Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a4/4e2808-e8f4-42a7-a827-7abce600c218/1/dlF2LePT8Zzt1DiwPPI5hs6Rcn8.mft
File:                     dlF2LePT8Zzt1DiwPPI5hs6Rcn8.mft (raw, json)
Hash identifier:          31SKMffvp4bObigOXrj/ZevgBN28MkhcgE/ebSOsdnE=
Subject key identifier:   8D:99:57:EE:B3:89:B1:81:A6:B6:D4:7C:3B:65:9C:05:72:82:13:E6
Authority key identifier: 76:51:76:2D:E3:D3:F1:9C:ED:D4:38:B0:3C:F2:39:86:CE:91:72:7F
Certificate issuer:       /CN=7651762de3d3f19cedd438b03cf23986ce91727f
Certificate serial:       01962F067BC507485F2DC96473830091355D
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/dlF2LePT8Zzt1DiwPPI5hs6Rcn8.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/a4/4e2808-e8f4-42a7-a827-7abce600c218/1/dlF2LePT8Zzt1DiwPPI5hs6Rcn8.mft
Manifest number:          14EA
Signing time:             Sun 13 Apr 2025 12:01:15 +0000
Manifest this update:     Sun 13 Apr 2025 12:01:15 +0000
Manifest next update:     Mon 14 Apr 2025 12:01:15 +0000
Files and hashes:         1: 00qMnebnoQ1q-0QpuHNtB2jC8kw.roa (hash: eM8vkjcd9zZftIcrd2HQLTAzDHkkoGlg8veiHLYFAc4=)
                          2: dlF2LePT8Zzt1DiwPPI5hs6Rcn8.crl (hash: jSw+myh2XmdJTbEXzT1gklwxqM2NZhSiDYA7Gb8G+CQ=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2f:06:7b:c5:07:48:5f:2d:c9:64:73:83:00:91:35:5d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7651762de3d3f19cedd438b03cf23986ce91727f
        Validity
            Not Before: Apr 13 12:01:15 2025 GMT
            Not After : Apr 14 12:01:15 2025 GMT
        Subject: CN=8d9957eeb389b181a6b6d47c3b659c05728213e6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c8:e2:13:bf:51:a7:83:6d:71:3b:c9:60:4e:40:
                    d0:7b:89:66:8a:7f:0d:38:12:36:8d:2f:a2:37:a6:
                    57:76:cc:33:86:fe:22:fa:22:b6:3c:07:fc:4d:9d:
                    5a:93:7e:ba:95:00:89:6e:0e:e3:63:de:9a:fa:af:
                    49:19:0c:d9:42:9c:f4:20:97:49:dd:01:26:58:3b:
                    1c:39:9a:54:c9:87:b6:a5:51:87:a8:86:36:19:e9:
                    b0:d7:42:dd:72:aa:5b:eb:44:cc:5e:1e:bf:47:01:
                    df:c7:78:7f:51:0b:01:8d:23:55:20:8c:2e:ed:ff:
                    9e:84:a1:69:98:09:38:e7:e2:db:80:4f:01:5d:56:
                    9b:24:a8:24:00:53:37:a1:8a:b6:d0:22:89:fc:b7:
                    70:d6:ef:da:31:a1:d6:4d:2f:45:20:36:1f:b4:8b:
                    ea:c8:5d:81:2b:c9:43:ac:17:48:cb:b0:ba:29:e3:
                    da:69:85:81:ae:b2:1b:df:8e:03:39:13:06:7d:6e:
                    d0:9d:72:04:cf:38:7c:6f:80:95:77:32:dd:3b:39:
                    99:3f:66:03:8a:1b:a0:eb:cb:80:b6:b0:41:a7:07:
                    38:c0:e6:4b:35:c3:3d:40:a5:e3:e0:73:d7:f8:a1:
                    73:28:fb:c1:a1:cf:68:17:6f:fa:8f:e6:da:6d:5e:
                    2a:bb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8D:99:57:EE:B3:89:B1:81:A6:B6:D4:7C:3B:65:9C:05:72:82:13:E6
            X509v3 Authority Key Identifier:
                keyid:76:51:76:2D:E3:D3:F1:9C:ED:D4:38:B0:3C:F2:39:86:CE:91:72:7F

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/dlF2LePT8Zzt1DiwPPI5hs6Rcn8.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a4/4e2808-e8f4-42a7-a827-7abce600c218/1/dlF2LePT8Zzt1DiwPPI5hs6Rcn8.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/a4/4e2808-e8f4-42a7-a827-7abce600c218/1/dlF2LePT8Zzt1DiwPPI5hs6Rcn8.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         5c:ee:cf:58:97:51:79:5a:c7:b5:72:34:71:e7:a4:b7:a2:de:
         0b:22:c4:6d:c9:f7:73:51:36:15:8e:13:dd:97:9d:c5:29:48:
         1a:ef:98:b0:22:79:b6:e0:ad:7d:24:cc:93:25:84:63:25:7c:
         9a:86:00:85:8c:35:ed:a5:cf:1b:8a:b6:b0:68:fe:4e:62:54:
         f3:1d:53:48:59:0c:ce:34:3b:51:94:6c:a0:67:52:3f:35:26:
         7f:0d:33:f6:4a:0f:4d:1b:d6:72:16:e9:c9:26:78:be:e9:22:
         63:da:d1:d8:f5:83:39:4e:d4:48:7b:2c:38:36:0a:15:9d:b8:
         62:02:6d:7f:c1:0e:bd:85:ce:8a:bb:1b:a0:f7:91:e6:74:d6:
         df:41:03:4d:cc:ae:a6:2f:dc:2e:a3:34:52:d7:8d:7a:d6:64:
         cd:1c:6a:f8:db:87:24:4c:0d:30:80:4d:07:d2:07:66:f6:94:
         aa:fd:f6:2f:d2:5d:64:42:b5:ee:3c:ae:44:15:4c:96:51:67:
         51:46:c7:72:07:02:33:64:4d:33:60:3a:de:90:93:d5:ff:eb:
         82:78:26:10:12:3d:7f:fe:eb:8e:a3:2a:b7:24:da:6b:4b:d9:
         49:38:e6:f5:fa:52:0e:08:57:d9:78:e8:ac:4a:52:57:ad:52:
         6a:ab:d9:b3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 14 20:31:26 2025 by rpki-client on console.sobornost.net