Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0b/07bf5b-0340-434e-a444-f0761e29e6c4/1/Zux4mXbTtYQBbKwZ80u-3pZs0jA.mft
File:                     Zux4mXbTtYQBbKwZ80u-3pZs0jA.mft (raw, json)
Hash identifier:          BilelTGd9U9+HxnFLllau1p8EANpFNfdEZcmrBnEc70=
Subject key identifier:   2B:20:7D:D6:AB:9C:DB:42:CB:C7:F1:C2:27:B4:D7:F8:22:ED:86:25
Authority key identifier: 66:EC:78:99:76:D3:B5:84:01:6C:AC:19:F3:4B:BE:DE:96:6C:D2:30
Certificate issuer:       /CN=66ec789976d3b584016cac19f34bbede966cd230
Certificate serial:       01962F065EA5E945F95D82F2D9BEB6EDE052
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/Zux4mXbTtYQBbKwZ80u-3pZs0jA.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/0b/07bf5b-0340-434e-a444-f0761e29e6c4/1/Zux4mXbTtYQBbKwZ80u-3pZs0jA.mft
Manifest number:          14EB
Signing time:             Sun 13 Apr 2025 12:01:08 +0000
Manifest this update:     Sun 13 Apr 2025 12:01:08 +0000
Manifest next update:     Mon 14 Apr 2025 12:01:08 +0000
Files and hashes:         1: 1KzANFt0aPj0q7oH7exbtu-amXU.roa (hash: mW2duFDxzUlFHO8La7Ej6q1lO3QaO9KQzC0XOixRqPM=)
                          2: Zux4mXbTtYQBbKwZ80u-3pZs0jA.crl (hash: 0TggDfNOIvDJZAi8wPTTr4OgecKlZgsV/i5SUJdQfl8=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2f:06:5e:a5:e9:45:f9:5d:82:f2:d9:be:b6:ed:e0:52
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=66ec789976d3b584016cac19f34bbede966cd230
        Validity
            Not Before: Apr 13 12:01:08 2025 GMT
            Not After : Apr 14 12:01:08 2025 GMT
        Subject: CN=2b207dd6ab9cdb42cbc7f1c227b4d7f822ed8625
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d1:2f:d9:73:7c:3f:83:eb:93:2a:60:0a:ad:92:
                    6d:1b:89:16:a2:e9:2a:fc:c7:b2:37:cb:2f:6f:7f:
                    d9:c4:00:8f:b6:e7:8e:a3:62:85:8c:1f:c1:6d:77:
                    79:d5:5b:41:ea:dc:e1:1e:79:d6:3c:da:9c:ef:47:
                    23:cc:2b:b2:9c:7c:05:1b:50:52:20:71:69:65:31:
                    7c:bd:04:c4:8d:f2:41:34:61:74:f2:ef:68:83:25:
                    18:b0:e0:c9:61:0c:6f:8a:0a:4e:d8:f7:be:5d:db:
                    27:58:fb:76:99:dc:0c:21:90:0c:b5:50:e2:d7:08:
                    bf:c4:57:2d:c0:b4:99:f4:d4:77:cb:49:b3:14:46:
                    58:7c:63:6e:06:c5:59:51:2e:45:85:cb:74:d7:9a:
                    a0:6c:7b:68:59:59:67:4f:b2:0d:58:83:ba:3f:82:
                    70:00:58:9a:42:92:db:bc:b0:4e:4b:d6:4b:4b:58:
                    4c:43:3e:be:71:2d:c9:d4:75:f0:b6:79:c3:75:7c:
                    63:0f:93:f5:48:0a:ca:99:55:04:27:72:39:4a:3f:
                    17:70:c0:f6:2b:f3:d4:21:78:08:31:2e:9f:2c:c9:
                    32:13:2f:e0:98:3b:d6:5e:95:e5:56:04:9e:53:59:
                    dc:0d:4d:cd:38:d1:d1:bd:2a:68:e8:d7:e2:62:f1:
                    d9:eb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2B:20:7D:D6:AB:9C:DB:42:CB:C7:F1:C2:27:B4:D7:F8:22:ED:86:25
            X509v3 Authority Key Identifier:
                keyid:66:EC:78:99:76:D3:B5:84:01:6C:AC:19:F3:4B:BE:DE:96:6C:D2:30

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Zux4mXbTtYQBbKwZ80u-3pZs0jA.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0b/07bf5b-0340-434e-a444-f0761e29e6c4/1/Zux4mXbTtYQBbKwZ80u-3pZs0jA.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/0b/07bf5b-0340-434e-a444-f0761e29e6c4/1/Zux4mXbTtYQBbKwZ80u-3pZs0jA.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         57:5b:b8:71:2d:85:9e:0f:e6:6f:a1:f0:48:df:80:c4:0e:99:
         f0:d0:0b:3a:ae:4d:ef:dd:7f:23:a5:45:c6:14:14:eb:82:64:
         61:5c:af:d9:ed:73:de:c4:27:7d:57:14:26:24:75:ad:a2:09:
         01:5b:d8:47:ed:c8:f8:2d:0f:a1:48:ba:f6:75:be:64:4e:93:
         c5:1e:18:21:2f:6a:cb:71:7d:05:0f:9b:3f:6b:f3:d5:40:45:
         87:36:8f:90:c5:32:1e:af:95:26:b5:ac:42:86:f1:cc:20:95:
         d5:fa:73:94:7a:6a:67:be:de:94:35:cd:de:c0:5b:e5:00:b4:
         5c:67:ad:43:23:d2:d1:0a:bd:a6:29:1f:09:29:10:49:a1:ef:
         2c:c3:14:1e:3c:6b:44:d2:06:da:fd:f7:1c:bb:b6:ea:e0:60:
         2a:f4:6b:71:98:f0:54:d2:0b:d6:3d:53:68:88:79:d4:77:cd:
         a0:da:83:81:96:b3:2a:49:df:83:ec:6a:92:0a:00:4b:04:ed:
         30:f5:37:e3:f4:3c:b7:31:5d:60:00:29:03:52:85:0d:cc:2d:
         bd:fc:1a:4e:a1:33:0d:ba:7e:53:b7:63:2d:4f:e8:53:33:39:
         00:7a:2e:08:91:6d:f7:8a:57:c6:ed:35:10:88:a2:d8:05:ae:
         a1:f5:94:09
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 14 20:26:49 2025 by rpki-client on console.sobornost.net