Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0c/151705-0b0c-48bf-a40e-b7ca1fe6c184/1/tXZXfSAIXEwi_IARyNGpP2MhHA8.mft
File:                     tXZXfSAIXEwi_IARyNGpP2MhHA8.mft (raw, json)
Hash identifier:          2T9WlQQ2+FGQzUrtcGhbMolU8UiePjlXjDi5MXCzfB0=
Subject key identifier:   9F:19:C2:09:CF:6E:F8:6F:32:FC:20:8C:AD:91:0B:AB:0F:A1:0B:F9
Authority key identifier: B5:76:57:7D:20:08:5C:4C:22:FC:80:11:C8:D1:A9:3F:63:21:1C:0F
Certificate issuer:       /CN=b576577d20085c4c22fc8011c8d1a93f63211c0f
Certificate serial:       01962F74BBDC711916A87AFF804AB26402BE
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/tXZXfSAIXEwi_IARyNGpP2MhHA8.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/0c/151705-0b0c-48bf-a40e-b7ca1fe6c184/1/tXZXfSAIXEwi_IARyNGpP2MhHA8.mft
Manifest number:          10
Signing time:             Sun 13 Apr 2025 14:01:41 +0000
Manifest this update:     Sun 13 Apr 2025 14:01:41 +0000
Manifest next update:     Mon 14 Apr 2025 14:01:41 +0000
Files and hashes:         1: 0NGpBZClfqdkwT-g1SQX2TG7Voo.roa (hash: SbCdNlkd4RVvBhJ9C9nlFY+4pjkHAYs+BVh1BZ1ld+c=)
                          2: FrJWtoZemJx4JKpSKfeY_d7A8KU.roa (hash: mn6H512YQAxp8Xgyg/tGQdGcCEfihV9UXWWT70uzA50=)
                          3: tXZXfSAIXEwi_IARyNGpP2MhHA8.crl (hash: 4uVG0TGScKa0O79cU9Q5oevSCyCh4im+Rh2cDdIbV1Y=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2f:74:bb:dc:71:19:16:a8:7a:ff:80:4a:b2:64:02:be
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b576577d20085c4c22fc8011c8d1a93f63211c0f
        Validity
            Not Before: Apr 13 14:01:41 2025 GMT
            Not After : Apr 14 14:01:41 2025 GMT
        Subject: CN=9f19c209cf6ef86f32fc208cad910bab0fa10bf9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e2:ad:03:2e:2e:93:36:53:1f:0a:34:9e:eb:f1:
                    4f:7b:7c:13:53:6b:b3:f1:34:b3:2b:3c:c2:d8:f6:
                    2a:1e:f1:fe:d8:82:c2:6b:41:89:ad:9d:de:97:52:
                    ff:f7:90:cb:62:ff:3d:1a:90:91:69:1e:79:71:d0:
                    ea:19:a8:27:f6:be:ba:5c:88:5a:87:e8:84:b7:c2:
                    7b:cd:c7:dd:fd:fe:29:e4:7f:7b:26:bd:48:87:b8:
                    c2:80:0f:4c:bc:97:0f:7c:34:4a:fb:30:80:bf:7e:
                    cb:d4:01:e5:e8:63:7a:f5:4d:21:3d:e3:60:81:9c:
                    73:c0:4e:28:6e:4b:21:5e:c6:7a:b7:f7:f2:55:63:
                    68:4c:4a:fd:3b:85:2a:51:17:76:a0:04:32:d8:cb:
                    92:46:56:67:5c:03:e1:cf:eb:6a:c5:a9:ff:9a:d3:
                    c6:12:0d:87:1b:ee:d5:19:c5:50:ca:bc:a2:98:34:
                    e7:80:fb:f3:28:83:0b:9f:37:2a:6d:e8:9a:b8:1a:
                    41:5a:22:5a:7c:3c:80:ce:3a:82:ab:a4:eb:c5:c5:
                    fe:f7:ce:1a:cc:b7:ee:7b:75:c4:d8:2f:91:f1:f2:
                    10:46:b7:24:4f:a4:52:a1:b7:82:e2:5a:3e:5a:3b:
                    f4:e9:d3:8d:3c:c5:27:59:32:20:b5:a9:82:08:a0:
                    04:d3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9F:19:C2:09:CF:6E:F8:6F:32:FC:20:8C:AD:91:0B:AB:0F:A1:0B:F9
            X509v3 Authority Key Identifier:
                keyid:B5:76:57:7D:20:08:5C:4C:22:FC:80:11:C8:D1:A9:3F:63:21:1C:0F

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/tXZXfSAIXEwi_IARyNGpP2MhHA8.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0c/151705-0b0c-48bf-a40e-b7ca1fe6c184/1/tXZXfSAIXEwi_IARyNGpP2MhHA8.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/0c/151705-0b0c-48bf-a40e-b7ca1fe6c184/1/tXZXfSAIXEwi_IARyNGpP2MhHA8.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         9c:ec:c9:a4:de:32:fc:7c:22:08:a3:49:f2:0f:2d:3a:da:bf:
         ba:43:27:7f:6e:cc:7e:13:2c:54:a7:18:78:5c:d6:3a:6a:f3:
         12:36:07:4e:b4:f1:0e:05:fc:d8:5a:94:99:95:1b:6d:51:d6:
         f8:e8:46:26:82:7b:94:3b:20:a0:5c:5b:f8:1a:10:e1:c4:5e:
         80:7d:30:39:ba:c0:64:58:7d:70:f5:fc:6c:83:c1:0e:95:bd:
         ab:d7:18:b5:52:e6:8c:5e:0a:ce:58:62:1a:14:39:0d:05:ac:
         07:18:2d:65:73:e7:ac:d0:1a:ba:e0:d9:5e:a4:5e:9d:e6:5b:
         c4:94:e8:ea:dd:16:97:a0:c0:48:c1:58:8e:74:e6:d6:cb:0c:
         41:a6:74:7a:05:ba:46:b0:c9:6e:ad:38:bc:f6:0c:95:59:a2:
         08:9a:54:20:aa:a5:51:be:86:5e:51:1e:19:b3:50:9b:46:03:
         9d:cb:ff:6d:68:71:54:64:0c:ab:44:9d:00:b3:ac:2d:d1:b7:
         1e:65:aa:60:10:70:8d:8c:26:0c:9c:fb:35:7f:1e:4a:77:00:
         1a:55:ed:bf:46:18:b3:1d:a4:76:7b:63:2b:9f:c9:58:6c:32:
         9b:8c:94:d4:90:1d:f1:a7:23:3c:69:b6:30:9d:a3:fc:d2:da:
         e5:2e:02:d0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----