Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3b/994851-7282-41be-91b4-d5172930f8bf/1/7HfzJj_jSKssjTaEdda8BHpql2o.mft
File:                     7HfzJj_jSKssjTaEdda8BHpql2o.mft (raw, json)
Hash identifier:          oa/AOiOm2mxYfPB/+OZ6N/T7JlW2pKF4i9fuHh9GL4I=
Subject key identifier:   FA:AA:5A:2D:FE:B6:CC:44:A0:98:9D:01:0C:A9:15:8C:9B:C0:1F:D0
Authority key identifier: EC:77:F3:26:3F:E3:48:AB:2C:8D:36:84:75:D6:BC:04:7A:6A:97:6A
Certificate issuer:       /CN=ec77f3263fe348ab2c8d368475d6bc047a6a976a
Certificate serial:       01962E9999101C4BB8CC907FCCFC0712C238
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/7HfzJj_jSKssjTaEdda8BHpql2o.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/3b/994851-7282-41be-91b4-d5172930f8bf/1/7HfzJj_jSKssjTaEdda8BHpql2o.mft
Manifest number:          037D
Signing time:             Sun 13 Apr 2025 10:02:20 +0000
Manifest this update:     Sun 13 Apr 2025 10:02:20 +0000
Manifest next update:     Mon 14 Apr 2025 10:02:20 +0000
Files and hashes:         1: 7HfzJj_jSKssjTaEdda8BHpql2o.crl (hash: S50qm79y0XaY79PtE1d8dzi/i690JDSoy4S3qGqVYnE=)
                          2: ciVuDSG137gexnzKwYgFKSw1JAo.roa (hash: Lu0ROEw0vfSrXmfo6gMAWwlGmmUA9I7hRO+NmRoxqGU=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2e:99:99:10:1c:4b:b8:cc:90:7f:cc:fc:07:12:c2:38
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=ec77f3263fe348ab2c8d368475d6bc047a6a976a
        Validity
            Not Before: Apr 13 10:02:20 2025 GMT
            Not After : Apr 14 10:02:20 2025 GMT
        Subject: CN=faaa5a2dfeb6cc44a0989d010ca9158c9bc01fd0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c0:e2:90:2c:7a:4a:48:66:a9:6e:75:83:ae:ee:
                    2b:ed:ca:e6:07:5c:96:07:f5:6f:66:eb:41:db:da:
                    21:4e:36:b8:0e:86:dc:e6:e7:ad:1a:99:fb:5d:98:
                    db:c3:fc:d3:fd:41:38:ba:04:fa:a3:a2:b3:16:1c:
                    91:27:fe:20:c0:d7:27:46:7a:07:83:36:1d:c6:c1:
                    c3:27:94:5b:ba:5d:9c:ee:9a:43:1b:c4:f3:9b:6f:
                    75:2a:b8:47:2c:fe:bd:0e:e0:7d:35:e0:de:f2:94:
                    0f:95:b3:d2:98:5d:2d:4a:bd:40:48:d1:c2:df:2f:
                    d5:2e:e0:c0:22:7c:38:58:8a:db:cf:a1:59:3e:1b:
                    5b:ad:f9:85:56:ac:a4:9c:5c:c1:59:6f:a6:75:b8:
                    fc:46:5d:cc:10:2c:ca:c5:c4:82:d1:a6:7e:8c:8e:
                    c5:f0:fc:6f:a2:71:db:78:e1:7d:8b:d3:12:01:cb:
                    3b:c3:7e:f9:f4:00:8d:1a:a2:50:31:89:0a:76:8b:
                    40:0d:f7:41:2b:68:72:12:46:fb:d5:f8:63:81:05:
                    be:d2:f9:93:e5:eb:bc:d8:0a:3b:36:a1:65:25:8d:
                    18:70:30:bc:6b:c1:c3:61:7c:0a:4d:1b:de:2a:42:
                    62:84:1a:60:7a:26:18:63:41:14:08:25:9a:83:69:
                    0d:85
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FA:AA:5A:2D:FE:B6:CC:44:A0:98:9D:01:0C:A9:15:8C:9B:C0:1F:D0
            X509v3 Authority Key Identifier:
                keyid:EC:77:F3:26:3F:E3:48:AB:2C:8D:36:84:75:D6:BC:04:7A:6A:97:6A

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/7HfzJj_jSKssjTaEdda8BHpql2o.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3b/994851-7282-41be-91b4-d5172930f8bf/1/7HfzJj_jSKssjTaEdda8BHpql2o.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/3b/994851-7282-41be-91b4-d5172930f8bf/1/7HfzJj_jSKssjTaEdda8BHpql2o.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         7d:79:a8:86:89:b2:89:fb:53:1d:1b:ab:38:c1:25:f1:0e:73:
         ad:7a:75:8f:0e:46:1a:84:d9:51:90:9f:c8:6c:fa:70:1d:a6:
         47:f9:5d:42:b1:ef:29:bf:78:a2:3d:f6:a8:00:19:6e:1c:45:
         d9:c5:ea:af:56:99:11:e5:78:63:1d:79:d3:d1:95:ee:94:e9:
         c2:84:ea:c3:65:fa:3a:b6:53:19:2a:c0:e7:cb:35:62:19:39:
         ae:4a:43:c4:0f:dc:9d:25:a0:c0:7e:d0:bb:b8:1d:a7:56:73:
         fd:45:42:93:e9:20:8e:da:e9:f8:ed:5b:c1:dd:ca:ad:f4:d8:
         e2:d8:2e:e3:09:0e:cd:00:0f:af:3d:80:b5:b8:9b:c7:99:01:
         05:11:86:dc:6b:df:43:d2:ff:da:87:7a:03:6d:ba:fb:b2:1a:
         09:5d:b5:89:39:02:d1:82:1a:3c:e0:59:5e:00:ac:df:18:92:
         c2:ce:7e:f3:73:8d:2a:78:f2:50:8a:2c:49:34:23:9b:89:90:
         02:22:be:14:21:19:39:7d:14:2d:2e:65:54:aa:c2:b7:c1:e2:
         24:48:77:54:6d:2f:d5:d2:be:61:f3:06:34:f0:47:9a:d9:81:
         74:90:ac:36:aa:98:d2:f6:6f:fa:29:f8:46:fc:0f:88:25:eb:
         85:4e:1b:77
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 14 20:27:50 2025 by rpki-client on console.sobornost.net