Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/15/cc48f4-0d93-4b69-8a4f-8724ed5e903a/1/8-NiIsy8bHIhNgVAurOp26nyN6A.mft
File:                     8-NiIsy8bHIhNgVAurOp26nyN6A.mft (raw, json)
Hash identifier:          aM6JSac/gGPxKlsWGYzWdZW7esPoI0Hh71mFxTmq4oU=
Subject key identifier:   73:43:50:27:6A:3A:A2:24:57:2E:93:40:4E:74:D3:7B:FB:C8:3D:FB
Authority key identifier: F3:E3:62:22:CC:BC:6C:72:21:36:05:40:BA:B3:A9:DB:A9:F2:37:A0
Certificate issuer:       /CN=f3e36222ccbc6c7221360540bab3a9dba9f237a0
Certificate serial:       01962F06F36B439AA7F6146B64FCA8F23A31
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/8-NiIsy8bHIhNgVAurOp26nyN6A.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/15/cc48f4-0d93-4b69-8a4f-8724ed5e903a/1/8-NiIsy8bHIhNgVAurOp26nyN6A.mft
Manifest number:          12A8
Signing time:             Sun 13 Apr 2025 12:01:46 +0000
Manifest this update:     Sun 13 Apr 2025 12:01:46 +0000
Manifest next update:     Mon 14 Apr 2025 12:01:46 +0000
Files and hashes:         1: 4OAQQVO8VIFzfsVpiMv8jSSll54.roa (hash: JMcD21CurSjrVb9e/Fa0SxXVumzBh+XhCdZn2t0vX/k=)
                          2: 554gdq_ok9HYl3wcKstvNBVgVnI.roa (hash: KPXZ5rw0NzwP5c/cXfxWSL2Bey+lXp0pHFMUbBSidd8=)
                          3: 8-NiIsy8bHIhNgVAurOp26nyN6A.crl (hash: AYMZE1kak1A1L2gdHtr+wAk3tYYaKhnogEwMjKnT6OI=)
                          4: S4_bZaUrYeif2UyHHeNglamlIdY.roa (hash: xW3QM1MxANWCikFD0BTEoT7OwPC4SDKTPMb/5xd/WUE=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2f:06:f3:6b:43:9a:a7:f6:14:6b:64:fc:a8:f2:3a:31
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=f3e36222ccbc6c7221360540bab3a9dba9f237a0
        Validity
            Not Before: Apr 13 12:01:46 2025 GMT
            Not After : Apr 14 12:01:46 2025 GMT
        Subject: CN=734350276a3aa224572e93404e74d37bfbc83dfb
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a6:4b:41:4c:aa:43:ae:4c:86:f2:c5:da:4a:fe:
                    2a:38:87:47:c2:6e:ec:78:08:91:27:c2:9d:2c:b8:
                    c7:bb:0c:08:29:aa:86:ba:7e:e1:1a:36:9f:af:ee:
                    96:e4:89:56:ec:cb:9b:69:e2:9e:d7:03:31:37:38:
                    46:94:3b:e6:1e:f6:2a:3f:a1:bc:e5:fb:fd:b4:6d:
                    62:3a:bc:3e:1a:db:26:8b:f4:e7:3d:9f:7a:4b:0d:
                    cc:fe:42:b4:1b:4d:a3:4f:ff:c4:4e:8d:94:b9:77:
                    d0:a8:7b:b6:8b:a3:5e:1f:af:d8:6a:35:f4:05:d5:
                    79:0d:f8:14:c4:6b:e9:1d:7e:c7:8b:69:02:62:09:
                    76:ca:f8:9e:87:9d:07:61:af:e3:1f:59:23:93:f3:
                    eb:6c:f0:cd:e4:35:1e:4b:13:6b:5b:55:b5:30:16:
                    4e:b5:f8:b6:bc:b3:b9:aa:9c:79:12:47:a5:21:cc:
                    68:61:bd:9b:fe:b4:c9:e8:b4:da:f6:99:f0:f0:64:
                    28:6f:3c:6b:ba:82:ce:e0:ab:e3:2d:82:f8:d2:ff:
                    d2:3e:1b:39:56:5a:eb:82:7f:fe:db:7e:8e:90:bc:
                    a0:d9:80:87:5f:3a:3a:64:76:08:a7:1f:79:33:02:
                    aa:42:37:30:33:2c:5f:c0:56:ea:fb:1e:46:0d:34:
                    0f:d3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                73:43:50:27:6A:3A:A2:24:57:2E:93:40:4E:74:D3:7B:FB:C8:3D:FB
            X509v3 Authority Key Identifier:
                keyid:F3:E3:62:22:CC:BC:6C:72:21:36:05:40:BA:B3:A9:DB:A9:F2:37:A0

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/8-NiIsy8bHIhNgVAurOp26nyN6A.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/15/cc48f4-0d93-4b69-8a4f-8724ed5e903a/1/8-NiIsy8bHIhNgVAurOp26nyN6A.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/15/cc48f4-0d93-4b69-8a4f-8724ed5e903a/1/8-NiIsy8bHIhNgVAurOp26nyN6A.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         3b:c5:71:41:fb:52:bb:e0:44:e1:71:64:86:94:f9:c3:8e:fd:
         e6:1c:0f:f2:af:06:82:15:af:af:0b:1a:e1:dc:07:54:f3:6a:
         7f:67:4d:3c:9f:75:68:a7:b3:35:08:73:f5:53:de:e8:30:59:
         e0:11:12:2c:80:c6:93:25:6f:e9:e4:6c:16:e3:01:71:3b:24:
         9c:a5:0f:ad:b2:03:4a:02:a7:93:77:bb:dc:e0:ec:fe:4f:2f:
         3f:ee:8e:ed:e5:0d:bd:01:6d:4c:76:07:a1:6a:bb:b4:18:f9:
         f2:e2:ea:e1:45:01:66:40:31:9d:01:12:84:13:02:3c:8c:90:
         87:b3:68:9c:7e:80:6c:cc:86:b4:b1:ff:86:e1:17:79:e0:d1:
         8b:00:c0:10:a7:06:22:b3:b1:70:40:61:c7:87:b9:46:bb:07:
         ff:29:6c:a2:fe:c1:4f:d6:ed:8c:1d:10:d8:89:fc:44:36:89:
         3a:72:f3:cf:81:74:78:f2:a8:33:33:df:04:e0:30:36:1d:7e:
         b7:8f:d3:63:32:a7:fc:57:9b:29:8f:3e:0b:7d:85:04:00:5e:
         24:c3:e4:06:ec:01:ca:43:e2:e7:d4:df:80:32:89:22:d4:ef:
         92:34:68:8b:9b:6a:66:24:5c:b0:3e:c9:98:2b:23:78:04:4b:
         04:c0:c3:18
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----