Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1b/b1393d-cca8-4a97-81aa-643a4159ab46/1/AdGhNT9_i1BfyYdQ6GeH9OBGQy4.mft
File:                     AdGhNT9_i1BfyYdQ6GeH9OBGQy4.mft (raw, json)
Hash identifier:          iDpA3r4Qs397q0XS6rDcPAO79Jxk7jW3XzionNLW9h8=
Subject key identifier:   9C:93:BD:40:17:C6:8F:59:9E:CD:A2:4C:2C:1D:7B:55:75:A4:ED:6C
Authority key identifier: 01:D1:A1:35:3F:7F:8B:50:5F:C9:87:50:E8:67:87:F4:E0:46:43:2E
Certificate issuer:       /CN=01d1a1353f7f8b505fc98750e86787f4e046432e
Certificate serial:       01962F742F7939CAEA0D46C4CDDEC5A78400
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/AdGhNT9_i1BfyYdQ6GeH9OBGQy4.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/1b/b1393d-cca8-4a97-81aa-643a4159ab46/1/AdGhNT9_i1BfyYdQ6GeH9OBGQy4.mft
Manifest number:          1566
Signing time:             Sun 13 Apr 2025 14:01:05 +0000
Manifest this update:     Sun 13 Apr 2025 14:01:05 +0000
Manifest next update:     Mon 14 Apr 2025 14:01:05 +0000
Files and hashes:         1: AdGhNT9_i1BfyYdQ6GeH9OBGQy4.crl (hash: S30lg8cLadeD/+CFTcjvXqsKalG3RQx9y0jXXEP0+lQ=)
                          2: Qag3TzhF7KhIYH5aibVcZEo78dU.roa (hash: LGNFeenPDMIIHhq8fjkVK3bg4N97KxBcN+ypQDigoxM=)
                          3: a2opnLjAdetXY_1JtX6e5k1djAk.roa (hash: JHmWYExOHBSKedqf+sSdese/XJZ0oxQzlwRK0J1GOlU=)
                          4: iUQqy6L6aDZjvtuJxQqMCFgGkBI.roa (hash: 2s0toD9du/uNKvxO9wvANUSYpPI3MyFsTUVNofTuzE8=)
                          5: llcs6Od6YR4MeLUy9oW3lXAh8-M.roa (hash: bwRJfOGWaF+eU210P1JQ8iulF7tPev/v56RePww0KWY=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2f:74:2f:79:39:ca:ea:0d:46:c4:cd:de:c5:a7:84:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=01d1a1353f7f8b505fc98750e86787f4e046432e
        Validity
            Not Before: Apr 13 14:01:05 2025 GMT
            Not After : Apr 14 14:01:05 2025 GMT
        Subject: CN=9c93bd4017c68f599ecda24c2c1d7b5575a4ed6c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bb:7f:07:94:a7:ca:f6:13:2e:6a:b5:04:f7:6f:
                    d2:5c:41:e9:5a:24:22:0f:5c:44:39:f3:40:4b:4f:
                    c0:fd:4a:d9:d6:95:8b:be:eb:0c:f5:22:73:6e:a0:
                    77:6e:9a:be:06:56:b7:30:13:a4:a8:1e:43:d7:d4:
                    d2:d1:42:f6:25:72:ee:59:9d:96:04:83:6b:ef:30:
                    59:4b:49:4b:c8:51:38:01:ac:84:72:40:19:65:4a:
                    e6:d8:82:6d:cd:ac:b5:ae:17:89:06:2a:03:c5:1c:
                    68:2c:f7:a6:16:f4:6c:37:e1:00:09:e9:de:48:ab:
                    1f:7b:86:ee:0d:5e:3a:42:59:dc:cf:bb:84:2f:21:
                    1f:a0:4e:46:96:d5:2a:77:c6:e5:4f:8a:a5:b2:90:
                    0c:1c:65:d9:96:15:0e:7c:b3:6f:89:0b:df:a7:9b:
                    06:1f:b0:d3:1a:4b:09:23:7f:6d:0a:63:3a:1c:43:
                    bc:20:f3:42:52:b8:66:e4:ee:d5:e6:28:a6:97:aa:
                    73:0a:7a:e1:bc:8c:2a:c4:ed:a2:9c:85:82:51:8d:
                    90:d3:91:19:d0:d4:6b:f8:ec:f8:54:26:3b:d4:7c:
                    f0:da:e2:4b:d8:62:6f:5c:f3:a4:7c:6d:b7:79:d1:
                    82:7f:16:30:21:f2:52:c7:cc:2b:bc:32:29:75:51:
                    54:49
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9C:93:BD:40:17:C6:8F:59:9E:CD:A2:4C:2C:1D:7B:55:75:A4:ED:6C
            X509v3 Authority Key Identifier:
                keyid:01:D1:A1:35:3F:7F:8B:50:5F:C9:87:50:E8:67:87:F4:E0:46:43:2E

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/AdGhNT9_i1BfyYdQ6GeH9OBGQy4.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1b/b1393d-cca8-4a97-81aa-643a4159ab46/1/AdGhNT9_i1BfyYdQ6GeH9OBGQy4.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/1b/b1393d-cca8-4a97-81aa-643a4159ab46/1/AdGhNT9_i1BfyYdQ6GeH9OBGQy4.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         12:96:6c:fd:4a:bb:04:dd:91:7f:f7:a2:c2:e3:90:d5:d0:09:
         d5:31:7c:14:27:90:62:31:0a:da:30:a2:ba:7b:5b:fd:4b:f7:
         ec:fd:17:da:0e:c1:85:59:55:83:9e:91:c9:08:c4:dc:7f:32:
         ef:46:83:1e:fe:98:5a:fd:d3:8e:d2:6d:79:82:05:61:11:15:
         c2:a4:25:6f:07:d8:74:b4:11:20:a8:92:51:9e:22:9f:b7:ed:
         b9:44:f3:38:de:35:c5:00:9a:df:82:cf:41:b9:fa:20:ad:07:
         83:ec:01:3a:85:8c:ce:a2:96:61:3b:16:35:00:a0:68:c5:43:
         2f:41:85:fe:62:5f:62:0e:6f:c0:47:ea:fa:ad:16:b4:6b:91:
         b0:25:e5:0a:91:f2:9c:f5:00:c1:bb:e8:a8:6f:e8:1e:57:51:
         6b:64:ca:7e:10:94:76:8f:c3:c8:8e:ba:4b:5d:f2:84:31:d5:
         d6:34:81:0b:12:1d:f5:aa:69:1a:29:6b:df:50:16:18:0a:54:
         46:58:6c:98:6c:87:f1:70:08:94:56:96:c2:47:6e:dd:c2:87:
         fe:1c:6b:5b:19:90:0d:0e:4e:b2:75:83:86:99:f7:7b:fb:ef:
         97:61:27:49:e7:76:c2:74:a5:2f:23:fe:38:42:8d:b3:31:9d:
         21:ba:09:46
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----