:77:e7:bb:
         35:e1:fe:55:a3:b0:8e:05:29:16:05:a4:4d:d4:d4:f2:e9:0b:
         43:bf:c1:bc:92:19:d6:02:60:db:64:cc:3f:6a:c8:06:86:ff:
         c8:37:e4:37:73:bd:2b:a1:5d:b3:92:f1:17:21:8d:8e:25:83:
         be:08:9f:3d:e8:4b:d2:d5:1f:92:c1:cf:39:7a:17:f6:dd:39:
         60:6a:47:9e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 14 20:32:25 2025 by rpki-client on console.sobornost.net