Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1f/9668b5-5e92-4c18-9bb9-4351bbf74c0c/1/Ty0wsBXsTvGw08ZDR8jRtZgpP4E.mft
File:                     Ty0wsBXsTvGw08ZDR8jRtZgpP4E.mft (raw, json)
Hash identifier:          u84J9UNU6c3CLLIf6QS+N5tnOj3LkE8UUKhcWgQlCfs=
Subject key identifier:   14:01:8D:E5:33:B1:14:92:CF:41:3F:8C:AE:6E:79:51:17:4F:4D:9E
Authority key identifier: 4F:2D:30:B0:15:EC:4E:F1:B0:D3:C6:43:47:C8:D1:B5:98:29:3F:81
Certificate issuer:       /CN=4f2d30b015ec4ef1b0d3c64347c8d1b598293f81
Certificate serial:       01962ECF9D67526523852573B3E44C5D6E74
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/Ty0wsBXsTvGw08ZDR8jRtZgpP4E.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/1f/9668b5-5e92-4c18-9bb9-4351bbf74c0c/1/Ty0wsBXsTvGw08ZDR8jRtZgpP4E.mft
Manifest number:          0751
Signing time:             Sun 13 Apr 2025 11:01:20 +0000
Manifest this update:     Sun 13 Apr 2025 11:01:20 +0000
Manifest next update:     Mon 14 Apr 2025 11:01:20 +0000
Files and hashes:         1: 1QmmbYJZZWZoqiWNQVq4wZmhLNg.roa (hash: gVkThpG7tc6UKYu6nfIrbCxYB1OnM75XNE9Zf3BxXSE=)
                          2: Gm9NfecPR-RUq_slL2NKmzGqQ1c.roa (hash: tkU2/2KHzDAlfUyxsnryBif6WpEicFze6N39RJoBTkM=)
                          3: IdcqQLaLPNCQJzdTXpACnqYscnI.roa (hash: H+1S4n+OyXlFrQgh9A84gwVt0xMSOKKs5oiKIXtOgjU=)
                          4: OVQ5uPkYukiV8dv56D7X8vrwp8E.roa (hash: OWeiLtMHum8JXxqxvdWPi5crevEaVFFy1EtOqegV6tI=)
                          5: P8VDh_9fdYN8xXLvtJMOKaqZaBs.roa (hash: nMTrg+lyYaQ59OMP8FwWXirKWOtKtrNaOkuqtu/tSjc=)
                          6: Pq__l0a6HrBOcCXhEDnn7AV0g54.roa (hash: A1mBB7bcRpMOwkOKXDY7TtCFDZr1ayBKUG0wvvr/Zlw=)
                          7: Ty0wsBXsTvGw08ZDR8jRtZgpP4E.crl (hash: 5wnOwZHBNgfaemQdH/FXG7lL223o8QAzocW7epz8CqM=)
                          8: qqV4lt6FTPnmuHdRaoUeaEC2b8U.roa (hash: HtCD/Cd4hhljqddcvUw+6pkmRGrV8qPj/FjkfpsV+Jw=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2e:cf:9d:67:52:65:23:85:25:73:b3:e4:4c:5d:6e:74
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4f2d30b015ec4ef1b0d3c64347c8d1b598293f81
        Validity
            Not Before: Apr 13 11:01:20 2025 GMT
            Not After : Apr 14 11:01:20 2025 GMT
        Subject: CN=14018de533b11492cf413f8cae6e7951174f4d9e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cb:bd:bd:39:d6:93:fc:c3:5a:1d:8b:81:ae:1c:
                    b6:5b:0a:a1:90:d7:57:16:51:2d:5c:b1:8f:3d:a9:
                    3f:a2:09:a1:65:ca:c5:3b:92:d9:a9:46:8a:22:47:
                    88:92:1e:ee:81:8d:5b:8b:48:ec:95:11:6b:0c:7d:
                    5f:1b:ef:a9:e4:d4:1a:52:af:cc:ec:02:f5:8e:29:
                    8d:9a:22:5e:41:43:24:ac:08:99:57:64:b1:93:b8:
                    7b:8d:86:91:00:62:1d:4d:86:f5:fd:09:43:0a:24:
                    a3:f9:09:8d:37:d6:27:2b:a4:9c:71:ab:65:8e:cf:
                    81:1b:7d:14:8a:12:cb:52:40:e9:cf:5a:be:c5:e1:
                    4d:2c:c3:b0:74:af:c4:8b:c5:cb:30:a3:e6:1b:b7:
                    6f:fb:37:fc:ef:fa:7e:a3:ec:fe:23:a5:8f:c6:eb:
                    be:69:55:0b:35:c3:24:e2:de:7e:f1:fa:03:57:8f:
                    30:07:7c:37:7c:50:78:15:94:4c:a1:df:ee:fe:c8:
                    bf:12:2a:cd:95:98:81:da:97:a3:17:87:d7:18:73:
                    85:6c:d5:2c:3e:46:d6:b2:f8:c3:bb:99:e8:ee:50:
                    fe:b4:d6:5c:ab:55:6e:fc:a0:0b:8d:d5:4f:c0:2a:
                    ca:30:3a:6c:a3:6c:9f:05:e7:cb:bf:61:8d:f2:b5:
                    75:35
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                14:01:8D:E5:33:B1:14:92:CF:41:3F:8C:AE:6E:79:51:17:4F:4D:9E
            X509v3 Authority Key Identifier:
                keyid:4F:2D:30:B0:15:EC:4E:F1:B0:D3:C6:43:47:C8:D1:B5:98:29:3F:81

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Ty0wsBXsTvGw08ZDR8jRtZgpP4E.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1f/9668b5-5e92-4c18-9bb9-4351bbf74c0c/1/Ty0wsBXsTvGw08ZDR8jRtZgpP4E.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/1f/9668b5-5e92-4c18-9bb9-4351bbf74c0c/1/Ty0wsBXsTvGw08ZDR8jRtZgpP4E.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         53:6e:70:7f:cb:f6:fd:97:ba:82:ee:33:37:e7:37:75:67:81:
         56:41:c6:9b:4c:14:5e:c1:9f:4b:dd:97:53:a1:f4:34:d7:45:
         e3:6f:ed:fd:21:40:18:e5:4e:84:aa:38:65:7b:32:5a:5b:67:
         26:e6:65:61:b6:9a:1c:d2:52:9e:22:5a:33:97:d4:ea:d1:93:
         4e:c8:d1:19:52:aa:67:4c:7f:b7:f2:92:b6:5e:26:60:f1:e4:
         4a:53:15:d1:a7:ea:c6:64:70:23:46:da:a9:76:c4:f3:13:6b:
         13:88:9b:82:90:6d:10:85:d6:93:9f:3b:b8:a2:06:75:bd:a7:
         2f:c2:22:89:de:bd:06:3e:3a:e1:36:3c:ee:71:22:86:bf:e8:
         e5:f7:a9:23:72:02:04:2c:eb:d6:19:9d:69:2a:86:7e:4b:4c:
         c6:58:20:2a:a0:e5:54:8a:72:98:c9:22:49:07:38:e8:23:18:
         81:81:ae:ac:c7:d8:10:96:89:dd:9d:fc:28:cb:61:c7:68:00:
         41:7b:fb:ce:2e:cc:fc:34:7f:98:34:83:e6:f4:d7:17:10:13:
         48:cd:c5:0d:28:5b:33:b7:e5:fc:f9:34:10:69:fc:7d:43:1c:
         62:fd:fc:e2:8c:db:c3:4b:2c:95:b8:0f:08:96:42:f1:fd:0d:
         3a:df:ec:03
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----