Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/04/7c70f4-5f3a-4fd3-883c-eb9415ec548a/1/g2Uo4VK23LoVcSQaxVvlvOARGLc.mft
File:                     g2Uo4VK23LoVcSQaxVvlvOARGLc.mft (raw, json)
Hash identifier:          67L8N1mUO8WOljgyHXfty7sUR/1fYQHnfDIuHkoNQm4=
Subject key identifier:   A3:1A:92:E8:EF:A6:0A:C8:BB:BC:A5:EB:BA:FF:58:3F:C9:18:C1:9C
Authority key identifier: 83:65:28:E1:52:B6:DC:BA:15:71:24:1A:C5:5B:E5:BC:E0:11:18:B7
Certificate issuer:       /CN=836528e152b6dcba1571241ac55be5bce01118b7
Certificate serial:       01962E9937CEC30CC61206D5C887A12D4B94
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/g2Uo4VK23LoVcSQaxVvlvOARGLc.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/04/7c70f4-5f3a-4fd3-883c-eb9415ec548a/1/g2Uo4VK23LoVcSQaxVvlvOARGLc.mft
Manifest number:          14ED
Signing time:             Sun 13 Apr 2025 10:01:55 +0000
Manifest this update:     Sun 13 Apr 2025 10:01:55 +0000
Manifest next update:     Mon 14 Apr 2025 10:01:55 +0000
Files and hashes:         1: CvGHepAgyhQF29vgwO5RLU27Tig.roa (hash: MTqSAP2ijcRiLN3/AxskccxaBqUIlze/F2fZZstIpd0=)
                          2: LG2MEPQP4SA0RYNet0_i-TbLVOA.roa (hash: Q0AqpzK5pnfc1Ye6ZvO737eSRCPhdfmTWDd+EoGA7/k=)
                          3: g2Uo4VK23LoVcSQaxVvlvOARGLc.crl (hash: b8O4by6K2Wm4n+ilfU6RDK+xe3HWrQxamSQtkJvH9Ng=)
                          4: mM8VTopJZmHymxZODgrdAS9tCB0.roa (hash: xbQXqlIoaX+7utbFJ34rZdlVmArTuhCKQpdLZlu7I7o=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2e:99:37:ce:c3:0c:c6:12:06:d5:c8:87:a1:2d:4b:94
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=836528e152b6dcba1571241ac55be5bce01118b7
        Validity
            Not Before: Apr 13 10:01:55 2025 GMT
            Not After : Apr 14 10:01:55 2025 GMT
        Subject: CN=a31a92e8efa60ac8bbbca5ebbaff583fc918c19c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b1:29:80:00:6a:ba:d9:28:67:1f:05:5f:4e:24:
                    2f:13:96:57:6f:c8:7f:f4:32:35:57:3c:a9:0c:fb:
                    41:eb:95:ad:f4:1b:b3:af:11:5c:e8:8d:d3:68:17:
                    d1:ac:81:cc:06:84:13:95:a9:a9:4c:0c:4c:44:12:
                    9e:46:62:c8:fc:50:10:33:f9:59:52:f1:b7:c0:91:
                    a0:5f:03:a1:90:46:46:6b:02:47:34:a5:56:ea:f4:
                    cf:0b:81:43:d7:3c:5d:a1:75:4d:92:b0:93:12:5b:
                    e1:d7:e9:36:13:ae:84:41:71:b4:0d:e8:b1:70:27:
                    32:95:dd:ad:7f:7c:86:cb:d3:5b:86:f4:2f:58:d5:
                    66:61:ca:48:a8:0f:73:6f:88:b3:13:0a:2c:59:be:
                    32:4f:81:62:0e:46:3f:d0:88:37:69:a4:b1:1a:1b:
                    58:ec:eb:ae:f6:33:3e:34:34:1c:fb:56:67:ac:03:
                    33:00:20:dc:0f:13:d9:17:e9:0a:d2:3a:f3:7a:6f:
                    c8:31:e5:a4:05:ff:e9:91:c3:57:a2:f8:b1:39:48:
                    87:7e:80:d4:c9:f2:78:ec:71:ac:68:87:d7:f0:c7:
                    6d:c4:49:8f:ac:33:fd:66:77:27:0d:0e:59:37:fa:
                    59:1d:dc:81:ed:f0:4d:36:0e:7b:e9:17:01:c9:f9:
                    9d:97
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A3:1A:92:E8:EF:A6:0A:C8:BB:BC:A5:EB:BA:FF:58:3F:C9:18:C1:9C
            X509v3 Authority Key Identifier:
                keyid:83:65:28:E1:52:B6:DC:BA:15:71:24:1A:C5:5B:E5:BC:E0:11:18:B7

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/g2Uo4VK23LoVcSQaxVvlvOARGLc.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/04/7c70f4-5f3a-4fd3-883c-eb9415ec548a/1/g2Uo4VK23LoVcSQaxVvlvOARGLc.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/04/7c70f4-5f3a-4fd3-883c-eb9415ec548a/1/g2Uo4VK23LoVcSQaxVvlvOARGLc.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         53:e5:4c:f2:ce:fd:20:52:4e:5a:53:9b:c5:5c:b1:ac:7a:6c:
         c2:5b:df:87:5d:b9:00:8f:4f:5a:6b:dd:6c:df:31:b8:31:79:
         5d:a0:17:c8:30:6a:b6:f4:5b:ac:30:ae:cb:2c:70:ec:70:5d:
         38:63:87:de:4d:eb:b0:ff:d6:ac:59:6c:9b:2f:fe:40:d0:3f:
         fc:50:49:38:d6:41:07:09:55:ea:ad:87:8f:66:9a:32:4f:b2:
         5b:9d:d5:50:82:ab:78:c8:d9:e4:cb:41:1c:ad:d8:71:e2:75:
         8d:56:82:53:8d:30:80:7a:af:b8:bf:81:8b:16:c9:0f:18:bd:
         f8:36:8c:d6:3d:09:ae:6d:b2:dc:3e:32:14:90:6d:d4:ac:91:
         ee:d4:b8:d3:4e:d4:87:d3:8d:50:3f:2f:8e:35:94:94:81:ae:
         e7:53:7d:b9:02:44:f8:05:3a:8f:fc:e3:4f:0e:c1:77:f4:a9:
         d3:02:c3:b8:c6:89:e8:b0:81:c6:0a:08:db:5e:dc:fd:cc:c8:
         f7:bf:39:8e:bc:e3:d0:11:aa:4d:1a:98:c6:16:06:79:9f:d0:
         4f:d7:1d:4e:ad:1b:2c:39:6c:97:04:72:e1:e5:be:66:a7:2c:
         2a:22:98:1f:d9:f1:ad:b4:52:2f:9e:cc:ea:ee:3d:13:12:4e:
         29:a6:18:97
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----