Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2f/6dac86-224b-4ae5-b2a8-496ba82492ce/1/nFVnZyAcUPayqVXbah5uAR36XUQ.mft
File:                     nFVnZyAcUPayqVXbah5uAR36XUQ.mft (raw, json)
Hash identifier:          pXpjKDoWd2i+Lc0JMC7vDdSCP6YewjCIxEhzF0IE27k=
Subject key identifier:   FB:A7:97:A9:B6:10:98:4A:2C:B3:30:68:D6:89:9A:31:A9:4D:DD:71
Authority key identifier: 9C:55:67:67:20:1C:50:F6:B2:A9:55:DB:6A:1E:6E:01:1D:FA:5D:44
Certificate issuer:       /CN=9c556767201c50f6b2a955db6a1e6e011dfa5d44
Certificate serial:       01962E61ADBE23062AF1AEC7BFC53F926AA2
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/nFVnZyAcUPayqVXbah5uAR36XUQ.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/2f/6dac86-224b-4ae5-b2a8-496ba82492ce/1/nFVnZyAcUPayqVXbah5uAR36XUQ.mft
Manifest number:          0A12
Signing time:             Sun 13 Apr 2025 09:01:15 +0000
Manifest this update:     Sun 13 Apr 2025 09:01:15 +0000
Manifest next update:     Mon 14 Apr 2025 09:01:15 +0000
Files and hashes:         1: cmsoMlIRCcbLziNipTUjZc3lrew.roa (hash: a1CFCcY0jADOuS6DTKGkRSmsv5gzH4GzUcir7HG6pUE=)
                          2: nFVnZyAcUPayqVXbah5uAR36XUQ.crl (hash: lPmjY2NCBWa2PEZjGHXJbfVlxgQsK0uodmanXsjoops=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2e:61:ad:be:23:06:2a:f1:ae:c7:bf:c5:3f:92:6a:a2
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9c556767201c50f6b2a955db6a1e6e011dfa5d44
        Validity
            Not Before: Apr 13 09:01:15 2025 GMT
            Not After : Apr 14 09:01:15 2025 GMT
        Subject: CN=fba797a9b610984a2cb33068d6899a31a94ddd71
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e1:47:bc:67:8c:17:b2:06:ae:8f:3e:a4:1f:03:
                    34:13:46:35:71:28:b5:cc:52:03:e3:79:3b:53:cf:
                    3d:74:0c:3c:00:7e:7f:53:99:2d:4e:10:58:ab:48:
                    8d:20:24:b7:c4:54:5b:8f:f7:42:49:22:9d:b5:fd:
                    d3:41:82:41:e1:6b:97:78:a8:5e:6c:59:b4:ac:9c:
                    34:29:0a:77:99:01:4d:29:b3:9d:2e:4f:a2:9e:79:
                    3b:4b:32:13:50:83:87:b9:04:b6:c8:9e:32:6e:4d:
                    73:9d:eb:d4:79:50:fb:2f:0f:7d:fc:97:a9:2e:dd:
                    ee:7d:c7:a9:e5:cb:4e:3e:4b:f2:4c:95:b6:6a:20:
                    4f:af:2f:93:8c:dd:37:e8:1e:27:9c:eb:d9:46:88:
                    61:3b:e0:8e:3f:f6:77:2e:c4:85:21:b4:2d:15:56:
                    ea:f6:60:a3:07:8b:99:c5:ce:5c:27:a5:5c:ff:63:
                    85:58:24:69:10:5a:35:27:e5:57:94:e9:7f:89:80:
                    bc:c5:f1:51:bf:d0:b2:47:19:a7:60:0f:52:48:2f:
                    70:a8:9c:59:f6:80:61:12:98:7b:b9:93:db:8c:b7:
                    d1:f5:e7:19:51:3f:d2:e6:b9:42:b2:0f:86:e5:dd:
                    82:09:23:a3:44:96:73:e9:f0:61:5a:86:48:41:d3:
                    f5:b5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FB:A7:97:A9:B6:10:98:4A:2C:B3:30:68:D6:89:9A:31:A9:4D:DD:71
            X509v3 Authority Key Identifier:
                keyid:9C:55:67:67:20:1C:50:F6:B2:A9:55:DB:6A:1E:6E:01:1D:FA:5D:44

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/nFVnZyAcUPayqVXbah5uAR36XUQ.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2f/6dac86-224b-4ae5-b2a8-496ba82492ce/1/nFVnZyAcUPayqVXbah5uAR36XUQ.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/2f/6dac86-224b-4ae5-b2a8-496ba82492ce/1/nFVnZyAcUPayqVXbah5uAR36XUQ.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         1e:7c:16:ce:8c:c9:c7:53:6b:d2:83:4a:85:e5:23:da:3f:39:
         f1:a0:93:b6:7c:63:b3:11:d8:60:03:f3:f0:2b:ef:7f:5a:07:
         9b:d6:a1:ad:1a:7b:77:ce:da:f3:2a:00:4f:e1:88:88:34:9a:
         41:53:7a:e0:7a:77:82:66:9c:98:7d:eb:7c:ea:3d:f5:4e:e9:
         70:4f:53:0f:a3:0e:e0:3d:8d:c9:0d:10:9d:ff:36:a3:0d:e4:
         33:ce:f5:18:fb:c7:5c:01:dd:ec:07:71:c3:4b:13:ac:66:da:
         52:0f:31:85:cf:49:10:69:da:0d:5a:48:e2:ea:bd:c7:28:b2:
         eb:22:3f:10:37:e9:dd:67:41:0d:33:ed:cd:5a:d2:39:85:0c:
         07:6b:0a:6a:53:b2:20:93:6b:76:70:20:d3:a7:2f:75:79:51:
         a3:b0:0a:8e:34:e2:e5:2a:34:02:90:93:76:0d:03:fe:12:24:
         32:e2:ec:b9:a4:99:a5:7b:8a:b9:92:69:e9:76:58:aa:c0:e9:
         52:9d:4f:32:01:0e:79:db:c9:26:9c:4d:2c:f8:b2:53:58:9c:
         48:8b:06:84:0e:02:25:03:f6:a7:66:ba:ec:ab:60:7f:c5:d3:
         60:9a:55:5b:4e:41:92:36:f7:45:19:37:4d:eb:b6:d9:69:83:
         21:37:b8:12
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 14 20:27:32 2025 by rpki-client on console.sobornost.net