Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/03/58c87b-9aa8-48ea-85c3-06b163d359e0/1/13yGmob-yDN5Pu7azNSx98pEM-k.mft
File:                     13yGmob-yDN5Pu7azNSx98pEM-k.mft (raw, json)
Hash identifier:          iDkuas5NN8tbV6En1rt7dxem+eQTGtafHRhAfH9PKNA=
Subject key identifier:   6C:27:31:47:53:29:23:51:13:B8:D4:49:B4:DA:9D:7B:3A:AA:99:34
Authority key identifier: D7:7C:86:9A:86:FE:C8:33:79:3E:EE:DA:CC:D4:B1:F7:CA:44:33:E9
Certificate issuer:       /CN=d77c869a86fec833793eeedaccd4b1f7ca4433e9
Certificate serial:       01962E2AF6A28EFCD930A9CDA90B2538D4E8
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/13yGmob-yDN5Pu7azNSx98pEM-k.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/03/58c87b-9aa8-48ea-85c3-06b163d359e0/1/13yGmob-yDN5Pu7azNSx98pEM-k.mft
Manifest number:          12D0
Signing time:             Sun 13 Apr 2025 08:01:29 +0000
Manifest this update:     Sun 13 Apr 2025 08:01:29 +0000
Manifest next update:     Mon 14 Apr 2025 08:01:29 +0000
Files and hashes:         1: 13yGmob-yDN5Pu7azNSx98pEM-k.crl (hash: R8vcL1qcCX+MGz2JoOTbaUmIcJJZcmr7mraolCig+34=)
                          2: Dcjqka0vRB55CJDqEWplWQ0em2k.roa (hash: QNtKb0wVTgOzXABHcHNsksEjhhvzQUkXJ+QzngWUeuU=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2e:2a:f6:a2:8e:fc:d9:30:a9:cd:a9:0b:25:38:d4:e8
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d77c869a86fec833793eeedaccd4b1f7ca4433e9
        Validity
            Not Before: Apr 13 08:01:29 2025 GMT
            Not After : Apr 14 08:01:29 2025 GMT
        Subject: CN=6c2731475329235113b8d449b4da9d7b3aaa9934
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:97:08:5a:97:4f:cf:1a:86:42:7f:3d:c4:eb:07:
                    47:36:01:70:70:37:d2:39:7b:00:1a:b0:59:00:a8:
                    41:e8:9a:67:c0:8a:e1:04:e3:3c:19:2b:46:f3:2f:
                    50:04:b3:18:70:35:74:65:fe:c2:bf:d8:76:fe:f5:
                    98:ad:04:97:3f:b3:39:8d:dd:be:c9:6d:a3:d4:d4:
                    ae:83:fa:42:d7:71:1a:d1:e2:1f:1f:ee:f3:05:d2:
                    cc:51:ae:15:4d:3c:02:ca:ba:2b:4b:eb:50:6b:02:
                    f3:20:e6:40:33:17:36:fd:b0:3e:f4:41:41:b2:30:
                    3c:62:0d:17:62:63:32:5e:a3:ed:b0:8e:d7:a2:8e:
                    91:8b:af:76:81:88:17:97:c2:3c:68:6f:e9:10:37:
                    5c:7f:dc:fa:05:c6:52:2c:ce:6b:9e:c6:3b:f4:8c:
                    5a:a9:dd:ca:fb:58:61:0f:92:06:91:1f:26:30:6d:
                    7c:c2:bb:70:96:92:67:3f:16:18:28:c6:80:ad:0a:
                    95:83:49:2a:f7:76:b6:99:17:38:67:77:0c:5f:dd:
                    82:c9:c8:5a:9e:cd:47:0f:94:ba:1b:c1:dd:3e:8d:
                    81:4a:3b:7d:34:72:f0:84:46:b0:cc:75:dd:d6:e1:
                    4c:83:f3:1d:5d:25:98:3e:c0:18:08:b2:a8:a6:da:
                    fc:73
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6C:27:31:47:53:29:23:51:13:B8:D4:49:B4:DA:9D:7B:3A:AA:99:34
            X509v3 Authority Key Identifier:
                keyid:D7:7C:86:9A:86:FE:C8:33:79:3E:EE:DA:CC:D4:B1:F7:CA:44:33:E9

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/13yGmob-yDN5Pu7azNSx98pEM-k.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/03/58c87b-9aa8-48ea-85c3-06b163d359e0/1/13yGmob-yDN5Pu7azNSx98pEM-k.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/03/58c87b-9aa8-48ea-85c3-06b163d359e0/1/13yGmob-yDN5Pu7azNSx98pEM-k.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         83:93:69:e2:30:2a:e9:5c:89:cc:45:7b:ea:2b:bb:db:7a:c8:
         89:36:0e:7b:8d:69:ca:f1:eb:d4:69:94:c4:da:ab:0d:96:12:
         c9:cc:6e:68:a6:bd:53:c7:d1:93:de:19:71:c5:8e:97:f7:59:
         32:e5:af:a5:20:48:0c:4a:dd:5c:02:91:13:b0:1b:6a:77:e0:
         4c:83:03:39:b2:cc:5a:cc:8f:1e:04:52:e3:17:06:48:36:43:
         96:a8:b9:33:79:8e:6d:36:a6:9b:fe:57:96:c7:e7:c3:1e:56:
         8a:a3:72:3c:34:0a:95:c7:39:bf:32:ea:26:8a:4c:5b:50:33:
         5e:89:61:70:41:2c:91:8e:4e:b6:76:f7:92:fc:79:44:df:31:
         48:98:39:b7:5b:84:b7:d1:75:7c:0a:e1:82:51:c0:12:8b:3a:
         6d:ce:2c:23:5b:72:62:99:04:c7:ee:50:ec:cf:40:b2:0f:ef:
         c2:fd:14:90:08:27:f2:4d:87:a8:91:62:ba:41:41:e1:a4:c6:
         30:9a:64:58:df:c7:b7:ed:7b:2a:f6:77:6f:79:21:12:6a:96:
         b9:51:48:9d:76:59:63:7f:65:35:81:b9:d8:5f:0c:bc:ff:7c:
         ee:f0:a7:04:3a:40:4d:5a:1f:50:e2:b6:e8:53:31:cc:bd:d4:
         f1:c9:e3:8e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 14 20:26:43 2025 by rpki-client on console.sobornost.net