Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ed/a3af20-a4a9-4e2e-b344-30b1886d797a/1/i5-syiLMDGDiN6eyBBaiYARaXGg.mft
File:                     i5-syiLMDGDiN6eyBBaiYARaXGg.mft (raw, json)
Hash identifier:          hyDRmk8/opKklVzXxkPFCzVUE7gq7cgGEhuxX4Qq4Rw=
Subject key identifier:   61:E8:17:4E:30:1D:37:79:C9:EA:A1:B3:AA:CD:94:8D:34:F8:9C:8D
Authority key identifier: 8B:9F:AC:CA:22:CC:0C:60:E2:37:A7:B2:04:16:A2:60:04:5A:5C:68
Certificate issuer:       /CN=8b9facca22cc0c60e237a7b20416a260045a5c68
Certificate serial:       0195477EC6BE3D14F04970FED6362CFA4B82
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/i5-syiLMDGDiN6eyBBaiYARaXGg.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/ed/a3af20-a4a9-4e2e-b344-30b1886d797a/1/i5-syiLMDGDiN6eyBBaiYARaXGg.mft
Manifest number:          0CB6
Signing time:             Thu 27 Feb 2025 13:00:45 +0000
Manifest this update:     Thu 27 Feb 2025 13:00:45 +0000
Manifest next update:     Fri 28 Feb 2025 13:00:45 +0000
Files and hashes:         1: FkyY0Sz6P-vEspCfDc5ti5faixQ.roa (hash: cTxtXDf2i+J5oFdILpbffZQpgT6dU26M1jcBVWXO1g8=)
                          2: i5-syiLMDGDiN6eyBBaiYARaXGg.crl (hash: updYFd2bJCMyBGFPekPnjBkJgIgTO4gkkaC7G+2FMEo=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:95:47:7e:c6:be:3d:14:f0:49:70:fe:d6:36:2c:fa:4b:82
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8b9facca22cc0c60e237a7b20416a260045a5c68
        Validity
            Not Before: Feb 27 13:00:45 2025 GMT
            Not After : Feb 28 13:00:45 2025 GMT
        Subject: CN=61e8174e301d3779c9eaa1b3aacd948d34f89c8d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a3:92:1e:8a:58:80:c4:9a:4e:d1:4a:f5:ce:8e:
                    71:27:78:8b:df:ab:69:4c:f7:24:9d:23:d3:d2:34:
                    fb:a8:ca:2e:ba:8c:7a:a4:6e:1a:93:69:d8:ff:70:
                    cf:ab:eb:57:79:6f:f1:63:10:ea:93:83:65:43:a4:
                    24:80:bb:fa:f9:bf:51:56:0c:73:90:d3:13:14:b4:
                    ad:ab:d8:69:32:19:88:97:34:62:28:c0:7f:eb:de:
                    91:e0:f7:a6:1d:4d:fb:97:e3:63:9d:5a:71:e7:62:
                    2a:b3:22:73:c1:4d:38:39:f8:e3:9f:f0:84:70:19:
                    99:47:16:49:67:2f:da:c8:8b:6e:86:76:d4:c8:ed:
                    be:ff:79:bc:6a:80:c6:a6:64:8f:23:b2:be:fb:61:
                    aa:a3:cc:74:98:49:d4:f6:3d:0d:23:ef:5d:15:d6:
                    2c:b4:c2:2b:38:4b:f4:f2:c2:13:75:86:e5:26:fb:
                    6f:83:c1:0d:75:27:4d:81:9f:20:31:ce:aa:2b:8a:
                    d9:67:c4:7c:66:da:69:25:4d:3d:08:72:dd:08:a5:
                    77:c4:dc:91:1e:3c:66:84:b8:ed:4e:44:62:25:90:
                    ba:a9:a9:4f:9b:cb:ef:ea:b1:6b:6f:9e:8f:21:a2:
                    4c:03:e6:27:39:24:14:b3:cf:a0:1e:83:26:22:ba:
                    89:9d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                61:E8:17:4E:30:1D:37:79:C9:EA:A1:B3:AA:CD:94:8D:34:F8:9C:8D
            X509v3 Authority Key Identifier:
                keyid:8B:9F:AC:CA:22:CC:0C:60:E2:37:A7:B2:04:16:A2:60:04:5A:5C:68

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/i5-syiLMDGDiN6eyBBaiYARaXGg.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ed/a3af20-a4a9-4e2e-b344-30b1886d797a/1/i5-syiLMDGDiN6eyBBaiYARaXGg.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/ed/a3af20-a4a9-4e2e-b344-30b1886d797a/1/i5-syiLMDGDiN6eyBBaiYARaXGg.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         0d:0e:26:ae:b9:71:1f:b8:c9:1c:77:15:ce:63:5f:83:17:c8:
         88:82:43:2d:32:d3:55:e6:90:cd:8d:57:5f:a5:5c:8f:58:b2:
         4f:60:ed:e7:59:2c:03:60:e9:17:6d:e3:51:d1:32:13:31:3f:
         d9:62:39:f6:f3:0a:cb:96:8d:00:90:87:61:06:0c:f8:02:35:
         c9:86:60:2a:a1:14:da:24:e8:ce:23:93:42:bb:61:01:a5:4d:
         e6:7e:ac:fd:3a:80:30:6b:b6:e4:df:b5:a6:0f:9f:7b:17:6b:
         6f:0f:8d:a0:ee:cf:68:80:54:91:c4:d2:cd:13:83:5f:fc:d2:
         2b:d5:e7:c3:77:7c:be:2f:02:20:b1:28:64:39:8f:45:9e:18:
         db:7d:40:79:98:17:9a:67:b5:2d:26:3e:74:f5:dc:61:5b:33:
         ce:0e:1c:df:fe:17:03:58:ab:0e:62:0d:87:2e:f4:e4:f1:f6:
         a2:f3:5b:82:92:4f:e1:b3:3d:57:40:ae:cf:d7:ad:05:e0:da:
         fb:7c:59:fb:e0:8a:7e:f9:18:3b:79:16:84:47:45:4d:15:93:
         4d:b8:1b:2a:62:bd:4c:3a:bd:9c:93:11:28:3f:1a:3c:44:9a:
         ea:11:42:f9:96:d8:c6:15:d6:7f:ed:da:59:ae:f6:d8:58:c4:
         98:22:0d:e6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Mar 8 04:56:09 2025 by rpki-client on console.sobornost.net