Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7a/7ac37b-020b-49ae-ac9b-f98ec74abfd5/1/u7MU1-NpAfbep8ApGlFTO7Ik87M.mft
File:                     u7MU1-NpAfbep8ApGlFTO7Ik87M.mft (raw, json)
Hash identifier:          Kxuyr3MY6oHt9kcO69J6ZE2G2ZW/726kSfmNMbRwP1A=
Subject key identifier:   F2:DE:73:F5:97:4B:16:27:08:EA:36:8F:C0:E3:A7:B2:ED:9E:45:8C
Authority key identifier: BB:B3:14:D7:E3:69:01:F6:DE:A7:C0:29:1A:51:53:3B:B2:24:F3:B3
Certificate issuer:       /CN=bbb314d7e36901f6dea7c0291a51533bb224f3b3
Certificate serial:       01962F06C131518CB122B28B21FAF7A9B12C
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/u7MU1-NpAfbep8ApGlFTO7Ik87M.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/7a/7ac37b-020b-49ae-ac9b-f98ec74abfd5/1/u7MU1-NpAfbep8ApGlFTO7Ik87M.mft
Manifest number:          086A
Signing time:             Sun 13 Apr 2025 12:01:33 +0000
Manifest this update:     Sun 13 Apr 2025 12:01:33 +0000
Manifest next update:     Mon 14 Apr 2025 12:01:33 +0000
Files and hashes:         1: u7MU1-NpAfbep8ApGlFTO7Ik87M.crl (hash: TQJWFcnMGRzfU3aBtJccBZgpWSUaLJkI6mLuiMdcPSg=)
                          2: yfiu2M8plrtU3UaE1tSWQlOfqzM.roa (hash: LGvgYonneT46G/xf4FgiBrT7VrnKx0OUEEnLR8etqrg=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2f:06:c1:31:51:8c:b1:22:b2:8b:21:fa:f7:a9:b1:2c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=bbb314d7e36901f6dea7c0291a51533bb224f3b3
        Validity
            Not Before: Apr 13 12:01:33 2025 GMT
            Not After : Apr 14 12:01:33 2025 GMT
        Subject: CN=f2de73f5974b162708ea368fc0e3a7b2ed9e458c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b9:c7:fe:6d:70:14:17:b4:1e:c2:07:88:f7:f3:
                    b7:63:fe:2b:79:a2:a0:38:09:37:02:0f:b1:9f:8a:
                    81:b8:2f:30:f4:f0:b9:fc:12:f6:46:53:73:d8:92:
                    39:5d:42:02:0b:ea:a0:f2:fa:dd:17:04:66:a4:20:
                    e6:4d:2b:10:7e:4e:6c:3f:46:30:11:96:b6:48:19:
                    6f:df:73:02:b9:6b:c6:ee:32:7a:7c:69:3d:ca:0a:
                    ff:be:c9:3a:dc:dd:40:eb:13:35:fa:a0:83:1b:9b:
                    bc:8b:d1:de:f8:6b:f8:7c:60:42:cc:64:85:dd:0d:
                    f2:2f:c1:72:a2:66:15:93:c0:6b:89:e0:07:78:6a:
                    6a:18:ac:d7:3d:b8:b1:53:6a:c6:23:29:12:91:36:
                    9f:0e:8e:f7:3f:ac:ec:7e:f3:2c:61:95:64:0e:be:
                    dd:44:72:ef:a7:44:98:db:f0:2f:50:e8:b5:2b:12:
                    93:75:46:f4:8b:90:3f:93:a3:c9:d1:21:89:57:84:
                    34:31:68:4d:2b:79:1e:3c:58:97:21:72:77:c8:52:
                    94:94:18:25:57:48:aa:22:a7:d9:bf:fb:c4:e4:04:
                    d0:c6:7c:5b:cc:b7:ae:7f:54:06:e7:9f:21:f9:fb:
                    48:53:1f:ef:f2:06:9c:37:da:65:04:a6:94:d0:20:
                    a8:0f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F2:DE:73:F5:97:4B:16:27:08:EA:36:8F:C0:E3:A7:B2:ED:9E:45:8C
            X509v3 Authority Key Identifier:
                keyid:BB:B3:14:D7:E3:69:01:F6:DE:A7:C0:29:1A:51:53:3B:B2:24:F3:B3

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/u7MU1-NpAfbep8ApGlFTO7Ik87M.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7a/7ac37b-020b-49ae-ac9b-f98ec74abfd5/1/u7MU1-NpAfbep8ApGlFTO7Ik87M.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/7a/7ac37b-020b-49ae-ac9b-f98ec74abfd5/1/u7MU1-NpAfbep8ApGlFTO7Ik87M.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         7f:03:52:27:1f:c7:11:8c:09:ad:a9:72:1d:b6:e4:be:43:ad:
         76:b2:3c:98:36:48:94:76:8b:c9:58:53:e6:fc:ea:a0:54:9f:
         20:b1:5a:56:80:70:d4:f1:90:17:9b:32:3a:b7:4e:db:77:ef:
         48:ed:3e:1c:a4:29:0c:7f:3a:c3:8c:e0:1f:af:db:d9:76:30:
         91:8a:be:dc:89:d7:d0:53:7d:4b:71:63:37:a9:f4:c1:30:b9:
         5e:7b:de:a0:e2:42:5d:e4:f2:03:9c:08:16:b1:e0:f7:0c:e6:
         ce:83:15:3f:1d:35:64:9c:16:02:99:bb:3b:d7:8f:5c:4f:27:
         2b:b6:d3:53:d9:3f:b9:6e:04:80:29:f7:c1:8a:c6:fa:c3:2e:
         a0:02:f0:ba:dc:9b:cf:11:cd:2d:b1:a7:00:e6:95:a3:62:ff:
         9f:d3:7b:14:4e:e6:43:b0:07:16:07:5a:ea:57:fe:82:36:e5:
         24:a9:f7:f1:eb:25:ee:3d:e8:d2:8e:74:03:53:89:e8:53:1d:
         b7:91:3c:8a:8d:d8:4f:fe:26:c3:68:ba:38:5d:92:e2:5d:57:
         76:b6:00:9d:02:17:7e:1b:ce:a0:d2:86:4f:34:5b:69:70:d9:
         79:fa:23:2a:a1:b1:ea:2b:cc:59:72:73:0a:0e:27:08:1d:b0:
         d8:1b:fe:4f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 14 20:29:01 2025 by rpki-client on console.sobornost.net