Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/24/3edb47-fd6e-4c59-a7ab-e42a58064a63/1/4Q1cKaNDlwPYm1q_A6ddhhdxvvQ.mft
File:                     4Q1cKaNDlwPYm1q_A6ddhhdxvvQ.mft (raw, json)
Hash identifier:          YhIGRNawarVWSKQpgBkIhTbQKbni6dKfOL+iRk2Lkfc=
Subject key identifier:   87:A3:C7:43:DB:10:57:B5:0F:E4:ED:C8:86:A0:A0:D1:7C:61:30:83
Authority key identifier: E1:0D:5C:29:A3:43:97:03:D8:9B:5A:BF:03:A7:5D:86:17:71:BE:F4
Certificate issuer:       /CN=e10d5c29a3439703d89b5abf03a75d861771bef4
Certificate serial:       01962E2B00BD888B63E7CDB4E24BEC1ACE67
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/4Q1cKaNDlwPYm1q_A6ddhhdxvvQ.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/24/3edb47-fd6e-4c59-a7ab-e42a58064a63/1/4Q1cKaNDlwPYm1q_A6ddhhdxvvQ.mft
Manifest number:          153F
Signing time:             Sun 13 Apr 2025 08:01:32 +0000
Manifest this update:     Sun 13 Apr 2025 08:01:32 +0000
Manifest next update:     Mon 14 Apr 2025 08:01:32 +0000
Files and hashes:         1: 4Q1cKaNDlwPYm1q_A6ddhhdxvvQ.crl (hash: MhOaPsGweuoOgs8V07McZp0oHTmsGPY/qxIh5bCnDv0=)
                          2: EERZ__dtLBxNrb4xviIUvrGB-a8.roa (hash: iXkp0sinzHN6/RBCDf5/vFrHJHlifR02gEFv9+yh+Ys=)
                          3: OrmnaIv7Ykw3uSFBs-BQky_7bs4.roa (hash: vkDAHcA+JuGp7WyKg9OyBQapexmqkZf8f/9s6IqTZIM=)
                          4: bLr6r57MqGHm8nK9w2IYUZH55ic.roa (hash: jUNvR24icg+/HoCVfLpAKbv7/xE1cDm9e9GWJS4plns=)
                          5: mslAiLHq2RhVoMBrlDZ7StvNRw0.roa (hash: 9NtVz0Q/+ObnJjRSZZ6ysBHLYm1GnmXiKVFqUmldHlw=)
                          6: s_WZrtHOlNd7wkkUhFGq2ejwDiQ.roa (hash: lRuZA83oB7sCJB/yZFB/ga5/o6PvU/KmR8+cgqPbV88=)
                          7: xxqAQj5ApVpCjQK_UbA4qZzprNM.roa (hash: kbcAcd5UMZoHVsf0Y1OkYvbV4qpft1douUqZabuqL8g=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2e:2b:00:bd:88:8b:63:e7:cd:b4:e2:4b:ec:1a:ce:67
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e10d5c29a3439703d89b5abf03a75d861771bef4
        Validity
            Not Before: Apr 13 08:01:32 2025 GMT
            Not After : Apr 14 08:01:32 2025 GMT
        Subject: CN=87a3c743db1057b50fe4edc886a0a0d17c613083
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9f:81:8b:39:34:c9:27:b4:8c:fa:4b:d7:fd:22:
                    c0:1c:98:be:59:77:5f:b9:ba:51:36:b7:8f:03:49:
                    09:fa:a9:9c:e7:84:92:e3:d3:0d:a5:7a:fc:23:7c:
                    69:2f:0d:24:ac:a6:f2:43:d3:1a:68:5b:25:17:c2:
                    8d:14:fb:fd:18:e5:f4:51:4c:42:41:8f:fe:60:4c:
                    6d:57:c2:cb:77:1b:e3:80:aa:68:75:65:42:ce:10:
                    74:b5:4c:28:c6:fe:67:f0:38:f1:ba:a4:d2:f7:55:
                    66:b3:7e:6f:47:ef:f7:ab:eb:0c:96:b6:11:98:78:
                    1a:7c:73:b0:73:95:e7:f4:38:87:6d:c9:f3:a9:5f:
                    b1:1c:8a:9d:e8:1c:79:1a:f8:be:de:38:9a:3a:bb:
                    bd:23:fe:6c:63:9e:4e:b3:c1:09:d6:81:a2:21:f4:
                    6f:27:30:1e:85:72:44:12:c3:10:c2:67:cf:3f:33:
                    03:ee:6c:b2:a3:4a:6b:92:fa:4d:52:d3:75:56:b9:
                    04:78:49:90:53:87:bb:74:74:3f:7b:d0:92:3f:94:
                    e7:cb:7d:6c:99:2f:01:50:31:19:dc:ff:56:8f:0b:
                    e9:5d:06:5f:f9:55:74:5a:cc:6d:60:ac:35:ef:e3:
                    5d:6b:81:b7:2d:37:b3:fc:e1:29:81:9a:9c:33:c0:
                    13:35
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                87:A3:C7:43:DB:10:57:B5:0F:E4:ED:C8:86:A0:A0:D1:7C:61:30:83
            X509v3 Authority Key Identifier:
                keyid:E1:0D:5C:29:A3:43:97:03:D8:9B:5A:BF:03:A7:5D:86:17:71:BE:F4

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/4Q1cKaNDlwPYm1q_A6ddhhdxvvQ.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/24/3edb47-fd6e-4c59-a7ab-e42a58064a63/1/4Q1cKaNDlwPYm1q_A6ddhhdxvvQ.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/24/3edb47-fd6e-4c59-a7ab-e42a58064a63/1/4Q1cKaNDlwPYm1q_A6ddhhdxvvQ.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         47:ac:c3:57:9f:5c:66:cd:ec:18:18:5b:04:31:91:a7:0e:f1:
         9a:af:8d:a5:c0:fc:87:35:33:01:76:32:b8:3c:16:d5:85:2e:
         1c:e5:26:08:04:27:dc:10:ed:eb:2e:29:5f:ec:bd:60:e1:db:
         2a:09:e2:3f:17:79:db:d1:53:d9:cf:b3:ff:db:68:44:a1:aa:
         c7:79:98:09:3a:c8:c5:ca:2f:c6:80:86:ff:60:1c:67:c8:c0:
         b8:e4:4e:5c:50:58:ee:8a:7a:4c:f1:11:41:e0:98:d8:c9:bc:
         45:e4:3f:df:c3:db:8f:8a:ea:24:0f:5f:e9:dd:8e:5b:56:31:
         1c:f7:fe:c9:08:df:82:5c:23:a6:1d:20:08:ad:5c:c8:fb:fd:
         9c:7d:2d:8a:a5:6a:15:89:ca:92:9f:e1:9b:24:77:61:2b:f0:
         70:e0:af:3a:25:7a:7b:ff:22:6d:5b:57:8f:70:ea:e8:69:24:
         34:f4:39:4e:55:ed:1a:3e:cd:64:78:6c:ad:74:77:b4:6c:04:
         e1:22:9d:75:5e:9a:db:81:a9:03:e9:27:16:35:19:c5:e8:ca:
         64:f9:c5:ad:4c:e9:66:b5:84:8a:e0:7c:37:0e:b5:39:22:7e:
         c8:92:06:2a:a9:7c:7b:7d:fe:ec:7b:24:a4:17:50:b5:b6:95:
         48:9b:6c:b6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----