Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0e/6b604b-4eed-4393-8e8c-cba0631f293f/1/mzYg1nmOfrGGY5xFSKBpavbjBYk.mft
File:                     mzYg1nmOfrGGY5xFSKBpavbjBYk.mft (raw, json)
Hash identifier:          MykWyt9Lhx42OlGhJJEiAjKXuXMSqbMVmUOIfVmggiQ=
Subject key identifier:   A1:76:23:AA:F3:6B:85:DB:11:5E:A1:6A:7A:F5:9F:9F:B8:B4:78:E4
Authority key identifier: 9B:36:20:D6:79:8E:7E:B1:86:63:9C:45:48:A0:69:6A:F6:E3:05:89
Certificate issuer:       /CN=9b3620d6798e7eb186639c4548a0696af6e30589
Certificate serial:       01962DF3B30CAED460FCEEC5010C83122E79
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/mzYg1nmOfrGGY5xFSKBpavbjBYk.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/0e/6b604b-4eed-4393-8e8c-cba0631f293f/1/mzYg1nmOfrGGY5xFSKBpavbjBYk.mft
Manifest number:          048F
Signing time:             Sun 13 Apr 2025 07:01:07 +0000
Manifest this update:     Sun 13 Apr 2025 07:01:07 +0000
Manifest next update:     Mon 14 Apr 2025 07:01:07 +0000
Files and hashes:         1: Q41X_j-X6MEBsrlAhkOF1wVzhbk.roa (hash: YBskpCx6COz+43ChHeDsLz5PAi6tPK0b2nqeQTQNIwI=)
                          2: mzYg1nmOfrGGY5xFSKBpavbjBYk.crl (hash: bjOAuWptyvleseEgqW48BgiVlOkLS9KOLvtnbSxqqIc=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2d:f3:b3:0c:ae:d4:60:fc:ee:c5:01:0c:83:12:2e:79
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9b3620d6798e7eb186639c4548a0696af6e30589
        Validity
            Not Before: Apr 13 07:01:07 2025 GMT
            Not After : Apr 14 07:01:07 2025 GMT
        Subject: CN=a17623aaf36b85db115ea16a7af59f9fb8b478e4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b0:f1:d8:71:c9:74:c9:83:39:c3:c9:92:90:22:
                    ee:21:df:21:57:56:19:ee:6e:05:19:e0:ac:c5:b5:
                    ea:33:cc:a6:0b:2c:14:d2:86:db:0d:8b:09:50:db:
                    a2:88:4a:bf:4b:42:1c:e7:60:60:d6:07:ad:58:34:
                    ab:d1:a4:ef:3a:9b:d3:b9:e3:ba:d4:a1:e6:83:44:
                    c4:cb:a9:fc:25:b1:cf:24:a9:cf:d7:93:e4:bf:bd:
                    c9:83:05:1a:d9:ea:80:ae:49:a6:2b:ab:5d:14:af:
                    48:96:58:38:e7:9d:67:d5:f1:72:96:21:73:57:8d:
                    22:f7:77:4a:cc:54:61:8a:48:a4:30:d3:32:fd:2a:
                    88:01:17:af:d9:7f:1c:70:ed:8b:83:ef:e5:af:1b:
                    80:5b:30:de:dc:cc:09:05:be:e5:5a:32:75:b4:08:
                    f2:f4:9f:ab:57:07:aa:43:be:c2:fd:c1:57:2d:5c:
                    d4:8b:3e:df:1f:42:8f:23:0b:bf:38:6a:23:86:d6:
                    e7:43:7f:3c:ef:43:c9:73:6f:60:a1:72:aa:85:6a:
                    93:b8:89:1a:88:b3:73:e1:cc:c6:57:bd:f0:fb:7b:
                    20:58:0f:07:0a:f7:8b:83:fb:04:58:04:17:78:bd:
                    6a:e8:15:8a:19:bd:c2:75:9b:42:a0:e3:86:0c:3c:
                    bb:6d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A1:76:23:AA:F3:6B:85:DB:11:5E:A1:6A:7A:F5:9F:9F:B8:B4:78:E4
            X509v3 Authority Key Identifier:
                keyid:9B:36:20:D6:79:8E:7E:B1:86:63:9C:45:48:A0:69:6A:F6:E3:05:89

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/mzYg1nmOfrGGY5xFSKBpavbjBYk.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0e/6b604b-4eed-4393-8e8c-cba0631f293f/1/mzYg1nmOfrGGY5xFSKBpavbjBYk.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/0e/6b604b-4eed-4393-8e8c-cba0631f293f/1/mzYg1nmOfrGGY5xFSKBpavbjBYk.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         87:98:02:ec:31:51:61:36:90:c7:92:e7:7a:12:22:72:84:69:
         6d:a2:61:b3:3c:ce:d1:12:c7:47:e0:f1:18:45:67:36:3d:a3:
         a4:17:0f:a2:6c:7b:55:74:68:b1:90:b1:e3:12:9c:b6:02:ad:
         06:21:ba:46:4f:24:ad:87:0c:5c:55:2d:dc:8e:8e:4f:d2:24:
         c7:7b:fa:0a:1c:73:50:a1:ab:72:79:72:bc:0b:4e:20:de:b0:
         be:41:57:b2:79:44:19:28:81:80:71:09:d9:ef:d5:34:77:3f:
         df:f7:2b:30:0b:63:07:6a:d4:05:ed:17:15:c0:77:c6:b7:f8:
         35:de:23:28:93:0e:34:91:f1:53:c9:eb:e9:6b:db:ed:88:59:
         63:1b:67:a9:d4:57:60:47:f8:b7:7d:73:28:47:da:8d:94:e4:
         f2:c4:27:f8:e5:73:d5:b0:c0:ce:24:15:38:80:bf:24:77:ce:
         30:98:36:71:45:df:1d:64:a4:9f:7a:01:e0:ee:ff:31:ff:f2:
         1b:9d:e6:95:20:2e:42:66:17:fe:19:0a:05:18:3f:ed:94:ac:
         b2:e0:b6:3b:36:e5:67:64:6a:56:6c:90:98:b4:a9:3a:85:bb:
         8c:f1:8c:6b:4e:b5:8a:1a:bd:f0:a7:82:52:3a:94:0e:8f:92:
         5b:46:f7:bb
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZYt87MMrtRg/O7FAQyDEi55MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDliMzYyMGQ2Nzk4ZTdlYjE4NjYzOWM0NTQ4YTA2OTZhZjZl
MzA1ODkwHhcNMjUwNDEzMDcwMTA3WhcNMjUwNDE0MDcwMTA3WjAzMTEwLwYDVQQD
EyhhMTc2MjNhYWYzNmI4NWRiMTE1ZWExNmE3YWY1OWY5ZmI4YjQ3OGU0MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsPHYccl0yYM5w8mSkCLuId8hV1YZ
7m4FGeCsxbXqM8ymCywU0obbDYsJUNuiiEq/S0Ic52Bg1getWDSr0aTvOpvTueO6
1KHmg0TEy6n8JbHPJKnP15Pkv73JgwUa2eqArkmmK6tdFK9Illg4551n1fFyliFz
V40i93dKzFRhikikMNMy/SqIARev2X8ccO2Lg+/lrxuAWzDe3MwJBb7lWjJ1tAjy
9J+rVweqQ77C/cFXLVzUiz7fH0KPIwu/OGojhtbnQ38870PJc29goXKqhWqTuIka
iLNz4czGV73w+3sgWA8HCveLg/sEWAQXeL1q6BWKGb3CdZtCoOOGDDy7bQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFKF2I6rza4XbEV6hanr1n5+4tHjkMB8GA1UdIwQY
MBaAFJs2INZ5jn6xhmOcRUigaWr24wWJMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvbXpZZzFubU9mckdHWTV4RlNLQnBhdmJqQllrLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wZS82YjYwNGItNGVlZC00MzkzLThlOGMt
Y2JhMDYzMWYyOTNmLzEvbXpZZzFubU9mckdHWTV4RlNLQnBhdmJqQllrLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8wZS82YjYwNGItNGVlZC00MzkzLThlOGMtY2JhMDYzMWYyOTNm
LzEvbXpZZzFubU9mckdHWTV4RlNLQnBhdmJqQllrLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAh5gC7DFR
YTaQx5LnehIicoRpbaJhszzO0RLHR+DxGEVnNj2jpBcPomx7VXRosZCx4xKctgKt
BiG6Rk8krYcMXFUt3I6OT9Ikx3v6ChxzUKGrcnlyvAtOIN6wvkFXsnlEGSiBgHEJ
2e/VNHc/3/crMAtjB2rUBe0XFcB3xrf4Nd4jKJMONJHxU8nr6Wvb7YhZYxtnqdRX
YEf4t31zKEfajZTk8sQn+OVz1bDAziQVOIC/JHfOMJg2cUXfHWSkn3oB4O7/Mf/y
G53mlSAuQmYX/hkKBRg/7ZSssuC2OzblZ2RqVmyQmLSpOoW7jPGMa061ihq98KeC
UjqUDo+SW0b3uw==
-----END CERTIFICATE-----
Generated at Mon Apr 14 20:26:51 2025 by rpki-client on console.sobornost.net