Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/04/d16e96-0313-4c9b-9c09-a95fe3102645/1/r5MQJRHmYCY_jvbkwfmrMjk4ObI.mft
File:                     r5MQJRHmYCY_jvbkwfmrMjk4ObI.mft (raw, json)
Hash identifier:          cMapaHU5F60WTDBXPfmrSAWGE15guXVKrJCSEyynx7Y=
Subject key identifier:   FC:DA:2C:8F:6F:B9:6D:6B:B9:28:28:45:F3:92:86:ED:56:48:C4:A7
Authority key identifier: AF:93:10:25:11:E6:60:26:3F:8E:F6:E4:C1:F9:AB:32:39:38:39:B2
Certificate issuer:       /CN=af93102511e660263f8ef6e4c1f9ab32393839b2
Certificate serial:       01962F070BC282241AE171388891D276DF9E
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/r5MQJRHmYCY_jvbkwfmrMjk4ObI.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/04/d16e96-0313-4c9b-9c09-a95fe3102645/1/r5MQJRHmYCY_jvbkwfmrMjk4ObI.mft
Manifest number:          0956
Signing time:             Sun 13 Apr 2025 12:01:52 +0000
Manifest this update:     Sun 13 Apr 2025 12:01:52 +0000
Manifest next update:     Mon 14 Apr 2025 12:01:52 +0000
Files and hashes:         1: QyIQhrwBc_E0RzmwfCK0p-xEPL8.roa (hash: KU05TYN4aOywUPeCIgZViB5uKUpefnNLinujip3r7Ws=)
                          2: r5MQJRHmYCY_jvbkwfmrMjk4ObI.crl (hash: lSxluY/Ko9WI7F6YAhbpCjigJ5DH9AWePIBA4UqYAOA=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2f:07:0b:c2:82:24:1a:e1:71:38:88:91:d2:76:df:9e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=af93102511e660263f8ef6e4c1f9ab32393839b2
        Validity
            Not Before: Apr 13 12:01:52 2025 GMT
            Not After : Apr 14 12:01:52 2025 GMT
        Subject: CN=fcda2c8f6fb96d6bb9282845f39286ed5648c4a7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bc:46:4f:0d:a1:9e:92:99:ce:4e:d7:fb:6a:3e:
                    ac:c9:0b:69:22:9d:7a:cc:fc:8e:af:dc:c8:b0:f0:
                    90:e0:af:17:6d:da:53:3d:2f:bb:c1:28:6e:84:84:
                    1b:2e:d0:c8:2a:f8:28:75:a3:cd:e8:5d:d6:0a:e2:
                    94:2d:24:5d:e9:1c:44:1e:4b:e6:ed:3c:98:8a:2f:
                    81:84:b8:36:47:31:1d:fe:fb:d4:4a:d6:16:ba:f2:
                    25:41:a7:30:17:b2:32:dd:35:90:71:c5:0b:13:5a:
                    17:53:c3:cb:ce:2c:81:52:a7:ed:10:6a:7f:88:14:
                    03:e3:e3:39:ef:1b:ed:fc:0c:e6:66:f1:d0:1f:6a:
                    89:3b:3b:ae:a7:38:4a:6f:3a:25:78:4f:76:91:47:
                    a8:e5:3b:4a:ad:1c:12:7b:de:3f:ff:4f:41:82:11:
                    39:a7:fa:68:52:9f:6a:7b:0a:42:d5:25:30:28:72:
                    f1:35:2e:06:34:e2:b5:08:0e:e1:8d:55:c6:83:c0:
                    ea:4d:1a:cf:48:cf:c4:34:7b:42:fa:7d:2c:4e:17:
                    c4:81:2c:6d:f4:35:72:38:65:df:cd:84:ee:58:91:
                    4f:2b:2b:8e:45:aa:8b:a6:b8:6d:cb:0c:cd:dd:ce:
                    e8:33:d1:cd:47:84:2e:b2:ed:e7:fc:59:6c:43:fc:
                    d9:eb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FC:DA:2C:8F:6F:B9:6D:6B:B9:28:28:45:F3:92:86:ED:56:48:C4:A7
            X509v3 Authority Key Identifier:
                keyid:AF:93:10:25:11:E6:60:26:3F:8E:F6:E4:C1:F9:AB:32:39:38:39:B2

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/r5MQJRHmYCY_jvbkwfmrMjk4ObI.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/04/d16e96-0313-4c9b-9c09-a95fe3102645/1/r5MQJRHmYCY_jvbkwfmrMjk4ObI.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/04/d16e96-0313-4c9b-9c09-a95fe3102645/1/r5MQJRHmYCY_jvbkwfmrMjk4ObI.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         2f:04:87:7e:c3:01:04:7f:9a:a7:e7:e8:9e:29:ca:8a:33:c0:
         af:a7:1a:e8:84:31:60:3f:e5:d4:c0:31:26:63:4b:c1:25:0d:
         b3:6f:14:c0:8c:bc:e1:66:47:e6:29:22:79:59:b4:12:5a:f8:
         15:1f:e5:b4:c9:b9:cb:94:14:a4:03:b9:74:d6:91:dc:8a:22:
         bc:f4:2d:7d:77:38:29:ad:25:2b:d8:d5:66:10:d7:18:3b:ca:
         79:96:77:4f:3e:20:3e:26:b3:b5:38:17:3d:51:a8:87:91:6a:
         8c:e8:96:58:46:04:b7:05:75:e4:8c:96:07:28:ba:6b:29:eb:
         18:d3:47:87:c8:17:b7:a2:ce:f5:8b:f3:a2:fe:92:e4:c6:33:
         ac:f4:b5:01:ab:5b:52:51:87:06:6f:36:c3:ac:e0:c3:38:86:
         c1:01:43:a2:0a:b2:2c:fd:3c:76:7c:84:25:e8:c7:65:de:f4:
         64:37:45:f5:01:23:0c:b7:9e:c5:9a:66:f2:9a:69:a7:08:3a:
         98:c2:1a:47:5e:a2:dd:69:18:91:cf:12:b6:3e:69:aa:d0:99:
         a3:65:63:dc:71:d3:52:26:e2:e5:1c:99:34:f2:fb:1e:0a:cc:
         b5:2e:bc:3e:b3:d7:10:01:21:bf:86:8f:0f:d7:49:a9:43:0c:
         c0:c6:80:87
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----