Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/57/6cb12c-693d-42c1-8aae-49c072a82595/1/MzKH4jvuZ8pmL713n8vBguxVO-M.mft
File:                     MzKH4jvuZ8pmL713n8vBguxVO-M.mft (raw, json)
Hash identifier:          XTGX0X/38xcKfP3Yppyq67OsxBnxF44sl8XNuK8+aZM=
Subject key identifier:   AD:83:82:61:CC:38:60:0D:9D:EB:07:41:6D:3D:9B:D5:A2:63:BC:52
Authority key identifier: 33:32:87:E2:3B:EE:67:CA:66:2F:BD:77:9F:CB:C1:82:EC:55:3B:E3
Certificate issuer:       /CN=333287e23bee67ca662fbd779fcbc182ec553be3
Certificate serial:       01962E98721D1486ECA10DE2897EE444F7EA
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/MzKH4jvuZ8pmL713n8vBguxVO-M.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/57/6cb12c-693d-42c1-8aae-49c072a82595/1/MzKH4jvuZ8pmL713n8vBguxVO-M.mft
Manifest number:          0851
Signing time:             Sun 13 Apr 2025 10:01:04 +0000
Manifest this update:     Sun 13 Apr 2025 10:01:04 +0000
Manifest next update:     Mon 14 Apr 2025 10:01:04 +0000
Files and hashes:         1: MzKH4jvuZ8pmL713n8vBguxVO-M.crl (hash: G02JsGbTKFu770sVcnOP1loIoqeN97QYDZjBYQZPHpc=)
                          2: RkBZIzlBjrs-4Ibo1cTBR6jIxdU.roa (hash: KJC2gVCeRACWY4bdbIn5UPNWc5Jp6Tm0mfuhfmSROTY=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2e:98:72:1d:14:86:ec:a1:0d:e2:89:7e:e4:44:f7:ea
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=333287e23bee67ca662fbd779fcbc182ec553be3
        Validity
            Not Before: Apr 13 10:01:04 2025 GMT
            Not After : Apr 14 10:01:04 2025 GMT
        Subject: CN=ad838261cc38600d9deb07416d3d9bd5a263bc52
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b7:a5:6a:94:34:3f:a7:28:80:83:15:0c:a2:7e:
                    c8:df:10:c8:99:6b:7d:5a:08:a7:ef:5e:7f:fa:27:
                    69:49:01:65:ee:ff:13:4c:be:94:fe:f9:8f:cf:69:
                    97:70:ac:f2:ed:44:9c:ff:cb:3d:c6:93:bc:7f:6a:
                    85:d7:78:96:bb:75:e3:66:f9:34:e5:c9:8b:2f:4f:
                    65:b3:8a:55:73:9f:32:c6:8b:aa:20:5b:e5:fd:73:
                    72:91:bf:56:e5:12:46:78:f6:77:ca:2e:94:58:7b:
                    39:ed:b3:9c:6c:42:de:96:d2:f2:c0:44:c8:e4:99:
                    09:02:04:09:b6:9c:69:80:7f:4a:73:ef:23:ca:2d:
                    60:81:7a:11:5a:de:84:e1:7b:26:95:c6:0c:50:73:
                    5e:55:44:f1:e5:12:01:74:fc:d8:a6:86:b0:4e:55:
                    bc:51:5a:93:ad:9d:09:22:fa:32:51:c7:f2:22:26:
                    13:ab:98:b4:16:06:f1:90:6f:01:54:e7:f8:c1:94:
                    72:f5:7b:88:c6:cc:2c:6c:f8:d3:44:19:d1:88:9f:
                    5f:26:f0:9e:85:23:ec:14:84:65:af:10:f7:0d:19:
                    5b:29:6d:a6:cd:e5:d2:28:d6:66:8f:b9:f5:a0:0f:
                    67:22:8b:28:e2:e6:9d:b3:b6:5d:59:8c:d2:14:89:
                    8c:3b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AD:83:82:61:CC:38:60:0D:9D:EB:07:41:6D:3D:9B:D5:A2:63:BC:52
            X509v3 Authority Key Identifier:
                keyid:33:32:87:E2:3B:EE:67:CA:66:2F:BD:77:9F:CB:C1:82:EC:55:3B:E3

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/MzKH4jvuZ8pmL713n8vBguxVO-M.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/57/6cb12c-693d-42c1-8aae-49c072a82595/1/MzKH4jvuZ8pmL713n8vBguxVO-M.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/57/6cb12c-693d-42c1-8aae-49c072a82595/1/MzKH4jvuZ8pmL713n8vBguxVO-M.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         03:e7:11:b0:10:a7:c7:b7:b6:43:ad:ea:73:3f:e5:6d:e2:37:
         00:f0:ff:b0:2d:00:fb:5e:8f:ef:57:c9:db:36:c6:a7:be:aa:
         3e:4d:ab:ca:8c:63:6e:b3:c4:9b:84:82:0e:db:26:c5:e0:9d:
         4b:79:a2:ec:ea:25:3b:43:07:e6:6c:df:a7:6e:2e:f7:9f:73:
         72:49:38:b0:29:bf:63:95:80:88:44:42:08:b0:fb:7f:fd:3f:
         19:da:db:81:6d:c0:62:fd:39:1c:f5:96:cc:ad:06:5b:c6:a7:
         1f:8a:f8:38:4c:c3:a1:a2:73:3e:88:bc:ec:4b:af:ad:99:53:
         59:78:01:61:e7:d2:3d:af:2a:e3:c2:b4:e9:84:42:d7:ae:33:
         5e:f1:e8:ac:df:d3:c9:4c:53:c6:0c:bf:3b:45:17:6d:66:3a:
         47:64:35:5b:08:79:b5:c4:d8:c8:e7:63:34:7f:5e:9b:bf:a5:
         74:82:eb:a0:4c:30:81:4e:d0:cd:cb:31:b0:0a:c3:63:87:c5:
         21:fc:9f:7f:6f:ab:34:0d:4c:31:7a:c4:e4:e1:3b:77:30:69:
         25:9e:3c:6a:2a:4c:e7:80:c7:7a:a8:a8:81:40:97:4a:ff:5a:
         b5:40:c5:66:de:0f:ed:83:2a:63:ee:82:d9:79:93:e7:63:a2:
         d5:93:b8:3e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 14 20:28:26 2025 by rpki-client on console.sobornost.net