Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e8/b659fc-6b9b-4847-b6a3-4660fad83985/1/7D09fly_GK9mt_W0peCsGezTmHY.mft
File:                     7D09fly_GK9mt_W0peCsGezTmHY.mft (raw, json)
Hash identifier:          rSwRIQmsTTun2fQst5eOd/mDg3cMaNcPo/Q+LuDpiVI=
Subject key identifier:   BB:74:E7:AF:4A:EC:D7:6C:F0:8F:7C:B6:DA:C8:78:26:1A:06:F2:FC
Authority key identifier: EC:3D:3D:7E:5C:BF:18:AF:66:B7:F5:B4:A5:E0:AC:19:EC:D3:98:76
Certificate issuer:       /CN=ec3d3d7e5cbf18af66b7f5b4a5e0ac19ecd39876
Certificate serial:       01962F0655A39505577E6896FAA4FF429C15
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/7D09fly_GK9mt_W0peCsGezTmHY.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/e8/b659fc-6b9b-4847-b6a3-4660fad83985/1/7D09fly_GK9mt_W0peCsGezTmHY.mft
Manifest number:          14E8
Signing time:             Sun 13 Apr 2025 12:01:06 +0000
Manifest this update:     Sun 13 Apr 2025 12:01:06 +0000
Manifest next update:     Mon 14 Apr 2025 12:01:06 +0000
Files and hashes:         1: 7D09fly_GK9mt_W0peCsGezTmHY.crl (hash: PB7nEaSkq66JWKS8b2y0n+0IhSuP/8Cx+QZ26NpjNv4=)
                          2: DJI5pA0yQdHfWf9YZsCq7SLW83k.roa (hash: aYlNDPO2QXpilHLu8WGoR0IYFB4fHF6uZQ2LQMfMdjM=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2f:06:55:a3:95:05:57:7e:68:96:fa:a4:ff:42:9c:15
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=ec3d3d7e5cbf18af66b7f5b4a5e0ac19ecd39876
        Validity
            Not Before: Apr 13 12:01:06 2025 GMT
            Not After : Apr 14 12:01:06 2025 GMT
        Subject: CN=bb74e7af4aecd76cf08f7cb6dac878261a06f2fc
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a5:1a:2a:b4:db:8a:8e:54:ae:8e:ee:2a:c7:ad:
                    92:4e:60:2b:66:f9:31:d9:f1:f5:a4:22:f5:cd:20:
                    2a:1f:1f:47:83:d3:36:3d:59:b1:7a:ad:2f:09:6e:
                    5b:be:cb:ec:37:bf:f2:f0:15:41:8f:db:7a:7b:13:
                    44:b2:95:fe:8e:df:83:40:7c:06:77:6d:58:5e:b7:
                    6a:45:f4:9d:7b:d9:bb:2a:f5:ad:90:2e:c8:a4:57:
                    d3:f0:27:fb:59:17:46:ac:51:e8:52:e3:f2:ae:c1:
                    b8:53:11:50:6e:f2:ce:d4:d5:c6:39:90:52:bc:3e:
                    b7:66:dd:7d:5e:6a:fb:6e:ad:16:68:c7:74:7b:d5:
                    c4:4e:ba:1e:4c:bf:ca:16:7d:f5:99:29:98:13:89:
                    2e:df:c9:a7:7b:29:83:ac:6e:20:30:15:01:8a:b0:
                    92:3e:8c:33:3c:56:f2:fa:3d:5a:b7:61:a5:3c:60:
                    a7:15:a0:38:5f:06:59:9f:74:01:50:de:62:dc:a0:
                    62:1f:98:5f:64:43:b2:0c:d4:1b:bc:77:35:68:a5:
                    fe:1e:22:e2:27:88:f1:3b:5c:2a:b4:1c:d5:f7:51:
                    e1:0a:af:c6:a1:72:48:29:4d:71:54:54:17:2a:7e:
                    77:a7:a8:f9:63:c8:3c:44:e5:d4:14:59:fe:9d:65:
                    f8:55
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BB:74:E7:AF:4A:EC:D7:6C:F0:8F:7C:B6:DA:C8:78:26:1A:06:F2:FC
            X509v3 Authority Key Identifier:
                keyid:EC:3D:3D:7E:5C:BF:18:AF:66:B7:F5:B4:A5:E0:AC:19:EC:D3:98:76

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/7D09fly_GK9mt_W0peCsGezTmHY.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e8/b659fc-6b9b-4847-b6a3-4660fad83985/1/7D09fly_GK9mt_W0peCsGezTmHY.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/e8/b659fc-6b9b-4847-b6a3-4660fad83985/1/7D09fly_GK9mt_W0peCsGezTmHY.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         62:28:fb:f8:45:ad:be:2c:51:90:04:ab:7e:1e:44:09:80:5b:
         9f:a5:7e:16:30:09:27:be:e3:bb:23:88:ed:1f:ba:f1:4d:de:
         17:6d:01:43:80:b5:80:b0:23:d8:78:ee:ee:06:ef:16:91:d9:
         41:cd:d3:ca:61:44:28:59:86:54:95:a6:4f:d5:c1:de:9c:ed:
         05:4f:c4:da:7c:29:10:3b:b7:78:6a:4a:9d:36:e4:61:5c:f6:
         87:41:57:43:3e:a8:fe:b0:1d:5a:1d:7d:78:af:ee:02:16:ba:
         b0:4e:ea:73:cf:83:5f:ca:97:42:e4:c7:d6:63:ee:7f:76:27:
         98:67:ec:b1:d3:4e:13:83:52:31:e6:e6:6e:b3:dd:2c:ba:08:
         bf:c3:53:ed:49:f9:36:40:00:e9:e9:26:48:81:79:43:3d:00:
         d4:1e:10:8d:ce:5e:21:0d:0e:28:1d:a7:d3:76:90:c7:f4:8b:
         87:d0:5a:b7:62:46:ee:a3:7d:23:ed:e2:58:a7:f8:3c:cb:fe:
         d2:8d:5a:ef:4e:7e:75:d1:86:37:fa:bf:b6:66:a6:8d:de:54:
         33:90:ae:2b:b0:46:2e:8d:0f:04:cc:92:90:5b:8d:66:fc:3b:
         1c:a9:ed:6a:1e:54:ef:9e:95:5a:a3:5a:44:c0:bd:83:53:64:
         39:86:cf:f7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 14 20:32:33 2025 by rpki-client on console.sobornost.net