Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/61/92b548-fdba-4cd4-8361-3cd952ba005d/1/DRLgx3dBkaVcPRkx-_IABDNf0hw.mft
File:                     DRLgx3dBkaVcPRkx-_IABDNf0hw.mft (raw, json)
Hash identifier:          SHzc3HobmLBv0LQHultOJk2EPUsWbZU2SFVM7Oi2ow4=
Subject key identifier:   4E:1B:56:64:3F:3C:7C:66:7C:2F:D7:3A:94:AB:02:90:4D:FC:8F:FF
Authority key identifier: 0D:12:E0:C7:77:41:91:A5:5C:3D:19:31:FB:F2:00:04:33:5F:D2:1C
Certificate issuer:       /CN=0d12e0c7774191a55c3d1931fbf20004335fd21c
Certificate serial:       0195ECB8D48E63B689AAB19E8D7C1000BAC5
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/DRLgx3dBkaVcPRkx-_IABDNf0hw.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/61/92b548-fdba-4cd4-8361-3cd952ba005d/1/DRLgx3dBkaVcPRkx-_IABDNf0hw.mft
Manifest number:          14CC
Signing time:             Mon 31 Mar 2025 15:01:30 +0000
Manifest this update:     Mon 31 Mar 2025 15:01:30 +0000
Manifest next update:     Tue 01 Apr 2025 15:01:30 +0000
Files and hashes:         1: DRLgx3dBkaVcPRkx-_IABDNf0hw.crl (hash: KQe57huLhJ/4lof3Tp40lBzFnbHLfRU3XZ/qL+2jK9I=)
                          2: RSYdG5gg-YCPUfslf96tr_CDk9g.roa (hash: M9FWyf6d3I10rIL5aBwIBRBiTbEoITfpKpVAl4zvaYE=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:95:ec:b8:d4:8e:63:b6:89:aa:b1:9e:8d:7c:10:00:ba:c5
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0d12e0c7774191a55c3d1931fbf20004335fd21c
        Validity
            Not Before: Mar 31 15:01:30 2025 GMT
            Not After : Apr  1 15:01:30 2025 GMT
        Subject: CN=4e1b56643f3c7c667c2fd73a94ab02904dfc8fff
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9a:f9:db:ea:a6:b3:d6:08:ad:7d:66:93:7d:8a:
                    c1:0d:ef:44:27:d4:35:c2:a4:23:36:46:dc:71:55:
                    34:9d:bf:43:ee:59:3b:08:f9:c2:08:6b:ab:c0:b4:
                    75:97:8f:9f:83:cb:76:2e:01:6d:35:a9:26:18:93:
                    02:06:b4:ba:d0:c8:8c:54:62:83:53:dd:ef:36:b2:
                    c0:e4:d1:62:0c:6f:95:51:17:47:83:ff:84:db:12:
                    05:b6:86:b9:6c:71:88:25:33:96:33:2d:cb:05:8a:
                    0c:6f:9b:9e:a0:93:60:a8:85:f3:c6:43:86:bd:c0:
                    75:19:fc:52:56:ef:31:ba:b2:aa:fe:0e:c4:77:c0:
                    f6:c3:3b:5b:26:fc:12:6e:67:2c:95:66:06:7b:49:
                    78:dc:77:35:a5:25:64:86:87:ee:5c:70:ff:32:2f:
                    f6:04:20:6d:43:e3:7b:87:e3:84:74:27:7e:99:49:
                    77:b8:31:9e:4c:f5:55:99:ee:9b:4b:f1:2d:e0:49:
                    b8:24:6d:c8:e3:7c:9b:2d:9b:75:06:1c:7c:9a:e9:
                    31:8a:f9:9a:5d:d3:5b:7f:20:e5:99:4e:40:99:92:
                    75:09:74:9f:97:b0:b5:6f:ef:e6:5e:50:50:d8:5e:
                    60:a7:93:98:e1:f3:82:64:d2:6d:60:7a:65:4e:8f:
                    3d:97
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4E:1B:56:64:3F:3C:7C:66:7C:2F:D7:3A:94:AB:02:90:4D:FC:8F:FF
            X509v3 Authority Key Identifier:
                keyid:0D:12:E0:C7:77:41:91:A5:5C:3D:19:31:FB:F2:00:04:33:5F:D2:1C

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/DRLgx3dBkaVcPRkx-_IABDNf0hw.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/61/92b548-fdba-4cd4-8361-3cd952ba005d/1/DRLgx3dBkaVcPRkx-_IABDNf0hw.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/61/92b548-fdba-4cd4-8361-3cd952ba005d/1/DRLgx3dBkaVcPRkx-_IABDNf0hw.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         99:cf:46:e5:ba:f8:42:e3:98:ab:83:cd:cd:50:4f:d8:9e:d1:
         34:fd:82:e2:c9:e7:18:ac:7b:5e:0a:e7:7e:54:49:9d:62:35:
         d8:33:67:6a:fc:5b:c6:e6:2c:9b:47:7e:89:c5:f7:c9:89:a7:
         1e:82:53:20:66:10:4f:a0:ce:80:02:f9:3a:75:25:30:8d:14:
         be:34:53:fe:e3:fb:c1:e3:ef:8a:10:98:17:91:c4:f4:0c:f8:
         37:a2:fb:c9:80:9f:2f:60:5a:d4:d7:14:53:32:15:b8:92:f4:
         33:62:d4:a2:0a:32:6a:3e:96:68:0a:f3:41:b5:e4:3a:a6:00:
         64:d6:fc:5c:56:8c:71:0b:52:77:e9:3d:e1:a5:e5:b6:fa:cd:
         80:63:9c:4a:c3:58:ab:0c:72:38:40:8e:64:94:08:a2:8b:06:
         a1:d0:2e:de:1e:43:eb:40:80:4f:4c:32:cd:fa:37:72:62:38:
         1c:c5:b5:36:d4:8e:d0:5e:66:f8:14:f7:af:09:62:46:48:ab:
         75:a5:f8:29:6a:5c:2a:97:55:f4:31:91:d4:b3:b0:49:2f:78:
         ca:58:48:7a:c9:e6:11:e6:5c:28:d2:31:cc:d3:21:85:65:2d:
         35:c1:e1:33:8c:8e:47:bb:62:3d:71:1b:14:55:de:db:e0:90:
         5e:c2:89:75
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 1 23:53:12 2025 by rpki-client on console.sobornost.net