Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fa/4c9206-95cb-4324-ab88-1e6577ca172d/1/4d9YUq-QW0Ff31PjKHb1enTWwfA.mft
File:                     4d9YUq-QW0Ff31PjKHb1enTWwfA.mft (raw, json)
Hash identifier:          2OtkO7LgpwqoXVoAJKzD5RcCBFWLs+a07pEpOvEEMwc=
Subject key identifier:   E6:80:24:37:4F:F5:4F:20:8C:2B:80:8D:5F:D5:B0:A3:5D:7F:DD:F9
Authority key identifier: E1:DF:58:52:AF:90:5B:41:5F:DF:53:E3:28:76:F5:7A:74:D6:C1:F0
Certificate issuer:       /CN=e1df5852af905b415fdf53e32876f57a74d6c1f0
Certificate serial:       01962E2B047D3E2EAFFFBA69A145DCDC47DA
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/4d9YUq-QW0Ff31PjKHb1enTWwfA.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/fa/4c9206-95cb-4324-ab88-1e6577ca172d/1/4d9YUq-QW0Ff31PjKHb1enTWwfA.mft
Manifest number:          0DFA
Signing time:             Sun 13 Apr 2025 08:01:33 +0000
Manifest this update:     Sun 13 Apr 2025 08:01:33 +0000
Manifest next update:     Mon 14 Apr 2025 08:01:33 +0000
Files and hashes:         1: 4d9YUq-QW0Ff31PjKHb1enTWwfA.crl (hash: Z89Cb27rZhuW8CfVZdD4iaqFSAI55R1ltkyYaXAW2kE=)
                          2: cD_mZgVZwLPlXPcv17kJI-LgBr4.roa (hash: KNwGHjS6BluwkxT0qyW7BxgZYc1pPDj7oHyq37oQR90=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2e:2b:04:7d:3e:2e:af:ff:ba:69:a1:45:dc:dc:47:da
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e1df5852af905b415fdf53e32876f57a74d6c1f0
        Validity
            Not Before: Apr 13 08:01:33 2025 GMT
            Not After : Apr 14 08:01:33 2025 GMT
        Subject: CN=e68024374ff54f208c2b808d5fd5b0a35d7fddf9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ac:58:b5:29:36:bd:6a:97:0d:a5:5d:58:19:84:
                    f0:6a:89:c4:fe:39:44:31:0c:95:e5:96:e9:db:4d:
                    37:61:08:e0:0e:de:59:d8:03:40:43:cd:25:4d:f3:
                    aa:0a:7e:58:3c:38:85:2e:46:5a:08:c9:11:93:0a:
                    88:3b:38:9a:3c:7d:38:ab:3a:dd:95:48:af:63:89:
                    43:1e:dd:dc:d1:b9:59:ca:0c:19:7e:cb:f8:50:89:
                    d0:cb:3f:07:39:cf:7f:c4:b4:f1:58:81:74:2c:3b:
                    92:ed:fc:81:86:47:43:a2:09:30:ca:47:fb:b4:4a:
                    74:05:b4:b0:60:ed:dd:60:17:65:3a:fa:ab:85:fb:
                    12:5c:4f:a4:3f:fb:92:6a:18:80:0b:17:c6:40:4a:
                    65:c5:79:ec:b2:c9:f1:ae:13:9a:42:07:f7:bf:71:
                    fe:40:37:f6:fc:39:59:93:f6:01:eb:64:b6:d1:8f:
                    64:73:f8:e4:69:41:b5:70:2f:57:6c:74:86:ad:24:
                    be:8f:e5:cd:46:e3:c6:bb:3f:77:e3:b3:cf:f2:e4:
                    8a:8c:93:e3:a0:53:e5:60:f9:2b:67:48:5e:52:09:
                    4b:96:dd:d0:64:09:13:bf:e5:73:89:13:1c:f3:87:
                    74:5b:9b:1d:45:58:32:ea:ae:4a:d5:13:78:a7:20:
                    4b:7b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E6:80:24:37:4F:F5:4F:20:8C:2B:80:8D:5F:D5:B0:A3:5D:7F:DD:F9
            X509v3 Authority Key Identifier:
                keyid:E1:DF:58:52:AF:90:5B:41:5F:DF:53:E3:28:76:F5:7A:74:D6:C1:F0

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/4d9YUq-QW0Ff31PjKHb1enTWwfA.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fa/4c9206-95cb-4324-ab88-1e6577ca172d/1/4d9YUq-QW0Ff31PjKHb1enTWwfA.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/fa/4c9206-95cb-4324-ab88-1e6577ca172d/1/4d9YUq-QW0Ff31PjKHb1enTWwfA.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         7e:0f:8b:9c:52:0e:f7:0d:60:0a:a3:14:80:04:93:0b:c9:9e:
         f8:0c:ea:45:c4:ff:13:5c:03:11:5c:7c:0b:95:9d:20:f5:a7:
         56:e7:5e:4a:90:99:ec:10:c3:e5:78:1e:24:18:26:32:df:bb:
         da:34:db:2e:fd:af:06:f4:74:41:b5:78:04:b1:47:d0:6c:31:
         37:b9:ac:75:2e:f9:da:b6:42:f1:c2:28:71:f9:6c:6c:fa:17:
         59:b2:f9:e0:c4:b7:8a:b2:48:ef:13:54:1a:97:ef:6b:a6:ff:
         37:ff:a7:a5:29:f4:42:fc:8e:ed:97:ce:59:ee:5c:de:ea:6f:
         c0:c2:f0:55:3c:c4:72:80:3b:92:1c:0d:56:56:4d:61:a6:78:
         f8:2c:48:e7:47:fc:76:e5:57:9e:a6:f6:bb:a0:8f:85:bc:97:
         e7:01:83:98:75:3a:f1:ed:45:30:71:65:b3:2d:bf:02:42:a4:
         ac:ac:1c:79:b2:b1:97:98:6c:06:3a:75:1a:cf:30:df:b0:01:
         10:5a:74:4c:81:7d:e9:3c:cd:cc:3a:d4:0b:f6:17:b4:b2:2c:
         20:6f:31:b8:0f:8c:d0:80:60:b9:ab:7f:4d:32:30:e8:10:8e:
         8e:52:42:96:5c:3f:20:8e:42:85:8f:66:9d:ef:da:79:ec:1e:
         23:96:8d:f5
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZYuKwR9Pi6v/7ppoUXc3EfaMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGUxZGY1ODUyYWY5MDViNDE1ZmRmNTNlMzI4NzZmNTdhNzRk
NmMxZjAwHhcNMjUwNDEzMDgwMTMzWhcNMjUwNDE0MDgwMTMzWjAzMTEwLwYDVQQD
EyhlNjgwMjQzNzRmZjU0ZjIwOGMyYjgwOGQ1ZmQ1YjBhMzVkN2ZkZGY5MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEArFi1KTa9apcNpV1YGYTwaonE/jlE
MQyV5Zbp2003YQjgDt5Z2ANAQ80lTfOqCn5YPDiFLkZaCMkRkwqIOziaPH04qzrd
lUivY4lDHt3c0blZygwZfsv4UInQyz8HOc9/xLTxWIF0LDuS7fyBhkdDogkwykf7
tEp0BbSwYO3dYBdlOvqrhfsSXE+kP/uSahiACxfGQEplxXnsssnxrhOaQgf3v3H+
QDf2/DlZk/YB62S20Y9kc/jkaUG1cC9XbHSGrSS+j+XNRuPGuz9347PP8uSKjJPj
oFPlYPkrZ0heUglLlt3QZAkTv+VziRMc84d0W5sdRVgy6q5K1RN4pyBLewIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFOaAJDdP9U8gjCuAjV/VsKNdf935MB8GA1UdIwQY
MBaAFOHfWFKvkFtBX99T4yh29Xp01sHwMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvNGQ5WVVxLVFXMEZmMzFQaktIYjFlblRXd2ZBLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mYS80YzkyMDYtOTVjYi00MzI0LWFiODgt
MWU2NTc3Y2ExNzJkLzEvNGQ5WVVxLVFXMEZmMzFQaktIYjFlblRXd2ZBLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9mYS80YzkyMDYtOTVjYi00MzI0LWFiODgtMWU2NTc3Y2ExNzJk
LzEvNGQ5WVVxLVFXMEZmMzFQaktIYjFlblRXd2ZBLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAfg+LnFIO
9w1gCqMUgASTC8me+AzqRcT/E1wDEVx8C5WdIPWnVudeSpCZ7BDD5XgeJBgmMt+7
2jTbLv2vBvR0QbV4BLFH0GwxN7msdS752rZC8cIocflsbPoXWbL54MS3irJI7xNU
Gpfva6b/N/+npSn0QvyO7ZfOWe5c3upvwMLwVTzEcoA7khwNVlZNYaZ4+CxI50f8
duVXnqb2u6CPhbyX5wGDmHU68e1FMHFlsy2/AkKkrKwcebKxl5hsBjp1Gs8w37AB
EFp0TIF96TzNzDrUC/YXtLIsIG8xuA+M0IBguat/TTIw6BCOjlJCllw/II5ChY9m
ne/aeeweI5aN9Q==
-----END CERTIFICATE-----
Generated at Mon Apr 14 20:33:04 2025 by rpki-client on console.sobornost.net