Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/db/36e79c-8472-467b-9c14-8281f77ebd22/1/bVbe-EWP2Osu11SsLpDTUFoyqoI.mft
File:                     bVbe-EWP2Osu11SsLpDTUFoyqoI.mft (raw, json)
Hash identifier:          dF80HLp68zlyTEdP1pSt+FnwS0ECSzzz5mN58PdyOfY=
Subject key identifier:   12:EC:13:88:58:0C:62:86:F2:C3:66:72:C1:52:4B:BD:80:27:50:31
Authority key identifier: 6D:56:DE:F8:45:8F:D8:EB:2E:D7:54:AC:2E:90:D3:50:5A:32:AA:82
Certificate issuer:       /CN=6d56def8458fd8eb2ed754ac2e90d3505a32aa82
Certificate serial:       01962F3D698E4F6EC53E59B36B69E75618DC
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/bVbe-EWP2Osu11SsLpDTUFoyqoI.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/db/36e79c-8472-467b-9c14-8281f77ebd22/1/bVbe-EWP2Osu11SsLpDTUFoyqoI.mft
Manifest number:          04AC
Signing time:             Sun 13 Apr 2025 13:01:15 +0000
Manifest this update:     Sun 13 Apr 2025 13:01:15 +0000
Manifest next update:     Mon 14 Apr 2025 13:01:15 +0000
Files and hashes:         1: SBebfO-JEiTLVku7wA-Q7NJY9QI.roa (hash: iiLUe1+ewBfgZMamdKFXLL2gnvfWWm7luTyA1wiqfW4=)
                          2: bVbe-EWP2Osu11SsLpDTUFoyqoI.crl (hash: /qsJRp5gagUghm8wkUDcuAj7T96wkClHsOekpfbRYlc=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2f:3d:69:8e:4f:6e:c5:3e:59:b3:6b:69:e7:56:18:dc
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6d56def8458fd8eb2ed754ac2e90d3505a32aa82
        Validity
            Not Before: Apr 13 13:01:15 2025 GMT
            Not After : Apr 14 13:01:15 2025 GMT
        Subject: CN=12ec1388580c6286f2c36672c1524bbd80275031
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c8:3f:b5:70:ac:49:08:2f:bd:f0:29:e3:76:a5:
                    c8:a0:d7:88:1d:07:ea:bf:90:18:d2:db:23:63:75:
                    52:c5:ef:96:ca:54:aa:72:8a:2a:fd:4d:7d:11:9a:
                    7c:54:6c:cd:1b:d1:46:6c:f8:a1:7c:94:a5:ff:30:
                    48:13:6a:f0:62:be:33:a4:0e:87:b1:0d:d6:71:83:
                    5d:dd:e1:ba:6f:80:6d:6b:f0:18:61:52:c7:b9:4d:
                    55:45:26:12:43:c1:bb:ec:3b:8e:7e:43:b2:05:f5:
                    47:c0:8c:65:f5:dc:8e:e6:4d:48:da:28:e2:92:7c:
                    bd:5d:2c:d1:b5:9d:43:60:03:5c:c0:50:41:03:1c:
                    5f:ac:ce:46:6d:d3:28:e8:c5:2c:fc:81:12:ff:08:
                    e3:4b:11:1d:48:8a:14:f1:72:e6:db:17:f9:e7:74:
                    a6:d2:1d:06:72:3e:bc:2b:fd:94:67:7a:7c:ab:6a:
                    57:73:c7:3f:da:47:68:4e:28:18:47:39:bf:7e:36:
                    85:e8:dc:f7:99:68:d4:d5:b4:5f:7b:2f:a2:85:80:
                    e0:29:32:47:67:d4:1e:7c:33:13:79:08:ed:8d:c1:
                    c4:5a:c0:64:29:54:90:69:ff:b8:90:08:e7:6e:d1:
                    3c:40:2d:ec:71:14:cb:b3:ec:ac:df:0a:9e:04:8e:
                    c4:df
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                12:EC:13:88:58:0C:62:86:F2:C3:66:72:C1:52:4B:BD:80:27:50:31
            X509v3 Authority Key Identifier:
                keyid:6D:56:DE:F8:45:8F:D8:EB:2E:D7:54:AC:2E:90:D3:50:5A:32:AA:82

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/bVbe-EWP2Osu11SsLpDTUFoyqoI.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/db/36e79c-8472-467b-9c14-8281f77ebd22/1/bVbe-EWP2Osu11SsLpDTUFoyqoI.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/db/36e79c-8472-467b-9c14-8281f77ebd22/1/bVbe-EWP2Osu11SsLpDTUFoyqoI.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         90:26:f3:35:87:0d:a6:9d:5d:7d:c9:17:43:9b:26:dd:f4:e6:
         71:73:44:7c:08:2b:4c:66:13:06:65:b5:c6:eb:3d:d3:98:00:
         80:57:a7:0c:66:a7:96:f6:3d:5c:a1:13:6e:e4:4f:9d:9b:a3:
         71:b4:5e:72:70:05:34:d3:b5:44:c1:60:35:eb:17:14:2d:e9:
         0a:4d:75:5e:69:7d:f5:9e:2c:70:96:61:a4:26:4d:cb:26:28:
         57:00:42:8f:a4:e0:d6:72:89:e5:66:cd:90:6b:57:e9:5c:2b:
         b8:df:0a:11:42:38:17:97:b2:5a:63:7b:9c:42:2c:3d:93:dc:
         8c:6e:6f:c6:46:4d:02:b0:41:95:40:9c:5d:c3:41:6f:bc:82:
         5c:cd:83:c3:e7:85:b5:fa:c0:77:3f:09:15:25:15:eb:f4:18:
         f7:b3:d5:04:1b:e6:ce:ad:48:57:cb:03:19:22:95:45:52:23:
         08:89:71:b0:07:69:ce:84:e0:6f:2a:9c:dd:86:25:3f:91:cf:
         6f:db:4a:48:b4:57:e8:41:d1:76:15:ef:0b:2d:08:d8:2d:b3:
         c8:7c:ac:22:7c:e5:5f:5c:c7:0d:60:12:d5:48:ab:bd:ea:27:
         8d:68:64:92:6c:57:06:cb:a3:77:6d:3f:7f:84:61:61:cd:73:
         0e:bc:cf:a6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 14 20:32:25 2025 by rpki-client on console.sobornost.net