Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/bd/107788-8502-4541-9480-8f48a3702f90/1/uMaM2mX2aWLMuWg_FVDRTlYQego.mft
File:                     uMaM2mX2aWLMuWg_FVDRTlYQego.mft (raw, json)
Hash identifier:          kO/GbQvTQUMSZtoY58nelD0shgmMczZ5qgFEwbmzpuU=
Subject key identifier:   38:7E:1A:30:BD:3A:F1:17:6E:85:E1:EE:FD:83:0C:22:52:10:EA:C1
Authority key identifier: B8:C6:8C:DA:65:F6:69:62:CC:B9:68:3F:15:50:D1:4E:56:10:7A:0A
Certificate issuer:       /CN=b8c68cda65f66962ccb9683f1550d14e56107a0a
Certificate serial:       01962FAB45088684E7C1CD1CFE100E7B7A12
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/uMaM2mX2aWLMuWg_FVDRTlYQego.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/bd/107788-8502-4541-9480-8f48a3702f90/1/uMaM2mX2aWLMuWg_FVDRTlYQego.mft
Manifest number:          05F9
Signing time:             Sun 13 Apr 2025 15:01:15 +0000
Manifest this update:     Sun 13 Apr 2025 15:01:15 +0000
Manifest next update:     Mon 14 Apr 2025 15:01:15 +0000
Files and hashes:         1: sIDOXg67yEuo_7naS_BfCVLmcEk.roa (hash: d8agrpVd7dmHrJl/IhvjPgn5Td9Dpm4TU3p5w1Cxjt0=)
                          2: uMaM2mX2aWLMuWg_FVDRTlYQego.crl (hash: r3pghiE5JLgDt597YEcRjHAOBtH6ewXGNthev4nvpRw=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2f:ab:45:08:86:84:e7:c1:cd:1c:fe:10:0e:7b:7a:12
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b8c68cda65f66962ccb9683f1550d14e56107a0a
        Validity
            Not Before: Apr 13 15:01:15 2025 GMT
            Not After : Apr 14 15:01:15 2025 GMT
        Subject: CN=387e1a30bd3af1176e85e1eefd830c225210eac1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e1:6f:be:4d:eb:4d:5c:fb:b6:fa:26:b4:f7:cd:
                    66:b2:e3:67:2e:a8:5a:0e:e1:6c:4c:35:d7:7f:29:
                    3e:55:d7:32:85:d9:70:7b:b0:d3:0e:99:23:6b:62:
                    ad:04:ae:83:78:a6:86:8d:07:33:49:fb:c1:11:e2:
                    f3:43:d6:90:88:f5:0b:23:d5:8e:39:8b:3c:0a:e4:
                    f3:1b:eb:e0:ea:42:98:11:71:38:8c:87:a1:f0:7e:
                    19:43:5d:c8:19:14:5c:52:3d:24:35:50:b6:3b:06:
                    55:0f:65:9a:b5:5c:16:84:dc:cb:27:a3:8d:ff:8f:
                    91:d5:8e:2a:0c:11:43:50:cc:61:26:c2:9b:2c:81:
                    de:0e:b8:e5:7b:72:e5:b1:b8:25:a9:1d:83:b4:f8:
                    6f:9b:95:91:51:a7:bc:17:00:e0:b8:16:50:f7:36:
                    d7:92:c4:50:28:15:12:2e:e0:54:ab:cf:90:69:87:
                    40:8d:a1:e7:36:af:ad:a3:e9:52:05:89:41:14:85:
                    fd:1e:50:8d:ab:da:0f:cf:f7:a4:0b:8a:72:4d:e7:
                    e4:c5:8e:bd:90:81:ce:8e:a7:35:53:bc:7c:f5:39:
                    d8:3b:05:b4:37:37:0b:09:96:75:de:ae:ff:f0:32:
                    b3:0a:33:f7:68:cc:52:cc:6b:59:48:ec:ce:84:ff:
                    17:ef
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                38:7E:1A:30:BD:3A:F1:17:6E:85:E1:EE:FD:83:0C:22:52:10:EA:C1
            X509v3 Authority Key Identifier:
                keyid:B8:C6:8C:DA:65:F6:69:62:CC:B9:68:3F:15:50:D1:4E:56:10:7A:0A

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/uMaM2mX2aWLMuWg_FVDRTlYQego.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/bd/107788-8502-4541-9480-8f48a3702f90/1/uMaM2mX2aWLMuWg_FVDRTlYQego.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/bd/107788-8502-4541-9480-8f48a3702f90/1/uMaM2mX2aWLMuWg_FVDRTlYQego.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         08:d3:b5:67:18:b0:cc:9a:7a:f9:37:f2:41:a7:e0:f1:b8:01:
         b0:c1:f6:8b:f7:47:92:cf:e9:9d:09:62:bb:00:2c:a0:3b:cb:
         2a:6d:ba:a8:52:98:36:48:91:7b:39:6a:82:e5:ad:c0:4d:ba:
         7f:da:0a:b6:af:c2:b1:5f:48:14:bd:b1:3c:a6:58:cf:f1:b0:
         28:a7:f6:cb:10:c1:f7:e3:f0:c6:d1:22:b5:f1:4d:f9:84:c1:
         9c:0a:cc:85:c8:05:24:be:fb:c1:bb:ea:f5:77:31:f0:22:af:
         eb:02:76:34:6a:02:7a:b8:71:a0:7f:ab:a3:29:50:8f:13:64:
         81:a3:10:9c:40:c9:e4:df:48:1b:a6:67:48:13:54:87:ac:92:
         55:20:58:ca:ac:f7:6a:f3:61:24:c6:15:aa:39:1c:8f:c9:47:
         eb:ef:27:6f:7c:84:24:6b:00:34:f3:38:71:b8:bd:cd:a3:6e:
         46:2d:01:99:e6:a9:00:6b:32:ff:70:45:7c:92:bc:5f:84:68:
         12:08:ca:41:8b:b2:25:e2:41:3c:73:14:32:3c:51:3b:f2:91:
         21:4c:c6:31:ac:6d:6d:3d:c0:4a:f4:c6:2c:b6:cb:71:3a:2b:
         4b:d9:7b:a5:3f:48:b1:af:9d:8b:f3:a8:8a:5a:50:eb:f9:31:
         05:5e:00:ef
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 14 20:31:48 2025 by rpki-client on console.sobornost.net