Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/cb/7e224d-f154-4f75-a2a8-eb7ec4d7dca8/1/rf2QyzV0L55YHoy98OPhI6hJyDA.mft
File:                     rf2QyzV0L55YHoy98OPhI6hJyDA.mft (raw, json)
Hash identifier:          /Nr68GrKlcZ6LE4helxl5CNXswAbBdtpXImEZjZeDJ8=
Subject key identifier:   56:4F:97:D2:F5:3D:82:E7:2C:39:91:8B:04:24:00:C8:0D:C8:56:C8
Authority key identifier: AD:FD:90:CB:35:74:2F:9E:58:1E:8C:BD:F0:E3:E1:23:A8:49:C8:30
Certificate issuer:       /CN=adfd90cb35742f9e581e8cbdf0e3e123a849c830
Certificate serial:       01962F74CA8DBE649A055A3222F4A65C3298
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/rf2QyzV0L55YHoy98OPhI6hJyDA.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/cb/7e224d-f154-4f75-a2a8-eb7ec4d7dca8/1/rf2QyzV0L55YHoy98OPhI6hJyDA.mft
Manifest number:          147D
Signing time:             Sun 13 Apr 2025 14:01:45 +0000
Manifest this update:     Sun 13 Apr 2025 14:01:45 +0000
Manifest next update:     Mon 14 Apr 2025 14:01:45 +0000
Files and hashes:         1: csdHd_e7Tx65D2MBS9ZtbLUxU90.roa (hash: fNuNtwuPS3v94+W5VQY9K+dMsKggefc0dwxaWQUAwyY=)
                          2: rf2QyzV0L55YHoy98OPhI6hJyDA.crl (hash: NMb0CfHJxoNmri32HiAzxygMpZgnfFmAECtwxOh6hlw=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2f:74:ca:8d:be:64:9a:05:5a:32:22:f4:a6:5c:32:98
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=adfd90cb35742f9e581e8cbdf0e3e123a849c830
        Validity
            Not Before: Apr 13 14:01:45 2025 GMT
            Not After : Apr 14 14:01:45 2025 GMT
        Subject: CN=564f97d2f53d82e72c39918b042400c80dc856c8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b5:f5:11:10:c6:3d:89:19:a8:8a:a8:f0:f7:22:
                    9e:31:db:67:07:1f:be:e9:e3:10:39:50:97:d3:12:
                    42:2f:85:b7:d7:60:38:be:e9:d0:b5:f9:89:c2:9b:
                    14:08:2e:d4:53:c9:36:12:43:e3:db:c1:e0:72:02:
                    b1:71:a8:6f:f7:1d:d6:c4:81:1b:77:97:b6:ed:1b:
                    8b:7c:04:b3:c5:6d:a0:22:a8:cd:1f:44:cb:50:33:
                    cb:4f:b2:6f:05:07:89:ea:b9:60:23:6b:2b:a4:4f:
                    e9:cc:e8:1b:7a:a5:ec:08:1c:fb:eb:f0:3d:01:4e:
                    29:ac:17:84:d8:e9:0d:1c:93:7a:c2:50:76:b2:31:
                    9f:94:1a:d8:60:be:70:70:c9:fc:81:ba:9b:ae:15:
                    df:37:db:15:7c:df:02:d7:6f:d9:8f:9a:20:77:19:
                    ce:46:fb:2b:6b:57:5f:03:d4:e7:26:69:f9:d1:61:
                    76:56:a5:6c:2f:12:81:c3:87:64:54:f8:14:e7:44:
                    49:32:17:46:31:e8:1e:4f:7c:4e:b2:c6:27:9a:82:
                    02:28:2c:8b:6b:1c:58:66:08:28:62:86:0a:f4:ac:
                    16:c2:20:05:d7:3c:27:33:91:2e:a2:42:38:87:93:
                    7d:6d:49:fe:b0:87:56:cb:8d:fa:ab:54:5f:90:f8:
                    6b:4d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                56:4F:97:D2:F5:3D:82:E7:2C:39:91:8B:04:24:00:C8:0D:C8:56:C8
            X509v3 Authority Key Identifier:
                keyid:AD:FD:90:CB:35:74:2F:9E:58:1E:8C:BD:F0:E3:E1:23:A8:49:C8:30

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/rf2QyzV0L55YHoy98OPhI6hJyDA.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/cb/7e224d-f154-4f75-a2a8-eb7ec4d7dca8/1/rf2QyzV0L55YHoy98OPhI6hJyDA.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/cb/7e224d-f154-4f75-a2a8-eb7ec4d7dca8/1/rf2QyzV0L55YHoy98OPhI6hJyDA.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         22:2e:46:9c:e0:2f:a1:66:c0:0e:1b:90:d8:97:ce:11:b5:f0:
         1c:2d:62:c4:9e:22:35:4f:45:e4:89:de:74:42:da:bb:ff:b5:
         8d:ab:fc:14:65:d6:0d:47:54:93:f9:8f:51:7d:8f:1d:3f:95:
         61:d1:39:48:6a:52:ba:9d:50:80:71:81:24:42:23:bc:d6:40:
         ad:c5:14:ff:ef:0a:64:6d:ac:ed:3b:87:55:6d:e7:99:99:ba:
         c9:b6:59:6c:07:3a:e1:a3:bd:75:78:f8:d3:ce:e2:18:0c:d9:
         2f:29:2b:b4:cf:bf:f8:48:28:d0:e4:e5:f5:34:bd:3a:ca:c1:
         07:c2:8d:63:dc:8b:c8:25:34:a1:2f:7a:74:da:3d:26:75:5b:
         4d:67:5e:82:a2:12:e3:91:da:6d:31:9e:d2:58:8c:6d:17:51:
         7a:87:c0:40:60:07:5a:09:7d:b8:e7:9c:22:17:fa:76:fd:b6:
         7e:b8:d5:2f:3f:d7:75:ae:c8:21:2e:ee:5a:05:54:93:53:f7:
         1f:3f:fc:fc:8a:cf:29:fc:f9:a8:86:a1:66:e1:ca:77:55:f2:
         6c:db:28:4e:9d:75:ab:77:c3:eb:72:a8:34:6e:17:c5:bf:b8:
         b4:1a:9d:bb:bd:5b:f6:83:af:75:a7:6d:50:66:58:ad:42:d2:
         69:c5:5e:50
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 14 20:32:04 2025 by rpki-client on console.sobornost.net