Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/94/965580-8736-4173-bde3-2c3028fcece9/1/k-zM3oXECxVPkZuvZO8DLscNdR4.mft
File:                     k-zM3oXECxVPkZuvZO8DLscNdR4.mft (raw, json)
Hash identifier:          k4v0aWdAonL0ugXpKvRep3arInrAQhzqAmNdD5rEXMk=
Subject key identifier:   8B:E0:50:16:F2:4F:A8:4B:CE:0F:EB:12:87:69:9B:65:70:F9:04:C9
Authority key identifier: 93:EC:CC:DE:85:C4:0B:15:4F:91:9B:AF:64:EF:03:2E:C7:0D:75:1E
Certificate issuer:       /CN=93ecccde85c40b154f919baf64ef032ec70d751e
Certificate serial:       01962F068A528E4B4427D46C3CCEB05B1150
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/k-zM3oXECxVPkZuvZO8DLscNdR4.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/94/965580-8736-4173-bde3-2c3028fcece9/1/k-zM3oXECxVPkZuvZO8DLscNdR4.mft
Manifest number:          14EB
Signing time:             Sun 13 Apr 2025 12:01:19 +0000
Manifest this update:     Sun 13 Apr 2025 12:01:19 +0000
Manifest next update:     Mon 14 Apr 2025 12:01:19 +0000
Files and hashes:         1: GqA5UTC990ZFigxOynJ8MXXo8rI.roa (hash: YOFtkRTAig5lLMiPuaPFv21LA8hii5BrqwulK2FRjwI=)
                          2: k-zM3oXECxVPkZuvZO8DLscNdR4.crl (hash: z+89eXnmKJEtY0k1jIRMt5Vxi0AW6u6qn22M4SNPpfo=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2f:06:8a:52:8e:4b:44:27:d4:6c:3c:ce:b0:5b:11:50
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=93ecccde85c40b154f919baf64ef032ec70d751e
        Validity
            Not Before: Apr 13 12:01:19 2025 GMT
            Not After : Apr 14 12:01:19 2025 GMT
        Subject: CN=8be05016f24fa84bce0feb1287699b6570f904c9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:82:d7:2c:5e:2c:22:04:fa:97:04:fa:2f:07:4e:
                    9e:ed:d2:cd:ff:35:95:de:52:e3:3e:f6:f5:05:1e:
                    a4:37:61:7a:94:3f:2e:7a:ad:15:3b:07:d7:1c:cb:
                    50:ff:00:52:2e:16:1d:21:ec:2c:8d:55:a8:26:0b:
                    5b:3f:ba:15:5a:8b:ee:ae:62:90:55:ad:25:30:17:
                    44:ad:5f:97:32:9a:14:fb:24:77:f4:74:b2:19:27:
                    0c:19:63:70:50:a7:2e:56:1d:1d:25:64:ad:8e:72:
                    0a:4f:dc:07:38:d1:8f:fb:3c:ce:ae:35:a2:15:db:
                    ae:89:17:56:32:9d:fb:8f:ec:e4:3e:db:35:f5:ba:
                    8b:c9:66:b9:84:26:5b:07:39:c7:77:0b:bc:aa:38:
                    b6:22:7a:c6:83:8c:55:08:f9:cf:0e:71:11:dd:36:
                    9b:ce:3d:0f:ce:81:ad:27:65:1e:9b:97:77:d9:4c:
                    d2:81:5c:7b:ca:2a:f9:8b:75:4d:a5:b8:8d:3a:f5:
                    61:9c:09:08:91:cc:49:fe:0b:d7:29:dc:c0:66:0f:
                    7e:31:a8:66:c0:56:25:8d:ed:04:72:8e:7a:fb:32:
                    dd:b5:e7:3e:ab:95:db:c5:bb:ce:91:8d:17:6d:e7:
                    74:57:c5:12:21:63:85:17:4c:e3:d6:65:ea:b5:13:
                    13:ab
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8B:E0:50:16:F2:4F:A8:4B:CE:0F:EB:12:87:69:9B:65:70:F9:04:C9
            X509v3 Authority Key Identifier:
                keyid:93:EC:CC:DE:85:C4:0B:15:4F:91:9B:AF:64:EF:03:2E:C7:0D:75:1E

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/k-zM3oXECxVPkZuvZO8DLscNdR4.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/94/965580-8736-4173-bde3-2c3028fcece9/1/k-zM3oXECxVPkZuvZO8DLscNdR4.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/94/965580-8736-4173-bde3-2c3028fcece9/1/k-zM3oXECxVPkZuvZO8DLscNdR4.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         4c:eb:bf:4c:93:32:2e:20:a1:e3:6c:dd:9f:b0:f5:05:4e:6c:
         d3:a2:68:7d:2c:61:4b:25:31:d2:09:b7:74:22:6c:d9:49:3b:
         8d:a1:a8:2c:93:1d:8c:d6:75:67:df:72:a0:74:0f:bf:77:1c:
         54:63:26:f4:ca:ab:32:09:64:5d:d7:b1:43:d6:62:42:4b:06:
         ac:83:e8:7a:8c:7e:72:c7:99:3e:93:1b:0c:fd:f7:f3:f4:cb:
         f9:ab:c1:a0:46:c0:7b:59:49:43:a1:cb:2e:55:e5:45:07:51:
         de:88:44:f8:33:b1:30:e1:b1:7d:7d:a2:a5:b0:ce:36:55:5c:
         4f:74:0e:f5:8c:92:2a:b8:36:75:a3:df:aa:bc:c4:3d:d6:6b:
         5b:bd:95:03:6f:d3:8f:fe:f6:3d:cf:9f:92:64:61:50:77:ad:
         5c:43:ad:02:16:23:c9:5d:5b:4b:f9:9f:46:43:6f:f2:24:00:
         ee:b5:7d:77:a5:64:5d:15:52:cb:04:83:72:12:de:56:22:5e:
         e2:a3:ed:d4:50:ba:ac:28:5b:f1:f8:4d:b0:4e:a8:1e:1f:fb:
         de:28:a0:49:2f:38:88:52:42:55:d1:ad:c2:11:4e:79:8c:90:
         97:e6:92:b5:45:f5:ed:2d:09:09:11:ba:6b:13:b7:96:06:2d:
         3e:61:ca:30
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 14 20:29:27 2025 by rpki-client on console.sobornost.net