Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/34/538194-7560-4456-b45c-ca26c22cfafd/1/imlbOroepOZUeIxRZBRYzJlXgEA.mft
File:                     imlbOroepOZUeIxRZBRYzJlXgEA.mft (raw, json)
Hash identifier:          uSOKvvPHWQBLc46GMEy5wiNEaS+1f1vHvZW3UotGiMk=
Subject key identifier:   55:05:D1:94:8D:22:1D:05:CD:96:12:1D:30:A4:E7:0B:D2:C5:EA:12
Authority key identifier: 8A:69:5B:3A:BA:1E:A4:E6:54:78:8C:51:64:14:58:CC:99:57:80:40
Certificate issuer:       /CN=8a695b3aba1ea4e654788c51641458cc99578040
Certificate serial:       01962F064C9F1A700D90AE15ACEAF207F173
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/imlbOroepOZUeIxRZBRYzJlXgEA.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/34/538194-7560-4456-b45c-ca26c22cfafd/1/imlbOroepOZUeIxRZBRYzJlXgEA.mft
Manifest number:          14E9
Signing time:             Sun 13 Apr 2025 12:01:04 +0000
Manifest this update:     Sun 13 Apr 2025 12:01:04 +0000
Manifest next update:     Mon 14 Apr 2025 12:01:04 +0000
Files and hashes:         1: imlbOroepOZUeIxRZBRYzJlXgEA.crl (hash: dgjqcEPV7+5+vqppoEUMnPLIfqN8rXrYUGm1JxR6dIQ=)
                          2: xXvpynv9RLlNuhH_ScFehFzRtz4.roa (hash: QSdQRW1EuXcu0ntbVvgh9fj5LXlqpMEhY2XBCGX6qp8=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2f:06:4c:9f:1a:70:0d:90:ae:15:ac:ea:f2:07:f1:73
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8a695b3aba1ea4e654788c51641458cc99578040
        Validity
            Not Before: Apr 13 12:01:04 2025 GMT
            Not After : Apr 14 12:01:04 2025 GMT
        Subject: CN=5505d1948d221d05cd96121d30a4e70bd2c5ea12
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b7:10:36:79:5c:4f:be:04:73:c3:9b:1b:78:8f:
                    5a:be:8e:8d:9c:4f:8a:89:52:3b:2a:b9:8b:97:5d:
                    9e:45:ce:62:f5:2d:17:a4:5c:3a:ad:65:3a:14:9c:
                    7e:b9:7f:dd:6b:d0:d6:54:53:d4:bd:d7:ee:a5:19:
                    fe:e9:41:e1:1b:5a:20:33:4f:82:a8:30:da:e1:62:
                    83:ba:4a:2d:98:5c:50:ab:a5:d2:a9:89:8e:37:da:
                    32:a0:49:79:1b:30:1f:71:fc:00:33:5f:d1:e8:3a:
                    17:d5:73:65:9a:4a:de:fd:6b:5e:d9:02:3a:39:d6:
                    f4:88:be:08:08:76:b9:bd:cc:4d:a9:bc:77:1d:f8:
                    a9:2b:18:40:07:df:4f:f6:01:c7:ce:06:e0:95:10:
                    23:cb:dd:c6:e3:ec:14:21:a2:9c:55:72:32:7e:04:
                    87:b6:04:e2:aa:71:b6:47:13:4b:d5:03:5d:5a:d4:
                    fb:58:c5:20:3e:f9:68:4d:5d:78:c5:b5:e3:97:ab:
                    00:1b:3c:99:0c:7f:ac:c4:ee:e4:9b:cd:eb:48:34:
                    02:2a:57:ec:eb:9e:59:0c:05:fe:3c:1e:fa:29:5b:
                    31:6b:71:5a:40:4a:49:c8:54:38:17:79:30:4c:31:
                    d2:1c:59:f2:bc:9a:f2:a1:6b:2b:45:55:53:15:c1:
                    57:15
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                55:05:D1:94:8D:22:1D:05:CD:96:12:1D:30:A4:E7:0B:D2:C5:EA:12
            X509v3 Authority Key Identifier:
                keyid:8A:69:5B:3A:BA:1E:A4:E6:54:78:8C:51:64:14:58:CC:99:57:80:40

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/imlbOroepOZUeIxRZBRYzJlXgEA.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/34/538194-7560-4456-b45c-ca26c22cfafd/1/imlbOroepOZUeIxRZBRYzJlXgEA.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/34/538194-7560-4456-b45c-ca26c22cfafd/1/imlbOroepOZUeIxRZBRYzJlXgEA.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         36:b6:c6:f9:be:6f:c0:b0:1b:e3:72:24:dc:8c:6c:99:04:14:
         26:8e:83:d2:e8:e6:55:44:e4:fa:12:fe:7b:47:1a:9b:89:75:
         14:f4:52:f7:14:cf:e3:cd:05:85:6c:b4:69:a9:ce:2b:15:d8:
         e1:ff:36:f5:b4:09:cf:cf:03:2a:c3:57:2e:52:f7:5a:07:71:
         d0:a2:45:4c:fc:06:f7:9d:80:f7:67:cc:2c:55:c3:89:25:cd:
         08:dd:2f:87:8a:06:49:84:fb:4f:4e:aa:cb:11:63:b4:8f:23:
         1d:8e:2f:58:04:69:5a:09:2b:e1:e6:d8:3f:93:01:67:cb:13:
         e3:43:4d:8e:b0:5e:d7:40:58:c9:fd:99:13:aa:01:82:74:45:
         f2:d5:b6:49:7f:62:5b:2c:ce:45:b3:cb:fe:6a:2f:db:e0:af:
         a9:69:c6:93:f3:d2:34:2d:a6:64:fd:e1:51:d7:8b:aa:45:d2:
         4f:cc:16:73:c7:96:eb:0b:d6:84:e6:a4:5e:93:4a:c9:6a:4d:
         d2:83:77:41:0c:39:8e:af:7a:c3:28:a6:6c:3b:7e:c5:26:07:
         da:ec:e7:75:54:47:c4:ef:a4:cf:03:d7:fa:d1:9c:ca:e4:3b:
         4a:31:95:7d:30:c2:19:b0:47:c5:f9:4e:ad:d4:9a:00:7f:7a:
         d8:1d:93:51
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 14 20:27:35 2025 by rpki-client on console.sobornost.net