Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/09/04e8dd-de3c-47fa-a024-f33797e39bb2/1/w6SfZaPWgMQo_ZTWfmWicJ8Cks8.mft
File:                     w6SfZaPWgMQo_ZTWfmWicJ8Cks8.mft (raw, json)
Hash identifier:          3qYXuqOMc0TuJ7RjTXL/dkEGiuFv/pAYbYnZChYOU3Q=
Subject key identifier:   21:FA:8C:CA:6C:E3:4E:0D:39:A8:D7:70:DB:49:B7:04:0F:D3:27:FF
Authority key identifier: C3:A4:9F:65:A3:D6:80:C4:28:FD:94:D6:7E:65:A2:70:9F:02:92:CF
Certificate issuer:       /CN=c3a49f65a3d680c428fd94d67e65a2709f0292cf
Certificate serial:       01962E61A28D62554ABC14187CC16133800C
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/w6SfZaPWgMQo_ZTWfmWicJ8Cks8.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/09/04e8dd-de3c-47fa-a024-f33797e39bb2/1/w6SfZaPWgMQo_ZTWfmWicJ8Cks8.mft
Manifest number:          14EA
Signing time:             Sun 13 Apr 2025 09:01:12 +0000
Manifest this update:     Sun 13 Apr 2025 09:01:12 +0000
Manifest next update:     Mon 14 Apr 2025 09:01:12 +0000
Files and hashes:         1: C8on01Bgko2Wx9jKjMpn7FCShCI.roa (hash: NvYVpYNTacJm9Dvti1H+p4nGJK6g8JeQhPdSMYmd5BQ=)
                          2: lBLUc28nwdLkSsrePQSmyxKstGI.roa (hash: vrIWIUHlJDuCxB1hzJyqC5GbG7oElAvbtOgjYcaloKs=)
                          3: w6SfZaPWgMQo_ZTWfmWicJ8Cks8.crl (hash: T3HYHruTWFYtFtMZpzU9VFHVTJOcM5PHlxvpke6KP28=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2e:61:a2:8d:62:55:4a:bc:14:18:7c:c1:61:33:80:0c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c3a49f65a3d680c428fd94d67e65a2709f0292cf
        Validity
            Not Before: Apr 13 09:01:12 2025 GMT
            Not After : Apr 14 09:01:12 2025 GMT
        Subject: CN=21fa8cca6ce34e0d39a8d770db49b7040fd327ff
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a8:57:58:a3:6e:e5:8a:dd:ac:1b:57:b3:57:79:
                    70:cf:76:ec:80:0f:40:b1:46:43:4a:35:1e:6a:ec:
                    a0:12:0c:e6:d1:92:f8:8a:1b:77:39:7c:97:b2:fb:
                    da:11:05:4c:a1:73:01:84:f1:95:c6:8b:ba:ef:72:
                    e2:85:d9:42:cd:e6:4e:28:84:7b:2c:d4:bb:cb:9c:
                    b0:0e:59:dd:20:c4:4e:d4:9d:bc:eb:10:bf:9e:c8:
                    8f:ad:28:8e:d1:14:8f:12:34:4c:20:7d:ad:33:50:
                    ec:6b:4a:0b:7c:b7:64:5a:cd:69:9c:88:de:c8:27:
                    e3:22:dc:fa:a7:1d:a5:02:a3:ea:02:b4:0e:e0:66:
                    1a:1f:e0:b8:3c:26:97:45:c6:18:52:ba:a7:a8:66:
                    9d:12:b6:ae:62:81:50:c7:5e:ce:35:58:11:10:16:
                    cb:2d:dd:6d:ee:ea:c6:7f:59:95:ab:77:a5:85:d1:
                    59:6f:3d:a4:b8:3f:5c:49:c6:21:fc:b4:31:6c:20:
                    af:4d:80:fc:9e:89:ee:45:8a:82:51:21:f2:b7:c0:
                    ec:e3:f8:07:b8:55:3a:99:20:a0:af:46:d0:7f:05:
                    19:24:c7:08:83:6e:f7:de:a7:a3:a1:57:88:10:8f:
                    08:68:e2:5d:4c:d8:dc:52:7b:b8:57:db:0c:8b:2e:
                    c2:47
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                21:FA:8C:CA:6C:E3:4E:0D:39:A8:D7:70:DB:49:B7:04:0F:D3:27:FF
            X509v3 Authority Key Identifier:
                keyid:C3:A4:9F:65:A3:D6:80:C4:28:FD:94:D6:7E:65:A2:70:9F:02:92:CF

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/w6SfZaPWgMQo_ZTWfmWicJ8Cks8.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/09/04e8dd-de3c-47fa-a024-f33797e39bb2/1/w6SfZaPWgMQo_ZTWfmWicJ8Cks8.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/09/04e8dd-de3c-47fa-a024-f33797e39bb2/1/w6SfZaPWgMQo_ZTWfmWicJ8Cks8.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         1f:a3:ea:b5:d3:12:fa:6d:0a:6f:b7:5f:da:7c:cf:c3:b1:b2:
         b2:4c:47:c9:20:30:5e:d1:aa:b7:f2:10:4e:16:6f:57:aa:5a:
         ec:b4:5c:ab:bd:51:73:84:76:70:18:3b:dd:9c:cf:97:b7:88:
         66:0a:f7:bb:a9:51:11:7a:f6:80:b3:dc:53:b3:89:f6:ba:8c:
         64:48:96:cb:96:96:a3:21:06:83:9a:cf:20:7a:c9:bb:a4:06:
         92:f9:4a:08:0b:3d:97:cd:81:ba:0d:16:9a:0e:8a:11:63:df:
         9b:6d:a7:4b:1e:ae:03:41:1b:ba:07:52:80:d5:cd:48:c7:6b:
         b0:81:cb:61:54:80:ab:93:1e:46:d4:50:c0:f7:5d:2f:2e:b8:
         00:b2:74:cb:69:db:4d:35:af:b3:98:20:6a:33:42:a0:6b:ba:
         b7:44:7b:94:74:90:07:39:de:ee:ab:23:59:b7:be:c7:46:c1:
         b3:67:31:a2:3a:db:d6:f4:e2:30:31:2c:39:a9:15:4d:fc:80:
         14:46:c2:a3:8b:08:60:cd:8a:35:23:3f:9e:68:27:15:42:cd:
         c8:3d:d9:da:fc:c3:3c:c2:b0:55:f6:2b:f0:2b:cd:a0:f9:2c:
         e2:5b:83:a0:18:3e:a9:da:ac:44:25:dd:f6:a0:45:a9:7f:fe:
         05:0a:e3:f0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----