Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/71/50753a-91aa-447b-b232-a000d769e026/1/lmbCOPf_2s8VyALjILUuCYCGnOw.mft
File:                     lmbCOPf_2s8VyALjILUuCYCGnOw.mft (raw, json)
Hash identifier:          8O8jsbrRn8Oa0DXSA6rTpZjcNGa9tROUw8Fl1zulH6M=
Subject key identifier:   35:74:20:5F:BA:50:AF:CD:B7:20:20:A3:42:34:18:45:42:E2:E8:60
Authority key identifier: 96:66:C2:38:F7:FF:DA:CF:15:C8:02:E3:20:B5:2E:09:80:86:9C:EC
Certificate issuer:       /CN=9666c238f7ffdacf15c802e320b52e0980869cec
Certificate serial:       01962FAB1948E6063D788393BADFCD518B89
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/lmbCOPf_2s8VyALjILUuCYCGnOw.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/71/50753a-91aa-447b-b232-a000d769e026/1/lmbCOPf_2s8VyALjILUuCYCGnOw.mft
Manifest number:          0E29
Signing time:             Sun 13 Apr 2025 15:01:04 +0000
Manifest this update:     Sun 13 Apr 2025 15:01:04 +0000
Manifest next update:     Mon 14 Apr 2025 15:01:04 +0000
Files and hashes:         1: jlwHUlpX8poK-lsEjw4bFjVjclo.roa (hash: 7wHJRVYqlI2qLXTgACst4p/Vf4MlPLZtc3YhuGhcwsY=)
                          2: lmbCOPf_2s8VyALjILUuCYCGnOw.crl (hash: s8TSN++TJiS7dMTpjAVL/EJqNsTMNQS8x5pIm7/Mxig=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2f:ab:19:48:e6:06:3d:78:83:93:ba:df:cd:51:8b:89
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9666c238f7ffdacf15c802e320b52e0980869cec
        Validity
            Not Before: Apr 13 15:01:04 2025 GMT
            Not After : Apr 14 15:01:04 2025 GMT
        Subject: CN=3574205fba50afcdb72020a34234184542e2e860
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:95:b5:fa:c0:60:e6:12:59:a0:26:fa:89:44:8e:
                    7b:cf:e9:3e:ee:6e:9a:65:cd:da:6b:34:69:a5:7b:
                    bd:d9:26:1b:03:0c:56:71:7d:7b:48:dd:1f:22:b8:
                    64:3e:e0:64:12:2e:9a:bf:76:f2:14:a5:10:9d:0e:
                    cd:38:85:51:07:07:fa:46:22:dc:a0:0b:a0:ed:d8:
                    0b:51:5d:b7:1b:85:a7:b9:21:93:48:2a:0f:0f:a4:
                    12:2e:c6:ea:0c:4a:a4:be:dd:29:76:2e:c1:05:d9:
                    43:ee:7b:0a:f0:6c:d0:09:b9:b4:73:d0:f1:48:40:
                    12:e1:dd:d1:01:bc:50:56:3b:5b:a3:e1:df:d3:59:
                    41:56:56:f1:5e:a0:21:c7:71:d5:22:da:3b:55:8a:
                    7d:4e:7e:2a:6e:5b:65:3e:97:65:82:7e:65:e6:f5:
                    05:de:1a:dd:69:00:c2:b9:54:95:4c:69:ba:d4:90:
                    79:b7:d7:32:43:63:0c:8d:36:ee:4d:14:d3:35:10:
                    ee:92:1e:03:55:d5:f9:8d:77:9e:91:2c:88:05:e4:
                    f7:21:c8:72:ba:4d:5b:28:32:96:c8:13:ea:6a:97:
                    a1:f5:7d:d2:24:d5:09:1e:e9:8e:81:d3:96:4e:4f:
                    35:75:64:0d:5e:72:f1:e8:c3:12:6e:87:8c:ce:dc:
                    7f:29
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                35:74:20:5F:BA:50:AF:CD:B7:20:20:A3:42:34:18:45:42:E2:E8:60
            X509v3 Authority Key Identifier:
                keyid:96:66:C2:38:F7:FF:DA:CF:15:C8:02:E3:20:B5:2E:09:80:86:9C:EC

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/lmbCOPf_2s8VyALjILUuCYCGnOw.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/71/50753a-91aa-447b-b232-a000d769e026/1/lmbCOPf_2s8VyALjILUuCYCGnOw.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/71/50753a-91aa-447b-b232-a000d769e026/1/lmbCOPf_2s8VyALjILUuCYCGnOw.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         92:eb:8a:f4:e1:21:8d:69:14:0e:a4:78:6c:34:d0:ef:db:8c:
         54:6b:f3:11:77:59:70:89:76:28:89:bd:62:06:14:a3:38:93:
         39:55:83:a0:a0:61:a6:53:44:2b:e9:14:10:22:2c:19:b9:61:
         f0:c2:0d:8e:81:23:a1:c3:cc:74:e3:b3:fa:5f:f5:cc:bc:12:
         fd:af:2b:36:77:02:3c:40:05:b8:c0:ed:0c:ed:c9:33:b6:9c:
         63:73:26:b7:3c:fb:b4:ce:b9:fd:a4:ac:9e:54:09:79:53:01:
         2a:6e:4b:80:61:d0:0a:2a:fc:94:4d:65:4a:ed:24:01:dc:80:
         43:80:79:3c:ce:8e:b2:ee:1e:a8:35:f9:6e:69:2a:0d:c8:99:
         1d:6c:b3:af:6f:17:56:b8:b3:a8:46:f5:18:22:56:eb:ca:5b:
         91:17:ee:16:28:1c:ea:83:d2:a7:08:25:35:78:41:71:80:fe:
         e0:22:54:d3:f8:a4:af:06:62:76:cf:58:6d:13:50:15:d9:56:
         73:27:10:60:f0:6e:22:22:1f:56:e5:7f:5a:9e:8d:bd:37:27:
         46:37:d0:e9:42:80:ae:05:a5:7d:03:7c:03:3f:80:07:66:f0:
         fb:d3:82:0d:48:49:a3:3e:7d:cc:84:3e:40:2d:1a:52:49:a4:
         48:1e:1c:23
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 14 20:28:54 2025 by rpki-client on console.sobornost.net