Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/80/8ad573-5977-4d76-83eb-bb0319213a29/1/ncAOnjBGWR-LpVJEgN33xvxMYOA.mft
File:                     ncAOnjBGWR-LpVJEgN33xvxMYOA.mft (raw, json)
Hash identifier:          jFFzQF87cYniXk2AneBIUT1MfHkwOoMhrcHgqzux6as=
Subject key identifier:   00:C3:FC:19:62:2D:6B:6C:EC:FB:15:F8:1D:1A:91:83:3B:03:F9:CA
Authority key identifier: 9D:C0:0E:9E:30:46:59:1F:8B:A5:52:44:80:DD:F7:C6:FC:4C:60:E0
Certificate issuer:       /CN=9dc00e9e3046591f8ba5524480ddf7c6fc4c60e0
Certificate serial:       01962E996C8169F571EE6FAEC55D1F78E84A
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/ncAOnjBGWR-LpVJEgN33xvxMYOA.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/80/8ad573-5977-4d76-83eb-bb0319213a29/1/ncAOnjBGWR-LpVJEgN33xvxMYOA.mft
Manifest number:          14EB
Signing time:             Sun 13 Apr 2025 10:02:08 +0000
Manifest this update:     Sun 13 Apr 2025 10:02:08 +0000
Manifest next update:     Mon 14 Apr 2025 10:02:08 +0000
Files and hashes:         1: 49p4f0dafsUXZtr4zEkfdPg2MR0.roa (hash: Ja9qdubtQvHDpWVThEVb+wOD8jEOhZZePM5clLlMPts=)
                          2: ncAOnjBGWR-LpVJEgN33xvxMYOA.crl (hash: uyjg4AV2YpNmJ0R+lIQ3sjo/yGMfCFQRJzNy2piLc/A=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2e:99:6c:81:69:f5:71:ee:6f:ae:c5:5d:1f:78:e8:4a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9dc00e9e3046591f8ba5524480ddf7c6fc4c60e0
        Validity
            Not Before: Apr 13 10:02:08 2025 GMT
            Not After : Apr 14 10:02:08 2025 GMT
        Subject: CN=00c3fc19622d6b6cecfb15f81d1a91833b03f9ca
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:96:c7:61:2f:67:9a:bf:dd:4f:50:7a:3f:db:2f:
                    66:a4:ce:64:e5:87:1d:bb:9e:86:12:2c:8b:61:01:
                    1a:ec:50:86:3a:b5:26:a7:41:c2:3a:f7:67:db:a2:
                    b4:77:d9:32:fb:a7:00:22:f2:6a:86:0b:51:5b:92:
                    98:ec:8e:bc:80:7b:3b:d1:d1:e3:2f:74:72:13:b3:
                    9b:aa:73:90:7a:c5:ef:2a:71:b1:0b:c8:f4:76:8b:
                    a2:8a:f3:74:1a:ad:85:13:2d:a2:93:01:14:00:c3:
                    83:88:49:2e:21:01:95:fa:18:8b:16:21:a6:8f:53:
                    ee:24:e3:ae:59:09:9c:2c:93:98:c1:a1:39:af:81:
                    93:c8:b6:2d:c7:0c:0f:66:40:8b:ab:98:ba:82:1d:
                    41:b0:fb:24:fb:e3:a4:89:e4:fb:e6:9e:2f:87:9c:
                    0e:74:80:02:a0:0c:a1:a7:42:82:64:21:d8:e6:5a:
                    fb:ba:fb:57:28:2f:f1:5f:28:a0:10:74:fd:93:36:
                    05:ef:ac:85:ac:b8:c6:2f:7d:f1:48:a1:63:2a:f8:
                    3d:e3:fa:1b:51:db:85:f1:de:d2:01:aa:7c:2a:88:
                    25:78:11:08:47:cc:73:b0:a7:eb:1c:13:8b:29:6b:
                    da:24:e6:b3:5b:20:ae:a2:d5:cb:39:58:15:c9:ae:
                    b3:07
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                00:C3:FC:19:62:2D:6B:6C:EC:FB:15:F8:1D:1A:91:83:3B:03:F9:CA
            X509v3 Authority Key Identifier:
                keyid:9D:C0:0E:9E:30:46:59:1F:8B:A5:52:44:80:DD:F7:C6:FC:4C:60:E0

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ncAOnjBGWR-LpVJEgN33xvxMYOA.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/80/8ad573-5977-4d76-83eb-bb0319213a29/1/ncAOnjBGWR-LpVJEgN33xvxMYOA.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/80/8ad573-5977-4d76-83eb-bb0319213a29/1/ncAOnjBGWR-LpVJEgN33xvxMYOA.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         8b:2f:9c:f8:a4:64:bc:73:a7:00:63:4a:e1:fc:2b:0b:40:27:
         32:6c:85:5e:9d:d9:6c:b8:43:b6:a1:89:b7:cf:b7:8d:18:1e:
         c5:f4:da:19:45:46:32:85:ac:3e:a8:ac:e7:a0:47:e5:86:28:
         ba:3b:8d:56:dc:f3:51:6c:95:2f:6c:54:f1:2c:17:a0:72:ac:
         af:40:b0:3c:b9:2a:23:8c:c0:ad:93:8c:aa:79:14:70:d7:a6:
         36:7a:b3:ba:33:02:19:08:ab:30:8c:5e:4f:00:9e:aa:38:01:
         68:50:34:08:60:b0:c7:45:49:42:da:4e:89:75:e3:97:f6:8f:
         c9:a2:11:5b:0a:84:6b:02:d1:66:4a:92:66:89:2b:87:b2:a7:
         af:a5:89:0f:f2:3a:24:85:76:ea:08:e9:d6:98:9a:86:a4:af:
         c0:a7:11:93:81:79:02:50:7c:db:63:d0:f5:bc:03:a9:ed:6b:
         ce:cf:e7:66:9d:5c:66:cf:d6:0d:9f:50:53:c7:5f:bf:1e:87:
         83:f5:f2:8c:bb:33:36:78:11:80:ab:ef:9e:f0:93:ce:8a:e3:
         6b:65:17:5c:5b:0b:04:ff:4e:77:d5:bb:23:0c:37:36:f4:8f:
         73:bf:8a:0a:be:c1:a3:c4:7b:92:a3:87:64:2a:b5:34:22:a3:
         41:70:08:b7
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZYumWyBafVx7m+uxV0feOhKMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDlkYzAwZTllMzA0NjU5MWY4YmE1NTI0NDgwZGRmN2M2ZmM0
YzYwZTAwHhcNMjUwNDEzMTAwMjA4WhcNMjUwNDE0MTAwMjA4WjAzMTEwLwYDVQQD
EygwMGMzZmMxOTYyMmQ2YjZjZWNmYjE1ZjgxZDFhOTE4MzNiMDNmOWNhMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlsdhL2eav91PUHo/2y9mpM5k5Ycd
u56GEiyLYQEa7FCGOrUmp0HCOvdn26K0d9ky+6cAIvJqhgtRW5KY7I68gHs70dHj
L3RyE7ObqnOQesXvKnGxC8j0douiivN0Gq2FEy2ikwEUAMODiEkuIQGV+hiLFiGm
j1PuJOOuWQmcLJOYwaE5r4GTyLYtxwwPZkCLq5i6gh1BsPsk++OkieT75p4vh5wO
dIACoAyhp0KCZCHY5lr7uvtXKC/xXyigEHT9kzYF76yFrLjGL33xSKFjKvg94/ob
UduF8d7SAap8KogleBEIR8xzsKfrHBOLKWvaJOazWyCuotXLOVgVya6zBwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFADD/BliLWts7PsV+B0akYM7A/nKMB8GA1UdIwQY
MBaAFJ3ADp4wRlkfi6VSRIDd98b8TGDgMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvbmNBT25qQkdXUi1McFZKRWdOMzN4dnhNWU9BLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84MC84YWQ1NzMtNTk3Ny00ZDc2LTgzZWIt
YmIwMzE5MjEzYTI5LzEvbmNBT25qQkdXUi1McFZKRWdOMzN4dnhNWU9BLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC84MC84YWQ1NzMtNTk3Ny00ZDc2LTgzZWItYmIwMzE5MjEzYTI5
LzEvbmNBT25qQkdXUi1McFZKRWdOMzN4dnhNWU9BLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAiy+c+KRk
vHOnAGNK4fwrC0AnMmyFXp3ZbLhDtqGJt8+3jRgexfTaGUVGMoWsPqis56BH5YYo
ujuNVtzzUWyVL2xU8SwXoHKsr0CwPLkqI4zArZOMqnkUcNemNnqzujMCGQirMIxe
TwCeqjgBaFA0CGCwx0VJQtpOiXXjl/aPyaIRWwqEawLRZkqSZokrh7Knr6WJD/I6
JIV26gjp1piahqSvwKcRk4F5AlB822PQ9bwDqe1rzs/nZp1cZs/WDZ9QU8dfvx6H
g/XyjLszNngRgKvvnvCTzorja2UXXFsLBP9Od9W7Iww3NvSPc7+KCr7Bo8R7kqOH
ZCq1NCKjQXAItw==
-----END CERTIFICATE-----
Generated at Mon Apr 14 20:29:09 2025 by rpki-client on console.sobornost.net