Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/53/5246e6-72c6-4f47-a3a3-e4df5a87d4ed/1/dkE2w82_1ftgyv1Kmx1HOjtnJjU.mft
File:                     dkE2w82_1ftgyv1Kmx1HOjtnJjU.mft (raw, json)
Hash identifier:          0ZNXFXupt0P92vxlmheddYmKpS4Jjh38Y3Wjwte5uMs=
Subject key identifier:   57:73:20:AE:14:06:A3:26:4D:D4:20:F9:D0:39:CA:B2:CB:85:7B:6F
Authority key identifier: 76:41:36:C3:CD:BF:D5:FB:60:CA:FD:4A:9B:1D:47:3A:3B:67:26:35
Certificate issuer:       /CN=764136c3cdbfd5fb60cafd4a9b1d473a3b672635
Certificate serial:       01962E99469542022F852B136BFA709FAB70
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/dkE2w82_1ftgyv1Kmx1HOjtnJjU.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/53/5246e6-72c6-4f47-a3a3-e4df5a87d4ed/1/dkE2w82_1ftgyv1Kmx1HOjtnJjU.mft
Manifest number:          08CF
Signing time:             Sun 13 Apr 2025 10:01:59 +0000
Manifest this update:     Sun 13 Apr 2025 10:01:59 +0000
Manifest next update:     Mon 14 Apr 2025 10:01:59 +0000
Files and hashes:         1: dkE2w82_1ftgyv1Kmx1HOjtnJjU.crl (hash: 0OTT7GxhY0mbDJr5KLvnaNSUtTaLOkimGBWlNiQNnqE=)
                          2: uTA8mSJ_3Pm9uHRtbBQGox8CCms.roa (hash: JKMyKU4R0Hs07ETR6QJe5cFRF5p9HW1pjj1e0SHJl68=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2e:99:46:95:42:02:2f:85:2b:13:6b:fa:70:9f:ab:70
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=764136c3cdbfd5fb60cafd4a9b1d473a3b672635
        Validity
            Not Before: Apr 13 10:01:59 2025 GMT
            Not After : Apr 14 10:01:59 2025 GMT
        Subject: CN=577320ae1406a3264dd420f9d039cab2cb857b6f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9e:c8:79:a9:16:1a:ff:e0:4a:6d:5d:12:34:03:
                    f1:e8:a0:49:1c:0d:8a:d1:bf:76:de:53:b0:6e:b7:
                    2a:c1:ce:cf:77:56:cb:e8:5b:b9:33:0c:2d:23:65:
                    7c:1b:78:ad:f5:6e:0d:45:09:92:3e:db:83:f3:de:
                    ce:ad:3e:74:34:01:c7:00:ca:18:38:8f:6b:9c:73:
                    b2:b9:20:07:ec:30:e7:f4:52:7a:a5:f1:12:97:4b:
                    83:59:48:02:67:4d:86:40:a9:50:5f:be:7f:29:15:
                    51:e0:4c:7b:9c:e8:a7:02:aa:d6:26:99:17:24:cf:
                    b7:3e:2a:f2:dc:0c:02:32:bf:15:b3:43:c5:55:f0:
                    67:d8:07:0d:38:25:ee:16:cf:2a:24:6c:7c:71:d2:
                    57:21:ff:2f:51:9b:9f:2b:ab:83:a0:65:80:ac:f6:
                    fd:a0:2e:96:fa:3a:42:ec:47:57:89:3d:06:8d:5c:
                    d4:7a:64:94:8b:11:94:90:54:a1:5e:60:ed:1f:d3:
                    c3:ef:23:f3:2d:41:a4:db:81:d0:d0:4f:2a:ee:e0:
                    c2:01:23:7f:fe:03:2d:c1:e5:7e:54:e5:b2:97:2d:
                    23:ae:64:75:91:a1:8f:f6:80:bc:83:d8:f2:8c:53:
                    50:3b:40:18:a8:24:c7:4f:91:b7:48:05:fe:b0:55:
                    51:d1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                57:73:20:AE:14:06:A3:26:4D:D4:20:F9:D0:39:CA:B2:CB:85:7B:6F
            X509v3 Authority Key Identifier:
                keyid:76:41:36:C3:CD:BF:D5:FB:60:CA:FD:4A:9B:1D:47:3A:3B:67:26:35

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/dkE2w82_1ftgyv1Kmx1HOjtnJjU.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/53/5246e6-72c6-4f47-a3a3-e4df5a87d4ed/1/dkE2w82_1ftgyv1Kmx1HOjtnJjU.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/53/5246e6-72c6-4f47-a3a3-e4df5a87d4ed/1/dkE2w82_1ftgyv1Kmx1HOjtnJjU.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         76:32:7e:f2:7e:5e:ae:d0:8c:92:4c:85:4f:9d:4f:a8:bd:07:
         5b:62:19:91:37:62:bc:78:9c:a3:8e:9b:91:f7:4f:fd:23:b4:
         50:fb:5e:38:20:32:e2:00:43:20:23:53:2f:98:cc:42:8a:f9:
         00:d4:6c:21:0f:28:69:66:98:9c:cf:43:b6:41:d9:0d:fe:7d:
         e6:2b:f4:ac:d3:2a:58:df:04:5b:52:2d:8e:ff:16:1d:17:06:
         58:07:d7:97:74:18:06:78:89:45:83:db:ad:ac:4e:aa:44:9b:
         d3:44:35:5a:5f:27:99:e4:ee:07:54:69:38:f9:9c:00:85:80:
         84:11:71:2c:df:2a:ab:e6:ff:c2:08:5d:ec:42:9c:fc:d3:e4:
         d7:6e:e0:69:12:40:fe:e6:8a:69:60:0b:f4:01:d1:1a:07:cb:
         8b:fa:41:f3:d6:ef:7f:82:b9:1d:6a:55:dd:7f:7c:af:ed:62:
         50:9d:73:eb:4f:d8:f1:05:62:dd:1b:d3:82:8a:e3:c6:2e:e2:
         c5:a3:43:33:66:52:32:74:dc:6d:3f:9e:d6:c0:29:34:67:de:
         d2:c6:2c:83:a8:4d:d0:90:52:2a:56:ad:a0:84:f3:27:74:60:
         3f:57:f4:6a:68:59:a8:c7:f9:45:61:86:48:cd:d5:4b:4a:91:
         e7:4a:d1:ce
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZYumUaVQgIvhSsTa/pwn6twMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDc2NDEzNmMzY2RiZmQ1ZmI2MGNhZmQ0YTliMWQ0NzNhM2I2
NzI2MzUwHhcNMjUwNDEzMTAwMTU5WhcNMjUwNDE0MTAwMTU5WjAzMTEwLwYDVQQD
Eyg1NzczMjBhZTE0MDZhMzI2NGRkNDIwZjlkMDM5Y2FiMmNiODU3YjZmMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnsh5qRYa/+BKbV0SNAPx6KBJHA2K
0b923lOwbrcqwc7Pd1bL6Fu5MwwtI2V8G3it9W4NRQmSPtuD897OrT50NAHHAMoY
OI9rnHOyuSAH7DDn9FJ6pfESl0uDWUgCZ02GQKlQX75/KRVR4Ex7nOinAqrWJpkX
JM+3Piry3AwCMr8Vs0PFVfBn2AcNOCXuFs8qJGx8cdJXIf8vUZufK6uDoGWArPb9
oC6W+jpC7EdXiT0GjVzUemSUixGUkFShXmDtH9PD7yPzLUGk24HQ0E8q7uDCASN/
/gMtweV+VOWyly0jrmR1kaGP9oC8g9jyjFNQO0AYqCTHT5G3SAX+sFVR0QIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFFdzIK4UBqMmTdQg+dA5yrLLhXtvMB8GA1UdIwQY
MBaAFHZBNsPNv9X7YMr9SpsdRzo7ZyY1MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvZGtFMnc4Ml8xZnRneXYxS214MUhPanRuSmpVLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81My81MjQ2ZTYtNzJjNi00ZjQ3LWEzYTMt
ZTRkZjVhODdkNGVkLzEvZGtFMnc4Ml8xZnRneXYxS214MUhPanRuSmpVLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC81My81MjQ2ZTYtNzJjNi00ZjQ3LWEzYTMtZTRkZjVhODdkNGVk
LzEvZGtFMnc4Ml8xZnRneXYxS214MUhPanRuSmpVLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAdjJ+8n5e
rtCMkkyFT51PqL0HW2IZkTdivHico46bkfdP/SO0UPteOCAy4gBDICNTL5jMQor5
ANRsIQ8oaWaYnM9DtkHZDf595iv0rNMqWN8EW1Itjv8WHRcGWAfXl3QYBniJRYPb
raxOqkSb00Q1Wl8nmeTuB1RpOPmcAIWAhBFxLN8qq+b/wghd7EKc/NPk127gaRJA
/uaKaWAL9AHRGgfLi/pB89bvf4K5HWpV3X98r+1iUJ1z60/Y8QVi3RvTgorjxi7i
xaNDM2ZSMnTcbT+e1sApNGfe0sYsg6hN0JBSKlatoITzJ3RgP1f0amhZqMf5RWGG
SM3VS0qR50rRzg==
-----END CERTIFICATE-----
Generated at Mon Apr 14 20:28:11 2025 by rpki-client on console.sobornost.net