Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0c/990595-5157-4036-b601-60843b5bbb81/1/SnX6lUdbre63H4ROCwtEtqj-qf4.mft
File:                     SnX6lUdbre63H4ROCwtEtqj-qf4.mft (raw, json)
Hash identifier:          /+fFMsfi4yaPa3ZPKjfkjBAHog5SR/JVhj6Ah4Afd1w=
Subject key identifier:   74:50:FD:A0:DB:F7:F7:49:2D:69:56:98:47:25:A1:84:68:59:AF:CB
Authority key identifier: 4A:75:FA:95:47:5B:AD:EE:B7:1F:84:4E:0B:0B:44:B6:A8:FE:A9:FE
Certificate issuer:       /CN=4a75fa95475badeeb71f844e0b0b44b6a8fea9fe
Certificate serial:       01962FAB73AA390C5FF37CD4C907F7DBE643
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/SnX6lUdbre63H4ROCwtEtqj-qf4.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/0c/990595-5157-4036-b601-60843b5bbb81/1/SnX6lUdbre63H4ROCwtEtqj-qf4.mft
Manifest number:          07D9
Signing time:             Sun 13 Apr 2025 15:01:27 +0000
Manifest this update:     Sun 13 Apr 2025 15:01:27 +0000
Manifest next update:     Mon 14 Apr 2025 15:01:27 +0000
Files and hashes:         1: SnX6lUdbre63H4ROCwtEtqj-qf4.crl (hash: J7hIakW9TJjglCMPYILq0CW3UXT992w1slPOAiaI65Q=)
                          2: _2GPXm0W5pqTGfOSlDVI1ePI1QE.roa (hash: 9R3xfYmKYkm/k3uZLHas6Z2h3l83dSwTWGdwQsjNnVM=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2f:ab:73:aa:39:0c:5f:f3:7c:d4:c9:07:f7:db:e6:43
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4a75fa95475badeeb71f844e0b0b44b6a8fea9fe
        Validity
            Not Before: Apr 13 15:01:27 2025 GMT
            Not After : Apr 14 15:01:27 2025 GMT
        Subject: CN=7450fda0dbf7f7492d6956984725a1846859afcb
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a9:ee:cc:6c:0f:ab:ac:77:78:aa:66:c8:58:fb:
                    23:b0:bb:a8:8e:77:3e:5f:c7:af:c4:12:1e:1d:18:
                    25:bd:3e:3c:8d:75:46:1b:be:5f:f2:19:8e:53:3c:
                    9c:aa:a2:d3:94:85:78:5e:e2:54:9a:c5:f9:04:3c:
                    1c:1a:00:7c:99:13:f6:77:c9:f5:3d:97:71:75:eb:
                    d0:7b:67:2a:62:1c:83:d2:e0:19:b9:59:2d:fb:15:
                    d7:cb:68:dd:59:0c:44:49:aa:6b:23:9e:cb:f3:fe:
                    20:ba:c9:6d:d4:f4:60:e8:71:ea:67:a3:11:31:ec:
                    5c:db:0b:cb:77:17:05:c1:ca:de:24:3e:d0:4a:81:
                    d6:6c:3a:6e:25:7d:fc:b0:a1:b2:db:af:dc:53:c0:
                    ed:42:84:bb:b1:1d:90:67:9d:82:32:54:2a:dc:a3:
                    48:2e:5e:26:16:63:46:0b:3f:3a:4e:da:df:bb:51:
                    ac:b2:46:d6:aa:a1:0d:57:4e:b6:10:96:a7:2c:9c:
                    7b:30:bc:10:ee:20:a0:77:04:fb:6b:f3:36:81:da:
                    85:fb:57:30:00:81:1d:c3:98:7b:76:28:c6:e2:2d:
                    d3:69:46:3a:26:35:41:e0:58:73:63:85:58:97:95:
                    ab:0b:fe:80:12:81:a4:1d:bc:90:01:a7:73:77:f3:
                    4e:0f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                74:50:FD:A0:DB:F7:F7:49:2D:69:56:98:47:25:A1:84:68:59:AF:CB
            X509v3 Authority Key Identifier:
                keyid:4A:75:FA:95:47:5B:AD:EE:B7:1F:84:4E:0B:0B:44:B6:A8:FE:A9:FE

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/SnX6lUdbre63H4ROCwtEtqj-qf4.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0c/990595-5157-4036-b601-60843b5bbb81/1/SnX6lUdbre63H4ROCwtEtqj-qf4.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/0c/990595-5157-4036-b601-60843b5bbb81/1/SnX6lUdbre63H4ROCwtEtqj-qf4.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         8d:74:58:2f:86:cb:ab:d9:34:a1:58:fb:66:78:e8:aa:af:89:
         9c:76:da:c3:8d:d3:29:ff:ed:d4:67:7c:e6:cd:cb:20:95:9e:
         59:38:8e:48:fd:c4:ae:7b:81:d7:bd:a2:8b:2d:0d:38:e1:e9:
         f0:9d:8f:f1:5c:23:0b:20:b9:5c:2a:29:40:4d:be:07:e2:4e:
         99:6f:9d:be:ac:3e:1a:2d:e9:34:43:bb:53:09:b2:e2:4c:e5:
         56:c2:06:7d:6e:89:83:8f:9d:a1:55:03:ee:7c:43:a0:18:23:
         72:cf:5a:be:50:4a:9a:45:74:0e:be:e2:55:70:f0:da:ec:d9:
         f5:be:b8:2c:cf:03:fa:d5:df:e4:f3:d4:df:bc:71:a3:fa:0a:
         e0:f8:77:82:c1:41:8b:c1:0d:c8:4d:d5:ea:ac:77:7c:24:ed:
         b3:4e:9e:3b:0f:54:f7:0c:df:cb:df:68:6f:75:d8:35:01:8f:
         73:7e:fc:44:c0:4e:04:09:a1:6b:0d:05:79:8d:75:92:5a:e5:
         97:4e:1f:e9:ef:3f:06:1e:f0:a5:09:16:20:05:d7:66:5e:d6:
         50:cc:77:d3:8c:6c:a2:db:5f:d4:d0:17:17:0a:6d:70:67:4c:
         fe:a7:52:a4:1d:41:be:33:ca:ce:a2:50:67:88:64:14:9a:6f:
         4f:54:48:1e
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZYvq3OqOQxf83zUyQf32+ZDMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDRhNzVmYTk1NDc1YmFkZWViNzFmODQ0ZTBiMGI0NGI2YThm
ZWE5ZmUwHhcNMjUwNDEzMTUwMTI3WhcNMjUwNDE0MTUwMTI3WjAzMTEwLwYDVQQD
Eyg3NDUwZmRhMGRiZjdmNzQ5MmQ2OTU2OTg0NzI1YTE4NDY4NTlhZmNiMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqe7MbA+rrHd4qmbIWPsjsLuojnc+
X8evxBIeHRglvT48jXVGG75f8hmOUzycqqLTlIV4XuJUmsX5BDwcGgB8mRP2d8n1
PZdxdevQe2cqYhyD0uAZuVkt+xXXy2jdWQxESaprI57L8/4guslt1PRg6HHqZ6MR
Mexc2wvLdxcFwcreJD7QSoHWbDpuJX38sKGy26/cU8DtQoS7sR2QZ52CMlQq3KNI
Ll4mFmNGCz86Ttrfu1GsskbWqqENV062EJanLJx7MLwQ7iCgdwT7a/M2gdqF+1cw
AIEdw5h7dijG4i3TaUY6JjVB4FhzY4VYl5WrC/6AEoGkHbyQAadzd/NODwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFHRQ/aDb9/dJLWlWmEcloYRoWa/LMB8GA1UdIwQY
MBaAFEp1+pVHW63utx+ETgsLRLao/qn+MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvU25YNmxVZGJyZTYzSDRST0N3dEV0cWotcWY0LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wYy85OTA1OTUtNTE1Ny00MDM2LWI2MDEt
NjA4NDNiNWJiYjgxLzEvU25YNmxVZGJyZTYzSDRST0N3dEV0cWotcWY0Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8wYy85OTA1OTUtNTE1Ny00MDM2LWI2MDEtNjA4NDNiNWJiYjgx
LzEvU25YNmxVZGJyZTYzSDRST0N3dEV0cWotcWY0LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAjXRYL4bL
q9k0oVj7Znjoqq+JnHbaw43TKf/t1Gd85s3LIJWeWTiOSP3ErnuB172iiy0NOOHp
8J2P8VwjCyC5XCopQE2+B+JOmW+dvqw+Gi3pNEO7Uwmy4kzlVsIGfW6Jg4+doVUD
7nxDoBgjcs9avlBKmkV0Dr7iVXDw2uzZ9b64LM8D+tXf5PPU37xxo/oK4Ph3gsFB
i8ENyE3V6qx3fCTts06eOw9U9wzfy99ob3XYNQGPc378RMBOBAmhaw0FeY11klrl
l04f6e8/Bh7wpQkWIAXXZl7WUMx304xsottf1NAXFwptcGdM/qdSpB1BvjPKzqJQ
Z4hkFJpvT1RIHg==
-----END CERTIFICATE-----
Generated at Mon Apr 14 20:26:50 2025 by rpki-client on console.sobornost.net