Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/da/dfb94c-fdf4-4972-9ad8-7d697337137b/1/CTUJ5-xo_i2UNAfV3RJqD1lvKrU.mft
File:                     CTUJ5-xo_i2UNAfV3RJqD1lvKrU.mft (raw, json)
Hash identifier:          oJ3tfcFxxDRSXx9b3Z15+wvc6+R7YBiEc26xtbY0qAk=
Subject key identifier:   5F:1A:61:98:0A:3B:17:8E:BC:6F:1A:BE:90:BA:0F:6A:9E:CA:DE:D8
Authority key identifier: 09:35:09:E7:EC:68:FE:2D:94:34:07:D5:DD:12:6A:0F:59:6F:2A:B5
Certificate issuer:       /CN=093509e7ec68fe2d943407d5dd126a0f596f2ab5
Certificate serial:       01962F071FA45A34030F7E770F88F973E16F
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/CTUJ5-xo_i2UNAfV3RJqD1lvKrU.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/da/dfb94c-fdf4-4972-9ad8-7d697337137b/1/CTUJ5-xo_i2UNAfV3RJqD1lvKrU.mft
Manifest number:          101B
Signing time:             Sun 13 Apr 2025 12:01:58 +0000
Manifest this update:     Sun 13 Apr 2025 12:01:58 +0000
Manifest next update:     Mon 14 Apr 2025 12:01:58 +0000
Files and hashes:         1: CTUJ5-xo_i2UNAfV3RJqD1lvKrU.crl (hash: Pn4z2LM1NIOAoXLiWw6wQe0mGjz+8Yd8cvoUTh+cZ6Y=)
                          2: x-sFc0XuZWyC8mb5YkUAH-GfdII.roa (hash: SLT0QNLc8vBCO5UeVhbutYzbWFamBQrhqoa9wxuI2Us=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2f:07:1f:a4:5a:34:03:0f:7e:77:0f:88:f9:73:e1:6f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=093509e7ec68fe2d943407d5dd126a0f596f2ab5
        Validity
            Not Before: Apr 13 12:01:58 2025 GMT
            Not After : Apr 14 12:01:58 2025 GMT
        Subject: CN=5f1a61980a3b178ebc6f1abe90ba0f6a9ecaded8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b0:d6:5c:23:04:7e:89:bf:e4:e0:02:0f:3b:02:
                    39:04:80:f8:bf:47:5f:f4:df:07:82:78:b1:96:11:
                    6b:73:5d:a5:d4:b4:c4:60:5c:69:7f:fe:8d:20:98:
                    ca:02:c9:7a:02:7f:79:72:ac:71:a0:71:a0:63:a1:
                    a9:92:05:9f:7b:04:3e:c6:02:fa:29:22:13:2c:9f:
                    6f:a5:d9:88:c6:8c:c3:4f:19:47:53:95:5b:12:e6:
                    93:9d:e8:ba:7e:0e:0d:28:2c:be:8a:30:4d:12:4b:
                    dd:6b:3c:19:9a:73:e2:fd:d3:06:67:38:b9:8f:55:
                    5e:e6:72:0c:cb:4d:be:c0:a3:4a:11:83:17:c3:6b:
                    67:1d:45:4d:16:f2:7f:d6:42:6b:fe:32:dd:4e:98:
                    77:ce:49:e9:eb:36:c9:d1:2c:2f:a6:fe:4a:da:4a:
                    54:2b:22:cc:c6:15:fb:ba:50:77:a8:4b:cf:09:7c:
                    ca:2f:1e:b7:a1:0f:d0:f4:c7:67:e4:0a:71:de:84:
                    25:ff:0f:12:17:cf:fc:03:7b:67:0a:6c:41:c3:7e:
                    3d:0b:9a:2c:ce:50:a0:6d:94:7b:b6:0e:d4:e0:2d:
                    ca:4e:29:bc:c9:c1:c1:21:a8:b9:18:16:83:d7:5e:
                    41:4e:a7:48:b8:4f:2a:5e:18:c0:d1:c9:af:0e:20:
                    7c:e1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5F:1A:61:98:0A:3B:17:8E:BC:6F:1A:BE:90:BA:0F:6A:9E:CA:DE:D8
            X509v3 Authority Key Identifier:
                keyid:09:35:09:E7:EC:68:FE:2D:94:34:07:D5:DD:12:6A:0F:59:6F:2A:B5

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CTUJ5-xo_i2UNAfV3RJqD1lvKrU.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/da/dfb94c-fdf4-4972-9ad8-7d697337137b/1/CTUJ5-xo_i2UNAfV3RJqD1lvKrU.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/da/dfb94c-fdf4-4972-9ad8-7d697337137b/1/CTUJ5-xo_i2UNAfV3RJqD1lvKrU.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         71:53:85:14:da:9a:8a:a8:a4:aa:d2:5e:09:e5:d3:aa:81:fb:
         8a:cf:c8:e6:5c:76:12:42:d6:1b:8a:36:1f:ec:90:59:82:3e:
         a7:2a:3c:d4:89:04:29:37:92:b2:d3:9a:38:17:21:0c:58:e7:
         37:02:4f:98:3b:db:58:db:9e:0d:0c:90:93:9e:6a:e0:7b:c9:
         e8:de:67:9b:6b:d2:9d:10:8a:14:8f:a6:82:10:67:98:65:1e:
         7b:43:bf:11:ff:32:29:c1:94:24:9f:b8:1e:75:6a:da:14:9f:
         72:7b:d7:30:59:78:eb:e2:6e:b3:74:b4:ba:ba:bc:e7:68:dd:
         bc:0a:72:1c:dc:b6:40:25:2f:b7:49:a2:20:5e:ee:70:e9:69:
         bb:11:82:b4:c5:b6:ad:26:da:d9:24:90:e8:36:ee:12:36:ef:
         00:65:23:44:1f:a6:5d:cc:ff:d0:50:97:bc:00:c2:80:8c:25:
         90:2b:1c:48:45:f8:e4:24:a9:c3:40:bf:ae:e1:d3:ea:19:5c:
         c3:bc:2d:3c:e7:be:0d:b1:a9:a3:31:d7:c7:cc:18:75:a1:82:
         23:74:b7:18:da:73:90:54:fa:39:d8:90:24:e2:41:4c:c3:60:
         e2:61:4c:89:ec:b5:64:d2:2e:aa:81:cc:d2:0c:56:6a:f5:e0:
         fc:f5:f1:a4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 14 20:32:25 2025 by rpki-client on console.sobornost.net