Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/90/c72b67-76ec-4afa-b376-f9ad38051220/1/O-LwFktmp2eVhgtOo1hvrVY7rEc.mft
File:                     O-LwFktmp2eVhgtOo1hvrVY7rEc.mft (raw, json)
Hash identifier:          d9oapLQ2ZSQenNti31/zaImS7tM1kVg423enS+NBsgI=
Subject key identifier:   33:56:91:58:0C:8D:C6:71:1D:D8:87:A5:5C:27:88:FC:75:8E:B1:33
Authority key identifier: 3B:E2:F0:16:4B:66:A7:67:95:86:0B:4E:A3:58:6F:AD:56:3B:AC:47
Certificate issuer:       /CN=3be2f0164b66a76795860b4ea3586fad563bac47
Certificate serial:       01962DF44A9048867DC13FED4D9A6B4FFD40
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/O-LwFktmp2eVhgtOo1hvrVY7rEc.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/90/c72b67-76ec-4afa-b376-f9ad38051220/1/O-LwFktmp2eVhgtOo1hvrVY7rEc.mft
Manifest number:          14F1
Signing time:             Sun 13 Apr 2025 07:01:46 +0000
Manifest this update:     Sun 13 Apr 2025 07:01:46 +0000
Manifest next update:     Mon 14 Apr 2025 07:01:46 +0000
Files and hashes:         1: O-LwFktmp2eVhgtOo1hvrVY7rEc.crl (hash: DVs7tbKcLjAxxLPk/9Tz+qiDwJRpfnXOBWfIpB3pPXE=)
                          2: bnVoAcKQpBUpBdJ_G4E6sEiT0wk.roa (hash: D5MR6IRxVzBiemlQt2yPaFHtcO6ch7oL0gJFMCA2LTc=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2d:f4:4a:90:48:86:7d:c1:3f:ed:4d:9a:6b:4f:fd:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3be2f0164b66a76795860b4ea3586fad563bac47
        Validity
            Not Before: Apr 13 07:01:46 2025 GMT
            Not After : Apr 14 07:01:46 2025 GMT
        Subject: CN=335691580c8dc6711dd887a55c2788fc758eb133
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c8:a6:36:e7:1c:37:90:f6:8f:b3:e9:20:b3:4e:
                    de:f0:8c:74:83:dc:53:19:37:09:89:87:6f:e9:4e:
                    c7:11:40:41:be:55:a3:aa:d9:c6:d1:87:eb:d1:6e:
                    26:b0:b9:80:4b:ee:19:b2:fd:f9:94:03:02:7e:a9:
                    da:15:57:0e:62:62:6a:54:18:d3:68:e9:78:74:1f:
                    b3:eb:1e:18:67:e9:7a:e1:b3:7f:38:b8:76:54:40:
                    db:ed:ab:3d:9c:0d:c6:55:b7:67:a9:78:03:c7:4d:
                    d2:30:9f:23:90:67:b2:7e:3d:0c:dc:3b:0c:cf:45:
                    ee:a4:19:5c:b5:ac:ce:d8:2d:c2:45:77:69:98:e6:
                    38:05:6c:b2:f7:b9:c0:57:64:4a:41:87:8a:0e:4d:
                    23:94:83:e7:16:64:95:a7:ed:0c:d2:53:18:1d:0b:
                    ed:29:97:bf:5b:1d:54:44:45:bd:96:86:7a:1c:80:
                    1c:0f:cd:62:78:c2:f4:5e:8d:40:02:1f:dd:47:7e:
                    31:50:fc:fb:a3:92:71:09:55:35:25:ac:a3:31:ad:
                    d5:fb:e6:68:23:22:56:4c:16:cc:51:6f:1f:d2:61:
                    64:ad:eb:19:96:0e:90:76:40:64:5e:5f:65:9a:26:
                    2b:f2:72:71:42:cc:dd:dc:65:6f:f8:8b:67:05:33:
                    f2:bd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                33:56:91:58:0C:8D:C6:71:1D:D8:87:A5:5C:27:88:FC:75:8E:B1:33
            X509v3 Authority Key Identifier:
                keyid:3B:E2:F0:16:4B:66:A7:67:95:86:0B:4E:A3:58:6F:AD:56:3B:AC:47

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/O-LwFktmp2eVhgtOo1hvrVY7rEc.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/90/c72b67-76ec-4afa-b376-f9ad38051220/1/O-LwFktmp2eVhgtOo1hvrVY7rEc.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/90/c72b67-76ec-4afa-b376-f9ad38051220/1/O-LwFktmp2eVhgtOo1hvrVY7rEc.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         87:9a:c6:6b:65:87:c0:95:15:b9:f4:07:5a:3a:10:3a:ab:dd:
         d3:40:06:ca:c4:ae:ee:3d:bb:f7:de:dd:cd:02:19:a4:21:d0:
         96:58:e8:b8:18:7a:25:b5:3d:d0:b0:66:80:f5:8c:6b:d5:0e:
         3c:68:94:f9:0d:45:09:24:69:14:65:69:ab:23:3e:e2:29:c3:
         a4:09:6e:a9:57:ce:15:83:bb:b0:03:20:c9:5d:99:32:01:81:
         3e:10:38:b8:7c:37:f0:c3:de:8b:7d:a8:a3:df:97:98:07:26:
         ca:60:23:86:60:b0:a4:de:bd:9a:d5:65:27:29:11:b3:84:f7:
         f4:00:c5:93:af:15:76:24:06:f5:18:d7:b6:69:bd:ba:73:59:
         ff:cb:f8:1a:f8:a2:97:07:56:c4:c3:1f:9c:8b:fc:6b:16:38:
         1f:61:92:c0:19:f4:39:b2:11:82:38:10:dd:0a:4f:20:95:65:
         2d:1a:63:94:c0:7c:57:62:37:9a:49:85:76:c2:a8:e5:ce:e4:
         4b:9d:bd:3d:77:dc:c9:07:7e:de:33:33:50:6e:0c:30:40:9d:
         09:dc:ed:6d:32:d2:9a:e4:6b:27:4a:c7:74:04:28:f0:6f:65:
         e9:2b:c9:88:b8:c6:7e:ed:ce:6f:1a:8a:9e:b7:85:93:8b:a2:
         1a:23:b1:2d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 14 20:29:25 2025 by rpki-client on console.sobornost.net