Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/09/d4d12a-ab4e-4dba-95de-bc637130de6e/1/f7Q94jf9C2ooc4kjCSHSWiwu0ag.mft
File:                     f7Q94jf9C2ooc4kjCSHSWiwu0ag.mft (raw, json)
Hash identifier:          /NNS106LNtiB555Ze7P979tLJ9ObZoDoyjepioBGwD4=
Subject key identifier:   70:32:BE:BC:88:8D:39:93:95:D1:92:3A:47:03:70:D3:97:84:53:FE
Authority key identifier: 7F:B4:3D:E2:37:FD:0B:6A:28:73:89:23:09:21:D2:5A:2C:2E:D1:A8
Certificate issuer:       /CN=7fb43de237fd0b6a287389230921d25a2c2ed1a8
Certificate serial:       01962E2AF079F2A22D38232AC3D2B3405879
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/f7Q94jf9C2ooc4kjCSHSWiwu0ag.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/09/d4d12a-ab4e-4dba-95de-bc637130de6e/1/f7Q94jf9C2ooc4kjCSHSWiwu0ag.mft
Manifest number:          147B
Signing time:             Sun 13 Apr 2025 08:01:28 +0000
Manifest this update:     Sun 13 Apr 2025 08:01:28 +0000
Manifest next update:     Mon 14 Apr 2025 08:01:28 +0000
Files and hashes:         1: ZbCuBvhm3WPg8vIgNTz5bN7GnM0.roa (hash: geQ1HtbnOZqLyTn8wKAlnJdK10ztk7Vg8HhapzU1X2M=)
                          2: f7Q94jf9C2ooc4kjCSHSWiwu0ag.crl (hash: sxiQxm//6v3KmEDiajY4lUeUTsigk2seOc/BRdDelvc=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2e:2a:f0:79:f2:a2:2d:38:23:2a:c3:d2:b3:40:58:79
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7fb43de237fd0b6a287389230921d25a2c2ed1a8
        Validity
            Not Before: Apr 13 08:01:28 2025 GMT
            Not After : Apr 14 08:01:28 2025 GMT
        Subject: CN=7032bebc888d399395d1923a470370d3978453fe
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e0:f0:c0:ee:53:10:75:65:34:fc:31:08:32:0b:
                    1b:72:51:f8:64:9a:55:f0:f5:25:78:25:8b:9f:ca:
                    7a:30:ef:0f:85:ca:af:7d:f8:56:4b:a0:c3:35:50:
                    41:ab:fd:0c:55:f3:48:3a:18:2e:b8:97:95:ce:34:
                    0e:09:f1:47:27:5b:46:99:28:69:59:19:5e:19:ea:
                    ca:68:3f:d8:61:80:a3:ba:df:11:23:2b:85:0f:15:
                    ef:45:96:43:7e:aa:cf:1e:3d:bb:c2:1c:0c:d0:d4:
                    eb:61:8b:8d:7c:52:8e:02:e7:8d:53:62:fa:94:b7:
                    0c:4f:81:f7:1b:ec:75:67:cb:a0:64:98:1e:1d:2c:
                    87:23:fc:10:23:20:94:60:08:5f:a8:26:a6:36:d2:
                    30:4c:42:f1:4d:1f:c1:3e:02:53:21:91:20:c2:af:
                    71:5e:6a:a0:79:eb:0b:08:2a:1b:93:c4:1a:9d:b9:
                    74:c6:5e:72:49:04:ce:47:c5:22:e5:fe:3a:6e:8c:
                    d0:ac:8d:44:e9:68:f8:45:3b:db:ab:28:fd:01:6a:
                    a2:d8:7d:6c:bd:97:77:b0:e8:1c:c0:d4:c8:3d:62:
                    0c:26:2c:8b:41:96:7a:64:d9:32:e3:4c:0c:f3:cd:
                    cb:eb:a6:2e:34:b9:d2:d8:81:df:06:dc:30:22:ab:
                    d0:a9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                70:32:BE:BC:88:8D:39:93:95:D1:92:3A:47:03:70:D3:97:84:53:FE
            X509v3 Authority Key Identifier:
                keyid:7F:B4:3D:E2:37:FD:0B:6A:28:73:89:23:09:21:D2:5A:2C:2E:D1:A8

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/f7Q94jf9C2ooc4kjCSHSWiwu0ag.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/09/d4d12a-ab4e-4dba-95de-bc637130de6e/1/f7Q94jf9C2ooc4kjCSHSWiwu0ag.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/09/d4d12a-ab4e-4dba-95de-bc637130de6e/1/f7Q94jf9C2ooc4kjCSHSWiwu0ag.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         00:3c:2a:a0:f8:0b:b5:94:7c:86:48:bf:89:6b:d4:a7:81:33:
         be:26:57:f7:99:8c:8e:dc:e0:a6:89:33:a1:17:28:80:e7:d0:
         0e:af:e7:9a:90:e8:2b:21:7f:20:fe:fd:7d:cf:ab:97:96:3a:
         ea:5e:79:fe:e6:33:05:71:16:98:53:a1:5c:15:41:28:45:66:
         73:1d:de:43:35:cb:65:cf:21:55:26:c9:cc:6e:3b:a4:95:76:
         22:20:4b:33:01:05:fa:f8:8f:a2:9c:77:55:f5:35:80:bc:9b:
         2c:fa:a7:ab:0c:51:3a:0d:ec:6a:33:04:1e:7f:e5:fc:f9:6f:
         70:64:4b:5e:fb:82:ab:cb:c4:cf:19:ec:f6:b4:ea:7a:fa:0d:
         20:cf:1b:33:a5:01:e7:97:56:a8:dd:0e:4a:f6:cd:ea:a7:01:
         2d:bb:a6:70:d2:de:f7:1a:b7:61:98:2d:1f:b2:51:f3:fe:4c:
         1a:8c:15:2c:a3:07:15:2a:b2:ab:0a:bc:cd:98:81:a4:b4:1a:
         b7:de:c4:a7:63:c6:d1:26:cf:84:05:ab:d0:dc:35:2f:a2:8b:
         a7:80:11:f2:a1:2a:23:d8:05:a8:a8:c9:6f:39:34:09:eb:07:
         b1:16:d8:92:d3:68:0e:ad:9a:26:65:55:d2:de:52:64:9f:72:
         15:30:c9:c7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 14 20:26:48 2025 by rpki-client on console.sobornost.net