Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a2/d36b8b-8656-485b-93b2-3892aca277b0/1/_o6FIymApj8NTfWwSRY-P9AvVLM.mft
File:                     _o6FIymApj8NTfWwSRY-P9AvVLM.mft (raw, json)
Hash identifier:          i7bRKjGNuqCViccTyqQyr5KqJ2BoKyxWaU3hGF9XP9Q=
Subject key identifier:   56:D2:BB:57:13:6A:9C:07:E4:36:C7:CB:01:EF:9E:6D:61:CB:33:32
Authority key identifier: FE:8E:85:23:29:80:A6:3F:0D:4D:F5:B0:49:16:3E:3F:D0:2F:54:B3
Certificate issuer:       /CN=fe8e85232980a63f0d4df5b049163e3fd02f54b3
Certificate serial:       01962F065D8DA22E33303D07AA7ACC2BED32
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/_o6FIymApj8NTfWwSRY-P9AvVLM.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/a2/d36b8b-8656-485b-93b2-3892aca277b0/1/_o6FIymApj8NTfWwSRY-P9AvVLM.mft
Manifest number:          0962
Signing time:             Sun 13 Apr 2025 12:01:08 +0000
Manifest this update:     Sun 13 Apr 2025 12:01:08 +0000
Manifest next update:     Mon 14 Apr 2025 12:01:08 +0000
Files and hashes:         1: 7IkFNxuEd7zYMJ5GFmWYCrb0D3k.roa (hash: EbQqPJKQBhTvoE7/qrp3Wi8FH8cq4X28q+E9y9x/db0=)
                          2: _o6FIymApj8NTfWwSRY-P9AvVLM.crl (hash: zp7RC/czY58jehsbo9VaxzHcfcZnPNMLQGN8tyzADac=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2f:06:5d:8d:a2:2e:33:30:3d:07:aa:7a:cc:2b:ed:32
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=fe8e85232980a63f0d4df5b049163e3fd02f54b3
        Validity
            Not Before: Apr 13 12:01:08 2025 GMT
            Not After : Apr 14 12:01:08 2025 GMT
        Subject: CN=56d2bb57136a9c07e436c7cb01ef9e6d61cb3332
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ca:e0:92:d7:65:ee:ef:cd:19:de:3c:84:d6:fe:
                    ac:66:1f:41:fb:2c:86:e7:3b:48:f2:46:b0:47:a0:
                    f3:2b:d6:53:13:cf:49:76:b9:73:9c:01:4e:4d:07:
                    26:ef:91:81:e1:81:82:c3:24:5c:5a:77:3a:1c:78:
                    69:56:5f:d5:3d:12:11:e4:28:83:0f:93:0a:03:1d:
                    52:05:1a:04:d5:73:61:b3:eb:f9:c4:af:05:22:39:
                    ad:53:ff:3a:bc:f6:cd:f7:54:f2:c0:0a:9d:64:2b:
                    30:b8:1f:c9:09:1a:e8:eb:7a:86:ba:6b:06:46:dd:
                    31:31:6f:5f:ec:53:fb:eb:e2:2c:0f:2a:db:29:7a:
                    02:c8:24:68:b8:a1:c5:e3:75:a7:f0:3b:3e:b7:d4:
                    8b:c5:bd:f3:f8:83:5e:4d:1d:60:31:06:62:29:51:
                    5e:f4:eb:d4:1e:17:c1:e6:ea:23:a6:3e:19:74:17:
                    d5:29:e7:1c:be:c8:45:79:9a:bf:fa:e8:78:80:7d:
                    62:d9:62:8a:64:ce:f4:00:9f:4d:5c:5b:9d:ec:35:
                    58:2f:13:dd:8c:ac:a9:54:b2:c6:5f:69:f6:25:28:
                    43:f5:e2:52:3f:7e:ee:cd:9f:94:90:87:4f:fc:7c:
                    91:7c:b7:f0:15:2f:d8:c2:69:3b:fc:8a:fc:38:79:
                    d9:49
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                56:D2:BB:57:13:6A:9C:07:E4:36:C7:CB:01:EF:9E:6D:61:CB:33:32
            X509v3 Authority Key Identifier:
                keyid:FE:8E:85:23:29:80:A6:3F:0D:4D:F5:B0:49:16:3E:3F:D0:2F:54:B3

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/_o6FIymApj8NTfWwSRY-P9AvVLM.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a2/d36b8b-8656-485b-93b2-3892aca277b0/1/_o6FIymApj8NTfWwSRY-P9AvVLM.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/a2/d36b8b-8656-485b-93b2-3892aca277b0/1/_o6FIymApj8NTfWwSRY-P9AvVLM.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         5b:7e:f9:09:c5:ae:56:e1:ec:3a:21:b8:22:3c:d8:7b:87:6b:
         9c:8c:da:32:37:fc:a0:1d:bf:0a:a0:25:1d:54:bb:93:fc:12:
         1e:7b:16:e8:cd:ef:83:ef:b9:ec:02:77:f1:e7:04:b6:59:79:
         32:16:da:24:9f:4b:2e:ff:a5:60:e9:bd:89:7b:6c:58:6c:72:
         60:43:0d:c9:e5:7a:64:f2:74:e8:ea:fc:bd:2c:83:ca:cc:ef:
         ed:8b:00:11:a6:c7:76:93:30:13:53:31:40:d0:03:ff:75:ac:
         cd:36:1a:08:6e:ae:0f:a6:d2:3b:75:16:9a:0b:e4:92:32:13:
         d4:5b:2d:52:73:70:21:c2:5a:3d:ba:70:45:2d:13:63:95:82:
         19:48:38:3b:06:9b:73:e0:15:b8:6b:82:fe:f6:f7:84:64:d9:
         e0:42:c5:21:22:29:66:a1:95:e7:39:bb:83:d9:ac:c1:bd:1d:
         ce:72:35:79:b7:91:4e:25:95:17:a1:bd:e1:bc:5a:54:e6:5b:
         83:90:d7:5a:9b:0a:0e:9c:80:5b:e3:8b:83:29:9a:d4:5b:b6:
         61:22:98:ff:90:e6:9f:41:c4:e2:b0:55:e4:0e:93:c8:51:9b:
         d2:cf:86:9c:fd:14:0c:8c:1c:cc:8e:d2:17:2e:a2:27:e6:e4:
         f3:dc:e1:c8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 14 20:31:25 2025 by rpki-client on console.sobornost.net