Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1d/2ed10c-04b0-4866-9b82-c522b74ddcfd/1/mFS9ioY6MYlcxsuSLzAIs_CKra4.mft
File:                     mFS9ioY6MYlcxsuSLzAIs_CKra4.mft (raw, json)
Hash identifier:          efUBszkyxRPwrWhPeDkOfWOgITSALK2VRPrEGsMwB74=
Subject key identifier:   B3:2B:4D:DF:FD:D5:C7:C8:A9:8F:01:51:00:7A:02:F9:53:B5:82:B7
Authority key identifier: 98:54:BD:8A:86:3A:31:89:5C:C6:CB:92:2F:30:08:B3:F0:8A:AD:AE
Certificate issuer:       /CN=9854bd8a863a31895cc6cb922f3008b3f08aadae
Certificate serial:       01962ECFB2108CD1FC75C6067F5424C5E7E0
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/mFS9ioY6MYlcxsuSLzAIs_CKra4.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/1d/2ed10c-04b0-4866-9b82-c522b74ddcfd/1/mFS9ioY6MYlcxsuSLzAIs_CKra4.mft
Manifest number:          147A
Signing time:             Sun 13 Apr 2025 11:01:25 +0000
Manifest this update:     Sun 13 Apr 2025 11:01:25 +0000
Manifest next update:     Mon 14 Apr 2025 11:01:25 +0000
Files and hashes:         1: 7Q18JYmAuxaMa6IHufbofG2Nif4.roa (hash: SgEEylWwu8UHfA3f6YmbRxIxeIe/WWwb7mO+pnXONBI=)
                          2: mFS9ioY6MYlcxsuSLzAIs_CKra4.crl (hash: 3RwxN0/GDcwfppwYtHIg/LNHwt57PAtZF3ySGnUtxKE=)
                          3: zzW0oiISqz8GtZ1LDC69YbNiON4.roa (hash: qDXsu9oGWoasH8gnG9BaDFXmdIAxeKxrhPwrD6gYHG4=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2e:cf:b2:10:8c:d1:fc:75:c6:06:7f:54:24:c5:e7:e0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9854bd8a863a31895cc6cb922f3008b3f08aadae
        Validity
            Not Before: Apr 13 11:01:25 2025 GMT
            Not After : Apr 14 11:01:25 2025 GMT
        Subject: CN=b32b4ddffdd5c7c8a98f0151007a02f953b582b7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bb:49:fd:96:6a:b3:85:2e:3f:68:ae:0e:25:a8:
                    78:8b:7f:9e:d9:2a:36:90:b8:44:b9:25:05:08:af:
                    58:b8:59:a7:39:6f:3b:c4:40:62:10:02:d9:d7:a5:
                    d6:41:41:17:ff:10:a3:c9:c8:ea:5d:4b:82:eb:ae:
                    1c:88:1a:f6:d5:b6:5b:94:73:d2:df:9b:4e:9c:4a:
                    ae:a0:57:0e:6b:82:03:fa:1e:69:49:ef:9e:cf:f1:
                    88:71:bb:49:3f:94:a6:d3:bf:0b:9a:4b:a4:db:c8:
                    03:52:f9:7e:57:f3:11:45:07:5f:8d:fa:fd:a1:3d:
                    5a:2d:7a:c4:1d:bc:0c:78:b4:b9:2b:14:c5:0d:0e:
                    29:27:14:fc:e2:e5:2e:e4:9f:78:55:cd:82:79:e9:
                    cd:a2:4a:33:5f:cc:f6:95:99:88:49:cc:75:c5:4d:
                    d2:ae:db:66:ac:70:5b:78:87:11:16:03:05:e6:60:
                    96:78:0a:83:6d:2f:f3:41:2c:94:c7:94:b3:e0:c9:
                    83:de:77:72:8b:ba:e2:33:5b:af:a1:be:77:8e:f2:
                    52:7e:84:d8:22:c3:69:b7:85:1f:74:d3:42:2f:d3:
                    c7:bc:1b:7f:da:d6:22:cb:96:b1:07:0a:6a:5d:24:
                    59:33:69:32:33:d9:55:13:a2:1e:4d:95:45:16:fa:
                    f3:67
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B3:2B:4D:DF:FD:D5:C7:C8:A9:8F:01:51:00:7A:02:F9:53:B5:82:B7
            X509v3 Authority Key Identifier:
                keyid:98:54:BD:8A:86:3A:31:89:5C:C6:CB:92:2F:30:08:B3:F0:8A:AD:AE

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/mFS9ioY6MYlcxsuSLzAIs_CKra4.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1d/2ed10c-04b0-4866-9b82-c522b74ddcfd/1/mFS9ioY6MYlcxsuSLzAIs_CKra4.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/1d/2ed10c-04b0-4866-9b82-c522b74ddcfd/1/mFS9ioY6MYlcxsuSLzAIs_CKra4.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         04:ca:b4:b0:8d:80:5a:9d:b2:db:ba:e1:95:42:5a:7f:41:bb:
         8c:a2:b4:f9:6d:b3:99:e6:2c:27:1b:0f:91:57:e8:d3:63:39:
         ee:af:86:62:e2:62:53:be:8b:5f:72:da:a4:d0:4c:b7:c6:9a:
         6d:63:d8:db:ea:e1:9e:2f:a4:eb:e0:b0:5f:b0:c5:d1:db:11:
         3a:e5:8a:5c:c0:b3:5e:12:b8:7e:89:61:71:1b:19:98:8c:f4:
         eb:22:7b:f1:cc:b2:78:00:c6:8e:a8:49:89:7f:70:31:c2:6b:
         15:83:46:a1:51:ac:61:db:ba:9e:5d:74:35:89:70:ab:a0:f9:
         e6:72:4a:0d:f0:ac:65:15:09:54:d7:e7:a8:76:25:8d:64:b8:
         dd:15:1a:44:4e:0c:db:3f:e6:ff:51:5e:6e:16:69:b4:cc:62:
         77:b4:92:5e:f7:1d:7f:aa:ed:af:ca:a4:44:6b:ea:ad:1e:53:
         f0:69:45:1b:bb:84:43:f5:ec:36:00:e0:9b:bc:2d:69:ba:80:
         6c:c7:e5:c9:77:a5:61:96:39:b5:f8:9f:ef:af:8a:df:78:5a:
         c5:53:43:ef:12:52:f4:ed:28:64:9f:b7:27:0d:80:78:1a:31:
         43:6c:d0:b2:96:b7:2f:15:47:c6:cf:a0:72:6c:c2:ae:66:95:
         45:e8:64:0b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----