Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0a/420c14-cb2c-4e3e-87b9-3fc39487807c/1/LIPfskYpwWd5NQtKd3tbKA_FnUQ.mft
File:                     LIPfskYpwWd5NQtKd3tbKA_FnUQ.mft (raw, json)
Hash identifier:          ham8hEAtSiMjGjnAx9J1PrRnfntHsiS4aBTnu+tUzbA=
Subject key identifier:   AD:FE:5F:D4:77:BF:FF:35:6E:78:0F:A7:FD:46:A7:24:7D:9C:5A:3B
Authority key identifier: 2C:83:DF:B2:46:29:C1:67:79:35:0B:4A:77:7B:5B:28:0F:C5:9D:44
Certificate issuer:       /CN=2c83dfb24629c16779350b4a777b5b280fc59d44
Certificate serial:       01962DF44AF7D751D16C34D82489B9A6BAC1
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/LIPfskYpwWd5NQtKd3tbKA_FnUQ.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/0a/420c14-cb2c-4e3e-87b9-3fc39487807c/1/LIPfskYpwWd5NQtKd3tbKA_FnUQ.mft
Manifest number:          14EB
Signing time:             Sun 13 Apr 2025 07:01:46 +0000
Manifest this update:     Sun 13 Apr 2025 07:01:46 +0000
Manifest next update:     Mon 14 Apr 2025 07:01:46 +0000
Files and hashes:         1: 0jE-nEfR5T_d7BILsWZTUD9dG5M.roa (hash: av9KzOnABL0S/mILNTQRWW5+TsQkQ7Bk5uNHmlLtxtc=)
                          2: LIPfskYpwWd5NQtKd3tbKA_FnUQ.crl (hash: 8U20kWHQ61n7Ot0v4yJbud0x29Dl20TJxqKhLCNphvo=)
                          3: gSdyPqr-OoyLVq-r6dULnURGpXQ.roa (hash: AJDr6l36OnIeYet8bGE+tBeIfs9sdxJq8CBSPv8HuMo=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2d:f4:4a:f7:d7:51:d1:6c:34:d8:24:89:b9:a6:ba:c1
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2c83dfb24629c16779350b4a777b5b280fc59d44
        Validity
            Not Before: Apr 13 07:01:46 2025 GMT
            Not After : Apr 14 07:01:46 2025 GMT
        Subject: CN=adfe5fd477bfff356e780fa7fd46a7247d9c5a3b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c3:cc:11:f8:12:b6:64:90:61:90:38:9f:5c:49:
                    5c:62:ab:ee:b9:7b:c7:fe:d6:d0:e7:60:dd:2a:21:
                    9c:32:4d:10:c2:e1:e9:06:c2:80:53:14:9c:5a:d1:
                    a1:80:9f:1a:6f:8f:1b:a3:4d:06:6d:b5:03:ef:c2:
                    eb:9f:18:50:2d:a7:ab:e6:0f:56:91:2e:b6:27:dd:
                    10:a3:5a:00:af:11:56:b4:5c:e7:1b:79:ec:33:dd:
                    1c:0b:72:b7:7f:e7:23:40:a1:b1:b8:04:d8:00:ce:
                    81:19:63:c5:50:51:eb:06:a5:76:e6:0f:d3:ea:21:
                    e8:0c:ae:94:6f:c4:d5:46:32:34:59:60:f6:c5:24:
                    ec:48:49:db:26:88:40:f5:fe:6a:54:72:1c:df:ae:
                    e3:d5:82:ff:63:92:a6:66:6f:eb:a1:d1:c7:8e:10:
                    b3:6c:ef:9c:39:b2:c7:70:ea:5f:47:a2:a2:3b:75:
                    74:da:0d:2a:72:1f:63:09:0a:c4:3d:35:33:5b:76:
                    eb:5b:7d:f1:c6:da:01:e2:28:0e:5b:59:8d:19:00:
                    8e:a9:50:b7:48:ee:41:61:11:25:be:d8:77:c7:c7:
                    44:92:a9:7b:96:b3:87:30:e8:80:d0:89:b5:92:b7:
                    35:8d:b7:ab:b4:68:f6:53:44:03:ff:bc:af:6f:e5:
                    f3:19
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AD:FE:5F:D4:77:BF:FF:35:6E:78:0F:A7:FD:46:A7:24:7D:9C:5A:3B
            X509v3 Authority Key Identifier:
                keyid:2C:83:DF:B2:46:29:C1:67:79:35:0B:4A:77:7B:5B:28:0F:C5:9D:44

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/LIPfskYpwWd5NQtKd3tbKA_FnUQ.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0a/420c14-cb2c-4e3e-87b9-3fc39487807c/1/LIPfskYpwWd5NQtKd3tbKA_FnUQ.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/0a/420c14-cb2c-4e3e-87b9-3fc39487807c/1/LIPfskYpwWd5NQtKd3tbKA_FnUQ.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         41:b0:0c:13:a7:37:9a:ef:46:f4:4b:e1:fb:a2:14:e0:87:16:
         2d:af:e4:f2:27:9f:a6:c5:6e:d7:f2:df:72:df:1c:21:52:c9:
         2b:5e:8e:a2:3d:74:0f:f7:e6:29:49:32:41:f8:0c:d7:f6:40:
         68:32:4f:82:1a:5d:32:ab:85:c2:e8:68:53:b8:62:9f:98:36:
         92:f4:e5:1b:f2:fd:5a:69:2d:3f:47:61:5e:56:83:ff:cf:10:
         52:0b:a1:1a:ee:3f:a3:41:65:e0:8b:25:e7:73:ea:54:79:92:
         5e:4f:96:a0:ca:6a:bc:3d:97:d8:28:fe:d2:e7:24:bc:e1:76:
         2b:5e:4f:0c:bb:7e:c0:14:fe:48:72:fd:7f:07:cb:0c:57:b4:
         ad:bc:16:66:7e:bc:81:76:b9:9e:d1:2d:ea:13:d3:c5:7f:a8:
         ca:b7:02:25:0a:e4:38:31:ac:c6:08:9f:30:ff:e2:de:54:c0:
         89:b8:35:e8:4b:5f:1c:4e:c4:87:16:dc:b0:97:a6:6b:fe:e2:
         84:9c:aa:57:65:f2:20:7f:7f:4d:0f:1d:05:b1:60:cb:e0:a0:
         2e:fa:0a:23:aa:60:5d:91:8f:74:7e:e1:33:36:b4:eb:cb:52:
         66:e6:7a:a6:a0:f9:20:0d:b5:e9:8a:83:da:6a:ba:1c:0d:a9:
         42:c3:f4:a3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 14 20:26:49 2025 by rpki-client on console.sobornost.net