Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/67/866b6b-f56c-4a2f-902d-fbc36e4348f5/1/AC-m4ZBWg4kFvDK1OrDRBH145NQ.mft
File:                     AC-m4ZBWg4kFvDK1OrDRBH145NQ.mft (raw, json)
Hash identifier:          FhlrRki5Eo6ETG2zFAhkiJr5oSPKP6NRsJPC1oPabS8=
Subject key identifier:   63:E7:09:C4:C6:DE:05:47:78:1E:39:D1:C8:3E:E6:F3:84:CC:F3:16
Authority key identifier: 00:2F:A6:E1:90:56:83:89:05:BC:32:B5:3A:B0:D1:04:7D:78:E4:D4
Certificate issuer:       /CN=002fa6e19056838905bc32b53ab0d1047d78e4d4
Certificate serial:       01962F748DB64FBDF5AA0D1542938556FA48
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/AC-m4ZBWg4kFvDK1OrDRBH145NQ.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/67/866b6b-f56c-4a2f-902d-fbc36e4348f5/1/AC-m4ZBWg4kFvDK1OrDRBH145NQ.mft
Manifest number:          14BB
Signing time:             Sun 13 Apr 2025 14:01:29 +0000
Manifest this update:     Sun 13 Apr 2025 14:01:29 +0000
Manifest next update:     Mon 14 Apr 2025 14:01:29 +0000
Files and hashes:         1: AC-m4ZBWg4kFvDK1OrDRBH145NQ.crl (hash: TUKs9G7GpjGHaOOojNMT5OsXvn3vbh+k40PMdhPABqc=)
                          2: FGVVapfPvK0QzFf1pALkp5bEruw.roa (hash: TSwtNe6AniR+9RFExziwrrS0q9Xsbcr++0YQr2+oyJQ=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2f:74:8d:b6:4f:bd:f5:aa:0d:15:42:93:85:56:fa:48
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=002fa6e19056838905bc32b53ab0d1047d78e4d4
        Validity
            Not Before: Apr 13 14:01:29 2025 GMT
            Not After : Apr 14 14:01:29 2025 GMT
        Subject: CN=63e709c4c6de0547781e39d1c83ee6f384ccf316
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b2:9d:75:57:1c:55:f0:7e:87:83:aa:a8:98:11:
                    6e:04:e7:27:5b:1a:e7:0c:fa:79:52:f1:a5:fa:ef:
                    04:08:64:64:dc:67:36:79:c2:9b:54:47:45:4e:31:
                    41:ac:8c:2f:7f:cf:88:84:04:ce:29:da:f5:d0:35:
                    87:b6:2d:e1:e9:dd:d1:24:8f:ff:0c:c8:48:cb:04:
                    27:92:dc:07:61:86:73:af:7d:c7:d4:b7:f9:77:d0:
                    7f:76:11:fc:ab:ab:84:0f:cd:b9:55:e2:5b:c4:8e:
                    c1:c8:95:d3:ce:be:25:2c:0b:77:bd:ef:76:76:a0:
                    ce:f6:47:ce:d5:5c:ac:99:35:6a:a1:90:e6:f0:15:
                    4a:75:6d:67:26:f0:78:bd:f7:6b:c7:b0:e9:38:8d:
                    9e:bd:9d:06:3c:91:44:80:13:fe:25:91:95:c8:88:
                    e8:08:2c:69:50:99:0f:51:7d:c5:a5:45:4c:af:8d:
                    52:e1:97:3c:ce:f2:ab:ec:c9:a6:f8:df:3e:23:6c:
                    28:67:18:4c:94:12:f6:f8:01:f5:78:df:f6:c3:2c:
                    ac:56:fd:c1:37:2b:1e:5b:fa:43:96:58:88:fa:a9:
                    10:eb:2c:e1:ee:a5:6d:ea:75:45:c2:93:24:e5:a3:
                    1a:f8:ad:5c:49:54:5b:9d:ef:cb:4f:c3:36:02:5c:
                    23:cf
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                63:E7:09:C4:C6:DE:05:47:78:1E:39:D1:C8:3E:E6:F3:84:CC:F3:16
            X509v3 Authority Key Identifier:
                keyid:00:2F:A6:E1:90:56:83:89:05:BC:32:B5:3A:B0:D1:04:7D:78:E4:D4

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/AC-m4ZBWg4kFvDK1OrDRBH145NQ.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/67/866b6b-f56c-4a2f-902d-fbc36e4348f5/1/AC-m4ZBWg4kFvDK1OrDRBH145NQ.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/67/866b6b-f56c-4a2f-902d-fbc36e4348f5/1/AC-m4ZBWg4kFvDK1OrDRBH145NQ.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         06:52:5a:0d:da:95:d4:f1:54:89:fb:0b:b5:6e:c8:96:54:e6:
         9b:45:52:93:92:21:4e:b1:62:11:57:32:c9:70:4b:38:47:d1:
         ba:26:a1:2c:d4:d7:d0:0a:eb:c3:e4:d2:93:c2:59:40:ae:dc:
         56:7b:82:0d:7e:9f:27:46:c2:9f:65:ca:cb:b7:ed:dc:10:64:
         b8:f1:77:8d:6d:89:00:7c:1e:61:5c:a6:38:a9:21:7b:12:91:
         a2:9d:33:56:41:a2:48:8f:c1:df:20:71:64:ed:24:11:e8:2c:
         dd:2a:96:02:2a:05:98:fd:50:f0:df:4d:36:64:1d:e5:c8:31:
         5d:03:51:d7:8d:0a:4a:8d:68:0c:c1:37:8e:3d:87:4d:b6:8d:
         1e:80:b4:51:07:e5:0b:25:69:98:ec:3e:12:40:4b:f9:59:7a:
         fe:04:df:d5:d3:8f:ac:48:6d:2d:18:1d:93:24:19:51:a5:13:
         29:9d:2f:f8:17:aa:58:80:ba:52:f0:a8:a5:42:48:34:5e:bd:
         ca:28:c5:f2:b2:05:bc:81:28:82:85:bc:7a:55:21:8e:cb:2d:
         68:3b:58:4b:85:37:fa:ba:cb:16:d7:27:c5:75:14:b7:c0:6b:
         22:93:ae:29:c1:ab:12:32:41:e3:17:f9:6b:56:f5:15:ba:42:
         9b:22:d0:ca
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 14 20:28:42 2025 by rpki-client on console.sobornost.net