Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/28/4d77d9-b0a3-48ad-aa2a-1c6ee5bbeb66/1/T5CKbYaKuem9sQRy--wxyWbpQnQ.mft
File:                     T5CKbYaKuem9sQRy--wxyWbpQnQ.mft (raw, json)
Hash identifier:          h133mDle5EM5O0+Oxxi/pyBcDs+UrJe6aUJpQKyZYrU=
Subject key identifier:   32:FC:05:DA:7A:15:C1:32:1F:BF:2A:89:B6:33:62:44:83:F4:69:11
Authority key identifier: 4F:90:8A:6D:86:8A:B9:E9:BD:B1:04:72:FB:EC:31:C9:66:E9:42:74
Certificate issuer:       /CN=4f908a6d868ab9e9bdb10472fbec31c966e94274
Certificate serial:       01962E98C92A575562C25813246F5A3EEBFC
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/T5CKbYaKuem9sQRy--wxyWbpQnQ.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/28/4d77d9-b0a3-48ad-aa2a-1c6ee5bbeb66/1/T5CKbYaKuem9sQRy--wxyWbpQnQ.mft
Manifest number:          14EC
Signing time:             Sun 13 Apr 2025 10:01:26 +0000
Manifest this update:     Sun 13 Apr 2025 10:01:26 +0000
Manifest next update:     Mon 14 Apr 2025 10:01:26 +0000
Files and hashes:         1: N4O1f1HdN3aaUng8Ezj5qGov-Js.roa (hash: sfcsuhZVAT4PlLRFtuXFGetuMIfE20AC6DkhL2YQizc=)
                          2: T5CKbYaKuem9sQRy--wxyWbpQnQ.crl (hash: vwJX9xh+aktDdw2yROpQnCkJhEwvtvyfvknDj3w5pQ4=)
                          3: _UFtjPZkJY8PTrDfIiY7fIJkM78.roa (hash: 8nSnhnVWRfLLWBF2I/d3mZE5/5hk3aPfKW0pXvBb3bk=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2e:98:c9:2a:57:55:62:c2:58:13:24:6f:5a:3e:eb:fc
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4f908a6d868ab9e9bdb10472fbec31c966e94274
        Validity
            Not Before: Apr 13 10:01:26 2025 GMT
            Not After : Apr 14 10:01:26 2025 GMT
        Subject: CN=32fc05da7a15c1321fbf2a89b633624483f46911
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b7:89:5e:5b:b7:5a:5c:f2:13:0b:85:df:e0:eb:
                    e1:8c:52:a1:d2:21:c1:a5:d3:76:d7:d5:22:93:03:
                    39:9c:e4:f5:da:4b:dd:b5:99:dd:e5:b2:9f:2f:fe:
                    c5:dc:10:f5:e7:d2:48:7e:5b:f5:05:8a:39:ab:2f:
                    66:9a:dd:f3:55:e2:69:50:1f:19:57:d4:33:1b:03:
                    c5:e6:db:d9:aa:d7:73:9f:50:bc:8b:83:53:1f:6b:
                    b5:1a:8c:11:26:ec:19:13:1e:7b:f0:9a:85:f1:06:
                    80:07:73:32:a8:4f:3b:29:69:c1:a1:8a:b4:5c:c8:
                    41:4a:12:84:f3:cb:22:13:e8:9e:46:89:7d:57:cd:
                    72:11:91:06:b6:a3:d5:20:c5:4c:db:a9:14:e8:c4:
                    64:4f:6f:2b:15:f3:58:b8:00:42:11:09:f3:9d:1c:
                    5a:3a:33:67:90:7b:ca:bb:bd:a6:0e:3d:50:a8:a7:
                    5d:9c:2f:c7:1b:14:f8:bc:c4:4b:7d:74:4e:fa:be:
                    c1:80:1c:5a:04:4d:1c:96:82:3a:49:fa:3b:e9:fc:
                    45:87:a5:23:ed:1b:d1:f1:a8:d0:78:e9:22:4e:da:
                    36:7c:a6:6d:2a:a3:01:df:85:1f:f4:9c:d7:00:0d:
                    6b:13:e7:ed:a0:f1:ed:aa:4f:c6:f4:cb:d9:03:42:
                    42:97
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                32:FC:05:DA:7A:15:C1:32:1F:BF:2A:89:B6:33:62:44:83:F4:69:11
            X509v3 Authority Key Identifier:
                keyid:4F:90:8A:6D:86:8A:B9:E9:BD:B1:04:72:FB:EC:31:C9:66:E9:42:74

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/T5CKbYaKuem9sQRy--wxyWbpQnQ.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/28/4d77d9-b0a3-48ad-aa2a-1c6ee5bbeb66/1/T5CKbYaKuem9sQRy--wxyWbpQnQ.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/28/4d77d9-b0a3-48ad-aa2a-1c6ee5bbeb66/1/T5CKbYaKuem9sQRy--wxyWbpQnQ.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         05:47:f1:18:7a:20:fc:cd:57:54:d8:08:54:44:77:d7:3b:db:
         4d:03:c0:d6:a5:a7:cd:55:64:d0:e4:ee:a0:31:21:31:2c:f4:
         d8:dd:10:03:ff:09:b9:90:ab:be:83:96:cd:c1:9e:b5:e3:88:
         bc:22:bf:a8:aa:fe:aa:6a:71:70:d1:88:54:28:fb:51:39:24:
         17:fa:0c:e6:d0:b7:07:ac:62:98:0c:0d:f3:46:ff:89:09:dc:
         0b:57:87:cc:40:98:66:59:49:39:cf:88:79:23:51:ea:7a:6c:
         09:7f:06:15:da:d3:f1:3f:5a:f0:4b:bd:2d:48:17:ec:01:79:
         89:1b:b3:33:3f:ab:cf:b4:6b:29:c9:8f:55:4f:6b:ea:c5:9b:
         95:d4:c4:a2:ef:0d:40:92:33:4a:f4:13:e6:23:9e:4d:d9:7a:
         5b:30:f3:40:f7:b2:bb:bd:a9:63:24:32:55:18:d5:d7:08:af:
         02:4c:ab:ba:0b:dd:80:58:16:80:91:da:4d:b0:29:df:20:c8:
         87:f3:5c:bf:84:4a:eb:2a:20:42:00:d6:77:4c:5f:40:54:ff:
         2d:e8:ce:47:e8:70:ac:ec:23:2d:07:ca:7f:90:b5:48:ff:b7:
         18:46:d1:52:08:54:c1:1e:0b:b1:2b:8f:98:64:e8:bb:00:6f:
         24:67:cb:45
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----