Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a2/8f7d37-a740-42b0-acd0-c36976363968/1/k4otcueQJvUr9WV-l__RsRvohkE.mft
File:                     k4otcueQJvUr9WV-l__RsRvohkE.mft (raw, json)
Hash identifier:          bj5BPJJvMHNxSD3PlFX3IeU7EC7tEcc+tq2mOXPomdU=
Subject key identifier:   FB:40:1A:F9:97:3D:A5:A9:14:FD:F5:36:5C:95:65:AF:93:B5:DF:65
Authority key identifier: 93:8A:2D:72:E7:90:26:F5:2B:F5:65:7E:97:FF:D1:B1:1B:E8:86:41
Certificate issuer:       /CN=938a2d72e79026f52bf5657e97ffd1b11be88641
Certificate serial:       01962E994153EA6E142EFDCB883352565048
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/k4otcueQJvUr9WV-l__RsRvohkE.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/a2/8f7d37-a740-42b0-acd0-c36976363968/1/k4otcueQJvUr9WV-l__RsRvohkE.mft
Manifest number:          0649
Signing time:             Sun 13 Apr 2025 10:01:57 +0000
Manifest this update:     Sun 13 Apr 2025 10:01:57 +0000
Manifest next update:     Mon 14 Apr 2025 10:01:57 +0000
Files and hashes:         1: GdYDqrOhgB8exVYYyIqPRX61C-I.roa (hash: NWfhvpFN96SLGPQqqCOWVE/72vTziFHwtrYFSPDHX60=)
                          2: k4otcueQJvUr9WV-l__RsRvohkE.crl (hash: /VAH95Y86W9Zwqp7/dNLSpD/KkSh14zWivO7KhRL3GY=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2e:99:41:53:ea:6e:14:2e:fd:cb:88:33:52:56:50:48
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=938a2d72e79026f52bf5657e97ffd1b11be88641
        Validity
            Not Before: Apr 13 10:01:57 2025 GMT
            Not After : Apr 14 10:01:57 2025 GMT
        Subject: CN=fb401af9973da5a914fdf5365c9565af93b5df65
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9b:1b:a2:34:6a:af:0d:9a:23:7b:07:a2:fd:3d:
                    ef:7f:7b:e9:b3:05:4b:e0:2f:80:07:e3:57:24:56:
                    2d:ee:26:3d:71:d5:eb:e8:9a:ab:52:90:f3:50:5c:
                    b0:14:a4:25:ab:f0:fb:e0:ed:c6:b2:a4:f8:94:bc:
                    03:10:05:5a:58:83:ec:11:e9:6a:50:88:b5:8e:10:
                    73:b9:cb:73:44:f2:4b:bc:81:58:ba:34:91:29:a4:
                    34:7b:11:05:40:c1:56:bd:41:25:e5:88:d6:93:5b:
                    72:db:d9:00:84:19:c1:da:06:ec:0e:e8:5f:86:be:
                    fc:eb:9e:fd:f1:33:11:1e:75:c8:84:bb:31:7d:46:
                    b5:51:14:f5:5a:6e:c4:cb:10:5a:84:d8:15:a6:72:
                    52:07:25:76:91:fd:ca:46:78:af:ce:ec:d4:d7:5d:
                    a3:f4:32:f1:6e:c5:3f:5a:db:2e:61:f2:51:86:69:
                    f7:93:08:bf:ca:cb:c0:96:5d:b0:73:b0:f4:f4:13:
                    8a:12:44:41:cd:af:60:2a:78:d2:05:49:86:60:5c:
                    71:c3:1e:fb:a5:7f:24:e2:39:46:56:90:de:00:a5:
                    8d:54:19:cd:52:dc:17:cd:b1:4a:41:76:e2:75:71:
                    5d:fe:e5:5a:33:b9:ec:ae:38:02:d9:a0:89:97:b9:
                    e0:49
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FB:40:1A:F9:97:3D:A5:A9:14:FD:F5:36:5C:95:65:AF:93:B5:DF:65
            X509v3 Authority Key Identifier:
                keyid:93:8A:2D:72:E7:90:26:F5:2B:F5:65:7E:97:FF:D1:B1:1B:E8:86:41

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/k4otcueQJvUr9WV-l__RsRvohkE.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a2/8f7d37-a740-42b0-acd0-c36976363968/1/k4otcueQJvUr9WV-l__RsRvohkE.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/a2/8f7d37-a740-42b0-acd0-c36976363968/1/k4otcueQJvUr9WV-l__RsRvohkE.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         39:e2:d6:65:53:93:17:6d:a9:9a:b8:b1:63:76:83:9e:9b:85:
         e7:85:d7:77:22:be:49:e2:ab:75:d7:4a:4b:7d:97:07:f1:f8:
         ea:9e:41:48:67:dd:33:87:b3:0b:f3:51:20:c8:67:e6:ff:85:
         72:5e:a1:fc:0b:5b:09:b0:9f:c4:fc:14:08:cf:f1:3c:6c:07:
         f5:c4:21:31:53:ff:3a:42:d0:a1:5d:14:6d:e8:72:2c:ad:5c:
         38:35:1f:ce:02:30:69:cb:7d:c6:3b:fa:60:7a:5e:84:81:fe:
         11:be:22:79:0b:2a:bd:8b:43:1b:b9:c3:bf:62:8b:7a:04:da:
         0f:8b:54:f4:a5:00:b2:a8:11:4f:c4:58:7e:30:ca:00:ff:7e:
         97:03:92:54:9a:af:c8:c8:8f:a5:91:f3:0d:18:b2:c5:3a:27:
         2b:6f:02:56:54:65:01:51:e4:37:da:80:09:82:b2:46:1d:3d:
         e6:12:11:0d:7a:15:47:f5:0a:e4:ff:c6:60:21:6b:a6:1e:65:
         6b:64:a8:9a:80:5d:91:32:93:f3:6b:b4:99:88:56:18:72:df:
         0f:55:bf:55:19:f3:44:27:11:5c:fa:07:50:02:54:6f:fd:4c:
         ee:69:27:c7:0d:71:bd:b4:82:b8:d6:d6:85:18:04:1a:09:b6:
         e2:4a:49:c1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 14 20:31:25 2025 by rpki-client on console.sobornost.net