Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b0/4c8eac-bdcb-4f0d-b2d8-ea41832ad172/1/ZWtTJV5sj7dvrBzLhI_uRWALVfc.mft
File:                     ZWtTJV5sj7dvrBzLhI_uRWALVfc.mft (raw, json)
Hash identifier:          Ce/OsgkFWoNQ4UoQLTynHm+TIton53L+KnNAYfDY4R8=
Subject key identifier:   AE:E0:97:0A:85:60:21:FC:73:09:92:71:99:C7:02:45:FB:EE:EA:57
Authority key identifier: 65:6B:53:25:5E:6C:8F:B7:6F:AC:1C:CB:84:8F:EE:45:60:0B:55:F7
Certificate issuer:       /CN=656b53255e6c8fb76fac1ccb848fee45600b55f7
Certificate serial:       01962FAB217F8AA611B99721A410523CE1AA
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/ZWtTJV5sj7dvrBzLhI_uRWALVfc.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/b0/4c8eac-bdcb-4f0d-b2d8-ea41832ad172/1/ZWtTJV5sj7dvrBzLhI_uRWALVfc.mft
Manifest number:          10D3
Signing time:             Sun 13 Apr 2025 15:01:06 +0000
Manifest this update:     Sun 13 Apr 2025 15:01:06 +0000
Manifest next update:     Mon 14 Apr 2025 15:01:06 +0000
Files and hashes:         1: ZWtTJV5sj7dvrBzLhI_uRWALVfc.crl (hash: gnwJAEPHUPD5Kf24HJDippzJL87G5Fep/qC2A8LAnc0=)
                          2: zysotr6Zh0JowEPpxerhuN8FsPI.roa (hash: m7vcKgaxDGAMU/aHqkxYhIsxn/ZRzduC29i2UI0iCuM=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2f:ab:21:7f:8a:a6:11:b9:97:21:a4:10:52:3c:e1:aa
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=656b53255e6c8fb76fac1ccb848fee45600b55f7
        Validity
            Not Before: Apr 13 15:01:06 2025 GMT
            Not After : Apr 14 15:01:06 2025 GMT
        Subject: CN=aee0970a856021fc7309927199c70245fbeeea57
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d8:86:79:9b:0d:ef:56:31:b7:ca:d2:4e:2f:73:
                    0e:98:52:fb:26:a2:d4:0c:28:27:70:43:e7:3c:bc:
                    7e:e2:8c:ab:74:09:d8:e0:9c:b3:95:23:10:c1:1d:
                    1f:49:40:5a:1b:ce:82:4d:63:ab:fd:8c:b6:5c:fb:
                    54:e2:14:96:3c:5d:bf:9f:84:32:86:e9:5f:98:aa:
                    fc:2b:98:ec:44:7d:60:6f:50:43:fd:fb:78:0f:76:
                    4c:0e:be:5e:92:22:da:73:bb:b4:05:43:83:05:c3:
                    da:bc:cd:65:75:b3:05:72:82:32:ba:25:58:5b:0c:
                    de:02:03:b1:6d:6d:dc:fe:84:31:19:9f:f9:68:2c:
                    53:ba:67:4f:83:7e:fe:c0:94:7c:87:d7:7f:a6:fa:
                    0e:c8:a0:df:23:b0:1e:a4:24:71:ef:8e:f0:ee:dd:
                    d4:d1:fe:3a:eb:62:4d:9a:10:90:e3:10:1c:aa:e7:
                    b0:7e:87:1d:62:eb:0a:aa:fb:cd:ac:3a:6e:b6:c9:
                    eb:48:93:50:0b:0e:c4:b2:57:da:82:19:50:d7:e4:
                    18:b6:27:26:7d:f9:cf:65:c7:eb:e6:30:d5:d3:f0:
                    78:ad:39:bc:63:ab:17:21:88:6d:36:57:2d:c7:05:
                    25:6f:d9:37:1e:ba:f0:93:9a:c0:aa:31:6e:36:77:
                    ca:ed
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AE:E0:97:0A:85:60:21:FC:73:09:92:71:99:C7:02:45:FB:EE:EA:57
            X509v3 Authority Key Identifier:
                keyid:65:6B:53:25:5E:6C:8F:B7:6F:AC:1C:CB:84:8F:EE:45:60:0B:55:F7

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ZWtTJV5sj7dvrBzLhI_uRWALVfc.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b0/4c8eac-bdcb-4f0d-b2d8-ea41832ad172/1/ZWtTJV5sj7dvrBzLhI_uRWALVfc.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/b0/4c8eac-bdcb-4f0d-b2d8-ea41832ad172/1/ZWtTJV5sj7dvrBzLhI_uRWALVfc.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         bf:eb:f7:0f:7d:dd:31:79:aa:70:cd:3b:52:7b:e2:e4:e6:36:
         9e:a9:09:88:53:4f:1f:ea:a4:f6:47:60:24:8e:40:16:ad:2d:
         0f:79:b7:35:a1:f8:a8:41:22:a3:48:a2:9c:cc:73:de:5c:c9:
         96:51:2d:d5:4b:bd:fe:02:e3:ac:8a:f4:4e:6c:5d:d7:bc:66:
         18:89:5b:4e:0c:be:0d:2c:58:e2:e8:18:67:e1:8b:70:cc:65:
         73:21:ce:ae:78:2c:86:d3:2a:51:4a:b5:24:3a:bb:ff:27:3d:
         40:1a:4e:f8:4f:29:fb:a8:ae:f4:54:25:61:d6:ae:63:ef:ec:
         f9:69:be:56:2c:dc:9e:9d:c5:60:2a:8e:9b:49:57:e3:54:f5:
         20:d4:08:14:7b:45:79:20:8a:91:c6:b3:2c:28:6e:2f:87:2a:
         9c:29:16:11:52:a2:70:a4:c3:13:b5:84:41:14:3c:42:8b:10:
         10:c9:da:18:b4:22:fd:52:7a:34:2f:0b:54:95:8a:3b:b2:af:
         85:8d:bb:56:ec:66:ac:81:08:bc:cd:cd:4c:24:15:10:64:76:
         e4:70:c1:21:0e:98:f0:e2:e3:3e:ef:99:ab:c9:37:c7:30:65:
         f0:56:e9:6e:ce:b8:14:86:84:70:8d:62:82:94:94:28:47:c4:
         1c:3b:be:bc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 14 20:31:39 2025 by rpki-client on console.sobornost.net