Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/bc/d4635f-2195-4d94-8d16-470a93b3d3e7/1/vttqTtOT2KO3UH-Wo4vuDEyLR38.mft
File:                     vttqTtOT2KO3UH-Wo4vuDEyLR38.mft (raw, json)
Hash identifier:          t+DT0YL2n5S/tvX2SSoz/pPYqJUAp/ulcYgeub+LzjM=
Subject key identifier:   10:47:70:A3:DD:C5:CC:2C:E2:98:30:20:B2:40:90:9C:86:B9:A9:4C
Authority key identifier: BE:DB:6A:4E:D3:93:D8:A3:B7:50:7F:96:A3:8B:EE:0C:4C:8B:47:7F
Certificate issuer:       /CN=bedb6a4ed393d8a3b7507f96a38bee0c4c8b477f
Certificate serial:       01962E98961FE584BEB9A65336AFB5E8C802
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/vttqTtOT2KO3UH-Wo4vuDEyLR38.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/bc/d4635f-2195-4d94-8d16-470a93b3d3e7/1/vttqTtOT2KO3UH-Wo4vuDEyLR38.mft
Manifest number:          14E9
Signing time:             Sun 13 Apr 2025 10:01:13 +0000
Manifest this update:     Sun 13 Apr 2025 10:01:13 +0000
Manifest next update:     Mon 14 Apr 2025 10:01:13 +0000
Files and hashes:         1: 70lNK5fBDtyKP1-Uoyim5AlDIhs.roa (hash: j96/AeWDc3evjhceJaK+DEno6uY4hCQMsDxAEfX1LUM=)
                          2: vttqTtOT2KO3UH-Wo4vuDEyLR38.crl (hash: +Ytlqi+lc8CfiVxBSHCTzGmTHmGMi6cHD9zCkWaqgqk=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2e:98:96:1f:e5:84:be:b9:a6:53:36:af:b5:e8:c8:02
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=bedb6a4ed393d8a3b7507f96a38bee0c4c8b477f
        Validity
            Not Before: Apr 13 10:01:13 2025 GMT
            Not After : Apr 14 10:01:13 2025 GMT
        Subject: CN=104770a3ddc5cc2ce2983020b240909c86b9a94c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9a:24:4b:6b:d4:7f:3c:5a:9d:8a:bb:ea:ae:bd:
                    b0:b2:b5:4d:4f:ba:52:0e:5c:9a:5a:67:0f:da:92:
                    12:52:10:36:77:08:66:65:e4:70:4a:5a:7a:fc:3c:
                    54:18:bc:c5:c8:fa:ad:29:26:93:09:90:d7:c1:d5:
                    f8:7d:c8:cf:c2:e0:42:56:31:7a:0c:3b:d9:9d:0a:
                    dc:bf:c0:be:73:0f:d6:a9:45:3a:b3:18:50:fb:7f:
                    39:2f:63:e5:75:eb:78:84:3d:32:09:83:e1:32:02:
                    89:4c:49:f2:fa:b0:f8:e7:9d:67:62:19:e6:fe:6b:
                    f5:68:73:b3:2c:37:69:c6:ee:dd:90:b4:a3:f9:ed:
                    15:f0:79:bf:06:4e:53:b9:16:a1:6f:35:3e:09:ce:
                    e2:0e:e3:dd:a2:be:e1:57:9e:a8:d0:b7:0f:49:a0:
                    60:7a:26:37:4f:79:73:b2:6a:6d:fc:5c:f8:87:9e:
                    55:e5:64:fd:55:05:e7:af:58:13:8d:22:ff:66:ee:
                    9c:ed:a1:6c:95:6f:1e:f7:a6:49:d9:83:c0:c7:5d:
                    f9:0e:13:7b:46:09:cd:42:58:4e:ab:fa:25:6c:d6:
                    9d:62:f3:8a:06:eb:74:42:c7:71:82:ec:0c:8e:4e:
                    e6:96:b5:e7:fe:74:49:04:8c:0a:b1:a7:af:41:b5:
                    7c:df
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                10:47:70:A3:DD:C5:CC:2C:E2:98:30:20:B2:40:90:9C:86:B9:A9:4C
            X509v3 Authority Key Identifier:
                keyid:BE:DB:6A:4E:D3:93:D8:A3:B7:50:7F:96:A3:8B:EE:0C:4C:8B:47:7F

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/vttqTtOT2KO3UH-Wo4vuDEyLR38.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/bc/d4635f-2195-4d94-8d16-470a93b3d3e7/1/vttqTtOT2KO3UH-Wo4vuDEyLR38.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/bc/d4635f-2195-4d94-8d16-470a93b3d3e7/1/vttqTtOT2KO3UH-Wo4vuDEyLR38.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         a2:d8:38:d4:45:db:4d:49:c6:6d:04:da:c4:b2:40:3c:35:26:
         3f:42:e7:b7:d8:3d:9c:06:09:a7:2a:dc:08:69:66:03:20:5f:
         98:9f:a7:1d:af:43:2f:c4:8a:14:b9:0d:5f:66:3a:e8:35:52:
         a7:db:45:8f:e5:77:95:a7:a2:08:5d:b3:75:5d:6a:8c:c9:e5:
         b3:e1:b6:7c:bd:d8:4b:63:11:e5:89:bb:54:79:a9:6f:40:89:
         e8:4a:f5:d2:0c:0c:78:3a:21:af:4d:6f:c6:51:ac:58:40:c5:
         73:60:bb:3c:61:9a:38:ad:0d:64:f8:34:4c:15:38:10:9a:a3:
         ca:26:ef:ac:f8:42:ae:4c:ef:29:20:ae:80:c1:0b:d6:ac:cb:
         00:85:e7:e0:ae:51:d6:bf:78:e9:c4:57:11:b0:49:2e:74:5f:
         8b:77:31:94:b1:00:6b:06:40:6e:4b:c4:9b:0b:df:e7:b3:89:
         b4:a9:a8:9e:06:dc:f6:cc:e0:72:76:bb:92:a9:9e:c8:6c:b3:
         39:12:38:10:4c:2e:74:75:dc:94:91:c9:bf:dc:cb:e0:d8:85:
         54:53:63:ba:51:d2:5f:62:c6:66:4b:f4:ad:bc:bc:88:d3:2f:
         e9:cc:5c:25:3f:fb:65:0a:c8:93:76:79:dc:29:27:61:2e:50:
         48:0a:8a:f2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 14 20:31:48 2025 by rpki-client on console.sobornost.net