Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4a/b38707-39ce-4ccb-97a0-9b70d60c4800/1/25v841gk9uybXJ85qBFQzhYYEic.mft
File:                     25v841gk9uybXJ85qBFQzhYYEic.mft (raw, json)
Hash identifier:          EGS40c4n6pbpdkR93aKRDxuhtslCJqInpkJNEPmbip4=
Subject key identifier:   B4:10:60:CF:06:63:39:6F:22:97:31:11:91:55:4B:8B:F9:43:F3:C9
Authority key identifier: DB:9B:FC:E3:58:24:F6:EC:9B:5C:9F:39:A8:11:50:CE:16:18:12:27
Certificate issuer:       /CN=db9bfce35824f6ec9b5c9f39a81150ce16181227
Certificate serial:       01962F06F1E7836222A998D5354F6FCC2939
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/25v841gk9uybXJ85qBFQzhYYEic.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/4a/b38707-39ce-4ccb-97a0-9b70d60c4800/1/25v841gk9uybXJ85qBFQzhYYEic.mft
Manifest number:          016E
Signing time:             Sun 13 Apr 2025 12:01:46 +0000
Manifest this update:     Sun 13 Apr 2025 12:01:46 +0000
Manifest next update:     Mon 14 Apr 2025 12:01:46 +0000
Files and hashes:         1: 0Bo64BgX0hylRoEuTO1mVFUAcSM.roa (hash: k/E5TUmiripioDJT6E/uQgRfu9E1lOiyhVTdC1Kwllc=)
                          2: 25v841gk9uybXJ85qBFQzhYYEic.crl (hash: oqQK4/ZbJDi/pT0B7HzYtxz+qvXJ5F2F+AkGv/huhtQ=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2f:06:f1:e7:83:62:22:a9:98:d5:35:4f:6f:cc:29:39
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=db9bfce35824f6ec9b5c9f39a81150ce16181227
        Validity
            Not Before: Apr 13 12:01:46 2025 GMT
            Not After : Apr 14 12:01:46 2025 GMT
        Subject: CN=b41060cf0663396f2297311191554b8bf943f3c9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:98:0a:eb:4c:13:13:58:92:53:ad:62:98:ab:1a:
                    ac:07:be:0f:48:c3:92:cc:a8:21:85:cc:6e:77:c9:
                    39:63:4b:50:04:85:75:8f:29:ab:e0:76:4f:8f:9c:
                    b3:af:54:cf:ad:3f:e0:dd:73:2c:17:ef:c8:3c:4d:
                    6e:10:23:49:ed:72:bb:0f:c7:45:7d:e6:7e:e5:65:
                    36:f3:2c:e3:f4:ef:7a:06:a9:e3:01:1f:19:8e:be:
                    65:b4:69:0e:76:72:e6:c6:83:8f:15:ed:ee:0a:3e:
                    10:20:1b:18:55:9f:73:5c:1e:86:23:97:bc:b2:5d:
                    59:c5:f7:ba:94:32:8b:44:73:cc:c8:3c:6e:74:2b:
                    fb:f3:59:ac:2c:01:9a:23:d1:c5:c3:12:82:e3:6a:
                    6f:a9:02:64:b5:ff:1b:a5:32:32:80:dc:56:92:22:
                    eb:9c:ec:45:32:44:9e:08:17:53:2c:d2:4b:24:16:
                    54:02:2b:a9:a0:25:8b:9a:c2:70:37:b4:a4:80:51:
                    a8:d0:30:44:32:c7:83:cb:e2:25:d1:b1:78:ce:62:
                    00:b2:f9:a7:a0:a5:c0:80:5f:d4:b6:f7:fe:0c:1e:
                    26:cb:9a:e8:05:d6:c7:c9:ed:1e:cb:81:ef:46:12:
                    f0:3e:e1:cd:21:f5:3c:c2:f4:ec:8d:1b:19:21:3e:
                    3c:b5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B4:10:60:CF:06:63:39:6F:22:97:31:11:91:55:4B:8B:F9:43:F3:C9
            X509v3 Authority Key Identifier:
                keyid:DB:9B:FC:E3:58:24:F6:EC:9B:5C:9F:39:A8:11:50:CE:16:18:12:27

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/25v841gk9uybXJ85qBFQzhYYEic.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4a/b38707-39ce-4ccb-97a0-9b70d60c4800/1/25v841gk9uybXJ85qBFQzhYYEic.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/4a/b38707-39ce-4ccb-97a0-9b70d60c4800/1/25v841gk9uybXJ85qBFQzhYYEic.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         97:87:8f:46:01:7d:bd:54:19:75:f5:dc:99:0c:a5:96:04:0b:
         e6:de:89:5b:1f:58:bd:e6:6f:a9:a8:f9:bd:c5:21:17:ba:b5:
         05:f6:a6:82:50:b5:78:8b:5a:36:ca:a9:b4:79:4a:61:7e:c8:
         4f:12:e7:38:d8:3b:70:0d:04:bb:8a:1f:04:f3:73:8a:6b:90:
         ea:46:4c:dc:99:c0:23:08:f6:a6:05:b5:59:35:20:6f:6c:81:
         05:ba:cf:ec:a6:44:00:1f:f7:ce:e7:d5:18:98:e9:24:da:45:
         4f:eb:13:0b:ba:83:41:39:a4:13:73:51:f0:b0:10:e7:b3:40:
         b0:cd:d6:25:af:e8:fe:23:89:e0:05:7b:ee:69:52:cb:b2:96:
         76:99:cd:35:96:e8:c7:bb:32:09:e3:73:84:66:ab:bb:dd:a8:
         17:be:b4:70:95:17:0a:cc:aa:d9:41:73:98:69:57:d6:cc:ae:
         96:74:2b:17:0d:00:38:53:50:f0:8f:4b:11:fb:7e:7f:35:20:
         fd:5b:33:7d:18:34:10:2d:e4:20:cb:c8:a5:ac:c0:b5:ac:a3:
         81:39:3d:b5:72:49:8a:b5:1b:0b:d4:0a:65:74:15:87:7e:42:
         80:ae:3f:e9:7e:d6:aa:af:b1:f4:1a:3a:64:79:4a:2d:48:c3:
         40:5b:08:51
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZYvBvHng2IiqZjVNU9vzCk5MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGRiOWJmY2UzNTgyNGY2ZWM5YjVjOWYzOWE4MTE1MGNlMTYx
ODEyMjcwHhcNMjUwNDEzMTIwMTQ2WhcNMjUwNDE0MTIwMTQ2WjAzMTEwLwYDVQQD
EyhiNDEwNjBjZjA2NjMzOTZmMjI5NzMxMTE5MTU1NGI4YmY5NDNmM2M5MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmArrTBMTWJJTrWKYqxqsB74PSMOS
zKghhcxud8k5Y0tQBIV1jymr4HZPj5yzr1TPrT/g3XMsF+/IPE1uECNJ7XK7D8dF
feZ+5WU28yzj9O96BqnjAR8Zjr5ltGkOdnLmxoOPFe3uCj4QIBsYVZ9zXB6GI5e8
sl1Zxfe6lDKLRHPMyDxudCv781msLAGaI9HFwxKC42pvqQJktf8bpTIygNxWkiLr
nOxFMkSeCBdTLNJLJBZUAiupoCWLmsJwN7SkgFGo0DBEMseDy+Il0bF4zmIAsvmn
oKXAgF/Utvf+DB4my5roBdbHye0ey4HvRhLwPuHNIfU8wvTsjRsZIT48tQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFLQQYM8GYzlvIpcxEZFVS4v5Q/PJMB8GA1UdIwQY
MBaAFNub/ONYJPbsm1yfOagRUM4WGBInMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvMjV2ODQxZ2s5dXliWEo4NXFCRlF6aFlZRWljLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80YS9iMzg3MDctMzljZS00Y2NiLTk3YTAt
OWI3MGQ2MGM0ODAwLzEvMjV2ODQxZ2s5dXliWEo4NXFCRlF6aFlZRWljLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC80YS9iMzg3MDctMzljZS00Y2NiLTk3YTAtOWI3MGQ2MGM0ODAw
LzEvMjV2ODQxZ2s5dXliWEo4NXFCRlF6aFlZRWljLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAl4ePRgF9
vVQZdfXcmQyllgQL5t6JWx9YveZvqaj5vcUhF7q1BfamglC1eItaNsqptHlKYX7I
TxLnONg7cA0Eu4ofBPNzimuQ6kZM3JnAIwj2pgW1WTUgb2yBBbrP7KZEAB/3zufV
GJjpJNpFT+sTC7qDQTmkE3NR8LAQ57NAsM3WJa/o/iOJ4AV77mlSy7KWdpnNNZbo
x7syCeNzhGaru92oF760cJUXCsyq2UFzmGlX1syulnQrFw0AOFNQ8I9LEft+fzUg
/VszfRg0EC3kIMvIpazAtayjgTk9tXJJirUbC9QKZXQVh35CgK4/6X7Wqq+x9Bo6
ZHlKLUjDQFsIUQ==
-----END CERTIFICATE-----
Generated at Mon Apr 14 20:28:04 2025 by rpki-client on console.sobornost.net