Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ef/287998-c47b-4971-98f1-51e995137677/1/m5baKyu6VqAZuAS3zQDlFDcJd6U.mft
File:                     m5baKyu6VqAZuAS3zQDlFDcJd6U.mft (raw, json)
Hash identifier:          v4MFARH2G8RQfDBL/tZVY/hsitnqNiok0grvJxqNklI=
Subject key identifier:   4E:0F:8A:83:D0:CF:27:CC:83:E7:5A:46:13:8C:EE:7F:2B:10:D6:EC
Authority key identifier: 9B:96:DA:2B:2B:BA:56:A0:19:B8:04:B7:CD:00:E5:14:37:09:77:A5
Certificate issuer:       /CN=9b96da2b2bba56a019b804b7cd00e514370977a5
Certificate serial:       019546D9FD0BAEB312F7859886CA39A483C1
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/m5baKyu6VqAZuAS3zQDlFDcJd6U.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/ef/287998-c47b-4971-98f1-51e995137677/1/m5baKyu6VqAZuAS3zQDlFDcJd6U.mft
Manifest number:          06FD
Signing time:             Thu 27 Feb 2025 10:00:45 +0000
Manifest this update:     Thu 27 Feb 2025 10:00:45 +0000
Manifest next update:     Fri 28 Feb 2025 10:00:45 +0000
Files and hashes:         1: m5baKyu6VqAZuAS3zQDlFDcJd6U.crl (hash: JKcLHAUklh74up2d14/dmcS11ESQ5wO8CCoYAOgqy/c=)
                          2: w87Aon_q3Dh_buadzZYFIwp5KBk.roa (hash: 7IIsdhKEICY+k9oemxpxzAnNC22IAqB5l+eqfg/W2eE=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:95:46:d9:fd:0b:ae:b3:12:f7:85:98:86:ca:39:a4:83:c1
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9b96da2b2bba56a019b804b7cd00e514370977a5
        Validity
            Not Before: Feb 27 10:00:45 2025 GMT
            Not After : Feb 28 10:00:45 2025 GMT
        Subject: CN=4e0f8a83d0cf27cc83e75a46138cee7f2b10d6ec
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:aa:4f:f6:14:11:b3:25:02:ad:82:e1:a1:88:7e:
                    ac:55:4a:0c:fa:38:13:aa:dd:e4:85:a7:bb:08:71:
                    1d:5f:8e:31:e1:51:88:f8:a3:fa:a8:90:f3:d0:c0:
                    f9:3b:0a:39:3e:50:dc:63:59:91:c0:2a:3b:85:13:
                    c2:3a:c3:1f:ed:64:e0:68:03:e7:ae:a4:cf:b0:2e:
                    d4:9d:29:97:8d:53:5c:bb:0e:6b:52:c6:c3:d7:f9:
                    de:68:5d:dc:33:2b:ad:21:30:3a:e0:5a:37:0d:33:
                    f5:71:ba:ae:7a:91:44:1c:7f:37:fe:fa:45:3a:f0:
                    77:25:d6:0c:f4:69:07:a5:b2:71:bd:f5:91:4d:7c:
                    20:c4:e0:bb:dc:fb:ff:08:3b:7f:b6:52:4c:62:be:
                    c4:99:a5:09:57:1d:7a:0c:ec:40:92:90:e1:87:dd:
                    08:bd:1a:51:6a:69:e2:c3:b4:66:66:e3:b2:01:5a:
                    44:4f:b5:ed:7c:4f:84:89:00:cd:4f:3d:f4:c9:5d:
                    e3:59:01:ad:74:22:0b:12:8d:0e:2f:71:26:f4:d6:
                    d2:f0:13:3b:a2:0e:50:b2:9d:c7:ef:11:f5:bf:3f:
                    f4:49:3d:f8:0b:9f:a3:d5:96:7b:54:58:78:32:66:
                    62:ae:7f:e2:4a:18:aa:0d:01:e7:85:ed:3c:75:1f:
                    c8:c1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4E:0F:8A:83:D0:CF:27:CC:83:E7:5A:46:13:8C:EE:7F:2B:10:D6:EC
            X509v3 Authority Key Identifier:
                keyid:9B:96:DA:2B:2B:BA:56:A0:19:B8:04:B7:CD:00:E5:14:37:09:77:A5

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/m5baKyu6VqAZuAS3zQDlFDcJd6U.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ef/287998-c47b-4971-98f1-51e995137677/1/m5baKyu6VqAZuAS3zQDlFDcJd6U.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/ef/287998-c47b-4971-98f1-51e995137677/1/m5baKyu6VqAZuAS3zQDlFDcJd6U.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         44:87:17:06:7f:75:29:1c:40:df:ee:26:df:c1:b3:c9:23:27:
         0b:6b:af:3b:1b:c4:b5:8c:4a:b0:ae:4b:ac:81:3b:d9:bd:77:
         5f:18:cb:9a:24:46:bd:78:36:46:e0:1e:55:73:8d:ce:9c:19:
         f7:c0:13:fb:c9:a7:7f:84:7b:7c:af:44:00:ca:27:0b:ea:e9:
         e6:4e:51:59:e7:25:67:48:74:34:33:52:3f:32:86:06:b1:98:
         da:e7:3f:29:0e:4a:1a:1d:56:35:a7:a3:87:7a:51:e3:cb:72:
         f6:f8:35:36:21:9e:3e:b5:97:34:18:2d:30:8a:0f:c1:40:73:
         2b:34:3c:74:35:77:41:5f:cd:48:eb:0f:64:9b:20:cf:27:5e:
         9c:bd:b9:8a:3f:e0:e1:35:12:e4:52:07:71:5c:61:ac:e6:24:
         8e:cb:a0:3d:28:fe:dd:3e:d8:b2:f1:4c:45:b2:ca:10:2e:85:
         df:03:57:af:1d:4c:e0:fc:2a:33:74:d3:47:ba:f9:17:dd:80:
         7e:ee:ba:a8:94:3c:2d:09:e2:95:f8:c8:12:e0:9a:f6:70:c4:
         ee:90:7d:b0:89:88:68:3c:8d:bf:57:d0:41:5a:6f:86:5b:b0:
         99:03:d0:6c:58:ec:c6:c6:4c:77:cb:b3:73:51:1a:fa:3b:5b:
         c1:36:7c:39
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZVG2f0LrrMS94WYhso5pIPBMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDliOTZkYTJiMmJiYTU2YTAxOWI4MDRiN2NkMDBlNTE0Mzcw
OTc3YTUwHhcNMjUwMjI3MTAwMDQ1WhcNMjUwMjI4MTAwMDQ1WjAzMTEwLwYDVQQD
Eyg0ZTBmOGE4M2QwY2YyN2NjODNlNzVhNDYxMzhjZWU3ZjJiMTBkNmVjMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqk/2FBGzJQKtguGhiH6sVUoM+jgT
qt3khae7CHEdX44x4VGI+KP6qJDz0MD5Owo5PlDcY1mRwCo7hRPCOsMf7WTgaAPn
rqTPsC7UnSmXjVNcuw5rUsbD1/neaF3cMyutITA64Fo3DTP1cbquepFEHH83/vpF
OvB3JdYM9GkHpbJxvfWRTXwgxOC73Pv/CDt/tlJMYr7EmaUJVx16DOxAkpDhh90I
vRpRamniw7RmZuOyAVpET7XtfE+EiQDNTz30yV3jWQGtdCILEo0OL3Em9NbS8BM7
og5Qsp3H7xH1vz/0ST34C5+j1ZZ7VFh4MmZirn/iShiqDQHnhe08dR/IwQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFE4PioPQzyfMg+daRhOM7n8rENbsMB8GA1UdIwQY
MBaAFJuW2isrulagGbgEt80A5RQ3CXelMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvbTViYUt5dTZWcUFadUFTM3pRRGxGRGNKZDZVLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lZi8yODc5OTgtYzQ3Yi00OTcxLTk4ZjEt
NTFlOTk1MTM3Njc3LzEvbTViYUt5dTZWcUFadUFTM3pRRGxGRGNKZDZVLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9lZi8yODc5OTgtYzQ3Yi00OTcxLTk4ZjEtNTFlOTk1MTM3Njc3
LzEvbTViYUt5dTZWcUFadUFTM3pRRGxGRGNKZDZVLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEARIcXBn91
KRxA3+4m38GzySMnC2uvOxvEtYxKsK5LrIE72b13XxjLmiRGvXg2RuAeVXONzpwZ
98AT+8mnf4R7fK9EAMonC+rp5k5RWeclZ0h0NDNSPzKGBrGY2uc/KQ5KGh1WNaej
h3pR48ty9vg1NiGePrWXNBgtMIoPwUBzKzQ8dDV3QV/NSOsPZJsgzydenL25ij/g
4TUS5FIHcVxhrOYkjsugPSj+3T7YsvFMRbLKEC6F3wNXrx1M4PwqM3TTR7r5F92A
fu66qJQ8LQnilfjIEuCa9nDE7pB9sImIaDyNv1fQQVpvhluwmQPQbFjsxsZMd8uz
c1Ea+jtbwTZ8OQ==
-----END CERTIFICATE-----
Generated at Sat Mar 8 04:56:09 2025 by rpki-client on console.sobornost.net