Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6f/8e7d77-89c8-452c-a9bf-bc5f897c724a/1/0tOPRZcFG2wN3xu4Zq5OlHA-FV4.mft
File:                     0tOPRZcFG2wN3xu4Zq5OlHA-FV4.mft (raw, json)
Hash identifier:          5PatIfksS5BzOYqaIdid5+cKNLI0DmqFz4sUYs4TTNQ=
Subject key identifier:   75:5D:92:88:A5:7E:45:78:D7:C8:9A:02:56:62:EB:AD:25:A5:9E:00
Authority key identifier: D2:D3:8F:45:97:05:1B:6C:0D:DF:1B:B8:66:AE:4E:94:70:3E:15:5E
Certificate issuer:       /CN=d2d38f4597051b6c0ddf1bb866ae4e94703e155e
Certificate serial:       01962E2ADD0FE5273B7B67345425CDE00FBE
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/0tOPRZcFG2wN3xu4Zq5OlHA-FV4.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/6f/8e7d77-89c8-452c-a9bf-bc5f897c724a/1/0tOPRZcFG2wN3xu4Zq5OlHA-FV4.mft
Manifest number:          14EB
Signing time:             Sun 13 Apr 2025 08:01:23 +0000
Manifest this update:     Sun 13 Apr 2025 08:01:23 +0000
Manifest next update:     Mon 14 Apr 2025 08:01:23 +0000
Files and hashes:         1: 0tOPRZcFG2wN3xu4Zq5OlHA-FV4.crl (hash: fDkvjSMdkSA443Ne4esk62OSixAeest3GmQ7epw5XXc=)
                          2: tKq2kTGwjRxV1VeF4yjWXlgGg4s.roa (hash: 26irNsQZ2yFre3Oewun8lnjL981q/hQTWsn6QhKyj1Q=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2e:2a:dd:0f:e5:27:3b:7b:67:34:54:25:cd:e0:0f:be
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d2d38f4597051b6c0ddf1bb866ae4e94703e155e
        Validity
            Not Before: Apr 13 08:01:23 2025 GMT
            Not After : Apr 14 08:01:23 2025 GMT
        Subject: CN=755d9288a57e4578d7c89a025662ebad25a59e00
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a9:af:3f:d5:f5:83:2d:02:a2:1a:e1:99:65:43:
                    7d:0f:0e:e1:d3:24:ad:4f:f2:80:c7:a7:53:eb:63:
                    60:77:51:e1:b8:3f:0f:01:59:a8:16:44:32:04:1e:
                    41:d3:ea:80:07:53:a6:2f:73:84:48:cc:15:03:34:
                    4c:d2:10:ce:40:90:b9:7d:4d:63:70:50:4b:a7:24:
                    aa:3e:6b:3e:b4:04:24:f4:f6:cd:c5:a9:6e:b8:57:
                    1f:fe:7a:c9:13:8c:a1:fb:bb:69:d2:f1:14:aa:a6:
                    b9:f8:c5:6e:e6:32:bc:c3:64:a1:87:be:c6:c4:30:
                    2e:6f:32:76:18:48:31:ce:25:81:32:4d:c1:7a:27:
                    ce:e2:b1:63:a6:14:59:44:e6:c3:de:ac:78:dd:38:
                    83:2d:91:41:e5:d1:9e:15:ca:b7:7f:73:9f:52:4a:
                    99:b2:76:72:83:4c:9b:59:c9:a4:a6:36:9e:c2:b4:
                    66:7e:af:c2:f9:3b:73:3c:60:ce:d2:11:0e:5c:04:
                    02:37:2a:6a:db:ab:e8:18:67:cc:38:5e:04:9f:6d:
                    18:eb:7c:7e:61:b9:b9:88:f6:c1:78:26:9a:5d:c7:
                    3d:2f:3e:7a:a9:04:f4:b2:ca:86:b0:07:ad:29:b3:
                    40:c2:b9:41:1f:4f:93:c0:0f:2c:64:aa:f2:4c:15:
                    49:fd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                75:5D:92:88:A5:7E:45:78:D7:C8:9A:02:56:62:EB:AD:25:A5:9E:00
            X509v3 Authority Key Identifier:
                keyid:D2:D3:8F:45:97:05:1B:6C:0D:DF:1B:B8:66:AE:4E:94:70:3E:15:5E

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/0tOPRZcFG2wN3xu4Zq5OlHA-FV4.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6f/8e7d77-89c8-452c-a9bf-bc5f897c724a/1/0tOPRZcFG2wN3xu4Zq5OlHA-FV4.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/6f/8e7d77-89c8-452c-a9bf-bc5f897c724a/1/0tOPRZcFG2wN3xu4Zq5OlHA-FV4.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         51:19:30:f6:2c:14:fc:76:46:18:bd:a5:51:d1:bd:23:0d:3c:
         96:79:2b:a2:78:b0:05:0f:61:4d:79:70:f0:f5:53:e4:3f:b2:
         81:da:9f:fb:15:c6:86:97:8c:17:17:82:bd:c1:70:34:53:72:
         ed:8a:8e:9f:8a:ed:ea:be:d8:ac:22:c5:23:24:40:e7:2f:48:
         eb:32:97:33:3d:6b:41:f1:f3:46:0b:27:61:cf:ca:fb:2b:a0:
         5a:5e:77:32:dc:d2:2a:0e:b8:71:04:f3:6d:08:63:eb:93:27:
         c3:ae:8f:5c:ce:15:c7:a4:30:b7:46:4c:05:f5:fa:08:24:81:
         1e:d7:21:2e:c2:06:51:cf:8e:b9:87:eb:62:db:a7:dc:ab:46:
         d2:d8:6a:9f:b5:87:1f:2c:6d:06:b4:99:0a:96:35:4a:7d:63:
         b9:4b:6f:23:3b:16:f2:b0:95:8d:1d:e8:c7:a1:f0:0d:5f:08:
         d1:ab:5f:88:28:f2:5c:35:c7:13:44:03:f9:17:ac:38:87:23:
         af:9d:86:64:c5:d1:64:05:23:ee:45:3b:a3:2b:f2:19:a0:5b:
         12:d4:7b:45:bc:c3:60:5c:bc:66:40:83:63:39:37:81:44:91:
         ca:a4:b4:08:13:4e:79:58:ef:61:37:fc:f7:e5:6b:09:5a:e0:
         0e:bb:d3:c5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 14 20:28:47 2025 by rpki-client on console.sobornost.net