Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0b/c18105-d90f-442f-8b1d-c20de543c0df/1/A9aopjn4iq8fQ21qILQXezjTkPw.mft
File:                     A9aopjn4iq8fQ21qILQXezjTkPw.mft (raw, json)
Hash identifier:          YCc6hvKXGNrEbRRjJ6zjl1ADbswpBsXsP2SGzeKppPg=
Subject key identifier:   D5:A1:03:CB:EB:0E:E9:F1:53:09:91:8E:9A:B0:FE:BB:7A:C4:D8:BA
Authority key identifier: 03:D6:A8:A6:39:F8:8A:AF:1F:43:6D:6A:20:B4:17:7B:38:D3:90:FC
Certificate issuer:       /CN=03d6a8a639f88aaf1f436d6a20b4177b38d390fc
Certificate serial:       01962E618358691B2D9A7272D285FDAB0EE4
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/A9aopjn4iq8fQ21qILQXezjTkPw.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/0b/c18105-d90f-442f-8b1d-c20de543c0df/1/A9aopjn4iq8fQ21qILQXezjTkPw.mft
Manifest number:          01CD
Signing time:             Sun 13 Apr 2025 09:01:04 +0000
Manifest this update:     Sun 13 Apr 2025 09:01:04 +0000
Manifest next update:     Mon 14 Apr 2025 09:01:04 +0000
Files and hashes:         1: 9EiTee9k8nFjET11hPatStF9nkM.roa (hash: rKaveA0rfCcy5/zhxw6q4cAzgO9tcO/IcjE7cyeyoGI=)
                          2: A9aopjn4iq8fQ21qILQXezjTkPw.crl (hash: dpjHeo4ui45D59tjXjBl6BVRhDizDudjroW/8jsAs90=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2e:61:83:58:69:1b:2d:9a:72:72:d2:85:fd:ab:0e:e4
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=03d6a8a639f88aaf1f436d6a20b4177b38d390fc
        Validity
            Not Before: Apr 13 09:01:04 2025 GMT
            Not After : Apr 14 09:01:04 2025 GMT
        Subject: CN=d5a103cbeb0ee9f15309918e9ab0febb7ac4d8ba
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8d:e6:76:bd:67:f9:5f:2b:bd:97:d3:78:f2:bf:
                    f2:9c:2c:8d:af:0f:2c:41:0b:29:af:7b:63:f4:af:
                    cd:4e:06:14:1f:97:15:22:2b:17:b6:80:51:81:a8:
                    2b:1a:a9:5c:b9:70:ef:27:b6:38:6e:a1:9b:c6:00:
                    a5:75:a3:79:f2:1b:42:f2:d4:0c:48:0a:b5:de:98:
                    48:0d:b7:ed:b8:a9:d6:d6:74:f1:94:55:2b:99:8a:
                    45:84:f5:42:d6:af:7b:81:92:58:49:5d:3f:60:24:
                    88:71:07:54:bf:ad:a3:fb:62:c0:6b:9b:f8:0e:68:
                    5f:0b:bc:61:67:8c:10:56:a7:2d:bb:b2:fa:9e:2c:
                    10:06:b8:ba:fd:a3:93:f4:ff:ee:45:f7:f9:a6:72:
                    b8:2a:4b:aa:6f:cb:73:b3:80:df:db:76:d5:98:aa:
                    0d:91:e3:67:d2:eb:9c:12:fd:ba:7b:13:63:ca:38:
                    ec:ca:42:84:b1:70:96:82:5a:01:76:c5:e3:60:2c:
                    75:62:0d:02:6d:a9:f7:8e:aa:96:18:4d:cc:09:68:
                    8a:d4:7b:96:1c:74:37:cd:22:b1:3b:f6:ea:50:7d:
                    c5:e8:f4:42:fe:f6:b9:95:b6:ce:cf:26:f5:14:b4:
                    8f:e5:ff:e6:f0:44:14:7c:4c:fe:55:e6:72:0e:eb:
                    8f:6b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D5:A1:03:CB:EB:0E:E9:F1:53:09:91:8E:9A:B0:FE:BB:7A:C4:D8:BA
            X509v3 Authority Key Identifier:
                keyid:03:D6:A8:A6:39:F8:8A:AF:1F:43:6D:6A:20:B4:17:7B:38:D3:90:FC

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/A9aopjn4iq8fQ21qILQXezjTkPw.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0b/c18105-d90f-442f-8b1d-c20de543c0df/1/A9aopjn4iq8fQ21qILQXezjTkPw.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/0b/c18105-d90f-442f-8b1d-c20de543c0df/1/A9aopjn4iq8fQ21qILQXezjTkPw.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         59:a3:ad:f2:54:ea:ec:3b:f5:f6:43:46:81:82:71:8b:17:8b:
         b4:0b:12:16:d1:95:e5:f6:7a:c2:b9:67:de:00:eb:bb:07:9b:
         65:da:a2:3c:ed:8f:31:70:a9:af:61:42:d9:24:58:f1:3d:fa:
         71:46:73:1d:d2:bc:6c:61:ed:74:ef:58:a5:eb:5e:c0:88:f9:
         80:c9:41:cb:0f:12:31:09:3c:ad:24:8e:27:8f:3b:37:72:74:
         ab:9c:66:4b:6e:00:11:a9:cf:b7:82:55:cf:da:fc:0a:a9:24:
         92:5e:6a:af:66:94:53:5e:90:3c:8c:3e:43:4c:13:d4:e0:d3:
         45:03:74:7f:5f:22:1c:c6:77:d3:04:69:8d:cd:31:87:8e:c3:
         e2:4f:ab:66:93:07:7d:2f:69:2e:2f:a0:d6:99:c2:01:22:3f:
         1a:73:82:a0:24:ef:eb:f2:45:7a:dc:ce:35:68:56:e7:02:15:
         cd:9a:49:fb:dc:5d:3b:20:76:98:ea:fc:8d:46:6c:aa:c9:b9:
         54:67:22:49:99:36:5e:8d:4e:d9:77:4d:4a:82:cf:f1:48:62:
         57:56:b4:cd:ac:ac:d4:76:7f:d3:c6:aa:54:b0:d3:60:ac:11:
         9f:08:37:ca:c3:a3:8c:71:71:7b:b9:99:c8:9a:de:89:2d:24:
         6a:c8:66:46
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZYuYYNYaRstmnJy0oX9qw7kMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDAzZDZhOGE2MzlmODhhYWYxZjQzNmQ2YTIwYjQxNzdiMzhk
MzkwZmMwHhcNMjUwNDEzMDkwMTA0WhcNMjUwNDE0MDkwMTA0WjAzMTEwLwYDVQQD
EyhkNWExMDNjYmViMGVlOWYxNTMwOTkxOGU5YWIwZmViYjdhYzRkOGJhMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjeZ2vWf5Xyu9l9N48r/ynCyNrw8s
QQspr3tj9K/NTgYUH5cVIisXtoBRgagrGqlcuXDvJ7Y4bqGbxgCldaN58htC8tQM
SAq13phIDbftuKnW1nTxlFUrmYpFhPVC1q97gZJYSV0/YCSIcQdUv62j+2LAa5v4
DmhfC7xhZ4wQVqctu7L6niwQBri6/aOT9P/uRff5pnK4Kkuqb8tzs4Df23bVmKoN
keNn0uucEv26exNjyjjsykKEsXCWgloBdsXjYCx1Yg0Cban3jqqWGE3MCWiK1HuW
HHQ3zSKxO/bqUH3F6PRC/va5lbbOzyb1FLSP5f/m8EQUfEz+VeZyDuuPawIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFNWhA8vrDunxUwmRjpqw/rt6xNi6MB8GA1UdIwQY
MBaAFAPWqKY5+IqvH0NtaiC0F3s405D8MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvQTlhb3BqbjRpcThmUTIxcUlMUVhlempUa1B3LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wYi9jMTgxMDUtZDkwZi00NDJmLThiMWQt
YzIwZGU1NDNjMGRmLzEvQTlhb3BqbjRpcThmUTIxcUlMUVhlempUa1B3Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8wYi9jMTgxMDUtZDkwZi00NDJmLThiMWQtYzIwZGU1NDNjMGRm
LzEvQTlhb3BqbjRpcThmUTIxcUlMUVhlempUa1B3LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAWaOt8lTq
7Dv19kNGgYJxixeLtAsSFtGV5fZ6wrln3gDruwebZdqiPO2PMXCpr2FC2SRY8T36
cUZzHdK8bGHtdO9YpetewIj5gMlByw8SMQk8rSSOJ487N3J0q5xmS24AEanPt4JV
z9r8Cqkkkl5qr2aUU16QPIw+Q0wT1ODTRQN0f18iHMZ30wRpjc0xh47D4k+rZpMH
fS9pLi+g1pnCASI/GnOCoCTv6/JFetzONWhW5wIVzZpJ+9xdOyB2mOr8jUZsqsm5
VGciSZk2Xo1O2XdNSoLP8UhiV1a0zays1HZ/08aqVLDTYKwRnwg3ysOjjHFxe7mZ
yJreiS0kashmRg==
-----END CERTIFICATE-----
Generated at Mon Apr 14 20:26:49 2025 by rpki-client on console.sobornost.net