Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f2/44c42c-1e68-4aab-839d-9593e3a43725/1/mQxLs441zXAyDreRUgxsrTSksnE.mft
File:                     mQxLs441zXAyDreRUgxsrTSksnE.mft (raw, json)
Hash identifier:          hLDzPAeBB0OsyflKKBEwrYMhlVo/oS1Q5YaJHeJ34iM=
Subject key identifier:   95:B4:76:07:29:38:61:B4:9D:AF:EC:67:01:85:D3:61:02:76:94:2F
Authority key identifier: 99:0C:4B:B3:8E:35:CD:70:32:0E:B7:91:52:0C:6C:AD:34:A4:B2:71
Certificate issuer:       /CN=990c4bb38e35cd70320eb791520c6cad34a4b271
Certificate serial:       01962F7424F41C4CB1573AF72625A202C3BB
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/mQxLs441zXAyDreRUgxsrTSksnE.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/f2/44c42c-1e68-4aab-839d-9593e3a43725/1/mQxLs441zXAyDreRUgxsrTSksnE.mft
Manifest number:          117E
Signing time:             Sun 13 Apr 2025 14:01:02 +0000
Manifest this update:     Sun 13 Apr 2025 14:01:02 +0000
Manifest next update:     Mon 14 Apr 2025 14:01:02 +0000
Files and hashes:         1: JtxbWq9ormth5LcKwN5vG4Q3apo.roa (hash: lQXeYw4zv4cIzlRUFSI2nS9Q4llqbkuImnCVCQNKPmM=)
                          2: mQxLs441zXAyDreRUgxsrTSksnE.crl (hash: 3VsYFcMMaSBC/aGHf6UZ47HyTYTGw2EqsDOnqPGAEKk=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2f:74:24:f4:1c:4c:b1:57:3a:f7:26:25:a2:02:c3:bb
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=990c4bb38e35cd70320eb791520c6cad34a4b271
        Validity
            Not Before: Apr 13 14:01:02 2025 GMT
            Not After : Apr 14 14:01:02 2025 GMT
        Subject: CN=95b47607293861b49dafec670185d3610276942f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:f8:08:4d:d3:72:fe:53:da:7a:f8:fc:ca:12:90:
                    81:d4:95:30:5d:6f:24:06:e7:8f:8f:db:bc:ad:f9:
                    b7:f9:43:f8:a6:d3:b2:ff:8c:00:15:4d:73:97:03:
                    41:71:f9:41:e8:f7:87:60:34:22:66:6d:c0:70:70:
                    3f:65:37:cf:fa:1a:d7:69:f3:d2:39:28:b0:46:3a:
                    f5:bc:5d:19:f4:7d:1d:7b:45:54:2b:97:39:a7:cf:
                    86:da:4c:64:55:82:04:39:17:00:53:50:e5:28:0f:
                    66:7f:c2:69:ba:6c:e5:ff:a1:5f:a1:85:df:6d:cf:
                    e3:f4:8d:b4:ae:5b:d0:b8:96:8d:1b:4c:43:88:24:
                    b3:08:fd:5d:3c:a4:dd:4c:56:06:d8:9f:ae:09:b2:
                    95:56:97:5b:05:9c:9f:05:92:8b:9e:14:4d:aa:3c:
                    6b:9e:97:9c:93:4a:5d:0c:a2:73:d3:3c:19:81:a7:
                    a0:e8:2b:a7:1e:af:c5:5c:95:be:44:38:d4:ee:59:
                    ee:17:48:e5:e9:be:7e:ad:6e:fd:e0:4f:d1:ae:72:
                    91:de:33:71:d3:3a:6e:fa:3e:bb:dd:37:11:00:d0:
                    41:92:75:30:e9:29:29:9b:37:20:b4:75:b7:d3:38:
                    05:a9:60:21:f7:a8:b4:fd:2a:0d:57:75:0a:d4:bc:
                    86:57
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                95:B4:76:07:29:38:61:B4:9D:AF:EC:67:01:85:D3:61:02:76:94:2F
            X509v3 Authority Key Identifier:
                keyid:99:0C:4B:B3:8E:35:CD:70:32:0E:B7:91:52:0C:6C:AD:34:A4:B2:71

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/mQxLs441zXAyDreRUgxsrTSksnE.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f2/44c42c-1e68-4aab-839d-9593e3a43725/1/mQxLs441zXAyDreRUgxsrTSksnE.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/f2/44c42c-1e68-4aab-839d-9593e3a43725/1/mQxLs441zXAyDreRUgxsrTSksnE.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         a2:28:2d:95:74:98:9c:d1:df:b6:d1:42:73:92:e9:77:4f:1a:
         db:c2:6a:29:9c:a2:5a:fa:58:ba:b5:92:06:e0:0e:e8:ab:86:
         5e:69:b0:6d:6b:0d:ab:37:c5:95:a4:ac:6b:f5:c0:2d:bb:c9:
         90:40:e6:c8:93:0a:8e:00:91:b3:3a:e7:23:7b:28:b5:4e:36:
         c5:4b:b9:a6:fc:37:60:6c:d1:3f:cb:4d:86:c8:ac:f0:b1:1c:
         da:d2:28:e6:e6:e0:81:fc:95:ed:a9:75:79:40:73:68:67:a8:
         ec:c5:cb:3e:1f:29:1e:b8:09:21:00:14:90:43:4a:dc:9f:17:
         0d:fe:63:71:fc:17:84:9d:3f:1a:74:8d:99:6b:3e:55:50:16:
         7e:95:08:a4:ae:c1:01:21:90:87:3c:c1:32:31:15:05:c4:56:
         96:1e:3e:fb:b7:08:72:99:7e:73:00:cb:45:29:3d:de:f0:1a:
         c6:8d:b0:0b:b9:6f:79:21:80:56:c0:5a:e9:86:ae:25:df:e2:
         d8:f0:3b:e0:24:f0:bb:0b:d7:0c:77:f9:27:73:92:bd:22:48:
         f9:d5:84:f5:52:69:0d:b3:8e:37:15:4d:01:f9:32:46:5a:ee:
         05:4b:7b:8c:40:f7:ab:f9:5e:25:61:f4:68:77:a1:05:02:6a:
         b3:a6:67:75
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZYvdCT0HEyxVzr3JiWiAsO7MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDk5MGM0YmIzOGUzNWNkNzAzMjBlYjc5MTUyMGM2Y2FkMzRh
NGIyNzEwHhcNMjUwNDEzMTQwMTAyWhcNMjUwNDE0MTQwMTAyWjAzMTEwLwYDVQQD
Eyg5NWI0NzYwNzI5Mzg2MWI0OWRhZmVjNjcwMTg1ZDM2MTAyNzY5NDJmMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA+AhN03L+U9p6+PzKEpCB1JUwXW8k
BuePj9u8rfm3+UP4ptOy/4wAFU1zlwNBcflB6PeHYDQiZm3AcHA/ZTfP+hrXafPS
OSiwRjr1vF0Z9H0de0VUK5c5p8+G2kxkVYIEORcAU1DlKA9mf8Jpumzl/6FfoYXf
bc/j9I20rlvQuJaNG0xDiCSzCP1dPKTdTFYG2J+uCbKVVpdbBZyfBZKLnhRNqjxr
npeck0pdDKJz0zwZgaeg6CunHq/FXJW+RDjU7lnuF0jl6b5+rW794E/RrnKR3jNx
0zpu+j673TcRANBBknUw6SkpmzcgtHW30zgFqWAh96i0/SoNV3UK1LyGVwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFJW0dgcpOGG0na/sZwGF02ECdpQvMB8GA1UdIwQY
MBaAFJkMS7OONc1wMg63kVIMbK00pLJxMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvbVF4THM0NDF6WEF5RHJlUlVneHNyVFNrc25FLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mMi80NGM0MmMtMWU2OC00YWFiLTgzOWQt
OTU5M2UzYTQzNzI1LzEvbVF4THM0NDF6WEF5RHJlUlVneHNyVFNrc25FLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9mMi80NGM0MmMtMWU2OC00YWFiLTgzOWQtOTU5M2UzYTQzNzI1
LzEvbVF4THM0NDF6WEF5RHJlUlVneHNyVFNrc25FLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAoigtlXSY
nNHfttFCc5Lpd08a28JqKZyiWvpYurWSBuAO6KuGXmmwbWsNqzfFlaSsa/XALbvJ
kEDmyJMKjgCRszrnI3sotU42xUu5pvw3YGzRP8tNhsis8LEc2tIo5ubggfyV7al1
eUBzaGeo7MXLPh8pHrgJIQAUkENK3J8XDf5jcfwXhJ0/GnSNmWs+VVAWfpUIpK7B
ASGQhzzBMjEVBcRWlh4++7cIcpl+cwDLRSk93vAaxo2wC7lveSGAVsBa6YauJd/i
2PA74CTwuwvXDHf5J3OSvSJI+dWE9VJpDbOONxVNAfkyRlruBUt7jED3q/leJWH0
aHehBQJqs6ZndQ==
-----END CERTIFICATE-----
Generated at Mon Apr 14 20:32:45 2025 by rpki-client on console.sobornost.net