Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1f/02240f-e080-4be9-93c4-396fcda6490c/1/lW4xbJg4BMJQHsxavqU6KoO1cyQ.mft
File:                     lW4xbJg4BMJQHsxavqU6KoO1cyQ.mft (raw, json)
Hash identifier:          7ltSAuhX7H8H8oVNwm8q7I4QZf0vhdB/OznhkbhE9Is=
Subject key identifier:   14:91:18:D4:CA:96:58:88:59:0E:C2:68:E9:1E:E8:A6:63:D6:C9:79
Authority key identifier: 95:6E:31:6C:98:38:04:C2:50:1E:CC:5A:BE:A5:3A:2A:83:B5:73:24
Certificate issuer:       /CN=956e316c983804c2501ecc5abea53a2a83b57324
Certificate serial:       01962E98E80F8BB59C83AF9857FF89BD3CB5
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/lW4xbJg4BMJQHsxavqU6KoO1cyQ.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/1f/02240f-e080-4be9-93c4-396fcda6490c/1/lW4xbJg4BMJQHsxavqU6KoO1cyQ.mft
Manifest number:          14BA
Signing time:             Sun 13 Apr 2025 10:01:34 +0000
Manifest this update:     Sun 13 Apr 2025 10:01:34 +0000
Manifest next update:     Mon 14 Apr 2025 10:01:34 +0000
Files and hashes:         1: lW4xbJg4BMJQHsxavqU6KoO1cyQ.crl (hash: w/2u+dfYrh36kZBoqm7FDPNZpjGhoioqmQiRRKWroBc=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2e:98:e8:0f:8b:b5:9c:83:af:98:57:ff:89:bd:3c:b5
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=956e316c983804c2501ecc5abea53a2a83b57324
        Validity
            Not Before: Apr 13 10:01:34 2025 GMT
            Not After : Apr 14 10:01:34 2025 GMT
        Subject: CN=149118d4ca965888590ec268e91ee8a663d6c979
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ce:bb:a7:38:b8:44:d0:57:a2:96:fd:7c:67:fd:
                    5b:30:d0:50:9f:8d:b3:67:44:38:d9:14:56:3b:45:
                    0f:1f:97:bc:ce:46:bd:eb:3f:dd:d8:7b:92:09:00:
                    87:0d:af:86:37:2f:db:49:4f:90:7e:b9:91:6a:df:
                    d5:79:69:65:eb:45:86:86:67:34:5f:d5:21:c4:79:
                    44:77:e5:c3:bc:10:cd:b5:39:5c:38:dd:f2:4d:8c:
                    d8:06:4c:31:cb:c0:1e:a4:63:fd:94:f1:87:eb:84:
                    c8:13:e6:65:51:fe:f3:ac:9f:ed:33:b1:bd:ce:9d:
                    25:9c:da:24:db:7b:48:57:b6:6f:40:83:21:bd:08:
                    b3:aa:e9:8b:25:ff:5e:2e:aa:15:56:21:88:0b:c4:
                    40:3f:33:6f:bb:32:0a:c3:e8:55:e3:74:dc:2a:71:
                    a6:22:64:88:4a:ba:8f:50:88:85:49:97:61:1d:30:
                    e4:9b:0c:c5:c5:eb:e3:d7:a2:3f:06:55:f2:b2:e5:
                    85:6f:3c:00:b1:23:0e:94:b9:0a:41:07:11:4b:22:
                    40:8b:38:2b:91:d2:18:5e:91:a8:a3:f9:e7:fa:87:
                    24:1d:c8:d6:75:38:67:d8:9b:f6:67:00:de:9e:cd:
                    d0:5b:9d:8b:d0:2e:5e:26:b6:bf:5a:5b:20:40:53:
                    65:bb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                14:91:18:D4:CA:96:58:88:59:0E:C2:68:E9:1E:E8:A6:63:D6:C9:79
            X509v3 Authority Key Identifier:
                keyid:95:6E:31:6C:98:38:04:C2:50:1E:CC:5A:BE:A5:3A:2A:83:B5:73:24

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/lW4xbJg4BMJQHsxavqU6KoO1cyQ.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1f/02240f-e080-4be9-93c4-396fcda6490c/1/lW4xbJg4BMJQHsxavqU6KoO1cyQ.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/1f/02240f-e080-4be9-93c4-396fcda6490c/1/lW4xbJg4BMJQHsxavqU6KoO1cyQ.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         43:d6:59:c6:26:7f:74:7b:7f:6a:fc:03:b6:ad:57:72:c1:c1:
         24:03:46:36:14:e6:e8:95:c7:00:0e:de:1d:91:7d:28:14:b2:
         2c:bb:e5:4e:dc:29:64:e1:27:d9:17:67:ec:03:e8:e7:cd:19:
         8f:7a:be:75:f9:90:4c:db:7a:8d:3d:bf:68:dc:00:20:97:36:
         32:7b:3e:99:09:0d:e3:4c:9e:d6:74:ff:98:08:b8:cc:ef:f9:
         dd:98:79:bc:99:5b:9b:c5:25:3d:e8:99:00:54:6f:4f:ae:6f:
         a1:07:ad:a3:fe:20:f8:03:11:5f:0f:7b:a8:64:6d:9a:31:43:
         63:13:d7:26:6f:a5:5e:69:5a:e3:d9:8b:96:c6:6b:f7:54:29:
         2e:96:45:09:77:98:af:b8:bb:f2:8d:fb:1f:3c:a8:58:7e:66:
         9f:0c:9c:14:be:9b:9f:93:96:a8:64:f0:4c:f9:9c:b9:16:72:
         35:9a:3f:39:68:af:37:9c:87:52:c2:02:2d:25:c9:a1:80:8f:
         44:7e:fa:f0:07:98:11:43:6c:74:8f:56:23:23:26:04:31:47:
         5e:49:60:3e:6d:5f:15:f2:69:16:56:a6:76:52:5e:2f:50:2f:
         7b:29:a9:61:ef:b9:91:c9:8d:dd:f4:7b:e9:14:dd:8c:35:51:
         be:50:7f:e7
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZYumOgPi7Wcg6+YV/+JvTy1MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDk1NmUzMTZjOTgzODA0YzI1MDFlY2M1YWJlYTUzYTJhODNi
NTczMjQwHhcNMjUwNDEzMTAwMTM0WhcNMjUwNDE0MTAwMTM0WjAzMTEwLwYDVQQD
EygxNDkxMThkNGNhOTY1ODg4NTkwZWMyNjhlOTFlZThhNjYzZDZjOTc5MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAzrunOLhE0Feilv18Z/1bMNBQn42z
Z0Q42RRWO0UPH5e8zka96z/d2HuSCQCHDa+GNy/bSU+QfrmRat/VeWll60WGhmc0
X9UhxHlEd+XDvBDNtTlcON3yTYzYBkwxy8AepGP9lPGH64TIE+ZlUf7zrJ/tM7G9
zp0lnNok23tIV7ZvQIMhvQizqumLJf9eLqoVViGIC8RAPzNvuzIKw+hV43TcKnGm
ImSISrqPUIiFSZdhHTDkmwzFxevj16I/BlXysuWFbzwAsSMOlLkKQQcRSyJAizgr
kdIYXpGoo/nn+ockHcjWdThn2Jv2ZwDens3QW52L0C5eJra/WlsgQFNluwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFBSRGNTKlliIWQ7CaOke6KZj1sl5MB8GA1UdIwQY
MBaAFJVuMWyYOATCUB7MWr6lOiqDtXMkMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvbFc0eGJKZzRCTUpRSHN4YXZxVTZLb08xY3lRLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xZi8wMjI0MGYtZTA4MC00YmU5LTkzYzQt
Mzk2ZmNkYTY0OTBjLzEvbFc0eGJKZzRCTUpRSHN4YXZxVTZLb08xY3lRLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8xZi8wMjI0MGYtZTA4MC00YmU5LTkzYzQtMzk2ZmNkYTY0OTBj
LzEvbFc0eGJKZzRCTUpRSHN4YXZxVTZLb08xY3lRLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAQ9ZZxiZ/
dHt/avwDtq1XcsHBJANGNhTm6JXHAA7eHZF9KBSyLLvlTtwpZOEn2Rdn7APo580Z
j3q+dfmQTNt6jT2/aNwAIJc2Mns+mQkN40ye1nT/mAi4zO/53Zh5vJlbm8UlPeiZ
AFRvT65voQeto/4g+AMRXw97qGRtmjFDYxPXJm+lXmla49mLlsZr91QpLpZFCXeY
r7i78o37HzyoWH5mnwycFL6bn5OWqGTwTPmcuRZyNZo/OWivN5yHUsICLSXJoYCP
RH768AeYEUNsdI9WIyMmBDFHXklgPm1fFfJpFlamdlJeL1AveympYe+5kcmN3fR7
6RTdjDVRvlB/5w==
-----END CERTIFICATE-----
Generated at Mon Apr 14 20:27:17 2025 by rpki-client on console.sobornost.net