Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/64/fd596a-3f54-4e06-8620-6e0d213f484a/1/r4j95vrbtrLB22_kH4KdHyAVvgs.mft
File:                     r4j95vrbtrLB22_kH4KdHyAVvgs.mft (raw, json)
Hash identifier:          IQum45gUJZkSU7yKA3Guanf9cGlI9ehDIk3rKjF4npA=
Subject key identifier:   6C:A7:D7:13:DF:C4:F8:6A:F0:E4:4A:20:15:96:DC:9C:22:60:CA:3A
Authority key identifier: AF:88:FD:E6:FA:DB:B6:B2:C1:DB:6F:E4:1F:82:9D:1F:20:15:BE:0B
Certificate issuer:       /CN=af88fde6fadbb6b2c1db6fe41f829d1f2015be0b
Certificate serial:       01962F750FF9747B84BC974720A0F7C60B7D
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/r4j95vrbtrLB22_kH4KdHyAVvgs.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/64/fd596a-3f54-4e06-8620-6e0d213f484a/1/r4j95vrbtrLB22_kH4KdHyAVvgs.mft
Manifest number:          0B84
Signing time:             Sun 13 Apr 2025 14:02:03 +0000
Manifest this update:     Sun 13 Apr 2025 14:02:03 +0000
Manifest next update:     Mon 14 Apr 2025 14:02:03 +0000
Files and hashes:         1: RHreYh0WmNugHNPOVP5GHBEiSQE.roa (hash: lDEy9crc1E/w31v0jSsa/vEhnHdpcWtnPtxtDbNUjjc=)
                          2: r4j95vrbtrLB22_kH4KdHyAVvgs.crl (hash: A2pNvMJHeKQxKygFn/Iy3Nt989k/YdUAg4utD+MVVaw=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2f:75:0f:f9:74:7b:84:bc:97:47:20:a0:f7:c6:0b:7d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=af88fde6fadbb6b2c1db6fe41f829d1f2015be0b
        Validity
            Not Before: Apr 13 14:02:03 2025 GMT
            Not After : Apr 14 14:02:03 2025 GMT
        Subject: CN=6ca7d713dfc4f86af0e44a201596dc9c2260ca3a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b6:b0:76:06:84:ab:4c:99:dc:e0:34:cf:01:e6:
                    20:27:b9:f6:a5:60:a3:47:96:22:8b:df:2a:9f:6d:
                    13:b9:28:17:99:6d:f3:f9:0c:a2:0e:92:cc:d5:74:
                    fc:93:aa:79:33:36:a5:a7:d6:ae:8c:56:34:9e:9d:
                    1a:da:a2:60:da:df:93:57:6e:00:bf:f6:63:46:28:
                    c8:b3:27:a2:1f:76:0a:ec:52:84:a6:25:cf:30:17:
                    ae:7c:5e:98:dc:c8:fb:dd:ad:ef:b4:68:59:01:ae:
                    05:b9:9a:ce:e5:26:ad:42:c2:fc:82:ec:dd:65:9e:
                    7d:77:e8:81:4a:ab:8f:a3:c1:49:ec:c6:9a:01:92:
                    92:02:60:3f:cf:42:7e:17:1e:b0:2d:ae:91:b3:33:
                    a3:54:5f:38:7e:85:ea:cc:4f:88:db:3f:58:b7:85:
                    4b:dc:c7:bd:23:10:3c:8a:35:4a:fe:c6:2b:2f:a6:
                    f9:b0:86:a7:74:7b:c0:c9:24:fc:b3:4d:86:65:0b:
                    f4:c9:9c:a8:85:45:a0:e0:89:60:b6:eb:4a:91:c5:
                    40:cb:3c:a1:65:31:61:3d:51:ad:47:45:e2:db:ab:
                    5c:3e:3d:86:18:ab:f0:8c:64:4d:b8:c4:d6:67:83:
                    a6:31:80:b5:3e:e5:27:7d:7a:57:2d:35:55:c3:86:
                    73:79
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6C:A7:D7:13:DF:C4:F8:6A:F0:E4:4A:20:15:96:DC:9C:22:60:CA:3A
            X509v3 Authority Key Identifier:
                keyid:AF:88:FD:E6:FA:DB:B6:B2:C1:DB:6F:E4:1F:82:9D:1F:20:15:BE:0B

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/r4j95vrbtrLB22_kH4KdHyAVvgs.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/64/fd596a-3f54-4e06-8620-6e0d213f484a/1/r4j95vrbtrLB22_kH4KdHyAVvgs.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/64/fd596a-3f54-4e06-8620-6e0d213f484a/1/r4j95vrbtrLB22_kH4KdHyAVvgs.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         9b:64:1d:14:af:98:7b:c0:6c:a0:91:a6:7a:e3:16:9d:63:35:
         e7:56:e8:00:9f:4d:a9:4f:e0:4e:b9:26:4b:f2:8f:8a:80:a5:
         ad:eb:84:fa:ad:bc:74:06:5d:f1:fd:39:35:74:e1:7e:f6:06:
         c9:fb:59:40:94:37:71:47:33:f8:71:01:c0:ec:2e:79:de:39:
         31:b4:c3:23:cf:48:5e:9f:9a:76:64:08:7f:7e:65:c0:89:98:
         05:77:4a:25:88:82:26:19:8a:f2:eb:ab:10:38:ba:8b:49:ad:
         19:c0:0c:96:c5:b1:a4:c7:80:e6:12:92:67:ba:29:34:f9:1d:
         9e:a5:1b:d6:43:d6:80:16:50:5a:64:17:58:aa:37:1a:f4:07:
         c1:15:4d:5e:3e:e3:d4:78:30:8d:3e:47:51:3d:5d:60:a7:82:
         86:4f:7b:62:f3:f6:2c:e5:43:98:3f:f2:00:ec:d2:91:ff:84:
         70:ef:75:fd:04:15:5a:d7:cc:f2:a2:e6:91:9a:b9:e9:ee:ba:
         84:0e:e7:41:87:4b:d1:72:af:b0:07:96:c9:82:cd:4e:6b:92:
         67:67:fe:2e:7d:f5:ce:a7:32:f1:c4:c3:2a:82:7e:06:a2:95:
         73:a6:ab:54:ea:f5:b4:9a:79:33:2b:f5:72:dc:65:df:c5:bf:
         16:2f:d2:80
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 14 20:28:41 2025 by rpki-client on console.sobornost.net