Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b1/ca62a1-4c72-481b-9f25-eec490d506f7/1/q-I1PZvVuMW1jMcQITJLuQ3S3ZE.mft
File:                     q-I1PZvVuMW1jMcQITJLuQ3S3ZE.mft (raw, json)
Hash identifier:          6Ifm3JrLJzOAovMStw9wuVv2YiitudkH6QjyNrLCET8=
Subject key identifier:   65:F8:60:8D:97:2F:44:23:85:3E:AB:42:40:E1:43:14:C8:19:8A:AD
Authority key identifier: AB:E2:35:3D:9B:D5:B8:C5:B5:8C:C7:10:21:32:4B:B9:0D:D2:DD:91
Certificate issuer:       /CN=abe2353d9bd5b8c5b58cc71021324bb90dd2dd91
Certificate serial:       01962DF3C0B2E3F4F10107D43154A6120542
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/q-I1PZvVuMW1jMcQITJLuQ3S3ZE.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/b1/ca62a1-4c72-481b-9f25-eec490d506f7/1/q-I1PZvVuMW1jMcQITJLuQ3S3ZE.mft
Manifest number:          14E8
Signing time:             Sun 13 Apr 2025 07:01:11 +0000
Manifest this update:     Sun 13 Apr 2025 07:01:11 +0000
Manifest next update:     Mon 14 Apr 2025 07:01:11 +0000
Files and hashes:         1: fc4brGlD2V9aXaMOkj_E0RZ_J08.roa (hash: OhUlbRmFgYOLeHLw8imL9BrjCyNfPZwGRzxzejrVjWo=)
                          2: q-I1PZvVuMW1jMcQITJLuQ3S3ZE.crl (hash: uGHLiIuyveuZ20m69wBqOUSe56CXFycmhtTj1r3n67M=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2d:f3:c0:b2:e3:f4:f1:01:07:d4:31:54:a6:12:05:42
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=abe2353d9bd5b8c5b58cc71021324bb90dd2dd91
        Validity
            Not Before: Apr 13 07:01:11 2025 GMT
            Not After : Apr 14 07:01:11 2025 GMT
        Subject: CN=65f8608d972f4423853eab4240e14314c8198aad
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b0:5f:73:3b:c6:82:cd:fd:b0:fd:40:2f:f4:1a:
                    02:dc:40:90:98:e2:d0:2c:ec:51:d0:92:9c:73:98:
                    a1:4b:f8:a3:bc:15:4f:bd:2f:07:d4:15:09:12:87:
                    ef:2d:d7:b7:a2:16:e3:2b:6f:b8:bc:44:d4:eb:6b:
                    39:39:af:03:9c:be:d1:fc:cb:9a:74:fa:e8:ce:22:
                    71:14:22:d8:ac:c5:19:00:78:4f:8d:b2:94:c3:9f:
                    13:3d:f8:12:d9:78:42:67:e2:73:39:fa:c3:08:38:
                    e2:a2:04:fa:7b:d9:b2:15:26:df:77:4f:0b:f7:ab:
                    2e:48:c7:54:c3:af:15:30:16:3b:03:c3:69:ab:31:
                    d0:b3:82:a2:df:42:84:a4:c9:d4:bd:1e:b5:72:2a:
                    0c:7e:86:4e:b9:1e:25:37:94:35:00:09:5b:c1:8e:
                    ad:58:60:39:9c:ce:99:da:92:e4:68:86:b0:43:35:
                    31:7b:51:cb:60:74:b8:f2:08:d2:99:5e:2d:ab:68:
                    71:86:17:a7:eb:72:02:4e:b2:fc:83:32:fe:fa:ad:
                    8c:dc:5d:c6:fe:79:56:cc:c2:65:61:7f:00:24:d6:
                    da:bd:b1:53:34:f6:df:8e:24:82:3a:60:44:bc:9f:
                    8a:8f:2d:8f:8e:57:bf:45:1c:17:71:87:3b:0f:01:
                    47:db
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                65:F8:60:8D:97:2F:44:23:85:3E:AB:42:40:E1:43:14:C8:19:8A:AD
            X509v3 Authority Key Identifier:
                keyid:AB:E2:35:3D:9B:D5:B8:C5:B5:8C:C7:10:21:32:4B:B9:0D:D2:DD:91

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/q-I1PZvVuMW1jMcQITJLuQ3S3ZE.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b1/ca62a1-4c72-481b-9f25-eec490d506f7/1/q-I1PZvVuMW1jMcQITJLuQ3S3ZE.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/b1/ca62a1-4c72-481b-9f25-eec490d506f7/1/q-I1PZvVuMW1jMcQITJLuQ3S3ZE.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         cb:bc:54:a0:8f:1d:d2:1a:79:3f:ed:c5:89:60:1e:ea:1d:79:
         f2:c9:32:e3:2c:91:db:ec:05:04:80:65:1e:c1:eb:b5:77:15:
         68:5a:8a:78:a9:4c:50:aa:33:5d:64:28:ea:d8:97:a2:98:0b:
         a2:ac:4e:8b:8f:09:f1:73:30:d6:c6:f3:45:5c:21:5a:80:a2:
         e2:09:2f:ac:3b:11:16:92:a4:c4:9b:d1:1f:20:a4:6c:ca:0c:
         9a:1d:f0:dc:48:46:32:32:5d:29:bd:f4:a7:da:2a:25:e8:02:
         74:3c:ba:0c:2c:77:f1:18:19:35:aa:75:51:15:62:f3:dc:70:
         91:b8:b1:3f:4e:2e:ce:7d:94:2a:de:97:72:71:dc:94:4f:2f:
         f3:f1:8d:4d:2b:91:4e:66:b9:09:c0:ee:9b:8f:50:4a:31:46:
         59:ae:0a:73:e7:77:8c:da:73:ba:7b:fe:2c:7d:2e:51:ba:eb:
         d9:9d:31:f6:84:ed:bf:06:85:fd:84:b5:75:27:65:98:50:d3:
         ce:3c:7c:ee:8e:d5:97:b0:c0:33:d4:2d:da:c7:35:ac:68:b2:
         c6:66:e3:4d:bb:e4:d2:00:2b:96:29:24:41:be:ff:c6:f8:88:
         31:8f:72:a6:69:ff:cf:55:cc:52:e2:80:a5:2e:eb:c8:36:19:
         a9:62:a1:0e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 14 20:31:39 2025 by rpki-client on console.sobornost.net