Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f3/4e8d35-6f4f-4523-ab31-0e1a0cc83b19/1/l7v--RgT0Oj37t9o7VaefP3fDPA.mft
File:                     l7v--RgT0Oj37t9o7VaefP3fDPA.mft (raw, json)
Hash identifier:          5Q8mSrUspZbU8Nxbic/zKwcJswPHkuccXYgMVOL17zo=
Subject key identifier:   EF:91:0F:0D:51:C2:07:6B:9D:D2:8E:F3:72:72:5E:1F:A3:B6:3C:E1
Authority key identifier: 97:BB:FE:F9:18:13:D0:E8:F7:EE:DF:68:ED:56:9E:7C:FD:DF:0C:F0
Certificate issuer:       /CN=97bbfef91813d0e8f7eedf68ed569e7cfddf0cf0
Certificate serial:       01962FAB487A6E8598AC06DADC708210433C
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/l7v--RgT0Oj37t9o7VaefP3fDPA.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/f3/4e8d35-6f4f-4523-ab31-0e1a0cc83b19/1/l7v--RgT0Oj37t9o7VaefP3fDPA.mft
Manifest number:          14EA
Signing time:             Sun 13 Apr 2025 15:01:16 +0000
Manifest this update:     Sun 13 Apr 2025 15:01:16 +0000
Manifest next update:     Mon 14 Apr 2025 15:01:16 +0000
Files and hashes:         1: 1-sigTPJAC1PNSATn-sK6lRfTKyQ.roa (hash: jOHa8XaZlnY37LiuZhg9CFenWtMsktZUfeaX7d5RSx0=)
                          2: l7v--RgT0Oj37t9o7VaefP3fDPA.crl (hash: zcrlwFRFKE9Q8goDzBQAjxFPTOrYq5qS1AAj3AYhXFQ=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2f:ab:48:7a:6e:85:98:ac:06:da:dc:70:82:10:43:3c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=97bbfef91813d0e8f7eedf68ed569e7cfddf0cf0
        Validity
            Not Before: Apr 13 15:01:16 2025 GMT
            Not After : Apr 14 15:01:16 2025 GMT
        Subject: CN=ef910f0d51c2076b9dd28ef372725e1fa3b63ce1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a0:34:cc:02:ef:d4:fd:af:bb:03:c5:8a:de:9d:
                    c0:07:c2:ce:13:0f:a0:7a:93:f5:64:dd:fd:2f:54:
                    72:dd:1c:65:f9:f2:07:bd:cb:54:52:a1:64:cf:2c:
                    7c:94:e2:14:eb:13:35:3a:a3:34:65:72:3f:45:4b:
                    40:7a:c7:2a:56:6a:26:30:ee:9f:35:b5:66:51:8d:
                    01:d9:d7:de:74:f2:5c:78:06:fa:0c:55:90:93:ea:
                    ad:b3:05:d7:58:fd:6b:31:1d:c2:c5:31:22:70:d5:
                    9d:0b:d9:fe:f5:47:bf:75:78:09:48:72:9d:ed:8d:
                    d8:10:c3:6d:c6:5f:34:4e:ce:83:dc:82:91:76:0f:
                    8e:c0:23:78:3b:7a:67:12:dc:5d:54:02:c5:95:2e:
                    51:33:9b:12:9b:6e:82:0a:41:ea:fa:88:ed:80:2a:
                    41:b9:a8:bb:ae:eb:82:f6:cc:3c:e9:55:71:03:b0:
                    f8:bf:e7:98:c5:df:21:03:fb:ec:45:38:18:69:08:
                    2f:88:4d:f0:53:67:26:df:4e:47:3c:87:95:e8:c9:
                    ef:ef:e3:d1:2b:d7:4b:3b:81:04:31:fb:3e:42:3e:
                    7e:aa:bc:4c:21:8e:63:b8:ab:a7:b1:ec:b2:93:eb:
                    76:6b:2f:08:bf:b1:7d:ec:f9:1d:27:95:2f:6a:71:
                    8a:97
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                EF:91:0F:0D:51:C2:07:6B:9D:D2:8E:F3:72:72:5E:1F:A3:B6:3C:E1
            X509v3 Authority Key Identifier:
                keyid:97:BB:FE:F9:18:13:D0:E8:F7:EE:DF:68:ED:56:9E:7C:FD:DF:0C:F0

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/l7v--RgT0Oj37t9o7VaefP3fDPA.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f3/4e8d35-6f4f-4523-ab31-0e1a0cc83b19/1/l7v--RgT0Oj37t9o7VaefP3fDPA.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/f3/4e8d35-6f4f-4523-ab31-0e1a0cc83b19/1/l7v--RgT0Oj37t9o7VaefP3fDPA.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         4e:92:7d:54:dd:79:54:bf:31:25:c8:a0:f0:21:60:2e:87:1c:
         7f:6b:d0:5f:71:53:a4:4f:0a:1a:44:7c:43:fc:23:05:7e:ab:
         a0:88:81:96:61:d8:70:ac:43:4f:e7:d8:ca:ec:bd:33:57:7c:
         44:49:ec:0d:4f:63:37:f6:4d:bf:ac:24:6b:07:8e:24:b9:fd:
         48:88:81:27:e9:93:09:d4:c3:a7:de:ba:14:55:fb:50:03:08:
         3e:e4:2b:82:dd:48:40:5e:cb:0c:a2:d8:97:10:d2:35:57:f2:
         fe:00:d1:3d:8c:03:b9:26:d6:43:e3:50:fe:a5:4d:c3:81:6d:
         bd:e9:d6:2f:39:e0:0d:22:57:ed:d1:2c:94:37:4f:a3:bd:5f:
         81:f5:7b:58:01:86:97:2b:e1:5f:d1:ff:23:de:80:88:ac:cc:
         ba:eb:6e:65:52:d8:8c:39:59:84:67:9a:d9:c4:b8:26:31:58:
         dc:f3:f7:08:d7:74:43:94:ec:03:13:72:da:80:ed:1c:4d:01:
         a4:6c:b7:0c:81:1b:ee:e2:96:07:e1:9e:1f:c4:34:ca:c4:43:
         3c:f5:a6:e1:d9:40:88:7f:d1:53:72:c7:97:dc:a9:70:e9:ba:
         7c:87:87:fa:8d:c1:04:6a:56:ea:72:c0:24:45:42:aa:76:9e:
         d5:f8:2a:c4
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZYvq0h6boWYrAba3HCCEEM8MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDk3YmJmZWY5MTgxM2QwZThmN2VlZGY2OGVkNTY5ZTdjZmRk
ZjBjZjAwHhcNMjUwNDEzMTUwMTE2WhcNMjUwNDE0MTUwMTE2WjAzMTEwLwYDVQQD
EyhlZjkxMGYwZDUxYzIwNzZiOWRkMjhlZjM3MjcyNWUxZmEzYjYzY2UxMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAoDTMAu/U/a+7A8WK3p3AB8LOEw+g
epP1ZN39L1Ry3Rxl+fIHvctUUqFkzyx8lOIU6xM1OqM0ZXI/RUtAescqVmomMO6f
NbVmUY0B2dfedPJceAb6DFWQk+qtswXXWP1rMR3CxTEicNWdC9n+9Ue/dXgJSHKd
7Y3YEMNtxl80Ts6D3IKRdg+OwCN4O3pnEtxdVALFlS5RM5sSm26CCkHq+ojtgCpB
uai7ruuC9sw86VVxA7D4v+eYxd8hA/vsRTgYaQgviE3wU2cm305HPIeV6Mnv7+PR
K9dLO4EEMfs+Qj5+qrxMIY5juKunseyyk+t2ay8Iv7F97PkdJ5UvanGKlwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFO+RDw1RwgdrndKO83JyXh+jtjzhMB8GA1UdIwQY
MBaAFJe7/vkYE9Do9+7faO1Wnnz93wzwMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvbDd2LS1SZ1QwT2ozN3Q5bzdWYWVmUDNmRFBBLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mMy80ZThkMzUtNmY0Zi00NTIzLWFiMzEt
MGUxYTBjYzgzYjE5LzEvbDd2LS1SZ1QwT2ozN3Q5bzdWYWVmUDNmRFBBLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9mMy80ZThkMzUtNmY0Zi00NTIzLWFiMzEtMGUxYTBjYzgzYjE5
LzEvbDd2LS1SZ1QwT2ozN3Q5bzdWYWVmUDNmRFBBLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEATpJ9VN15
VL8xJcig8CFgLoccf2vQX3FTpE8KGkR8Q/wjBX6roIiBlmHYcKxDT+fYyuy9M1d8
REnsDU9jN/ZNv6wkaweOJLn9SIiBJ+mTCdTDp966FFX7UAMIPuQrgt1IQF7LDKLY
lxDSNVfy/gDRPYwDuSbWQ+NQ/qVNw4FtvenWLzngDSJX7dEslDdPo71fgfV7WAGG
lyvhX9H/I96AiKzMuutuZVLYjDlZhGea2cS4JjFY3PP3CNd0Q5TsAxNy2oDtHE0B
pGy3DIEb7uKWB+GeH8Q0ysRDPPWm4dlAiH/RU3LHl9ypcOm6fIeH+o3BBGpW6nLA
JEVCqnae1fgqxA==
-----END CERTIFICATE-----
Generated at Mon Apr 14 20:32:46 2025 by rpki-client on console.sobornost.net