Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/38/821572-3445-4910-a15c-f4c166c83f88/1/SdAfcM9fTe7ZOowV5JQCnpOr7VU.mft
File:                     SdAfcM9fTe7ZOowV5JQCnpOr7VU.mft (raw, json)
Hash identifier:          j1iIPICUqh6J6pUn8+i7w060crnpbwJ+ntsLIPdZUzc=
Subject key identifier:   BE:1F:95:63:B2:60:03:34:AC:97:77:68:52:97:40:C2:41:CE:3C:71
Authority key identifier: 49:D0:1F:70:CF:5F:4D:EE:D9:3A:8C:15:E4:94:02:9E:93:AB:ED:55
Certificate issuer:       /CN=49d01f70cf5f4deed93a8c15e494029e93abed55
Certificate serial:       01962F74EE56E82AD13FE53150AE00E45B26
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/SdAfcM9fTe7ZOowV5JQCnpOr7VU.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/38/821572-3445-4910-a15c-f4c166c83f88/1/SdAfcM9fTe7ZOowV5JQCnpOr7VU.mft
Manifest number:          010D
Signing time:             Sun 13 Apr 2025 14:01:54 +0000
Manifest this update:     Sun 13 Apr 2025 14:01:54 +0000
Manifest next update:     Mon 14 Apr 2025 14:01:54 +0000
Files and hashes:         1: SdAfcM9fTe7ZOowV5JQCnpOr7VU.crl (hash: ER7AZT14JsB7HUuU6c+ilk645qKoebdVFGqODFRbyAc=)
                          2: WxZz3Xq4Dubhk-2v4KkyD3DjymY.roa (hash: TcPVaB9byF2mn4BjYUtIE/4fQoQybO53Dwd3vhK7Z5U=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2f:74:ee:56:e8:2a:d1:3f:e5:31:50:ae:00:e4:5b:26
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=49d01f70cf5f4deed93a8c15e494029e93abed55
        Validity
            Not Before: Apr 13 14:01:54 2025 GMT
            Not After : Apr 14 14:01:54 2025 GMT
        Subject: CN=be1f9563b2600334ac977768529740c241ce3c71
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:99:f0:19:4f:fa:05:df:8c:4a:42:c9:3d:b1:a8:
                    5f:c8:12:30:8d:eb:68:04:c3:82:30:60:cd:b7:d4:
                    e7:84:7d:97:fd:89:4c:cb:3e:d5:fd:47:76:bc:19:
                    9e:64:fa:4a:d1:e6:47:63:aa:cb:47:03:0d:0a:98:
                    bd:4f:7e:e6:15:e7:4d:82:9c:62:82:94:65:59:06:
                    ae:e0:b1:3b:12:2a:5b:b5:84:3a:98:0b:18:82:a6:
                    2c:43:2d:dd:2d:66:05:eb:d7:b0:c8:bf:2c:a7:24:
                    d6:62:a8:2f:58:55:c7:6b:33:f2:2d:2d:4c:18:b9:
                    8c:a8:a3:4f:09:c7:cd:79:39:0a:70:77:63:7e:27:
                    ed:c6:6f:9e:95:e0:30:a6:36:72:38:ec:4d:e7:ca:
                    e6:59:db:f3:ef:c6:04:91:33:54:9f:3a:49:fe:60:
                    3f:85:40:8b:41:19:c4:19:e7:09:48:e1:d3:4d:8a:
                    da:1f:c7:8a:26:c6:31:dd:e7:cd:4d:7d:1a:9a:40:
                    6c:5e:51:d9:75:d3:f2:ed:1a:da:61:11:e9:b1:72:
                    0b:aa:05:7c:5c:c6:08:5a:12:91:74:4b:5a:ec:ff:
                    15:ea:94:7e:7c:a7:00:0c:b4:9d:2c:af:6a:e3:8c:
                    ea:d3:7d:e5:6e:1d:c9:b9:e6:f4:9c:af:a3:d5:9a:
                    c0:e5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BE:1F:95:63:B2:60:03:34:AC:97:77:68:52:97:40:C2:41:CE:3C:71
            X509v3 Authority Key Identifier:
                keyid:49:D0:1F:70:CF:5F:4D:EE:D9:3A:8C:15:E4:94:02:9E:93:AB:ED:55

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/SdAfcM9fTe7ZOowV5JQCnpOr7VU.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/38/821572-3445-4910-a15c-f4c166c83f88/1/SdAfcM9fTe7ZOowV5JQCnpOr7VU.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/38/821572-3445-4910-a15c-f4c166c83f88/1/SdAfcM9fTe7ZOowV5JQCnpOr7VU.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         06:ad:64:c9:6c:83:91:51:a4:17:20:5a:55:8f:cc:e1:b3:53:
         20:c1:a2:8e:0c:9a:fd:27:02:e5:d8:05:ee:c7:ee:68:6c:ea:
         9f:c1:e4:0e:75:93:12:ad:3a:c2:5c:1b:6d:c9:d6:b2:a4:c2:
         4e:ba:cb:e3:d6:12:9b:ff:79:7c:b8:9c:d7:1c:0f:06:aa:fd:
         c6:14:ff:b5:38:1f:b4:d3:54:6a:3a:cb:fd:87:d3:2b:8b:e6:
         c2:39:5e:e2:17:df:84:3e:d6:ab:50:90:a1:4e:8a:17:08:eb:
         03:77:44:e0:ef:0d:e3:69:89:2a:c4:0a:d2:3b:51:69:9a:e9:
         f1:bd:40:52:dc:f9:0f:b7:2d:d9:04:45:c7:82:b1:03:b6:e1:
         12:5c:3e:4c:7f:8c:0b:be:22:0d:4e:40:6a:09:a3:39:39:59:
         ee:46:f7:0f:59:35:aa:d5:56:9c:ee:d0:d8:2d:7b:ca:aa:83:
         97:9c:35:e7:a2:e5:42:23:44:7f:e4:5c:e3:99:1b:d7:4a:f1:
         d8:6a:ff:43:c7:37:30:54:e0:33:f4:09:c5:51:43:ec:0c:5d:
         e9:90:7e:b7:9f:54:1d:38:89:8b:54:5f:5f:99:c8:cd:07:51:
         d9:d8:69:ed:de:68:d7:ad:45:97:54:75:d0:ba:16:c0:ad:11:
         56:e8:ee:41
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZYvdO5W6CrRP+UxUK4A5FsmMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDQ5ZDAxZjcwY2Y1ZjRkZWVkOTNhOGMxNWU0OTQwMjllOTNh
YmVkNTUwHhcNMjUwNDEzMTQwMTU0WhcNMjUwNDE0MTQwMTU0WjAzMTEwLwYDVQQD
EyhiZTFmOTU2M2IyNjAwMzM0YWM5Nzc3Njg1Mjk3NDBjMjQxY2UzYzcxMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmfAZT/oF34xKQsk9sahfyBIwjeto
BMOCMGDNt9TnhH2X/YlMyz7V/Ud2vBmeZPpK0eZHY6rLRwMNCpi9T37mFedNgpxi
gpRlWQau4LE7EipbtYQ6mAsYgqYsQy3dLWYF69ewyL8spyTWYqgvWFXHazPyLS1M
GLmMqKNPCcfNeTkKcHdjfiftxm+eleAwpjZyOOxN58rmWdvz78YEkTNUnzpJ/mA/
hUCLQRnEGecJSOHTTYraH8eKJsYx3efNTX0amkBsXlHZddPy7RraYRHpsXILqgV8
XMYIWhKRdEta7P8V6pR+fKcADLSdLK9q44zq033lbh3Jueb0nK+j1ZrA5QIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFL4flWOyYAM0rJd3aFKXQMJBzjxxMB8GA1UdIwQY
MBaAFEnQH3DPX03u2TqMFeSUAp6Tq+1VMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvU2RBZmNNOWZUZTdaT293VjVKUUNucE9yN1ZVLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zOC84MjE1NzItMzQ0NS00OTEwLWExNWMt
ZjRjMTY2YzgzZjg4LzEvU2RBZmNNOWZUZTdaT293VjVKUUNucE9yN1ZVLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8zOC84MjE1NzItMzQ0NS00OTEwLWExNWMtZjRjMTY2YzgzZjg4
LzEvU2RBZmNNOWZUZTdaT293VjVKUUNucE9yN1ZVLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEABq1kyWyD
kVGkFyBaVY/M4bNTIMGijgya/ScC5dgF7sfuaGzqn8HkDnWTEq06wlwbbcnWsqTC
TrrL49YSm/95fLic1xwPBqr9xhT/tTgftNNUajrL/YfTK4vmwjle4hffhD7Wq1CQ
oU6KFwjrA3dE4O8N42mJKsQK0jtRaZrp8b1AUtz5D7ct2QRFx4KxA7bhElw+TH+M
C74iDU5AagmjOTlZ7kb3D1k1qtVWnO7Q2C17yqqDl5w156LlQiNEf+Rc45kb10rx
2Gr/Q8c3MFTgM/QJxVFD7Axd6ZB+t59UHTiJi1RfX5nIzQdR2dhp7d5o161Fl1R1
0LoWwK0RVujuQQ==
-----END CERTIFICATE-----
Generated at Mon Apr 14 20:27:40 2025 by rpki-client on console.sobornost.net