Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4f/c4a45f-4213-4f01-98f6-98eb53b9502a/1/bNoVAPXJY-0jT9lIWfI7MvSIXfw.mft
File:                     bNoVAPXJY-0jT9lIWfI7MvSIXfw.mft (raw, json)
Hash identifier:          NAExrWeYlx4aqZMV0TSeGeWTgXlCtePui2VIhpXFbIs=
Subject key identifier:   7D:77:F6:8C:9D:D7:3F:06:16:FE:77:B6:CE:CA:73:21:FF:49:E8:20
Authority key identifier: 6C:DA:15:00:F5:C9:63:ED:23:4F:D9:48:59:F2:3B:32:F4:88:5D:FC
Certificate issuer:       /CN=6cda1500f5c963ed234fd94859f23b32f4885dfc
Certificate serial:       01962F3DA33DDEB14EDCC645917FCBED3242
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/bNoVAPXJY-0jT9lIWfI7MvSIXfw.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/4f/c4a45f-4213-4f01-98f6-98eb53b9502a/1/bNoVAPXJY-0jT9lIWfI7MvSIXfw.mft
Manifest number:          12C9
Signing time:             Sun 13 Apr 2025 13:01:30 +0000
Manifest this update:     Sun 13 Apr 2025 13:01:30 +0000
Manifest next update:     Mon 14 Apr 2025 13:01:30 +0000
Files and hashes:         1: VL7EtVPW-Ba0tPYDXOg-sXCbn4U.roa (hash: gs/UbUcaVfJny1jbjzMdFc3Au+82Qsl/IH1AWl7JplE=)
                          2: bNoVAPXJY-0jT9lIWfI7MvSIXfw.crl (hash: mb07yBKcGQVZtGkz/IaaD4V6B6+dHOkfPTh9t0lylTE=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2f:3d:a3:3d:de:b1:4e:dc:c6:45:91:7f:cb:ed:32:42
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6cda1500f5c963ed234fd94859f23b32f4885dfc
        Validity
            Not Before: Apr 13 13:01:30 2025 GMT
            Not After : Apr 14 13:01:30 2025 GMT
        Subject: CN=7d77f68c9dd73f0616fe77b6ceca7321ff49e820
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b9:59:56:ab:63:9e:21:c6:0e:fd:4f:a7:7e:3f:
                    5d:67:41:c3:1e:d7:71:7a:a7:1f:d0:4c:ed:ea:b1:
                    7d:ba:da:ec:1c:46:ea:d0:70:49:d2:fe:24:8e:62:
                    04:31:bf:89:02:a3:1c:3a:05:2b:95:93:bf:2f:97:
                    f5:44:16:38:a1:a3:b9:d9:b3:f3:78:9d:41:02:99:
                    0c:f9:0d:7c:f3:e6:f8:3f:96:23:20:7a:d5:89:4c:
                    3f:f2:eb:34:29:f8:bb:b7:40:3c:db:7b:74:6f:e1:
                    fa:aa:7b:f3:db:cc:11:fb:f2:22:67:72:90:a1:e6:
                    d8:39:5c:00:3c:4b:36:ab:c4:51:9e:2e:13:05:31:
                    41:6c:ba:27:a0:65:89:ff:77:7a:13:db:4e:59:8d:
                    d5:c1:be:ca:27:31:6b:dc:b0:8e:d9:d2:a8:22:d1:
                    34:cd:c2:c5:2e:73:6d:76:88:94:ba:ac:10:63:29:
                    62:f1:47:c0:8e:ff:eb:ab:c1:26:b6:ff:b6:c6:a9:
                    47:72:e9:48:24:56:ed:aa:de:a9:3e:95:db:7e:5e:
                    65:29:1c:b7:ab:db:77:8a:d3:64:08:00:09:92:70:
                    49:49:95:a7:65:62:bf:79:69:6a:66:30:5d:b4:63:
                    98:30:76:1c:79:cd:6a:bd:d3:e1:19:66:a3:34:bf:
                    b5:59
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7D:77:F6:8C:9D:D7:3F:06:16:FE:77:B6:CE:CA:73:21:FF:49:E8:20
            X509v3 Authority Key Identifier:
                keyid:6C:DA:15:00:F5:C9:63:ED:23:4F:D9:48:59:F2:3B:32:F4:88:5D:FC

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/bNoVAPXJY-0jT9lIWfI7MvSIXfw.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4f/c4a45f-4213-4f01-98f6-98eb53b9502a/1/bNoVAPXJY-0jT9lIWfI7MvSIXfw.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/4f/c4a45f-4213-4f01-98f6-98eb53b9502a/1/bNoVAPXJY-0jT9lIWfI7MvSIXfw.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         8f:fe:38:06:7e:4d:eb:c9:ad:9d:e4:47:5f:e5:24:ca:77:bc:
         49:f3:e2:99:10:6a:2f:9c:c0:5d:bf:32:dd:01:4c:73:f0:24:
         9f:e3:a7:da:99:b0:e1:0d:0a:07:92:e2:9d:b3:70:5b:94:74:
         d3:44:11:95:a5:29:ba:16:91:90:8a:f7:a7:83:92:21:0c:0c:
         94:bf:01:a2:37:ec:eb:2f:b0:e0:a5:52:8a:83:9a:d3:c4:08:
         ff:96:bf:e3:c5:ff:8d:bc:83:03:26:d1:9c:9b:c9:65:40:17:
         09:70:8f:fc:11:20:21:90:c5:32:cc:95:88:93:01:14:59:84:
         08:51:86:72:6c:64:be:3c:14:70:52:6e:d3:b8:14:b8:6a:7a:
         a1:f5:8a:83:66:09:70:cd:a0:ff:0b:8f:67:14:64:75:61:bb:
         f2:c8:6a:45:27:5a:a9:1a:6a:c2:5a:a2:fd:da:41:36:b7:1a:
         57:ba:d9:1f:5b:a8:21:f7:60:a9:eb:31:65:a4:3a:b7:f7:df:
         13:1e:3e:f9:53:94:e9:50:1e:f7:99:04:94:aa:82:22:76:7f:
         1b:a9:bf:55:2d:03:57:ca:12:68:9a:9c:62:d7:94:25:f4:69:
         21:3f:04:9d:ff:cb:dc:fb:35:83:b3:46:a8:fc:a7:2d:73:41:
         d5:79:8f:2e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 14 20:28:07 2025 by rpki-client on console.sobornost.net