Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fb/bdfe17-91ad-4f31-aecd-81ed12ddf175/1/G55Be7nssazpSR68KCO7eJNLLN8.mft
File:                     G55Be7nssazpSR68KCO7eJNLLN8.mft (raw, json)
Hash identifier:          Clzy9RGCfw5n6R2WPL7UwnIG9MAzm55IpbyuL8QzG9I=
Subject key identifier:   E6:8A:A8:20:9A:30:62:1F:5A:1F:4F:A4:A2:EE:15:AA:B6:19:F8:59
Authority key identifier: 1B:9E:41:7B:B9:EC:B1:AC:E9:49:1E:BC:28:23:BB:78:93:4B:2C:DF
Certificate issuer:       /CN=1b9e417bb9ecb1ace9491ebc2823bb78934b2cdf
Certificate serial:       01962F3D672EA817F8CCA185997AA96092D7
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/G55Be7nssazpSR68KCO7eJNLLN8.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/fb/bdfe17-91ad-4f31-aecd-81ed12ddf175/1/G55Be7nssazpSR68KCO7eJNLLN8.mft
Manifest number:          1398
Signing time:             Sun 13 Apr 2025 13:01:15 +0000
Manifest this update:     Sun 13 Apr 2025 13:01:15 +0000
Manifest next update:     Mon 14 Apr 2025 13:01:15 +0000
Files and hashes:         1: G55Be7nssazpSR68KCO7eJNLLN8.crl (hash: JgpxALH6hPiy0fZo7+yQqiByjsgbl8Xygx04lA9OvKQ=)
                          2: uDXgZr4d7paw0tQnlQAuxTAiQJ4.roa (hash: ZLVG9qnKbapzUcUyG3vXPFRhsGi/6YqVmyuunmvWt4g=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2f:3d:67:2e:a8:17:f8:cc:a1:85:99:7a:a9:60:92:d7
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1b9e417bb9ecb1ace9491ebc2823bb78934b2cdf
        Validity
            Not Before: Apr 13 13:01:15 2025 GMT
            Not After : Apr 14 13:01:15 2025 GMT
        Subject: CN=e68aa8209a30621f5a1f4fa4a2ee15aab619f859
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a1:1c:ad:aa:c2:24:94:5a:4c:f4:ce:42:c8:e4:
                    fe:bc:16:cb:70:62:0c:b3:b6:24:bc:5b:43:ec:ad:
                    09:48:74:78:ce:7c:1a:bf:c8:97:ae:fd:c7:3d:8b:
                    13:8f:0d:cf:2f:f5:c6:c1:92:55:91:69:bf:dd:d4:
                    b7:25:91:27:25:cc:f7:59:ff:40:ad:02:9d:85:20:
                    e4:be:b3:57:1e:31:38:0d:a6:01:3e:30:da:8a:34:
                    0d:6b:4c:a2:9c:77:d4:f9:3c:f4:55:e9:f4:c5:9d:
                    5d:2e:f7:0f:9c:83:88:a7:9c:e1:61:4c:64:e4:a9:
                    29:a1:ec:e1:4f:ca:2c:cf:19:6b:d9:5d:29:eb:b7:
                    b3:9f:cc:5f:eb:af:d4:51:9e:d2:a3:2a:74:45:e4:
                    90:ef:9f:0c:af:02:bc:f7:c7:d8:1a:3e:a7:3b:22:
                    73:89:48:59:24:8b:38:ca:8e:66:e1:83:4f:74:5d:
                    dc:50:50:58:09:b8:79:7e:59:70:e3:03:21:cf:da:
                    da:d3:5d:04:84:52:dd:10:6f:58:97:9c:67:96:a6:
                    c4:8d:74:bd:eb:a5:2c:4a:db:af:ac:22:e1:f4:eb:
                    09:af:d0:92:90:1b:90:38:d3:2a:62:52:5b:07:5c:
                    0d:e9:a5:94:73:e3:0d:38:b0:18:55:dd:4e:26:1b:
                    79:a1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E6:8A:A8:20:9A:30:62:1F:5A:1F:4F:A4:A2:EE:15:AA:B6:19:F8:59
            X509v3 Authority Key Identifier:
                keyid:1B:9E:41:7B:B9:EC:B1:AC:E9:49:1E:BC:28:23:BB:78:93:4B:2C:DF

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/G55Be7nssazpSR68KCO7eJNLLN8.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fb/bdfe17-91ad-4f31-aecd-81ed12ddf175/1/G55Be7nssazpSR68KCO7eJNLLN8.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/fb/bdfe17-91ad-4f31-aecd-81ed12ddf175/1/G55Be7nssazpSR68KCO7eJNLLN8.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         a5:ad:00:4a:25:2c:dd:a7:0a:34:e5:a3:00:8e:2e:77:bc:6c:
         5a:2c:e5:78:ba:ec:eb:f1:e7:c2:a9:cd:3c:91:3d:44:28:00:
         b2:c1:75:43:34:8e:01:ad:4f:5d:bb:cd:71:a9:b4:55:89:b4:
         aa:fa:5c:eb:c7:5e:4f:b4:0e:1a:6a:86:f3:e3:bd:cf:23:02:
         ff:4e:ab:4e:85:4c:08:bd:43:93:69:12:29:da:b5:fa:44:e3:
         be:8a:dc:a8:61:a4:d5:f0:8a:56:1f:3d:c8:da:9a:51:7c:8c:
         19:d4:79:16:e6:05:e6:3a:7e:ce:c6:ab:57:13:47:1e:05:c5:
         bc:1f:a5:90:b7:8b:f0:a9:be:f4:e2:21:0b:25:51:1c:7e:ab:
         e7:bb:54:91:eb:66:1f:a8:cb:ce:c4:d5:02:c6:20:dd:9a:54:
         ac:79:06:36:3b:de:33:9b:29:72:6e:7b:46:c8:61:4f:0f:17:
         3f:a1:ef:5a:25:24:49:41:75:51:87:7a:73:19:58:49:a5:1c:
         fa:27:11:b6:57:fd:80:62:24:ab:30:dc:66:43:aa:ce:f6:1f:
         5e:84:58:32:fb:5c:11:43:54:86:8b:b8:74:94:cf:a2:87:4f:
         d1:65:e0:08:ee:79:5f:16:0f:ec:cd:73:9b:d7:a0:21:4c:d2:
         47:a9:16:32
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 14 20:33:05 2025 by rpki-client on console.sobornost.net