Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d0/c213d4-3e4a-49e6-9b1f-ca6a1cc81a22/1/2YJ5FzbN3dEyjQ3Q3srpLAWNbyU.mft
File:                     2YJ5FzbN3dEyjQ3Q3srpLAWNbyU.mft (raw, json)
Hash identifier:          xPU98Q7EgOgGGclbv1aj81bf1N9oD2OUgTcVWgLFMQc=
Subject key identifier:   3B:26:4B:41:E0:59:1F:1C:63:36:DA:3D:80:44:8B:7B:B2:E7:62:D6
Authority key identifier: D9:82:79:17:36:CD:DD:D1:32:8D:0D:D0:DE:CA:E9:2C:05:8D:6F:25
Certificate issuer:       /CN=d982791736cdddd1328d0dd0decae92c058d6f25
Certificate serial:       01962F7446B7685B60D2F36D126873CB90A7
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/2YJ5FzbN3dEyjQ3Q3srpLAWNbyU.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/d0/c213d4-3e4a-49e6-9b1f-ca6a1cc81a22/1/2YJ5FzbN3dEyjQ3Q3srpLAWNbyU.mft
Manifest number:          D3
Signing time:             Sun 13 Apr 2025 14:01:11 +0000
Manifest this update:     Sun 13 Apr 2025 14:01:11 +0000
Manifest next update:     Mon 14 Apr 2025 14:01:11 +0000
Files and hashes:         1: 2YJ5FzbN3dEyjQ3Q3srpLAWNbyU.crl (hash: u5hbir8NZ3TDOBvZwdhWd7FAmgayAiU4VfJ26t6Nawc=)
                          2: nTuk9GI5GZL6GaqD8YI_VNHNwd0.roa (hash: rxSabvmVUQAupTJLHZRfhiqBX7/10LGXXrYJdZo74MU=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2f:74:46:b7:68:5b:60:d2:f3:6d:12:68:73:cb:90:a7
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d982791736cdddd1328d0dd0decae92c058d6f25
        Validity
            Not Before: Apr 13 14:01:11 2025 GMT
            Not After : Apr 14 14:01:11 2025 GMT
        Subject: CN=3b264b41e0591f1c6336da3d80448b7bb2e762d6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d1:2c:16:ef:48:1d:0e:71:37:9f:4c:c6:50:3d:
                    16:ce:36:48:2d:cf:7e:59:f8:1c:d0:8e:47:b0:3d:
                    39:f9:e5:e4:be:86:9a:9d:5a:48:fe:49:82:fa:d7:
                    07:0d:18:6b:a5:fe:a0:22:04:79:06:33:11:e3:63:
                    04:54:6f:d2:c9:3b:80:ae:5f:39:85:51:7b:f5:be:
                    a6:db:e6:20:85:e3:46:af:44:f2:8e:ee:1c:a0:05:
                    88:56:b8:50:04:4e:b8:70:fa:8d:e0:ed:1c:9d:d8:
                    64:80:68:a6:d3:cc:bb:64:43:80:f6:af:e3:b4:a3:
                    a8:94:e0:99:a7:97:b4:5e:79:5e:54:bd:d4:02:a9:
                    5e:79:f9:58:86:3a:ac:0e:a4:da:2b:38:c0:02:40:
                    51:c6:82:8e:81:85:5c:59:47:83:cd:44:fe:4e:44:
                    d9:5e:94:8f:66:55:a8:a1:2c:5c:c6:27:6d:86:6b:
                    27:0e:83:7b:13:18:c8:a6:9e:72:58:f9:3f:c2:7a:
                    64:37:e0:7d:f2:b0:e7:c8:ca:15:dd:4d:8d:83:6f:
                    9d:87:41:78:8f:ce:d4:07:44:41:91:b8:f5:03:18:
                    bd:1b:e6:34:fa:6f:f6:93:1b:7d:61:8b:9b:c7:89:
                    0c:c3:1c:f0:2a:60:b2:66:29:a6:c2:8c:0a:a5:04:
                    9a:27
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3B:26:4B:41:E0:59:1F:1C:63:36:DA:3D:80:44:8B:7B:B2:E7:62:D6
            X509v3 Authority Key Identifier:
                keyid:D9:82:79:17:36:CD:DD:D1:32:8D:0D:D0:DE:CA:E9:2C:05:8D:6F:25

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/2YJ5FzbN3dEyjQ3Q3srpLAWNbyU.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d0/c213d4-3e4a-49e6-9b1f-ca6a1cc81a22/1/2YJ5FzbN3dEyjQ3Q3srpLAWNbyU.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/d0/c213d4-3e4a-49e6-9b1f-ca6a1cc81a22/1/2YJ5FzbN3dEyjQ3Q3srpLAWNbyU.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         3b:7f:ec:66:ae:d9:0d:8a:b0:f0:39:75:8b:25:ce:ab:c1:62:
         7a:b2:3f:a1:99:2a:3a:83:da:cb:d5:6f:4a:56:a5:7e:a6:02:
         77:56:cd:46:65:96:dc:bf:3d:45:5a:9e:3d:d9:3f:97:e6:95:
         76:d5:5a:3b:c1:fd:e1:7f:2a:c8:9a:3e:28:0b:83:0d:15:eb:
         86:9c:e0:c0:c4:9b:1a:83:aa:34:c4:a5:6c:b8:6c:bf:4b:2a:
         08:87:7e:a5:78:a8:bc:81:08:a0:8e:95:94:71:a9:8a:b7:32:
         91:a4:c8:83:75:e8:39:dc:0e:18:c6:af:53:4b:85:f7:3e:09:
         ef:d9:ba:66:59:1d:35:ed:66:fc:40:65:1d:3a:73:ba:57:fc:
         f2:77:34:56:d2:94:c1:d3:2c:40:72:73:4f:09:3c:2a:07:a0:
         0d:76:55:69:ad:34:99:7e:ca:9e:03:de:99:52:48:f4:74:0d:
         f1:b1:9e:bc:ca:de:2c:8a:e4:fb:ae:f8:4f:35:b0:85:c8:bb:
         ad:0f:9b:71:58:40:a6:8c:90:97:8d:20:37:e4:37:6a:25:ed:
         8b:43:a9:1b:e9:a0:df:26:17:92:54:41:bd:99:b8:07:62:c4:
         9a:9e:c2:b5:67:e4:3b:3b:5b:6b:dd:2a:bf:25:2c:eb:cc:3a:
         5a:4e:cd:4d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 14 20:32:13 2025 by rpki-client on console.sobornost.net