Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/db/f58a2a-0f25-4831-bb09-a0dd3b5f15f8/1/8n7hjEY57qoWphkIzLRcepjV3Ws.mft
File:                     8n7hjEY57qoWphkIzLRcepjV3Ws.mft (raw, json)
Hash identifier:          SG2ry301gukzH/ex6GIL9avZcwiuf4bhccXt1Kew4UA=
Subject key identifier:   5A:0E:A3:EF:EF:8C:AF:3A:04:7A:0E:2E:FA:ED:BF:50:0F:A7:1B:73
Authority key identifier: F2:7E:E1:8C:46:39:EE:AA:16:A6:19:08:CC:B4:5C:7A:98:D5:DD:6B
Certificate issuer:       /CN=f27ee18c4639eeaa16a61908ccb45c7a98d5dd6b
Certificate serial:       01962F74E2DAFAE8D3219D71BFE07FDDF81A
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/8n7hjEY57qoWphkIzLRcepjV3Ws.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/db/f58a2a-0f25-4831-bb09-a0dd3b5f15f8/1/8n7hjEY57qoWphkIzLRcepjV3Ws.mft
Manifest number:          14EB
Signing time:             Sun 13 Apr 2025 14:01:51 +0000
Manifest this update:     Sun 13 Apr 2025 14:01:51 +0000
Manifest next update:     Mon 14 Apr 2025 14:01:51 +0000
Files and hashes:         1: 8n7hjEY57qoWphkIzLRcepjV3Ws.crl (hash: uf/aeQGoVhAa7D5uBE5YX7WL6hPt7GgLqubx3PNGppE=)
                          2: nqRXNoUiyTb4TmIe2_b86I-CG4w.roa (hash: uh5jetKJYfrnWeF7nxGsrvO4F6Y6S/Ud8IP3anKzhdE=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2f:74:e2:da:fa:e8:d3:21:9d:71:bf:e0:7f:dd:f8:1a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=f27ee18c4639eeaa16a61908ccb45c7a98d5dd6b
        Validity
            Not Before: Apr 13 14:01:51 2025 GMT
            Not After : Apr 14 14:01:51 2025 GMT
        Subject: CN=5a0ea3efef8caf3a047a0e2efaedbf500fa71b73
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ee:bc:bb:fc:07:2a:27:e9:62:86:95:6a:18:6b:
                    b8:ab:32:2e:28:18:be:25:eb:2a:07:60:91:c1:26:
                    5e:09:5f:89:71:81:06:d8:f6:e9:d2:c9:8b:a9:18:
                    ca:c6:95:be:63:6b:9d:79:12:80:76:dc:d8:a7:35:
                    2f:24:70:b5:b9:6d:07:40:b0:3e:25:c4:51:33:01:
                    dd:8e:c2:08:1c:0a:d2:d5:4e:a4:9e:61:9c:b6:fb:
                    58:4c:e1:41:4d:61:62:be:90:d9:d2:4d:f2:26:54:
                    b6:af:60:7c:ce:d6:04:47:1e:ea:57:1d:66:91:96:
                    e9:c9:6e:58:63:35:8f:84:9c:ec:fe:8a:11:48:90:
                    48:fd:bc:38:9b:7d:fb:dd:a6:65:80:51:d8:6b:0d:
                    4c:d3:e9:57:67:f6:b8:87:58:d5:eb:18:30:90:48:
                    0c:af:19:f6:17:75:6d:19:9d:8a:bd:72:54:80:52:
                    f1:be:f9:fe:52:a0:d7:8a:69:8f:3d:9d:8a:71:ec:
                    81:1a:c1:d8:b3:b4:f6:c7:f6:08:80:0c:55:7f:df:
                    65:e6:92:0d:67:c7:a7:c9:35:09:47:a0:74:90:dc:
                    55:7d:ca:18:b0:f4:c8:98:67:27:1b:9b:2d:6c:dc:
                    d0:fd:a1:91:28:68:92:3d:29:f0:41:c6:09:fa:fe:
                    7e:79
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5A:0E:A3:EF:EF:8C:AF:3A:04:7A:0E:2E:FA:ED:BF:50:0F:A7:1B:73
            X509v3 Authority Key Identifier:
                keyid:F2:7E:E1:8C:46:39:EE:AA:16:A6:19:08:CC:B4:5C:7A:98:D5:DD:6B

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/8n7hjEY57qoWphkIzLRcepjV3Ws.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/db/f58a2a-0f25-4831-bb09-a0dd3b5f15f8/1/8n7hjEY57qoWphkIzLRcepjV3Ws.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/db/f58a2a-0f25-4831-bb09-a0dd3b5f15f8/1/8n7hjEY57qoWphkIzLRcepjV3Ws.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         91:99:fe:88:fe:88:08:c0:67:6e:6f:74:ca:cc:c1:db:ec:b0:
         f2:e2:08:0a:a3:b4:71:c9:b4:04:38:6f:54:90:f2:00:a9:bb:
         b8:1d:b1:65:00:40:20:35:aa:da:54:4c:8a:42:a6:b3:6e:d1:
         00:d9:6c:2b:54:4a:fc:02:e3:ff:6a:5d:94:5e:c6:1c:78:80:
         20:c7:99:f4:8c:7d:12:91:5d:e3:cf:fa:e3:7e:f2:f9:32:56:
         91:0f:c7:bf:59:40:01:a2:85:18:c1:3e:49:0e:9e:56:4b:9c:
         8f:2c:2a:0c:ab:4b:6e:23:d0:96:f9:3c:b9:85:b2:15:08:df:
         5f:90:5d:54:0c:b7:ca:79:86:2a:8e:fe:d5:02:41:b4:5d:af:
         36:0c:17:ab:b4:d0:e6:7c:85:cd:4a:ea:b2:00:b7:e3:3f:b5:
         81:bb:1e:a9:1c:73:4d:3b:80:22:ce:50:0b:2b:81:fd:6e:76:
         2b:39:2d:84:02:f4:94:c5:6d:b2:7e:82:96:ad:e3:87:5c:d9:
         d4:a6:d5:e3:43:64:85:74:64:c0:f9:4d:6b:90:9c:17:36:c1:
         85:fa:a1:02:17:28:fd:21:a2:36:c2:7d:8b:90:88:6b:71:b5:
         a1:15:e4:d3:c6:38:34:58:30:3c:27:7c:ed:61:1b:81:9f:e8:
         3c:03:eb:bd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 14 20:32:26 2025 by rpki-client on console.sobornost.net