Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5f/0730d1-c67b-435e-b329-d8310db97951/1/o7L02u177ypqtLu5qvrFZU3cU8E.mft
File:                     o7L02u177ypqtLu5qvrFZU3cU8E.mft (raw, json)
Hash identifier:          GemNyifEay84toSxzUKc2YVaqY9xVyuvaYYTjoZCjpw=
Subject key identifier:   00:53:15:A2:98:3F:38:B7:D7:34:9A:56:1C:6C:A6:0B:00:DE:1E:88
Authority key identifier: A3:B2:F4:DA:ED:7B:EF:2A:6A:B4:BB:B9:AA:FA:C5:65:4D:DC:53:C1
Certificate issuer:       /CN=a3b2f4daed7bef2a6ab4bbb9aafac5654ddc53c1
Certificate serial:       01962E61F2C250C23AA057EC9AA052F0C4CB
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/o7L02u177ypqtLu5qvrFZU3cU8E.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/5f/0730d1-c67b-435e-b329-d8310db97951/1/o7L02u177ypqtLu5qvrFZU3cU8E.mft
Manifest number:          10DF
Signing time:             Sun 13 Apr 2025 09:01:32 +0000
Manifest this update:     Sun 13 Apr 2025 09:01:32 +0000
Manifest next update:     Mon 14 Apr 2025 09:01:32 +0000
Files and hashes:         1: CbvTUoVTI9OkiUvPHuJ57q9cBSY.roa (hash: M2lLf2osrJPDAkfEBP++DLdBvZ2RZq2vDWq4YQYtA7g=)
                          2: o7L02u177ypqtLu5qvrFZU3cU8E.crl (hash: kIF71MsR/py9nin+lFqHKET+mq7vJC0q2qgYT8ST0qQ=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2e:61:f2:c2:50:c2:3a:a0:57:ec:9a:a0:52:f0:c4:cb
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=a3b2f4daed7bef2a6ab4bbb9aafac5654ddc53c1
        Validity
            Not Before: Apr 13 09:01:32 2025 GMT
            Not After : Apr 14 09:01:32 2025 GMT
        Subject: CN=005315a2983f38b7d7349a561c6ca60b00de1e88
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9f:c0:e3:2d:34:1a:6c:c4:ac:32:3c:db:62:8d:
                    77:aa:6d:a2:00:c1:24:9a:98:20:74:7e:53:44:af:
                    86:d6:3e:f8:be:00:3c:27:3e:1f:ff:c6:83:53:6e:
                    56:16:1e:fb:75:86:67:d4:51:a6:44:28:36:1e:45:
                    1e:20:0d:dc:cb:2e:cf:a4:11:78:5b:dd:a5:34:36:
                    f7:0c:de:f2:89:be:d8:e7:d5:b3:d3:52:85:48:b7:
                    30:b0:99:ce:3e:82:e8:e7:39:53:88:ea:20:14:4c:
                    41:09:75:09:f3:44:1c:1d:82:f0:e7:b4:d0:4c:42:
                    ea:da:91:24:67:d5:bd:50:71:28:98:53:82:10:8b:
                    59:5e:72:0c:07:10:4a:2e:49:50:8f:96:42:b2:ef:
                    3a:1f:f3:aa:ea:e4:52:5d:f5:60:7c:17:c7:e9:38:
                    71:bc:d6:e3:c5:39:8e:dd:bb:8e:99:41:0c:5d:37:
                    46:30:36:17:72:62:23:ae:a5:18:c1:65:68:af:49:
                    94:36:71:7e:08:bc:f3:96:35:60:8f:aa:fb:2a:bc:
                    ef:6f:35:d2:e3:a8:9c:96:87:56:1d:cb:2f:65:64:
                    dc:93:03:30:06:f2:ef:7a:ea:70:56:d8:0f:21:65:
                    aa:29:c3:7a:17:68:1d:12:91:29:77:dd:30:eb:9c:
                    9b:af
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                00:53:15:A2:98:3F:38:B7:D7:34:9A:56:1C:6C:A6:0B:00:DE:1E:88
            X509v3 Authority Key Identifier:
                keyid:A3:B2:F4:DA:ED:7B:EF:2A:6A:B4:BB:B9:AA:FA:C5:65:4D:DC:53:C1

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/o7L02u177ypqtLu5qvrFZU3cU8E.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5f/0730d1-c67b-435e-b329-d8310db97951/1/o7L02u177ypqtLu5qvrFZU3cU8E.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/5f/0730d1-c67b-435e-b329-d8310db97951/1/o7L02u177ypqtLu5qvrFZU3cU8E.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         45:7a:83:68:93:8c:59:1b:df:0f:f6:2a:50:9f:09:b2:80:c3:
         9b:be:35:5a:65:89:44:b5:e6:a7:d8:a4:0d:26:e1:a0:ff:d1:
         07:74:88:90:58:fb:06:24:0e:f9:62:80:bb:45:93:49:99:e9:
         9e:d1:16:ec:0b:03:25:d2:c7:52:db:6d:2f:65:d3:9b:7c:b4:
         f0:6f:4e:da:dd:49:33:99:a0:6d:33:1b:a4:9b:e5:a8:74:11:
         38:b5:11:79:6c:05:f7:14:4f:14:cf:60:f8:49:7a:8e:d7:fd:
         38:1a:8a:b1:cd:4d:03:0d:05:d8:4f:d6:41:45:c3:d4:fa:9b:
         c7:d7:e7:7e:8e:0c:8d:d1:a8:1f:29:c3:65:47:69:4d:f2:24:
         ed:23:b0:4d:b8:d1:c5:1e:3c:fb:e5:e4:db:72:0a:10:5e:b9:
         88:3f:02:6e:fa:9e:90:01:c0:56:5f:b4:00:80:13:e7:c6:b9:
         e8:e1:66:35:6b:a5:56:63:87:1f:ab:20:a1:66:ee:f3:04:7b:
         54:33:c9:d3:90:f7:ab:aa:0f:5d:6b:1a:6c:a5:1c:3a:53:0a:
         90:60:b9:82:59:c6:75:e5:c6:4d:29:2a:38:d8:e7:a1:88:21:
         3d:21:54:5b:d2:13:31:2c:6c:21:26:9b:0f:2a:8e:cc:d1:41:
         6d:b3:ab:65
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 14 20:28:32 2025 by rpki-client on console.sobornost.net