Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f5/19017a-4fcc-4fad-a572-99f693e45061/1/HNq3BST9UTE7hPXY9GNio9jICBQ.mft
File:                     HNq3BST9UTE7hPXY9GNio9jICBQ.mft (raw, json)
Hash identifier:          lym5HnFExHJkIR4sRfKaVxscZhbDF4Nxz6h/K9TUCzg=
Subject key identifier:   EB:51:53:7D:D4:9A:F5:85:59:4C:CA:29:62:36:34:F1:96:31:BB:CD
Authority key identifier: 1C:DA:B7:05:24:FD:51:31:3B:84:F5:D8:F4:63:62:A3:D8:C8:08:14
Certificate issuer:       /CN=1cdab70524fd51313b84f5d8f46362a3d8c80814
Certificate serial:       01962F744819EFFCD4BDDA03CAB34D12CA65
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/HNq3BST9UTE7hPXY9GNio9jICBQ.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/f5/19017a-4fcc-4fad-a572-99f693e45061/1/HNq3BST9UTE7hPXY9GNio9jICBQ.mft
Manifest number:          14EB
Signing time:             Sun 13 Apr 2025 14:01:11 +0000
Manifest this update:     Sun 13 Apr 2025 14:01:11 +0000
Manifest next update:     Mon 14 Apr 2025 14:01:11 +0000
Files and hashes:         1: 8H6vwz49R0kM-gbNtDLGiXSOgWE.roa (hash: 7d11KfsVtGX7lu3CgRTWP0J/PhStNQboteNSMa34UZE=)
                          2: HNq3BST9UTE7hPXY9GNio9jICBQ.crl (hash: LIwbn0zsXVT1X6tOawdQmhv2tPjZQ+Z7ArTz9DPHS/c=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2f:74:48:19:ef:fc:d4:bd:da:03:ca:b3:4d:12:ca:65
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1cdab70524fd51313b84f5d8f46362a3d8c80814
        Validity
            Not Before: Apr 13 14:01:11 2025 GMT
            Not After : Apr 14 14:01:11 2025 GMT
        Subject: CN=eb51537dd49af585594cca29623634f19631bbcd
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b5:a7:42:be:ab:c9:20:9b:ec:64:17:9d:c9:d7:
                    39:ae:f6:03:80:53:a6:29:de:ce:c7:37:d2:ab:1a:
                    db:6a:bd:c2:06:d7:12:ac:6d:e0:35:b9:65:b1:28:
                    2d:ee:26:7b:f1:d0:93:52:69:15:bc:7a:ca:50:f5:
                    28:26:d5:69:32:c9:47:91:58:6d:46:48:ca:c2:47:
                    ad:0f:07:67:14:ac:88:b0:82:66:89:db:cf:be:48:
                    f4:12:21:a7:c0:38:56:18:9f:b1:93:b4:f8:40:06:
                    7e:b7:f8:41:37:c0:87:c8:2f:2d:b0:0b:55:d1:99:
                    7d:a7:ae:de:48:44:d6:37:61:d2:ab:06:37:ff:7c:
                    1c:5e:2a:29:8d:22:42:69:a6:36:9c:a8:8a:fd:2b:
                    30:42:49:7d:b5:23:08:c7:14:fe:12:3c:eb:98:7d:
                    77:30:08:cd:55:d0:3a:d3:d9:76:36:66:bc:45:8b:
                    ab:5c:cc:1c:a5:4e:46:9b:05:c9:29:e5:a2:75:71:
                    ad:0e:59:ce:5e:30:e9:db:de:13:bf:7f:be:66:5b:
                    c5:38:46:ff:2c:70:53:07:d4:fe:82:4b:01:cb:09:
                    74:8f:4e:b3:80:70:9d:89:22:16:5d:98:5c:59:aa:
                    f1:79:e3:5d:02:1b:ef:81:4c:b9:f7:53:d9:bc:0e:
                    4a:8b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                EB:51:53:7D:D4:9A:F5:85:59:4C:CA:29:62:36:34:F1:96:31:BB:CD
            X509v3 Authority Key Identifier:
                keyid:1C:DA:B7:05:24:FD:51:31:3B:84:F5:D8:F4:63:62:A3:D8:C8:08:14

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/HNq3BST9UTE7hPXY9GNio9jICBQ.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f5/19017a-4fcc-4fad-a572-99f693e45061/1/HNq3BST9UTE7hPXY9GNio9jICBQ.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/f5/19017a-4fcc-4fad-a572-99f693e45061/1/HNq3BST9UTE7hPXY9GNio9jICBQ.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         8a:74:92:81:9d:d3:68:15:d7:9d:69:77:b9:11:94:8c:91:50:
         aa:1a:43:f2:4b:90:14:22:53:53:85:32:9e:7f:98:07:af:27:
         26:1c:d0:6d:76:19:71:19:81:2a:48:9c:04:5a:12:0e:67:d1:
         35:98:4a:3f:76:36:52:18:cb:0c:12:5b:39:2b:91:0a:25:c3:
         de:57:d0:98:03:2e:36:96:50:03:78:16:e2:18:f3:bc:a2:ee:
         18:d5:8d:af:e8:ed:c3:ee:79:c3:08:26:3a:c6:43:45:ee:0c:
         71:cd:ed:f1:dc:9a:09:9d:57:fe:a2:3b:c8:ad:b6:1e:d4:5c:
         ab:af:ec:3a:0f:87:d0:62:4b:45:8c:f1:a8:c4:4b:4e:cb:69:
         1f:ed:18:46:9a:83:57:7e:e5:96:08:69:34:3c:73:fb:42:cb:
         4e:7b:96:d5:9d:7a:b4:30:01:3c:0c:5b:96:99:71:b9:95:12:
         93:48:ea:91:72:8c:d7:90:f4:1d:3d:99:48:a1:c0:2e:c5:af:
         fa:11:58:ce:f5:69:96:53:0f:8b:2c:29:6d:3d:af:17:54:53:
         e1:60:b6:ad:93:59:26:77:27:9c:20:a4:67:d3:d4:a2:21:ce:
         45:2c:5b:4f:48:ae:10:3d:31:47:2c:f1:01:c0:71:72:ed:99:
         60:8a:1c:54
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 14 20:32:47 2025 by rpki-client on console.sobornost.net