Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/10/12417f-7665-4098-a338-4949b1e2b60f/1/llpqv9sIdPL-wiYs3qM3Otyy3FU.mft
File:                     llpqv9sIdPL-wiYs3qM3Otyy3FU.mft (raw, json)
Hash identifier:          6jI+OS0+G2koMer7SR2noZ76klntcdMovRB9GEiUsyI=
Subject key identifier:   53:68:19:AD:85:66:D3:AE:5D:6F:DF:EC:D5:77:35:53:67:F0:66:72
Authority key identifier: 96:5A:6A:BF:DB:08:74:F2:FE:C2:26:2C:DE:A3:37:3A:DC:B2:DC:55
Certificate issuer:       /CN=965a6abfdb0874f2fec2262cdea3373adcb2dc55
Certificate serial:       01962DF4216175DA53A07B06652933A492D9
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/llpqv9sIdPL-wiYs3qM3Otyy3FU.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/10/12417f-7665-4098-a338-4949b1e2b60f/1/llpqv9sIdPL-wiYs3qM3Otyy3FU.mft
Manifest number:          0C4F
Signing time:             Sun 13 Apr 2025 07:01:36 +0000
Manifest this update:     Sun 13 Apr 2025 07:01:36 +0000
Manifest next update:     Mon 14 Apr 2025 07:01:36 +0000
Files and hashes:         1: jx2XkRRJ1Pen6eLqWGsTXmBaP9o.roa (hash: yl4Uer3PsgYBYL8law/V2acfxxr/ONbHAHnzrh/MmEQ=)
                          2: llpqv9sIdPL-wiYs3qM3Otyy3FU.crl (hash: cqUMIGoCcDDD4MxZZgkxrp5EHrDRONUaiEBpxPhO4rg=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2d:f4:21:61:75:da:53:a0:7b:06:65:29:33:a4:92:d9
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=965a6abfdb0874f2fec2262cdea3373adcb2dc55
        Validity
            Not Before: Apr 13 07:01:36 2025 GMT
            Not After : Apr 14 07:01:36 2025 GMT
        Subject: CN=536819ad8566d3ae5d6fdfecd577355367f06672
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e7:76:03:d9:93:9e:be:2d:10:38:1c:0c:d6:54:
                    04:2f:60:f7:87:b1:f0:97:fb:c3:86:af:68:9a:0b:
                    76:65:da:0f:27:01:ba:53:f9:3f:26:3f:f2:10:3c:
                    d3:9b:82:35:be:56:fb:42:10:0c:97:d8:aa:1c:f8:
                    e4:91:bd:e6:44:20:50:0a:ec:d9:86:71:c1:38:20:
                    0e:3d:1e:0b:3f:25:73:10:cf:70:e0:f5:d3:31:53:
                    97:b6:9d:bb:15:49:29:b9:92:06:7b:25:ea:3c:95:
                    77:52:66:52:22:52:03:b3:85:86:02:8f:e9:c9:8f:
                    d3:39:89:62:87:6f:0d:b8:f6:ba:0e:34:47:31:19:
                    40:95:c6:e4:92:48:8f:da:dd:3b:cc:cc:22:3c:cb:
                    1f:3f:e1:e1:fc:d4:8f:7d:cc:a2:08:35:53:a2:ec:
                    14:d8:91:bd:97:61:3f:be:82:96:83:0c:46:ce:11:
                    96:6f:51:ce:bd:ae:3e:9c:6a:ae:33:92:33:a0:c4:
                    4f:00:9b:14:07:0f:32:0d:2d:18:0b:52:63:10:0b:
                    db:e1:ef:ea:8b:b0:c4:b8:85:e3:63:82:d2:05:63:
                    8d:f8:3b:ca:dc:e1:82:ef:35:16:56:95:62:10:93:
                    dc:e8:9d:b8:fe:1a:a3:cc:1a:8b:2a:ae:e4:f0:4e:
                    d0:59
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                53:68:19:AD:85:66:D3:AE:5D:6F:DF:EC:D5:77:35:53:67:F0:66:72
            X509v3 Authority Key Identifier:
                keyid:96:5A:6A:BF:DB:08:74:F2:FE:C2:26:2C:DE:A3:37:3A:DC:B2:DC:55

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/llpqv9sIdPL-wiYs3qM3Otyy3FU.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/10/12417f-7665-4098-a338-4949b1e2b60f/1/llpqv9sIdPL-wiYs3qM3Otyy3FU.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/10/12417f-7665-4098-a338-4949b1e2b60f/1/llpqv9sIdPL-wiYs3qM3Otyy3FU.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         16:38:76:3f:13:09:a4:73:d4:49:b0:27:93:91:0f:78:fb:86:
         5a:0d:e7:0e:c3:62:87:03:11:b7:9d:bf:99:7c:a3:98:9f:30:
         71:12:7d:fd:ae:41:59:45:55:fb:7f:97:6d:b1:fa:23:a2:18:
         ec:0e:da:17:0c:d5:0c:b9:db:de:e3:dc:ac:46:a4:e2:ec:6b:
         a9:c2:52:2c:8a:3b:b7:48:ec:cd:7a:af:3f:52:99:9e:4a:f7:
         55:af:60:52:89:05:0b:17:34:1a:24:8a:59:38:77:c0:37:db:
         a0:65:e2:54:34:fa:09:11:d1:0d:35:2d:89:8f:74:b3:d7:4b:
         f6:79:70:5a:a9:53:9a:61:4a:a8:0a:5b:54:1f:fb:f1:b8:6e:
         8a:b8:4f:9a:ea:26:c3:64:93:6b:fa:33:d4:ed:3f:e1:d8:90:
         57:a1:95:88:37:e0:2c:a3:1f:1c:da:cc:61:a3:cf:f7:a2:35:
         17:8c:32:74:e1:b4:8c:96:26:f6:09:a0:09:aa:e8:7b:2a:d1:
         1a:c7:3d:e5:49:3c:74:22:fb:03:ed:2b:5c:59:d8:c1:1e:c2:
         6b:63:68:fb:41:f0:5c:33:bb:97:7d:1e:7c:dd:b7:43:fe:df:
         97:a8:51:88:08:ec:98:19:0d:58:ff:64:c5:0d:f8:f5:4a:52:
         d1:f4:60:4d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 14 20:27:00 2025 by rpki-client on console.sobornost.net