Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c3/b2582f-586b-436a-a6e3-e069ee107add/1/0lqeLErIvAK8P_iSWsExdNLUeMQ.mft
File:                     0lqeLErIvAK8P_iSWsExdNLUeMQ.mft (raw, json)
Hash identifier:          o8Rt4oike/oMM+f1W+rZsZX+2AtkDpfdkZJOm+1vtqA=
Subject key identifier:   1C:8C:A2:97:6F:4C:96:B5:CD:9C:39:CF:C7:D1:05:3F:41:77:C3:DE
Authority key identifier: D2:5A:9E:2C:4A:C8:BC:02:BC:3F:F8:92:5A:C1:31:74:D2:D4:78:C4
Certificate issuer:       /CN=d25a9e2c4ac8bc02bc3ff8925ac13174d2d478c4
Certificate serial:       01962F3D408E9FA663EFD675A101342D6C52
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/0lqeLErIvAK8P_iSWsExdNLUeMQ.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/c3/b2582f-586b-436a-a6e3-e069ee107add/1/0lqeLErIvAK8P_iSWsExdNLUeMQ.mft
Manifest number:          04AA
Signing time:             Sun 13 Apr 2025 13:01:05 +0000
Manifest this update:     Sun 13 Apr 2025 13:01:05 +0000
Manifest next update:     Mon 14 Apr 2025 13:01:05 +0000
Files and hashes:         1: 0lqeLErIvAK8P_iSWsExdNLUeMQ.crl (hash: 62gKuShX6gmcwxwbsPyvBgT112EVGjogY4TjeUXrCqM=)
                          2: wc2YTTqZu_ZfiRjMD3y02xaUsko.roa (hash: LM/FwSmelKssGweHrskFer212d31QKucqPggfsRe9io=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2f:3d:40:8e:9f:a6:63:ef:d6:75:a1:01:34:2d:6c:52
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d25a9e2c4ac8bc02bc3ff8925ac13174d2d478c4
        Validity
            Not Before: Apr 13 13:01:05 2025 GMT
            Not After : Apr 14 13:01:05 2025 GMT
        Subject: CN=1c8ca2976f4c96b5cd9c39cfc7d1053f4177c3de
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b6:38:e3:8a:59:ed:09:ce:21:d3:43:e6:55:80:
                    4b:1d:d5:e2:9a:5f:28:56:55:b5:94:34:34:9a:cc:
                    0d:50:47:d8:ec:6f:c7:5e:a0:21:26:0d:10:5f:39:
                    67:47:a9:81:b5:b3:5d:32:14:4d:48:87:ed:84:66:
                    47:14:7d:2b:39:c1:16:a4:4d:14:8e:b5:39:13:48:
                    94:81:ee:7b:e8:e0:c7:d7:c8:7c:cd:74:b6:13:bc:
                    fd:21:e7:86:6b:f9:04:d0:35:74:58:82:30:c2:70:
                    af:69:af:89:5c:42:b4:eb:81:bf:75:c1:cf:2a:6b:
                    c1:4f:4a:94:46:43:ee:b7:82:51:ab:62:43:ff:01:
                    fe:aa:90:38:15:42:94:ec:ff:d1:02:59:e4:43:61:
                    9e:89:c7:a7:9e:23:a4:df:70:e9:39:05:d4:d1:33:
                    06:e5:d2:ba:d6:8d:18:f2:11:6b:b1:02:be:db:78:
                    ab:9d:3b:e7:ce:7b:00:aa:40:ae:0f:db:47:cd:3a:
                    47:d9:9a:e4:87:36:2e:62:17:38:10:58:e4:e7:0d:
                    8c:fa:9b:a7:a4:0a:5f:ff:e7:7b:00:90:aa:49:d8:
                    d1:07:3f:37:37:ca:e1:88:3d:75:5c:7c:ca:18:b2:
                    90:2b:d5:05:b2:90:05:57:f2:d8:7d:08:bd:c2:59:
                    07:d1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1C:8C:A2:97:6F:4C:96:B5:CD:9C:39:CF:C7:D1:05:3F:41:77:C3:DE
            X509v3 Authority Key Identifier:
                keyid:D2:5A:9E:2C:4A:C8:BC:02:BC:3F:F8:92:5A:C1:31:74:D2:D4:78:C4

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/0lqeLErIvAK8P_iSWsExdNLUeMQ.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c3/b2582f-586b-436a-a6e3-e069ee107add/1/0lqeLErIvAK8P_iSWsExdNLUeMQ.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/c3/b2582f-586b-436a-a6e3-e069ee107add/1/0lqeLErIvAK8P_iSWsExdNLUeMQ.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         89:2e:27:dc:a2:38:4b:29:6d:be:9d:71:22:8e:d5:05:46:2e:
         61:f4:40:75:42:88:f2:31:96:80:17:18:ea:ae:dc:9f:ab:68:
         4d:cc:00:cc:c1:3b:fb:58:8f:31:e2:6f:07:62:99:ae:79:35:
         51:3e:ce:6a:41:a8:cb:2f:fa:1b:7e:32:1f:dd:c1:e8:05:e0:
         78:43:ce:fe:e9:07:ab:4a:4f:cc:25:7a:f4:9e:b7:a2:22:5e:
         60:41:b5:39:c0:c7:83:57:03:7a:11:32:c0:53:92:e2:bf:19:
         0f:eb:57:1d:84:ae:10:37:a9:15:69:f2:c0:35:3e:15:78:05:
         1b:27:09:87:50:49:92:c6:23:77:78:a1:63:3a:1c:ac:cd:bb:
         d0:cd:ed:45:da:c3:9e:f2:ee:75:b6:43:94:d9:a9:93:2d:cc:
         f1:10:02:01:1b:23:b0:1a:40:67:6d:a8:02:7c:41:dc:c3:5b:
         95:b8:3b:f0:a6:fb:e6:ca:b2:a6:6c:ee:90:2b:d7:e9:e7:54:
         e4:7c:3b:4e:4d:3a:f4:7b:47:56:63:81:9f:61:ff:0e:b0:01:
         17:26:98:93:87:56:fa:01:47:af:04:ed:3d:54:53:5b:28:5f:
         fc:c2:f5:8a:9b:0e:1e:99:28:db:c4:c5:f4:cf:de:91:85:4a:
         95:f2:df:85
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 14 20:31:58 2025 by rpki-client on console.sobornost.net