Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4e/aa5972-3538-4361-a134-31de1769fd8a/1/vosVwjfzTFxcU0S0B567OlidAUg.mft
File:                     vosVwjfzTFxcU0S0B567OlidAUg.mft (raw, json)
Hash identifier:          AdnLkna3QqyNPm3m/emZUznA7HjCJwcRBwDswb/mkOk=
Subject key identifier:   65:A3:2E:63:53:0E:B4:70:77:B1:A1:B0:59:C3:73:FD:89:06:07:C5
Authority key identifier: BE:8B:15:C2:37:F3:4C:5C:5C:53:44:B4:07:9E:BB:3A:58:9D:01:48
Certificate issuer:       /CN=be8b15c237f34c5c5c5344b4079ebb3a589d0148
Certificate serial:       01962DF3CAA51D6D38DC3F2AA883D44F375E
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/vosVwjfzTFxcU0S0B567OlidAUg.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/4e/aa5972-3538-4361-a134-31de1769fd8a/1/vosVwjfzTFxcU0S0B567OlidAUg.mft
Manifest number:          0ABC
Signing time:             Sun 13 Apr 2025 07:01:13 +0000
Manifest this update:     Sun 13 Apr 2025 07:01:13 +0000
Manifest next update:     Mon 14 Apr 2025 07:01:13 +0000
Files and hashes:         1: hKsPJ4MnZD2pYCjFxua95M8Pd_I.roa (hash: doF91Tq6urawTtlcrWXugjS7shhgWKPbbEAfjccw0S8=)
                          2: vosVwjfzTFxcU0S0B567OlidAUg.crl (hash: fkcQbow3gBvoFbTZHuX+1ckxFVtnB8rS1RUGllpGbP8=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2d:f3:ca:a5:1d:6d:38:dc:3f:2a:a8:83:d4:4f:37:5e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=be8b15c237f34c5c5c5344b4079ebb3a589d0148
        Validity
            Not Before: Apr 13 07:01:13 2025 GMT
            Not After : Apr 14 07:01:13 2025 GMT
        Subject: CN=65a32e63530eb47077b1a1b059c373fd890607c5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:85:35:09:cb:d6:e2:b8:b3:d5:21:ba:19:07:ed:
                    69:1a:a0:fd:4b:ed:8f:0c:e3:6a:ac:7d:64:0c:b8:
                    ea:49:dd:4e:7c:24:14:0c:1d:51:a5:f9:af:b8:c3:
                    55:e8:0d:32:b4:3f:03:dc:b2:03:10:3c:42:0f:ca:
                    ea:22:f2:89:3d:18:bd:18:c7:50:2c:37:3c:28:7a:
                    97:de:2c:09:74:f5:8a:95:fe:a2:7f:ef:b1:04:53:
                    67:1a:b0:68:c1:a8:e5:fd:74:52:72:29:bf:89:0d:
                    f5:bd:73:99:c1:32:16:2a:96:bd:68:be:28:13:d9:
                    e1:a5:26:a8:36:f1:e7:eb:5d:b5:65:15:ea:05:86:
                    63:8d:bd:3b:d3:f7:a5:9e:59:da:7f:85:69:2f:0a:
                    3f:a8:08:e5:d5:33:12:5e:34:a5:24:c8:6f:ca:41:
                    60:ec:d5:6c:d6:2b:b9:69:e3:64:d3:e5:16:1a:73:
                    5b:24:4c:3c:67:4f:7c:4e:50:68:7b:cf:69:3b:dd:
                    1b:ff:12:60:5b:00:12:e6:75:29:64:e1:e2:72:9d:
                    7e:e8:21:6e:90:35:1c:45:de:fb:d7:46:30:b2:89:
                    46:b5:f0:d0:1c:82:53:11:56:28:69:12:c7:d2:36:
                    5d:8e:41:0b:96:e2:47:68:4f:15:0e:56:8a:f7:66:
                    2f:7d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                65:A3:2E:63:53:0E:B4:70:77:B1:A1:B0:59:C3:73:FD:89:06:07:C5
            X509v3 Authority Key Identifier:
                keyid:BE:8B:15:C2:37:F3:4C:5C:5C:53:44:B4:07:9E:BB:3A:58:9D:01:48

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/vosVwjfzTFxcU0S0B567OlidAUg.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4e/aa5972-3538-4361-a134-31de1769fd8a/1/vosVwjfzTFxcU0S0B567OlidAUg.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/4e/aa5972-3538-4361-a134-31de1769fd8a/1/vosVwjfzTFxcU0S0B567OlidAUg.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         4d:53:03:66:aa:34:e5:fe:cf:29:7c:ae:9a:b8:21:1d:7c:45:
         82:8f:32:04:d6:4b:67:ff:b1:a7:1f:35:42:3f:76:cd:52:5e:
         ae:92:8b:12:6d:29:3f:ef:ce:ad:ae:f2:da:e1:6a:e4:6d:5a:
         6d:f5:7d:33:e5:b0:92:3a:ea:e0:73:76:fa:6b:f4:a1:8d:33:
         d7:3e:b2:a5:c6:be:d6:3c:28:97:0b:a8:9f:b2:0e:13:fb:9d:
         d5:2d:be:27:cb:fd:83:ee:c2:61:49:f2:51:35:38:ec:3a:d8:
         44:08:bf:51:4f:d1:ab:d9:34:e8:88:f2:ec:de:f8:21:60:e0:
         c4:7f:f9:b2:ee:9a:00:03:94:bb:f7:12:0b:3d:17:14:22:9d:
         25:4a:a2:3c:75:54:bf:e8:04:fd:a8:fb:ed:50:59:9a:10:1c:
         c1:8e:ed:a8:da:97:7b:b2:53:a0:67:6b:a1:af:11:71:b0:3d:
         48:74:80:17:26:ec:2a:2c:3f:d2:25:cf:1f:a6:2b:a8:6d:97:
         78:5d:91:61:52:05:3b:cc:fb:01:0f:c1:c5:c4:4c:10:d6:e9:
         85:dc:b4:d5:03:8c:59:5a:f5:9b:67:57:d4:63:a1:cb:93:99:
         97:b2:16:81:c7:f7:95:7c:61:af:11:17:6e:23:1d:05:1a:74:
         fe:28:28:e8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 14 20:28:07 2025 by rpki-client on console.sobornost.net