Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0f/52fb86-ed78-4850-b406-80a2b68c3832/1/1Xd1ecxneERUvNkaBr1pNarvc_k.mft
File:                     1Xd1ecxneERUvNkaBr1pNarvc_k.mft (raw, json)
Hash identifier:          rsw2iC3D//OB3ZN2g6NOyX9x5Yf8trMUtB8PNTdqzBs=
Subject key identifier:   6F:E7:2B:47:F8:EF:10:CB:08:20:B8:BE:C0:0C:29:6E:88:FF:26:2B
Authority key identifier: D5:77:75:79:CC:67:78:44:54:BC:D9:1A:06:BD:69:35:AA:EF:73:F9
Certificate issuer:       /CN=d5777579cc67784454bcd91a06bd6935aaef73f9
Certificate serial:       01962F3DBF13F8F972DDE9A0A0F97182AF88
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/1Xd1ecxneERUvNkaBr1pNarvc_k.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/0f/52fb86-ed78-4850-b406-80a2b68c3832/1/1Xd1ecxneERUvNkaBr1pNarvc_k.mft
Manifest number:          14ED
Signing time:             Sun 13 Apr 2025 13:01:37 +0000
Manifest this update:     Sun 13 Apr 2025 13:01:37 +0000
Manifest next update:     Mon 14 Apr 2025 13:01:37 +0000
Files and hashes:         1: 1Xd1ecxneERUvNkaBr1pNarvc_k.crl (hash: BIX0+b0fcJBmRceMmdaqJNg38l5qhs4Yf+TmsV85eCo=)
                          2: PT9g_wLcneBNjOxS5cSZh8KvoxU.roa (hash: 5/y3EvqHzR0t/EA2PXR7ybL1u3RTtSq96/aHOf8aTaU=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2f:3d:bf:13:f8:f9:72:dd:e9:a0:a0:f9:71:82:af:88
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d5777579cc67784454bcd91a06bd6935aaef73f9
        Validity
            Not Before: Apr 13 13:01:37 2025 GMT
            Not After : Apr 14 13:01:37 2025 GMT
        Subject: CN=6fe72b47f8ef10cb0820b8bec00c296e88ff262b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a7:7b:b4:35:08:d7:10:20:0c:f8:f5:74:7c:bc:
                    ab:7e:c8:ea:3c:13:11:df:89:47:c9:b1:29:12:c9:
                    64:65:09:78:24:a4:46:8f:cf:05:81:1f:e0:28:26:
                    a7:00:b0:49:bf:47:94:d9:86:fd:38:49:d6:6f:55:
                    4a:02:40:d9:de:4a:d7:21:61:29:3d:43:d1:2e:58:
                    64:79:bb:71:56:8f:c6:18:d7:26:81:70:72:d0:3f:
                    5b:20:69:cc:87:3a:24:6c:a1:7f:d7:49:d2:71:f0:
                    a6:46:ce:b6:26:40:f6:d0:7e:d0:1c:ba:27:7a:69:
                    9b:53:95:66:d1:1e:65:5b:c7:74:6b:5d:14:41:1d:
                    dc:ee:4e:1e:7c:7f:df:ff:a6:e9:80:11:74:d6:f5:
                    c5:f7:c2:73:3c:90:f1:db:b8:20:48:75:22:6a:19:
                    30:19:eb:fa:81:c4:a0:e9:38:9e:9b:ec:2e:83:c9:
                    e7:5a:24:c1:30:7a:68:49:b1:e1:49:ca:4e:9e:1a:
                    36:47:30:7e:9d:d8:52:41:56:ca:02:4f:dd:a0:49:
                    5a:1d:29:1f:ae:68:04:d1:f8:e3:10:6a:68:8e:5b:
                    de:66:4c:53:42:fb:34:f0:b8:d6:08:8a:26:9d:a6:
                    3e:a0:46:e5:e5:f1:d2:a4:4c:94:70:12:4a:a4:70:
                    8e:03
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6F:E7:2B:47:F8:EF:10:CB:08:20:B8:BE:C0:0C:29:6E:88:FF:26:2B
            X509v3 Authority Key Identifier:
                keyid:D5:77:75:79:CC:67:78:44:54:BC:D9:1A:06:BD:69:35:AA:EF:73:F9

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1Xd1ecxneERUvNkaBr1pNarvc_k.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0f/52fb86-ed78-4850-b406-80a2b68c3832/1/1Xd1ecxneERUvNkaBr1pNarvc_k.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/0f/52fb86-ed78-4850-b406-80a2b68c3832/1/1Xd1ecxneERUvNkaBr1pNarvc_k.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         3a:5a:c8:14:85:fe:f0:d8:f5:2d:75:26:24:b1:30:02:ce:f3:
         81:63:75:a2:3a:fc:15:02:8b:c7:0d:68:b0:d7:ba:98:13:c4:
         7d:80:26:a6:19:90:06:76:20:9a:8f:58:1d:1e:5d:95:a9:93:
         8b:eb:1c:b7:71:5e:fc:25:a5:d6:32:bd:e2:59:15:51:9a:88:
         72:6b:12:92:00:9b:c0:7f:9d:52:a9:c2:ed:89:6d:39:c4:42:
         f8:29:31:ed:f6:31:f0:1d:9e:94:cb:4d:f3:8c:2e:ed:a8:57:
         69:35:8a:29:b8:ca:f8:7a:37:c7:62:12:3e:70:03:49:43:fa:
         ee:ed:94:ef:df:69:3a:e0:a8:12:34:65:16:93:46:27:83:4a:
         e6:2d:03:34:15:ec:eb:cd:fa:56:6a:b5:70:d0:f9:7b:07:8b:
         3d:d6:72:c0:95:7b:5f:fc:93:25:34:f6:b6:2e:03:87:05:0d:
         fd:f0:92:75:fe:0a:41:ae:67:74:1d:5d:28:fe:84:64:3c:eb:
         c1:4f:11:06:d1:cd:e7:9c:4d:9e:39:7d:02:85:99:1a:3d:63:
         77:55:1e:25:1b:01:19:39:53:19:39:cc:a5:20:9c:d6:27:67:
         a6:ef:68:27:d9:4b:25:f4:49:96:91:66:1a:a4:e8:fe:ef:93:
         fd:63:4e:25
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZYvPb8T+Ply3emgoPlxgq+IMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGQ1Nzc3NTc5Y2M2Nzc4NDQ1NGJjZDkxYTA2YmQ2OTM1YWFl
ZjczZjkwHhcNMjUwNDEzMTMwMTM3WhcNMjUwNDE0MTMwMTM3WjAzMTEwLwYDVQQD
Eyg2ZmU3MmI0N2Y4ZWYxMGNiMDgyMGI4YmVjMDBjMjk2ZTg4ZmYyNjJiMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAp3u0NQjXECAM+PV0fLyrfsjqPBMR
34lHybEpEslkZQl4JKRGj88FgR/gKCanALBJv0eU2Yb9OEnWb1VKAkDZ3krXIWEp
PUPRLlhkebtxVo/GGNcmgXBy0D9bIGnMhzokbKF/10nScfCmRs62JkD20H7QHLon
emmbU5Vm0R5lW8d0a10UQR3c7k4efH/f/6bpgBF01vXF98JzPJDx27ggSHUiahkw
Gev6gcSg6Tiem+wug8nnWiTBMHpoSbHhScpOnho2RzB+ndhSQVbKAk/doElaHSkf
rmgE0fjjEGpojlveZkxTQvs08LjWCIomnaY+oEbl5fHSpEyUcBJKpHCOAwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFG/nK0f47xDLCCC4vsAMKW6I/yYrMB8GA1UdIwQY
MBaAFNV3dXnMZ3hEVLzZGga9aTWq73P5MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvMVhkMWVjeG5lRVJVdk5rYUJyMXBOYXJ2Y19rLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wZi81MmZiODYtZWQ3OC00ODUwLWI0MDYt
ODBhMmI2OGMzODMyLzEvMVhkMWVjeG5lRVJVdk5rYUJyMXBOYXJ2Y19rLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8wZi81MmZiODYtZWQ3OC00ODUwLWI0MDYtODBhMmI2OGMzODMy
LzEvMVhkMWVjeG5lRVJVdk5rYUJyMXBOYXJ2Y19rLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAOlrIFIX+
8Nj1LXUmJLEwAs7zgWN1ojr8FQKLxw1osNe6mBPEfYAmphmQBnYgmo9YHR5dlamT
i+sct3Fe/CWl1jK94lkVUZqIcmsSkgCbwH+dUqnC7YltOcRC+Ckx7fYx8B2elMtN
84wu7ahXaTWKKbjK+Ho3x2ISPnADSUP67u2U799pOuCoEjRlFpNGJ4NK5i0DNBXs
6836Vmq1cND5eweLPdZywJV7X/yTJTT2ti4DhwUN/fCSdf4KQa5ndB1dKP6EZDzr
wU8RBtHN55xNnjl9AoWZGj1jd1UeJRsBGTlTGTnMpSCc1idnpu9oJ9lLJfRJlpFm
GqTo/u+T/WNOJQ==
-----END CERTIFICATE-----
Generated at Mon Apr 14 20:26:52 2025 by rpki-client on console.sobornost.net