Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/11/b36132-ca77-4584-8d7b-291b7ad093bf/1/4fP23EYQ9sm7qkUyERc45JO2rfA.mft
File:                     4fP23EYQ9sm7qkUyERc45JO2rfA.mft (raw, json)
Hash identifier:          SPJnNNIRbAaXnlK4oExf8iwDsawg8/FIlNWuiD6V0u0=
Subject key identifier:   01:BF:BC:35:6C:E1:B3:05:1C:B0:B4:8C:EE:D9:A8:6A:A1:12:3D:27
Authority key identifier: E1:F3:F6:DC:46:10:F6:C9:BB:AA:45:32:11:17:38:E4:93:B6:AD:F0
Certificate issuer:       /CN=e1f3f6dc4610f6c9bbaa4532111738e493b6adf0
Certificate serial:       01962E61E97AAF5F8958149FA8B5DECBCFBE
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/4fP23EYQ9sm7qkUyERc45JO2rfA.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/11/b36132-ca77-4584-8d7b-291b7ad093bf/1/4fP23EYQ9sm7qkUyERc45JO2rfA.mft
Manifest number:          02EC
Signing time:             Sun 13 Apr 2025 09:01:30 +0000
Manifest this update:     Sun 13 Apr 2025 09:01:30 +0000
Manifest next update:     Mon 14 Apr 2025 09:01:30 +0000
Files and hashes:         1: 0jdBY_E5YLyLUu_FzsB8buFy_Wg.roa (hash: m69bij1M0dFLciXpzKZZy7Clt1a/35aqA5PNXsZojag=)
                          2: 4fP23EYQ9sm7qkUyERc45JO2rfA.crl (hash: i6n4p8otDyvW2XX4KtPP/bFfUW082icTWNK9J5zBBD4=)
                          3: xDz5khWz84DZoygENZz9smDY9DE.roa (hash: ImBhN/9eW34k/DBkodgK0kDXEWCtP6C29MLbYuo8Lq4=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2e:61:e9:7a:af:5f:89:58:14:9f:a8:b5:de:cb:cf:be
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e1f3f6dc4610f6c9bbaa4532111738e493b6adf0
        Validity
            Not Before: Apr 13 09:01:30 2025 GMT
            Not After : Apr 14 09:01:30 2025 GMT
        Subject: CN=01bfbc356ce1b3051cb0b48ceed9a86aa1123d27
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a2:c0:70:6e:38:0c:c5:3e:84:3b:dc:08:52:8f:
                    a6:db:de:17:6a:45:73:a6:41:6b:f6:fd:3c:76:90:
                    17:24:de:f9:01:98:50:8f:58:25:08:eb:88:74:21:
                    3b:dd:05:fe:a3:04:24:c6:2b:a2:02:d2:54:8c:98:
                    82:91:14:f7:ae:24:33:ae:79:bb:9f:85:aa:07:ed:
                    8f:e4:f1:5a:ad:d7:27:e3:15:e6:0c:51:0e:16:30:
                    a8:67:5b:08:1f:02:4f:34:bc:27:c0:ce:85:90:5d:
                    92:f4:10:2b:e8:1b:cc:35:13:d2:98:f8:35:f0:41:
                    ba:43:79:e2:5c:3e:04:79:0a:58:e0:03:9a:af:39:
                    7b:af:c1:66:cb:f5:ec:18:84:12:83:2c:b5:d1:36:
                    1f:0b:2a:74:fd:97:f4:de:4c:1f:4d:68:04:2c:af:
                    e8:a4:13:6b:89:11:f6:73:0a:7c:47:ff:ab:d1:a8:
                    b3:df:37:cf:c8:46:7f:96:00:35:b4:1c:e7:74:5e:
                    7d:f4:9c:e0:44:79:4e:4e:c4:fb:3b:e6:71:f5:52:
                    8c:95:23:dd:90:b2:57:eb:56:04:ca:7b:b1:27:b9:
                    b1:20:d4:7f:e3:75:d9:ae:c3:0a:d5:d4:d5:5d:e0:
                    31:90:88:15:7f:d5:72:9f:a4:73:6e:f6:0a:40:53:
                    5d:21
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                01:BF:BC:35:6C:E1:B3:05:1C:B0:B4:8C:EE:D9:A8:6A:A1:12:3D:27
            X509v3 Authority Key Identifier:
                keyid:E1:F3:F6:DC:46:10:F6:C9:BB:AA:45:32:11:17:38:E4:93:B6:AD:F0

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/4fP23EYQ9sm7qkUyERc45JO2rfA.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/11/b36132-ca77-4584-8d7b-291b7ad093bf/1/4fP23EYQ9sm7qkUyERc45JO2rfA.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/11/b36132-ca77-4584-8d7b-291b7ad093bf/1/4fP23EYQ9sm7qkUyERc45JO2rfA.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         44:3a:32:ad:f7:0a:fa:b6:8b:87:56:b1:d9:75:a3:db:09:d6:
         41:fb:1e:ea:fc:bd:ed:6e:34:c9:15:7f:2a:74:84:ba:59:44:
         03:d1:59:68:e0:25:b5:da:0b:18:ed:9a:23:be:f9:cc:90:fb:
         f5:df:39:b1:09:8f:e3:ff:be:35:2c:0b:7d:01:b8:59:c6:1c:
         d3:f3:a5:8e:02:6d:92:9b:ce:75:a5:ec:04:11:24:12:1f:10:
         06:14:61:9c:a8:02:a8:20:b6:6d:9e:26:01:1a:df:0d:95:cc:
         67:6c:04:fc:73:b4:46:69:e0:3f:dc:82:ec:de:85:b6:b6:7a:
         6e:bb:4a:66:96:95:68:32:73:8d:0a:5c:4b:f9:9b:c6:5a:d9:
         c8:de:50:56:5e:39:37:9a:3f:a0:3f:5e:4e:06:9e:b0:cb:80:
         e6:c1:0e:8a:98:94:ea:bc:28:95:58:55:a6:72:e0:ab:2b:92:
         c7:a1:58:0b:2c:ed:36:7b:c0:08:61:bd:98:73:b8:4f:b1:42:
         76:35:b3:29:16:be:0d:d4:ec:c0:9b:5c:e9:c6:06:ac:ad:d9:
         94:86:20:45:69:b0:73:18:32:32:9d:5b:0f:26:64:3e:e0:ea:
         c5:e9:63:5a:90:57:91:9d:60:a5:a2:be:09:67:1c:ea:1c:71:
         63:48:ab:1b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----