Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/26/03cce3-e620-4483-b08b-6d8fd330e9aa/1/1-Pc8XA86EGqLp9_z41yBbRB43HE.mft
File:                     1-Pc8XA86EGqLp9_z41yBbRB43HE.mft (raw, json)
Hash identifier:          ecqks/0scdBSAz4jgb3fscR3g/vW5605JiU3k3/VZ3o=
Subject key identifier:   44:E7:D5:36:51:EC:CA:94:9A:08:EE:29:C1:58:90:9D:A5:3D:C5:72
Authority key identifier: F8:F7:3C:5C:0F:3A:10:6A:8B:A7:DF:F3:E3:5C:81:6D:10:78:DC:71
Certificate issuer:       /CN=f8f73c5c0f3a106a8ba7dff3e35c816d1078dc71
Certificate serial:       01962E61C9C7DCB824FB7BC9E744416BF8FA
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/1-Pc8XA86EGqLp9_z41yBbRB43HE.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/26/03cce3-e620-4483-b08b-6d8fd330e9aa/1/1-Pc8XA86EGqLp9_z41yBbRB43HE.mft
Manifest number:          14EB
Signing time:             Sun 13 Apr 2025 09:01:22 +0000
Manifest this update:     Sun 13 Apr 2025 09:01:22 +0000
Manifest next update:     Mon 14 Apr 2025 09:01:22 +0000
Files and hashes:         1: 1-Pc8XA86EGqLp9_z41yBbRB43HE.crl (hash: ERigW9cCi6Odu3EYSCS5+2GVuGTNazzWfF2TZMWMEoM=)
                          2: 14BL-wRZn5qjKkbFlqqqjR24P9o.roa (hash: Q0+ry8DIoIvWS3jg4INnkBPjowRqJvM+1fF1Ae0B9HU=)
                          3: 3ZWEjgFplaR5kgIjaCqCP6tbjsk.roa (hash: mHlRrwC758D0HqzkPpUCJ65f9p+erZHSEHy+5VU4L4A=)
                          4: M13OT1H85As_Tv9wWN39JJmrGq4.roa (hash: 3iWdknIUsVQtlNk63UCp+noj8Iq5EODisWGU9pdA1Es=)
                          5: XBvyNtAX_qyPJCtO1fGS20UqGjs.roa (hash: KHN56+uDjic5K6QfFI010t46UK2xFZQ5/zoeeWjaQBc=)
                          6: XPD_qkMZM773BgTSH2nnNND2GP8.roa (hash: jC9NS2JVAxqciAEfYbsx8yavJosP/v9EHly6hmSaYwA=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2e:61:c9:c7:dc:b8:24:fb:7b:c9:e7:44:41:6b:f8:fa
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=f8f73c5c0f3a106a8ba7dff3e35c816d1078dc71
        Validity
            Not Before: Apr 13 09:01:22 2025 GMT
            Not After : Apr 14 09:01:22 2025 GMT
        Subject: CN=44e7d53651ecca949a08ee29c158909da53dc572
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c5:3b:5a:19:58:ce:2c:f0:e6:50:31:3c:74:41:
                    81:ea:3b:8e:3b:41:fe:1d:7e:29:d7:a1:c3:75:90:
                    ea:18:39:33:8f:c4:2c:57:3d:4f:f9:e5:4d:a3:f0:
                    1f:05:af:0c:69:77:37:1f:72:5d:66:ff:1f:d8:58:
                    dd:05:4f:29:ed:64:b0:0c:6e:54:00:b9:a2:14:d6:
                    97:e1:14:87:79:e2:11:90:05:1b:0b:c4:22:53:f5:
                    c3:2a:f5:cd:a7:52:ca:4e:e0:96:63:19:a3:4f:f5:
                    ba:f0:67:48:72:55:52:14:76:69:03:38:cb:66:79:
                    48:03:59:76:5b:03:c9:8b:ba:5b:f9:c3:e0:63:a3:
                    69:ad:ed:8c:63:ca:ea:c0:17:a7:88:c6:0c:44:56:
                    93:4c:8c:ab:df:c8:55:52:89:26:7e:75:5a:9f:e3:
                    f2:5c:b3:c1:c2:45:1e:4d:eb:1c:58:c4:4b:7c:3e:
                    04:ae:b1:3a:36:73:26:1e:23:d2:24:fb:f5:22:d9:
                    29:9e:4f:56:8a:19:69:7c:cc:c2:74:4f:50:c6:01:
                    a8:36:ee:58:27:56:76:ed:a7:08:69:4a:78:af:6b:
                    28:4b:86:95:8f:d2:9f:ef:c4:0b:eb:d2:34:14:46:
                    df:55:b4:74:52:af:95:1c:69:78:4b:ed:fe:c4:f5:
                    d0:57
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                44:E7:D5:36:51:EC:CA:94:9A:08:EE:29:C1:58:90:9D:A5:3D:C5:72
            X509v3 Authority Key Identifier:
                keyid:F8:F7:3C:5C:0F:3A:10:6A:8B:A7:DF:F3:E3:5C:81:6D:10:78:DC:71

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1-Pc8XA86EGqLp9_z41yBbRB43HE.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/26/03cce3-e620-4483-b08b-6d8fd330e9aa/1/1-Pc8XA86EGqLp9_z41yBbRB43HE.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/26/03cce3-e620-4483-b08b-6d8fd330e9aa/1/1-Pc8XA86EGqLp9_z41yBbRB43HE.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         89:a1:8c:b7:05:3f:b0:e4:13:19:71:5e:5a:b5:b8:80:a8:32:
         35:a2:77:56:95:ed:9b:86:9e:c0:71:43:a1:1d:e1:78:ea:c7:
         7b:07:7d:54:9e:2d:44:e0:ac:12:ee:b9:82:99:47:e4:18:bd:
         1e:2e:8e:96:33:e2:aa:4f:19:af:89:89:f7:d9:78:8f:de:53:
         bd:3d:f3:7f:b3:e8:10:78:c9:cc:a7:8c:91:12:76:87:a7:00:
         3d:a9:13:3d:47:f8:8d:6a:e2:69:6e:88:a5:f9:0c:82:a1:40:
         2a:80:81:d3:a0:0b:ca:a7:c3:0c:7e:10:22:a7:2a:0a:b2:e8:
         b6:a9:5b:41:9c:1d:fc:5a:39:80:67:41:72:2b:f0:44:f3:23:
         63:e5:82:0a:78:e3:90:63:f9:9b:31:d2:1e:b5:6d:72:20:43:
         b0:37:f4:be:a8:40:76:4c:4a:3c:05:d3:6b:15:ed:d7:02:57:
         88:61:20:cd:88:6d:14:8a:02:cb:56:78:b3:0b:2e:a6:e5:42:
         30:b4:fb:a4:55:ee:e9:9e:ec:30:d1:97:40:3e:a8:51:03:62:
         39:6f:63:09:d8:c1:60:f4:4b:21:61:b0:d4:30:40:c6:f8:74:
         c5:e2:3e:6f:e5:f2:ee:e4:50:6c:7e:58:2a:9f:fd:25:b2:7c:
         2c:39:87:c7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----