Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e7/73f739-81b8-4511-81a1-b3a1680320ad/1/LwvxBgr5ORfa-1aagMzsnbCKdsU.mft
File:                     LwvxBgr5ORfa-1aagMzsnbCKdsU.mft (raw, json)
Hash identifier:          gYC83KQc4kNU5aw1pHiBWAZWJhgJuciRKEiimDVk71A=
Subject key identifier:   F9:33:7B:6D:B3:D3:A4:CF:00:DA:7A:07:BE:55:7B:06:CF:BF:89:27
Authority key identifier: 2F:0B:F1:06:0A:F9:39:17:DA:FB:56:9A:80:CC:EC:9D:B0:8A:76:C5
Certificate issuer:       /CN=2f0bf1060af93917dafb569a80ccec9db08a76c5
Certificate serial:       01962ECFA2C294E3244A61575DC80FA3615D
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/LwvxBgr5ORfa-1aagMzsnbCKdsU.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/e7/73f739-81b8-4511-81a1-b3a1680320ad/1/LwvxBgr5ORfa-1aagMzsnbCKdsU.mft
Manifest number:          1025
Signing time:             Sun 13 Apr 2025 11:01:21 +0000
Manifest this update:     Sun 13 Apr 2025 11:01:21 +0000
Manifest next update:     Mon 14 Apr 2025 11:01:21 +0000
Files and hashes:         1: LwvxBgr5ORfa-1aagMzsnbCKdsU.crl (hash: Dnbr6V1JDLihGYWBtxVTAgEZH1ANr9GHfsQ7KXRnn8A=)
                          2: gtQV_zwRPLHuRPfREjsm-_muUpg.roa (hash: a0Tj7X+5b5MFb1rO/5kUp09wUYkeR9dP9zow62nRTzU=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2e:cf:a2:c2:94:e3:24:4a:61:57:5d:c8:0f:a3:61:5d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2f0bf1060af93917dafb569a80ccec9db08a76c5
        Validity
            Not Before: Apr 13 11:01:21 2025 GMT
            Not After : Apr 14 11:01:21 2025 GMT
        Subject: CN=f9337b6db3d3a4cf00da7a07be557b06cfbf8927
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e7:98:26:8c:a5:2f:60:1e:53:27:01:11:50:d9:
                    87:2f:81:26:49:cb:0e:54:1d:a9:3d:af:64:ce:bd:
                    e0:15:92:1b:c1:90:4c:30:29:d2:2c:d7:48:29:de:
                    10:ba:40:12:73:5f:b2:ab:11:db:a7:54:d6:38:64:
                    65:60:4f:02:a1:f6:9d:50:b7:e8:6e:c4:d1:b6:e7:
                    2e:15:e5:e9:f0:b4:4f:f3:f8:1c:a2:08:26:7d:0d:
                    10:a6:fa:2e:a2:75:42:19:c2:e0:ac:80:a8:07:ef:
                    8f:eb:f5:b6:7b:99:7d:fd:75:df:c1:38:70:c1:eb:
                    a7:db:ed:d2:12:a6:83:97:b0:bd:26:55:b3:a1:98:
                    74:52:c5:02:e5:c2:1e:5b:9d:13:19:54:ee:d6:6f:
                    22:a3:df:a8:dd:78:26:65:c3:ad:c4:a6:25:58:40:
                    a3:e6:20:f7:90:0c:ec:64:b0:45:22:76:f3:54:06:
                    82:e6:da:d1:a9:0d:76:de:a6:bf:8e:64:84:fb:35:
                    34:e1:5f:66:ed:92:09:29:5b:fb:3d:64:2f:51:46:
                    67:c1:f0:b6:f4:7f:8b:db:c1:71:74:96:83:49:ce:
                    5c:1b:c7:1a:a2:0c:52:13:bb:f6:86:3a:d1:1a:32:
                    67:37:95:7b:ef:41:7f:14:95:cc:42:18:80:15:fe:
                    23:23
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F9:33:7B:6D:B3:D3:A4:CF:00:DA:7A:07:BE:55:7B:06:CF:BF:89:27
            X509v3 Authority Key Identifier:
                keyid:2F:0B:F1:06:0A:F9:39:17:DA:FB:56:9A:80:CC:EC:9D:B0:8A:76:C5

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/LwvxBgr5ORfa-1aagMzsnbCKdsU.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e7/73f739-81b8-4511-81a1-b3a1680320ad/1/LwvxBgr5ORfa-1aagMzsnbCKdsU.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/e7/73f739-81b8-4511-81a1-b3a1680320ad/1/LwvxBgr5ORfa-1aagMzsnbCKdsU.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         86:e7:9e:f2:77:99:a8:b1:31:1a:04:86:e3:40:8a:20:1b:85:
         d8:7d:b0:f1:09:6a:b2:af:f1:a5:6e:32:d2:a0:6c:dc:ea:fa:
         dc:d5:e3:6f:1c:72:d9:34:df:97:07:e9:c3:fb:13:ce:dd:93:
         8f:c3:18:4f:ac:31:53:da:c4:b3:d9:20:b2:af:f9:6e:95:a6:
         9f:54:32:37:62:ce:fd:05:47:e6:28:7d:4f:ac:7a:29:17:79:
         b7:45:a6:29:7d:2b:f8:5e:1c:82:d3:4f:5f:ad:05:e5:cd:b3:
         3d:8e:ac:dd:04:3c:b3:f7:ad:85:93:f3:01:18:97:dd:13:4a:
         a2:46:c9:02:f0:9e:db:6a:19:13:14:bd:a1:4f:83:45:5b:eb:
         99:d6:ae:4d:5a:a3:a0:f8:32:cc:08:e6:0d:29:21:2e:16:2c:
         cd:fc:a4:3a:c6:de:f5:ed:09:c7:dd:e4:97:ad:6a:f6:9e:c4:
         81:15:55:f9:6b:4d:f6:0c:d3:75:ee:8e:a0:aa:78:c3:43:86:
         19:30:8e:f9:2e:96:20:77:fc:b2:4a:38:55:fd:e7:99:9b:65:
         53:e0:58:12:7f:4e:f6:21:1f:28:55:b8:d2:e0:f2:89:66:bc:
         60:0b:95:f6:ba:8a:a9:31:d6:78:97:6a:53:2d:4c:e7:e8:f0:
         c3:d5:9a:d5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 14 20:32:33 2025 by rpki-client on console.sobornost.net