Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/54/a018a7-6b5c-4239-89b7-2a0247fbb6d5/1/OWTN7uNGEWy5ZBukgA9VuZBtw6U.mft
File:                     OWTN7uNGEWy5ZBukgA9VuZBtw6U.mft (raw, json)
Hash identifier:          S2Xn9VuZtpYmPgm9NUMGQP1EkT20jE6pEDor2cpNtXA=
Subject key identifier:   D3:BE:DF:6A:54:19:FC:18:EA:19:BA:ED:0E:A6:21:69:85:4E:BF:7A
Authority key identifier: 39:64:CD:EE:E3:46:11:6C:B9:64:1B:A4:80:0F:55:B9:90:6D:C3:A5
Certificate issuer:       /CN=3964cdeee346116cb9641ba4800f55b9906dc3a5
Certificate serial:       01962E999B66BEB294E235379F4B5D360947
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/OWTN7uNGEWy5ZBukgA9VuZBtw6U.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/54/a018a7-6b5c-4239-89b7-2a0247fbb6d5/1/OWTN7uNGEWy5ZBukgA9VuZBtw6U.mft
Manifest number:          0460
Signing time:             Sun 13 Apr 2025 10:02:20 +0000
Manifest this update:     Sun 13 Apr 2025 10:02:20 +0000
Manifest next update:     Mon 14 Apr 2025 10:02:20 +0000
Files and hashes:         1: BsLLTJoL5Z4HGp4lHrRp2sggxy8.roa (hash: KOPhzfVSci9RxNPGk2QlpxdIKfmzye/4QJQFoBktHeg=)
                          2: OWTN7uNGEWy5ZBukgA9VuZBtw6U.crl (hash: W4niagPQHMFwzxW4NnmtD1r1Ba6m5PsFxLDcMpOf19A=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2e:99:9b:66:be:b2:94:e2:35:37:9f:4b:5d:36:09:47
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3964cdeee346116cb9641ba4800f55b9906dc3a5
        Validity
            Not Before: Apr 13 10:02:20 2025 GMT
            Not After : Apr 14 10:02:20 2025 GMT
        Subject: CN=d3bedf6a5419fc18ea19baed0ea62169854ebf7a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:95:33:e0:46:7d:2d:11:64:6a:05:12:2e:1b:e1:
                    28:d6:0f:05:38:14:de:f5:e0:c7:b1:0d:b3:06:7a:
                    f1:e2:23:a7:ef:13:ba:35:ff:10:e7:bd:66:ab:39:
                    da:a0:38:91:fe:d8:d6:e5:47:c7:15:f3:a6:10:f1:
                    41:22:08:11:eb:5f:a7:10:2e:aa:28:3d:1c:82:0e:
                    5e:5f:f8:fc:41:14:84:32:c0:3c:98:7d:8c:c8:8a:
                    67:83:7b:4d:e2:54:bf:c6:2e:0c:b8:f0:3f:0a:92:
                    41:7c:ac:eb:f8:bc:01:2b:04:44:23:9b:ed:bc:1d:
                    59:62:04:29:6e:ec:83:26:b7:fe:a1:0b:25:01:b4:
                    4a:16:8b:56:71:1d:e5:bc:67:37:58:85:3b:e1:3d:
                    a3:a8:32:4c:e4:df:85:28:cd:9f:b9:04:17:44:72:
                    93:b5:71:1b:90:ac:5a:fa:51:32:4d:93:38:4b:ca:
                    c4:d4:2c:16:05:de:dc:14:5e:cf:0d:35:e5:29:f2:
                    a3:6b:41:7b:d6:9f:05:cf:c2:22:c0:16:7a:ae:8e:
                    cc:93:3b:c9:67:01:dc:b3:f8:0a:47:ff:aa:3a:fb:
                    c6:b4:a5:3f:1a:be:28:f9:a5:d4:59:2f:30:4f:f6:
                    26:8b:46:94:8b:29:41:bc:22:2d:6d:40:eb:d6:81:
                    2b:b3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D3:BE:DF:6A:54:19:FC:18:EA:19:BA:ED:0E:A6:21:69:85:4E:BF:7A
            X509v3 Authority Key Identifier:
                keyid:39:64:CD:EE:E3:46:11:6C:B9:64:1B:A4:80:0F:55:B9:90:6D:C3:A5

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/OWTN7uNGEWy5ZBukgA9VuZBtw6U.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/54/a018a7-6b5c-4239-89b7-2a0247fbb6d5/1/OWTN7uNGEWy5ZBukgA9VuZBtw6U.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/54/a018a7-6b5c-4239-89b7-2a0247fbb6d5/1/OWTN7uNGEWy5ZBukgA9VuZBtw6U.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         66:12:c1:66:3f:95:ba:57:5b:40:3c:64:39:33:36:42:93:97:
         cd:21:ef:b0:7c:ee:c2:b0:b5:4c:3a:da:d4:51:14:92:80:2f:
         c6:6b:e6:8b:14:fd:0c:78:15:63:e3:d6:6c:63:d5:e1:cf:20:
         07:68:49:d5:67:c2:97:8f:c8:f4:84:e3:6e:00:f7:02:fa:e4:
         6e:76:01:b4:7b:0c:48:f9:2f:30:c8:cc:81:55:23:25:0d:86:
         ef:d1:15:0f:a9:20:ee:9f:c1:ce:5c:3e:24:fa:ca:9f:6f:ed:
         6c:04:e0:17:2f:c3:a9:bc:e2:34:d0:43:81:ba:8d:b8:ff:c1:
         cd:dc:83:5d:4c:a7:7c:94:62:ca:a8:82:8a:e9:7b:8e:de:95:
         de:12:90:c5:1f:02:68:d7:a2:69:7f:50:6f:6c:16:0c:39:dc:
         f5:67:06:4e:63:dc:90:25:cf:c5:1b:b2:4a:d5:d9:40:8e:90:
         a7:6f:88:f6:e7:ff:fb:d2:dc:06:c9:0b:ef:55:27:65:37:60:
         e6:e2:c6:6b:00:ad:7e:64:b1:cb:ab:b7:fc:44:70:65:22:98:
         a3:a1:0e:c4:f6:25:d1:0d:aa:05:6c:9d:62:82:75:b0:70:e0:
         ac:7e:27:b0:0e:9f:4b:56:63:89:b7:22:37:43:ad:ec:59:d3:
         94:41:81:ad
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZYumZtmvrKU4jU3n0tdNglHMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDM5NjRjZGVlZTM0NjExNmNiOTY0MWJhNDgwMGY1NWI5OTA2
ZGMzYTUwHhcNMjUwNDEzMTAwMjIwWhcNMjUwNDE0MTAwMjIwWjAzMTEwLwYDVQQD
EyhkM2JlZGY2YTU0MTlmYzE4ZWExOWJhZWQwZWE2MjE2OTg1NGViZjdhMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlTPgRn0tEWRqBRIuG+Eo1g8FOBTe
9eDHsQ2zBnrx4iOn7xO6Nf8Q571mqznaoDiR/tjW5UfHFfOmEPFBIggR61+nEC6q
KD0cgg5eX/j8QRSEMsA8mH2MyIpng3tN4lS/xi4MuPA/CpJBfKzr+LwBKwREI5vt
vB1ZYgQpbuyDJrf+oQslAbRKFotWcR3lvGc3WIU74T2jqDJM5N+FKM2fuQQXRHKT
tXEbkKxa+lEyTZM4S8rE1CwWBd7cFF7PDTXlKfKja0F71p8Fz8IiwBZ6ro7MkzvJ
ZwHcs/gKR/+qOvvGtKU/Gr4o+aXUWS8wT/Ymi0aUiylBvCItbUDr1oErswIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFNO+32pUGfwY6hm67Q6mIWmFTr96MB8GA1UdIwQY
MBaAFDlkze7jRhFsuWQbpIAPVbmQbcOlMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvT1dUTjd1TkdFV3k1WkJ1a2dBOVZ1WkJ0dzZVLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81NC9hMDE4YTctNmI1Yy00MjM5LTg5Yjct
MmEwMjQ3ZmJiNmQ1LzEvT1dUTjd1TkdFV3k1WkJ1a2dBOVZ1WkJ0dzZVLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC81NC9hMDE4YTctNmI1Yy00MjM5LTg5YjctMmEwMjQ3ZmJiNmQ1
LzEvT1dUTjd1TkdFV3k1WkJ1a2dBOVZ1WkJ0dzZVLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAZhLBZj+V
uldbQDxkOTM2QpOXzSHvsHzuwrC1TDra1FEUkoAvxmvmixT9DHgVY+PWbGPV4c8g
B2hJ1WfCl4/I9ITjbgD3AvrkbnYBtHsMSPkvMMjMgVUjJQ2G79EVD6kg7p/Bzlw+
JPrKn2/tbATgFy/DqbziNNBDgbqNuP/BzdyDXUynfJRiyqiCiul7jt6V3hKQxR8C
aNeiaX9Qb2wWDDnc9WcGTmPckCXPxRuyStXZQI6Qp2+I9uf/+9LcBskL71UnZTdg
5uLGawCtfmSxy6u3/ERwZSKYo6EOxPYl0Q2qBWydYoJ1sHDgrH4nsA6fS1Zjibci
N0Ot7FnTlEGBrQ==
-----END CERTIFICATE-----
Generated at Mon Apr 14 20:28:12 2025 by rpki-client on console.sobornost.net