Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4c/33bec5-6ad5-4e80-bf58-52ca2a9d514b/1/LkB-t2Tgg4VaJYEwjzQdW6fYskc.mft
File:                     LkB-t2Tgg4VaJYEwjzQdW6fYskc.mft (raw, json)
Hash identifier:          3/e46rGF9TVfERytm2tTIVTQHYpP4sgRXz30dNtnFxY=
Subject key identifier:   02:40:B4:ED:AC:87:D9:29:EC:F9:FB:12:95:C2:66:7F:25:DD:57:C9
Authority key identifier: 2E:40:7E:B7:64:E0:83:85:5A:25:81:30:8F:34:1D:5B:A7:D8:B2:47
Certificate issuer:       /CN=2e407eb764e083855a2581308f341d5ba7d8b247
Certificate serial:       01962F3D5EB5C61599462A0ADF6B34FFD138
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/LkB-t2Tgg4VaJYEwjzQdW6fYskc.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/4c/33bec5-6ad5-4e80-bf58-52ca2a9d514b/1/LkB-t2Tgg4VaJYEwjzQdW6fYskc.mft
Manifest number:          0495
Signing time:             Sun 13 Apr 2025 13:01:13 +0000
Manifest this update:     Sun 13 Apr 2025 13:01:13 +0000
Manifest next update:     Mon 14 Apr 2025 13:01:13 +0000
Files and hashes:         1: LkB-t2Tgg4VaJYEwjzQdW6fYskc.crl (hash: 8sfA3mhBMZwKbvV491yAg3eL7/aQfNs8JWPc6ub1+sI=)
                          2: r5qx5bv9vQTvcbqQmzIlloI4Pqo.roa (hash: M9wDMgC7kb97z4Tf7FppQBmD+yOsS5ArXp6NW17Hl7c=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2f:3d:5e:b5:c6:15:99:46:2a:0a:df:6b:34:ff:d1:38
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2e407eb764e083855a2581308f341d5ba7d8b247
        Validity
            Not Before: Apr 13 13:01:13 2025 GMT
            Not After : Apr 14 13:01:13 2025 GMT
        Subject: CN=0240b4edac87d929ecf9fb1295c2667f25dd57c9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b6:ab:51:33:69:e1:c6:de:52:26:7b:d8:bb:12:
                    fb:c9:16:07:df:36:74:48:fa:3e:5e:24:e3:17:04:
                    2a:a1:4a:cf:c1:bb:26:4a:d0:b6:5f:24:de:b5:8c:
                    bb:cc:93:95:4b:a7:20:22:03:b6:cf:d9:4e:73:ac:
                    68:c0:16:a9:1f:31:d7:fb:7f:74:73:d4:18:cf:7c:
                    92:f9:49:d0:8e:49:b3:20:45:34:79:fa:14:37:aa:
                    87:3a:f8:ec:be:2d:b9:b6:fe:5c:c1:72:fd:63:d4:
                    8b:de:95:4a:1c:3d:dd:9d:e8:1a:dc:12:a4:b4:ae:
                    2e:24:f0:90:96:27:03:ee:1d:b9:3b:28:f4:fb:e6:
                    c8:c5:3c:64:6b:ed:1d:5c:82:b3:5a:3d:37:95:91:
                    d1:33:cf:f2:2a:42:3d:b1:d3:ed:b5:14:d3:75:0f:
                    c8:ab:85:2e:9b:22:71:08:8d:96:85:17:ac:8e:cb:
                    c8:19:6f:5b:33:96:da:82:0e:19:11:6f:05:3d:fa:
                    11:43:e0:a0:51:97:bf:95:65:70:4e:c7:28:29:ff:
                    db:6e:3b:97:25:e8:19:30:ce:c7:b4:d3:a3:dd:a0:
                    41:70:da:f3:2d:18:5b:5c:3d:74:d8:df:5e:94:55:
                    36:eb:d0:a6:86:67:2f:7a:3e:68:ee:e6:3c:3c:34:
                    51:9b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                02:40:B4:ED:AC:87:D9:29:EC:F9:FB:12:95:C2:66:7F:25:DD:57:C9
            X509v3 Authority Key Identifier:
                keyid:2E:40:7E:B7:64:E0:83:85:5A:25:81:30:8F:34:1D:5B:A7:D8:B2:47

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/LkB-t2Tgg4VaJYEwjzQdW6fYskc.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4c/33bec5-6ad5-4e80-bf58-52ca2a9d514b/1/LkB-t2Tgg4VaJYEwjzQdW6fYskc.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/4c/33bec5-6ad5-4e80-bf58-52ca2a9d514b/1/LkB-t2Tgg4VaJYEwjzQdW6fYskc.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         19:4f:99:75:ef:66:93:79:04:8d:cb:cb:62:4d:06:46:36:49:
         9c:17:ad:74:e3:14:03:85:2f:6b:2f:f3:d3:b7:f8:68:4a:50:
         b2:d7:31:53:04:0c:fb:e1:89:7b:6c:9d:a9:7b:4c:26:42:d4:
         94:f5:4e:50:54:a7:79:69:8f:ce:e7:90:8b:6c:49:95:ae:bb:
         09:d4:0e:d8:31:c0:19:23:d5:2a:f1:7f:d4:b6:a9:c8:91:c7:
         de:a4:2a:e4:98:8b:59:fd:fd:2f:d4:ad:ee:a5:51:e9:38:b1:
         d0:a3:30:6a:18:14:78:80:17:21:6e:ef:4e:3e:6a:a7:92:7c:
         da:83:54:0d:b0:8a:4e:50:ac:62:62:3f:0c:3f:e8:06:bf:9d:
         92:f4:89:94:a0:ec:71:7d:54:45:17:ae:04:12:05:00:4b:76:
         ac:2f:69:e2:3c:e4:29:0a:1e:82:3b:b9:10:79:d2:d0:86:e6:
         cc:51:f5:66:84:95:56:36:20:82:77:cb:ce:cd:e0:a1:25:e8:
         50:28:5a:4d:81:89:6c:6b:07:a8:b3:12:aa:de:39:3b:f6:f4:
         fa:ce:d9:9d:53:f2:ff:7d:13:0f:4e:57:6b:68:09:a9:3b:72:
         63:00:47:40:ae:2a:06:a4:17:ef:c3:e6:ce:25:2a:0f:a1:28:
         bb:be:b1:47
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 14 20:28:05 2025 by rpki-client on console.sobornost.net