Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ff/1b710b-d2f1-4e15-aa3c-93260693add5/1/P-SE99D_9CD2t3E6k83LDFEAcmc.mft
File:                     P-SE99D_9CD2t3E6k83LDFEAcmc.mft (raw, json)
Hash identifier:          MCGKg3eETmsyxMCBZIdJMhGYV8CesuRBCX5ASTvdrUM=
Subject key identifier:   0E:80:63:4F:AB:AF:26:5C:BB:E0:A8:22:47:31:10:B3:B5:E7:49:02
Authority key identifier: 3F:E4:84:F7:D0:FF:F4:20:F6:B7:71:3A:93:CD:CB:0C:51:00:72:67
Certificate issuer:       /CN=3fe484f7d0fff420f6b7713a93cdcb0c51007267
Certificate serial:       01962F06DAB16542810F12B3A43BAAA2D53E
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/P-SE99D_9CD2t3E6k83LDFEAcmc.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/ff/1b710b-d2f1-4e15-aa3c-93260693add5/1/P-SE99D_9CD2t3E6k83LDFEAcmc.mft
Manifest number:          04D1
Signing time:             Sun 13 Apr 2025 12:01:40 +0000
Manifest this update:     Sun 13 Apr 2025 12:01:40 +0000
Manifest next update:     Mon 14 Apr 2025 12:01:40 +0000
Files and hashes:         1: P-SE99D_9CD2t3E6k83LDFEAcmc.crl (hash: re/FET/yvOvwtSBcP6szK3qMgVHQcyLnFjfUCJIJSTI=)
                          2: jpj69C1ImXMr6CPUoeUXJLiCpDU.roa (hash: PqTZZfg3T7FxVQucLl2CplTcjxSHdbI++B7VwzFwuZU=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2f:06:da:b1:65:42:81:0f:12:b3:a4:3b:aa:a2:d5:3e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3fe484f7d0fff420f6b7713a93cdcb0c51007267
        Validity
            Not Before: Apr 13 12:01:40 2025 GMT
            Not After : Apr 14 12:01:40 2025 GMT
        Subject: CN=0e80634fabaf265cbbe0a822473110b3b5e74902
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ad:bb:3b:e1:ab:99:37:df:21:c3:52:73:7b:36:
                    d3:eb:99:31:8f:ea:1c:a3:54:d2:42:01:ff:8a:ce:
                    85:35:4e:2a:c6:78:c9:45:f8:4e:64:ec:f3:da:7e:
                    e0:b5:93:1c:e6:b0:68:48:c1:a2:cb:83:0f:0d:23:
                    67:6e:96:da:6c:de:24:69:87:83:85:bc:04:33:65:
                    7d:7a:7f:9a:52:15:f1:a2:64:de:4d:e7:5f:20:66:
                    50:00:d5:49:ab:9d:90:db:5a:77:d2:8a:ca:43:b5:
                    05:3f:03:72:e7:da:8c:6e:1e:17:f9:69:8c:a8:f8:
                    7e:77:28:2b:c3:bd:8b:d9:a6:05:cb:18:e9:be:51:
                    37:08:ff:8e:d2:37:41:8f:56:e1:a4:ec:34:75:30:
                    c1:22:43:56:7e:32:9a:f1:22:bd:96:28:1e:16:6e:
                    78:f6:af:d8:82:d5:cd:14:1d:fa:a4:26:4c:19:4a:
                    7b:be:b5:b2:89:d8:1c:6b:aa:c4:eb:85:e9:e6:3d:
                    35:f5:54:79:70:7d:14:59:39:24:f6:ce:5d:be:4d:
                    d5:e9:45:b8:85:cd:de:7b:59:ae:d0:8e:c5:9e:41:
                    ee:63:71:d7:6a:9a:e9:f2:19:bf:0f:d6:a9:f1:4d:
                    1f:9d:19:23:5b:ff:1a:ca:74:24:26:af:bb:5b:6f:
                    eb:db
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0E:80:63:4F:AB:AF:26:5C:BB:E0:A8:22:47:31:10:B3:B5:E7:49:02
            X509v3 Authority Key Identifier:
                keyid:3F:E4:84:F7:D0:FF:F4:20:F6:B7:71:3A:93:CD:CB:0C:51:00:72:67

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/P-SE99D_9CD2t3E6k83LDFEAcmc.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ff/1b710b-d2f1-4e15-aa3c-93260693add5/1/P-SE99D_9CD2t3E6k83LDFEAcmc.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/ff/1b710b-d2f1-4e15-aa3c-93260693add5/1/P-SE99D_9CD2t3E6k83LDFEAcmc.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         7f:f7:7b:73:33:e6:9f:0e:e0:6c:b1:b7:71:09:a1:58:e7:1a:
         b8:b0:93:d1:ad:13:ad:72:94:9a:c8:58:5a:91:d5:a7:a7:00:
         eb:cf:9c:bc:3d:72:6e:56:7a:97:55:ff:6e:0c:c6:ab:2c:a3:
         e2:19:d4:5d:eb:d4:54:e5:3e:02:b8:7f:d9:bb:40:1f:37:44:
         20:72:cf:07:ff:01:bc:6f:05:b5:16:a2:45:a2:fd:80:7a:b2:
         89:85:35:7b:ed:8d:20:e3:87:0a:ee:2f:49:ba:62:cf:a0:40:
         14:b1:8a:74:b0:de:b3:41:9e:01:ee:2b:2f:59:51:00:a2:ea:
         55:c5:60:a6:81:0c:78:e0:82:cc:62:22:e9:44:c6:d2:d2:af:
         e0:3c:cb:2a:ba:82:ef:7b:0e:c7:6b:33:53:aa:b9:2e:0f:4a:
         f2:ca:57:ba:09:de:3b:dd:d4:08:65:b5:9a:99:1a:d9:fe:0d:
         83:33:93:3b:9e:ca:90:6e:ea:2b:92:a6:a3:0e:2a:3a:90:50:
         4f:da:0d:f7:17:3f:d1:dd:08:8f:b6:00:00:29:de:d3:48:35:
         07:3e:28:68:7d:f2:e0:dd:c3:8b:cb:b0:ef:a5:c9:b1:af:0b:
         fe:9f:a7:06:d7:93:0e:3b:e4:53:7e:c2:62:2a:3c:b9:49:4b:
         09:cf:02:da
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 14 20:33:09 2025 by rpki-client on console.sobornost.net