Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/06/aaadac-4809-4955-ac62-8f9ca0ebccab/1/sc3CbUTq-FZUSB6VgQQ-FIh3ZbQ.mft
File:                     sc3CbUTq-FZUSB6VgQQ-FIh3ZbQ.mft (raw, json)
Hash identifier:          caSjuF+rm+n4bqAkRL15o7oKcgXW5vrQnZoG2oYKUfI=
Subject key identifier:   89:8D:8D:F4:C4:AD:FA:75:82:24:71:44:7C:C9:94:E2:CB:B9:DD:A2
Authority key identifier: B1:CD:C2:6D:44:EA:F8:56:54:48:1E:95:81:04:3E:14:88:77:65:B4
Certificate issuer:       /CN=b1cdc26d44eaf85654481e9581043e14887765b4
Certificate serial:       01962F071276E1ADFCD4DA9D397B8C6124CD
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/sc3CbUTq-FZUSB6VgQQ-FIh3ZbQ.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/06/aaadac-4809-4955-ac62-8f9ca0ebccab/1/sc3CbUTq-FZUSB6VgQQ-FIh3ZbQ.mft
Manifest number:          1041
Signing time:             Sun 13 Apr 2025 12:01:54 +0000
Manifest this update:     Sun 13 Apr 2025 12:01:54 +0000
Manifest next update:     Mon 14 Apr 2025 12:01:54 +0000
Files and hashes:         1: g6miMFkmw-84cpq6Pcsn9vno9ds.roa (hash: vkmmeZTgxYyRXsXUZxOPVQEHj1CbRMTASbWiNLbOCCA=)
                          2: nzP88bjh-XEZ2kCW3oiiu2uSEHc.roa (hash: Kf5r0P3IvTLCYpsr+vk6c4IGLFB/DHZsFGgImWavBWE=)
                          3: obm9FeEGtL9WBvwQOJ_EPBQy1Sw.roa (hash: DIxEIASe/fpNf2y+lackh7oQZ1Go69j0HnvSMs0Rszo=)
                          4: sc3CbUTq-FZUSB6VgQQ-FIh3ZbQ.crl (hash: cexu94YWveYysyJNdgxuQ6xQ8t0e+BtcJ2Dr6hwNzns=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2f:07:12:76:e1:ad:fc:d4:da:9d:39:7b:8c:61:24:cd
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b1cdc26d44eaf85654481e9581043e14887765b4
        Validity
            Not Before: Apr 13 12:01:54 2025 GMT
            Not After : Apr 14 12:01:54 2025 GMT
        Subject: CN=898d8df4c4adfa75822471447cc994e2cbb9dda2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d2:cd:6b:05:24:08:d6:78:65:71:7b:0d:c0:17:
                    40:8e:15:e0:fc:a6:c0:04:1d:8f:c0:7c:bd:f7:ce:
                    be:a1:d6:10:11:51:1f:5e:76:79:f9:18:55:9a:f9:
                    f9:92:87:b5:05:8b:4b:64:de:88:14:7b:ae:f8:ff:
                    00:4a:49:ca:60:78:7c:0a:c1:a5:5f:8d:ed:9c:54:
                    51:dd:c9:9e:9b:8a:d9:30:36:3b:40:b0:db:e1:65:
                    f1:14:ee:42:f4:4f:86:fc:b6:ae:96:c9:1c:35:f2:
                    70:98:79:d4:86:b2:ab:61:d0:e7:d9:97:1f:3d:82:
                    32:b3:fd:6b:5f:33:35:07:04:f7:60:72:68:88:aa:
                    19:c3:48:1f:61:b2:b8:2c:d7:e0:a5:f7:76:f7:4d:
                    4e:b1:c9:c5:56:ae:0d:4d:ff:fd:26:50:3e:bd:73:
                    6e:be:3d:5b:f5:d7:a4:9c:e7:5a:cb:26:7a:96:3c:
                    f7:4d:8a:97:7a:5e:09:09:23:96:73:8a:76:22:47:
                    e2:47:7d:64:e8:d1:c1:a8:6a:e8:de:65:9e:1b:75:
                    2b:aa:d0:a3:5b:94:31:e1:da:3f:b5:d3:31:3c:47:
                    3e:f5:3c:bc:be:93:0b:3a:ff:91:23:3b:82:ca:db:
                    96:47:14:84:4a:4c:b1:41:22:50:09:3a:9e:44:9e:
                    5d:cf
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                89:8D:8D:F4:C4:AD:FA:75:82:24:71:44:7C:C9:94:E2:CB:B9:DD:A2
            X509v3 Authority Key Identifier:
                keyid:B1:CD:C2:6D:44:EA:F8:56:54:48:1E:95:81:04:3E:14:88:77:65:B4

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/sc3CbUTq-FZUSB6VgQQ-FIh3ZbQ.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/06/aaadac-4809-4955-ac62-8f9ca0ebccab/1/sc3CbUTq-FZUSB6VgQQ-FIh3ZbQ.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/06/aaadac-4809-4955-ac62-8f9ca0ebccab/1/sc3CbUTq-FZUSB6VgQQ-FIh3ZbQ.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         3d:42:88:98:c5:30:6c:e5:73:0a:d0:f1:d3:0f:e8:dd:26:03:
         29:9d:12:f4:c5:da:be:66:4a:4c:99:b2:8e:94:6b:5b:cd:0e:
         b9:77:5d:d6:55:3f:a3:6f:28:e4:dc:24:00:1f:88:d0:14:94:
         a2:56:d1:b6:f1:d9:29:4c:b1:e0:9e:df:ad:3e:0c:86:e4:4a:
         09:92:ec:cc:d4:c3:bb:cb:86:40:fe:a0:4f:d1:69:5f:f3:94:
         6f:69:35:21:af:fd:b3:b6:b4:4f:30:cb:9d:b7:81:7b:e8:23:
         ff:4e:67:16:bc:7c:ae:8e:d8:e5:46:29:63:55:90:44:8f:2c:
         57:e1:8e:0d:30:be:4d:8b:1d:eb:5b:ae:67:6a:e1:65:c1:69:
         98:90:4d:65:ac:a2:9c:28:10:e2:fe:79:7c:64:75:84:a5:3b:
         68:72:36:8a:66:73:68:d2:3f:7d:7c:3b:e0:7c:c1:d1:ad:0b:
         8d:73:71:8f:9b:63:65:25:c4:16:03:7c:4f:fc:3d:e1:4c:72:
         5a:8a:ff:09:a7:81:2d:bf:36:36:8c:bc:7d:91:98:07:09:fa:
         b0:0f:1c:cc:d6:e1:c1:35:8f:6f:75:95:00:ca:02:15:0f:7d:
         d6:24:90:ee:7d:fd:32:3b:e5:6b:f6:f2:1a:2f:ba:18:63:2d:
         cf:19:82:ce
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----