Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/20/b8c3bd-16ef-4f2c-9400-db099e585e4b/1/rY6Ff8AL4U7ZK554zDymm4rcJIU.mft
File:                     rY6Ff8AL4U7ZK554zDymm4rcJIU.mft (raw, json)
Hash identifier:          hACpbVxmMvp9c9blqIVUf5p4+MGdPZghXlvcbqm5btM=
Subject key identifier:   B4:85:A2:30:4A:B7:01:26:F9:BA:14:5D:9F:4F:75:FD:10:A2:7D:60
Authority key identifier: AD:8E:85:7F:C0:0B:E1:4E:D9:2B:9E:78:CC:3C:A6:9B:8A:DC:24:85
Certificate issuer:       /CN=ad8e857fc00be14ed92b9e78cc3ca69b8adc2485
Certificate serial:       01962F069E3140BBCD923931908825140A8F
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/rY6Ff8AL4U7ZK554zDymm4rcJIU.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/20/b8c3bd-16ef-4f2c-9400-db099e585e4b/1/rY6Ff8AL4U7ZK554zDymm4rcJIU.mft
Manifest number:          14E4
Signing time:             Sun 13 Apr 2025 12:01:24 +0000
Manifest this update:     Sun 13 Apr 2025 12:01:24 +0000
Manifest next update:     Mon 14 Apr 2025 12:01:24 +0000
Files and hashes:         1: OJD8WtNdD2Fkoa1-b6aE9G3M64k.roa (hash: EhOploeWX4IzgMSZUmJHUcObR1oyvr4q2CNLTcIgD8g=)
                          2: rY6Ff8AL4U7ZK554zDymm4rcJIU.crl (hash: SxtbgjvZD0yR0kA3j8mNGy/8hoMm/O1yPHd0TSrpLIc=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2f:06:9e:31:40:bb:cd:92:39:31:90:88:25:14:0a:8f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=ad8e857fc00be14ed92b9e78cc3ca69b8adc2485
        Validity
            Not Before: Apr 13 12:01:24 2025 GMT
            Not After : Apr 14 12:01:24 2025 GMT
        Subject: CN=b485a2304ab70126f9ba145d9f4f75fd10a27d60
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ba:bb:28:94:ce:88:c1:6d:5b:b8:f9:b1:10:f0:
                    48:fb:0a:6b:53:71:9d:5d:7d:aa:8e:5d:09:37:ed:
                    4c:ee:2c:8f:14:a7:eb:3c:53:a6:6f:99:7c:cf:12:
                    55:54:a6:75:10:b8:3a:9f:b0:dc:dd:b8:b7:1d:a7:
                    4b:82:d1:97:a2:d8:18:eb:9b:66:30:91:cb:38:f2:
                    f0:27:d3:ee:47:72:cc:58:cf:48:b5:05:8e:0b:83:
                    c5:1a:44:9e:de:eb:cf:71:ba:1a:30:6f:e5:30:96:
                    ac:60:ba:00:0b:d8:4f:c9:c4:30:a2:8f:8b:a1:02:
                    cc:16:79:0f:54:90:65:41:c6:57:2f:96:d6:99:c9:
                    78:44:f5:07:43:26:61:d4:fd:ce:d8:ed:62:37:03:
                    36:31:f6:04:2d:24:06:d7:19:bd:6b:2f:43:f3:98:
                    e0:d2:b6:0e:8b:3d:2a:47:21:7b:cf:2c:e2:fd:1a:
                    f7:ea:6b:11:63:ec:23:07:80:fd:c5:00:05:8f:ce:
                    66:e2:a5:46:3d:19:f8:b7:3c:26:3d:ce:bf:7f:e4:
                    42:f0:bc:bf:72:0a:5e:48:01:e8:0a:bc:6d:72:ea:
                    78:91:0c:80:47:02:9e:ac:d8:df:e9:09:91:79:8b:
                    95:b0:3f:48:a2:54:73:55:1a:a2:6d:cc:ce:aa:c0:
                    16:51
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B4:85:A2:30:4A:B7:01:26:F9:BA:14:5D:9F:4F:75:FD:10:A2:7D:60
            X509v3 Authority Key Identifier:
                keyid:AD:8E:85:7F:C0:0B:E1:4E:D9:2B:9E:78:CC:3C:A6:9B:8A:DC:24:85

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/rY6Ff8AL4U7ZK554zDymm4rcJIU.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/20/b8c3bd-16ef-4f2c-9400-db099e585e4b/1/rY6Ff8AL4U7ZK554zDymm4rcJIU.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/20/b8c3bd-16ef-4f2c-9400-db099e585e4b/1/rY6Ff8AL4U7ZK554zDymm4rcJIU.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         61:bd:26:11:80:1f:ba:7b:5b:db:1a:3b:3d:d8:e5:66:0f:33:
         81:44:97:f8:88:b8:ed:a0:c8:32:3f:21:a7:ce:73:b2:97:25:
         5a:34:df:a1:9e:1a:fd:72:77:d4:8d:b7:24:66:4d:12:57:53:
         92:17:d3:b0:6a:89:8e:81:21:3d:a1:29:c3:77:09:cf:93:0c:
         7d:5c:19:a1:90:10:e6:b7:6c:bd:9c:c7:18:69:52:12:96:1a:
         44:dd:e9:b0:92:0a:2e:df:0b:b7:66:33:87:89:4b:68:db:1a:
         c1:62:35:83:92:75:a0:0e:a7:84:bf:2d:86:13:68:3a:f4:91:
         70:5b:f7:9e:0e:fe:18:9a:9b:b0:60:1e:d9:a4:c4:7e:a2:29:
         92:66:46:09:2a:e2:d0:07:1d:ff:88:32:51:d4:9e:c5:72:99:
         78:5c:17:9d:49:cd:c9:e4:fe:84:62:df:a6:df:5e:45:e3:79:
         85:f3:45:c2:0a:be:99:43:19:3a:58:6d:69:00:2f:14:5a:b7:
         a1:77:bf:21:37:27:6c:fa:a4:fd:d4:ad:24:95:d2:d9:1b:49:
         ab:b6:e1:f2:cc:8d:74:ff:cf:09:10:0a:49:d1:bf:3e:ff:cf:
         ee:9f:5c:40:fa:51:c2:58:ec:5f:d9:1e:be:74:64:be:f2:fd:
         4e:a0:4c:ae
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----