Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/53/be5fff-c911-457c-95fc-d30b7e25ae0b/1/25Kd7FwPI63Zuu7qe7OayHpykIM.mft
File:                     25Kd7FwPI63Zuu7qe7OayHpykIM.mft (raw, json)
Hash identifier:          JpTUlgjWOKEunqEQ0w4tFnnfQoaHw8LNSjihNYzD4a8=
Subject key identifier:   8B:A5:E7:A3:B1:21:CA:DC:67:B3:57:15:68:A1:C1:7D:B8:B9:BB:C0
Authority key identifier: DB:92:9D:EC:5C:0F:23:AD:D9:BA:EE:EA:7B:B3:9A:C8:7A:72:90:83
Certificate issuer:       /CN=db929dec5c0f23add9baeeea7bb39ac87a729083
Certificate serial:       01962E996F19C75002597856E98AB929E47E
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/25Kd7FwPI63Zuu7qe7OayHpykIM.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/53/be5fff-c911-457c-95fc-d30b7e25ae0b/1/25Kd7FwPI63Zuu7qe7OayHpykIM.mft
Manifest number:          14EE
Signing time:             Sun 13 Apr 2025 10:02:09 +0000
Manifest this update:     Sun 13 Apr 2025 10:02:09 +0000
Manifest next update:     Mon 14 Apr 2025 10:02:09 +0000
Files and hashes:         1: 25Kd7FwPI63Zuu7qe7OayHpykIM.crl (hash: pbWzLC57QviEd2eSIW3Z6MHbFJ+lBIc4dlm3Niq0YGU=)
                          2: N4n5sfqwVKR0MtRKu60VkuVT8t8.roa (hash: 7oA83Z9SKqiyh1q+LTyv1yKzsMJNh3uvhrwtOfQSMtU=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2e:99:6f:19:c7:50:02:59:78:56:e9:8a:b9:29:e4:7e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=db929dec5c0f23add9baeeea7bb39ac87a729083
        Validity
            Not Before: Apr 13 10:02:09 2025 GMT
            Not After : Apr 14 10:02:09 2025 GMT
        Subject: CN=8ba5e7a3b121cadc67b3571568a1c17db8b9bbc0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a7:8c:c7:77:00:72:65:fe:3d:49:b3:8d:bd:78:
                    05:ea:78:73:58:1d:31:a7:64:11:0c:ca:39:f9:de:
                    85:27:79:fe:57:00:e9:d0:ea:63:3f:92:88:f7:3e:
                    82:2c:7a:26:76:93:80:12:1a:92:22:fa:5f:88:75:
                    cf:cb:36:c2:51:64:5c:ba:3c:c3:ce:a4:cc:83:a4:
                    fe:6f:15:48:80:62:d2:6b:58:62:9c:d6:75:a0:f2:
                    af:c1:27:5f:70:3f:b6:7d:50:f3:d2:f2:02:f5:6c:
                    f4:bf:48:6f:32:51:0d:f6:8f:56:89:c3:2d:9a:38:
                    b6:5e:fc:80:60:30:4b:2c:03:b6:72:f3:84:93:67:
                    6d:bd:6c:6c:01:74:7b:76:3b:47:21:e7:49:13:59:
                    0f:38:2f:8d:8e:e7:d8:e1:75:f6:90:4a:50:0b:3a:
                    d2:64:53:dc:1c:a8:df:59:74:0b:3c:af:c3:07:c2:
                    20:67:a0:1f:bb:2b:44:d2:cc:84:bc:ad:96:bf:4b:
                    6c:0a:79:5d:65:8a:26:ca:24:53:8f:ac:c1:98:d2:
                    cb:0c:dd:c8:01:84:95:1b:28:7c:b9:cd:29:c3:d4:
                    f9:e6:8f:1b:b6:3e:b2:24:d8:56:77:fe:92:0f:a0:
                    ff:b9:07:3a:d1:69:df:80:c9:5c:68:ba:b2:6f:1e:
                    63:37
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8B:A5:E7:A3:B1:21:CA:DC:67:B3:57:15:68:A1:C1:7D:B8:B9:BB:C0
            X509v3 Authority Key Identifier:
                keyid:DB:92:9D:EC:5C:0F:23:AD:D9:BA:EE:EA:7B:B3:9A:C8:7A:72:90:83

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/25Kd7FwPI63Zuu7qe7OayHpykIM.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/53/be5fff-c911-457c-95fc-d30b7e25ae0b/1/25Kd7FwPI63Zuu7qe7OayHpykIM.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/53/be5fff-c911-457c-95fc-d30b7e25ae0b/1/25Kd7FwPI63Zuu7qe7OayHpykIM.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         5d:20:4a:3f:29:46:da:cd:a3:d3:55:24:f6:f3:3a:36:7d:08:
         90:17:98:92:57:9a:36:76:97:4c:aa:b9:99:ad:bc:6e:0f:f5:
         d7:60:15:0d:63:3b:28:be:11:84:41:bf:00:98:6f:a9:03:90:
         e9:1c:19:18:8c:e6:06:c1:dc:9b:c2:42:74:83:56:54:d4:31:
         05:28:5c:64:fd:86:60:47:49:c8:b4:2f:21:c7:95:bd:f9:5b:
         2d:b2:13:0c:ad:bb:ec:cc:cf:49:fe:57:98:78:cc:f6:64:5e:
         01:19:89:2e:1b:92:85:3a:93:c6:00:b2:f9:fc:d5:0e:8d:6c:
         e6:7f:39:70:db:1f:26:80:39:54:7f:e0:19:d6:56:98:b3:9a:
         7e:66:19:e4:0f:95:95:90:b8:f1:65:d3:6f:46:bf:b0:cd:c3:
         55:69:c0:98:dc:b8:53:38:40:33:a9:81:b8:6d:f3:4b:5a:83:
         1f:84:5e:00:ef:a4:ee:a4:ea:20:e1:16:92:32:a7:e1:a1:fd:
         ae:32:87:27:1c:5e:3d:dd:f7:ed:4b:81:a8:f6:01:58:e4:9e:
         d5:d5:b5:cc:ac:db:ec:c4:74:7d:e0:63:a8:fc:13:e0:bc:9b:
         0d:6c:99:ad:88:db:d5:74:ba:08:23:d3:f9:81:1a:93:7f:14:
         aa:fa:df:67
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 14 20:28:11 2025 by rpki-client on console.sobornost.net