Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/66/666786-561c-4bd0-a7b0-8f7fd3dc15fe/1/Marcypb0SkVzktiQfGuWS-D8-SE.mft
File:                     Marcypb0SkVzktiQfGuWS-D8-SE.mft (raw, json)
Hash identifier:          Jhpq/xQ04dsUJ6wGa4F6sVR2wvtDOjO6zNtpsfPWfWY=
Subject key identifier:   9E:68:B3:6C:C5:42:51:DE:A6:0A:F6:3B:E2:AF:C8:23:DC:1A:16:90
Authority key identifier: 31:AA:DC:CA:96:F4:4A:45:73:92:D8:90:7C:6B:96:4B:E0:FC:F9:21
Certificate issuer:       /CN=31aadcca96f44a457392d8907c6b964be0fcf921
Certificate serial:       01962F744331DB1EA413AF45BA36DBCC7522
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/Marcypb0SkVzktiQfGuWS-D8-SE.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/66/666786-561c-4bd0-a7b0-8f7fd3dc15fe/1/Marcypb0SkVzktiQfGuWS-D8-SE.mft
Manifest number:          0BE1
Signing time:             Sun 13 Apr 2025 14:01:10 +0000
Manifest this update:     Sun 13 Apr 2025 14:01:10 +0000
Manifest next update:     Mon 14 Apr 2025 14:01:10 +0000
Files and hashes:         1: Marcypb0SkVzktiQfGuWS-D8-SE.crl (hash: /EdeQjRdoC5RvwfAO1qXEeyoPuD+bjR4wwb0dLZU22A=)
                          2: XFj03ZPCOj3qqoe8oMNPGmud9a4.roa (hash: m6E7RZQpvmKbh+R69KgZ6bmoskHz5Bb8/AlaawR8U/0=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2f:74:43:31:db:1e:a4:13:af:45:ba:36:db:cc:75:22
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=31aadcca96f44a457392d8907c6b964be0fcf921
        Validity
            Not Before: Apr 13 14:01:10 2025 GMT
            Not After : Apr 14 14:01:10 2025 GMT
        Subject: CN=9e68b36cc54251dea60af63be2afc823dc1a1690
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b8:96:a5:10:8f:07:76:dc:bc:62:ed:38:38:08:
                    6f:17:1b:1a:84:d0:b6:35:79:5d:44:bf:09:60:9c:
                    cc:c5:55:56:71:84:d8:af:59:08:1e:36:9d:5a:54:
                    8f:59:af:8c:39:d1:67:43:c2:d4:96:ff:1f:e9:ca:
                    f5:95:02:31:95:d5:b7:dc:94:0b:23:08:33:6f:aa:
                    13:e6:8a:7a:52:bc:cc:e6:04:f9:73:f1:bf:da:2e:
                    e1:66:6d:5e:99:43:31:c7:89:5f:13:d1:c4:fc:4a:
                    cc:4b:fe:71:97:81:8f:89:f7:71:4a:d5:3b:52:05:
                    c4:50:15:e6:c3:13:7d:db:66:4c:60:94:04:88:81:
                    b9:10:94:5e:21:1a:82:d1:3a:4f:a9:2a:1b:26:89:
                    b5:7e:77:0d:46:b0:01:9f:cc:79:b2:dc:af:49:62:
                    50:f3:6d:c3:cc:ec:16:6b:b2:c0:37:20:89:3c:74:
                    5a:f9:c2:18:30:9d:f7:a3:d5:f2:6d:c2:3b:df:88:
                    5c:5d:ad:22:e1:b9:0f:d5:27:31:3d:6a:cd:0f:b2:
                    39:4a:1f:ac:7f:ed:3d:ce:b2:93:d1:e9:98:d2:e4:
                    3d:47:d0:a1:0b:df:15:4a:d1:38:fa:eb:9e:e0:37:
                    05:1c:ab:80:4b:12:5c:53:d2:3e:b4:bc:3d:33:bb:
                    99:71
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9E:68:B3:6C:C5:42:51:DE:A6:0A:F6:3B:E2:AF:C8:23:DC:1A:16:90
            X509v3 Authority Key Identifier:
                keyid:31:AA:DC:CA:96:F4:4A:45:73:92:D8:90:7C:6B:96:4B:E0:FC:F9:21

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Marcypb0SkVzktiQfGuWS-D8-SE.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/66/666786-561c-4bd0-a7b0-8f7fd3dc15fe/1/Marcypb0SkVzktiQfGuWS-D8-SE.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/66/666786-561c-4bd0-a7b0-8f7fd3dc15fe/1/Marcypb0SkVzktiQfGuWS-D8-SE.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         15:c1:55:17:60:b9:a9:d3:10:70:89:47:15:5d:39:20:17:55:
         64:58:08:0b:44:5e:73:70:23:0c:29:e6:92:b2:22:0d:59:cc:
         f2:cf:c4:36:cf:27:31:d9:db:0e:72:0b:f1:ca:69:88:55:dc:
         39:20:62:db:77:9c:66:46:36:40:3e:2c:c9:df:0c:16:cd:0a:
         13:ea:e7:a0:2d:3c:e0:d4:72:84:16:1f:59:83:12:d3:c4:14:
         b0:db:e2:34:8f:72:58:85:53:21:c7:9a:a3:55:34:5b:f9:2b:
         52:4e:30:f3:f5:d0:ba:5e:b4:08:68:ea:e0:65:fb:1c:3e:53:
         73:f0:b5:8e:d9:ef:39:7a:57:11:77:a7:f2:78:3e:e0:63:69:
         3a:cc:21:6b:13:b3:fd:3d:37:b6:26:12:9b:7c:8b:ba:ed:82:
         03:05:a7:31:e9:2b:09:b7:bd:e8:02:db:50:66:4c:82:65:db:
         b6:46:ff:a9:d5:07:5b:8b:34:1c:0c:8e:d9:34:e6:48:e7:e0:
         e5:9c:eb:41:87:6a:cc:2f:f6:c7:49:b6:47:55:82:c0:06:5d:
         7a:95:84:60:ce:79:10:bd:48:c6:a9:f9:71:03:b4:14:ce:e7:
         2d:40:88:6d:a1:a1:53:c0:f3:58:75:9f:e1:69:56:bd:d0:46:
         99:3f:79:29
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 14 20:28:42 2025 by rpki-client on console.sobornost.net