Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/29/7a6545-5277-40f3-b366-2ea87e6ea2a0/1/01auYl2VBt9KPld7JKhvzjxzqPg.mft
File:                     01auYl2VBt9KPld7JKhvzjxzqPg.mft (raw, json)
Hash identifier:          kCvja+yxWbDGVsOQIgJxR6o7S9mhUFloC12A9n4INWc=
Subject key identifier:   03:94:B4:4C:44:FA:62:06:E1:47:69:30:25:D8:E0:1A:1F:7C:2E:B3
Authority key identifier: D3:56:AE:62:5D:95:06:DF:4A:3E:57:7B:24:A8:6F:CE:3C:73:A8:F8
Certificate issuer:       /CN=d356ae625d9506df4a3e577b24a86fce3c73a8f8
Certificate serial:       01962E2AC5B159647A0464DE67161CE966EB
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/01auYl2VBt9KPld7JKhvzjxzqPg.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/29/7a6545-5277-40f3-b366-2ea87e6ea2a0/1/01auYl2VBt9KPld7JKhvzjxzqPg.mft
Manifest number:          14E8
Signing time:             Sun 13 Apr 2025 08:01:17 +0000
Manifest this update:     Sun 13 Apr 2025 08:01:17 +0000
Manifest next update:     Mon 14 Apr 2025 08:01:17 +0000
Files and hashes:         1: 01auYl2VBt9KPld7JKhvzjxzqPg.crl (hash: gY1j0hQ181Wt3T83C804BpjV6gxwf3JTXhUzL7w8gPM=)
                          2: 3wb1_tKdAp9U3t54r_yuAt_t74c.roa (hash: TRy2GucvGX452Ui0rXwDPLdQsvvya9qliAwd0VMiMQg=)
                          3: FRyMmxASxmy-8j0poAKeBfWYQOw.roa (hash: rggDbDyghfOZf84v31JsaN//o0OD54TdWq5+Du2lhgw=)
                          4: UP92FGd897Ta77gAjDusBRyzKw4.roa (hash: bi2tqHIDLMNNDJZuMzCDB/j/tTne6ixxxWYNy/lNRuw=)
                          5: _4mHAp6kpGlHe9veqUWZlR3bnno.roa (hash: AE1aWk5k7KrYjZa6mqR0Z0k8/+EX2mo7iBxCrqvE0fg=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2e:2a:c5:b1:59:64:7a:04:64:de:67:16:1c:e9:66:eb
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d356ae625d9506df4a3e577b24a86fce3c73a8f8
        Validity
            Not Before: Apr 13 08:01:17 2025 GMT
            Not After : Apr 14 08:01:17 2025 GMT
        Subject: CN=0394b44c44fa6206e147693025d8e01a1f7c2eb3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ac:54:81:75:50:43:53:02:0d:ec:d4:36:0f:78:
                    aa:8a:2e:f9:5f:89:8e:d7:a0:b8:81:4e:ae:86:cf:
                    e5:12:d1:11:0c:24:9c:e4:12:39:77:32:fc:99:6a:
                    8b:96:e4:7a:c8:aa:cb:ac:a5:71:a1:80:b3:b3:b5:
                    02:44:a7:3c:eb:fe:19:fa:c5:dc:19:33:c0:e3:f7:
                    26:17:bc:b4:c4:59:e4:58:a0:ea:68:8a:7a:44:8e:
                    a3:c2:55:c7:a7:d9:5d:ea:00:8e:c1:0e:32:db:79:
                    2a:e1:f2:23:a4:21:b4:4e:cc:cf:e3:b9:93:84:0c:
                    41:fa:da:5e:6a:2b:3d:41:76:8e:20:c9:2e:ce:37:
                    78:27:97:e3:fb:c2:e5:a1:5b:db:52:92:a5:ee:52:
                    aa:fb:4f:dd:c7:90:02:d2:a8:e9:b6:84:88:0a:08:
                    d6:c2:5a:32:e3:2d:a1:48:87:94:69:c0:58:2e:43:
                    05:20:db:10:d0:61:a3:0d:1b:90:be:14:0c:25:e0:
                    80:29:b5:07:05:bc:51:0e:ff:ee:fc:4f:17:a8:eb:
                    9d:58:f2:81:52:1e:05:10:ab:c3:67:26:1c:a9:a1:
                    c2:a0:78:f1:10:c4:b4:66:c4:36:f3:7c:ee:aa:21:
                    8d:b7:c9:0e:b1:17:f0:79:b3:2f:a9:06:63:36:04:
                    d2:17
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                03:94:B4:4C:44:FA:62:06:E1:47:69:30:25:D8:E0:1A:1F:7C:2E:B3
            X509v3 Authority Key Identifier:
                keyid:D3:56:AE:62:5D:95:06:DF:4A:3E:57:7B:24:A8:6F:CE:3C:73:A8:F8

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/01auYl2VBt9KPld7JKhvzjxzqPg.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/29/7a6545-5277-40f3-b366-2ea87e6ea2a0/1/01auYl2VBt9KPld7JKhvzjxzqPg.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/29/7a6545-5277-40f3-b366-2ea87e6ea2a0/1/01auYl2VBt9KPld7JKhvzjxzqPg.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         31:c4:05:c7:72:01:e3:df:a8:ad:5b:ee:c1:3c:db:7f:8c:46:
         b5:3f:05:d2:64:a8:0c:fc:06:0f:d3:8e:c6:bf:22:25:a7:6b:
         31:55:47:5c:c5:71:5f:99:45:32:04:5f:34:6b:06:16:0e:60:
         45:4f:50:58:ba:0c:08:8d:3e:29:be:a3:c5:8b:37:c2:ff:fe:
         e2:24:67:23:57:f3:bf:60:ff:1c:05:5f:04:81:45:29:59:11:
         ea:0c:fc:17:74:68:d1:e2:5b:cd:ff:6b:25:19:11:6f:90:22:
         02:5a:54:38:a1:01:a0:51:40:0c:ab:d3:1a:3c:de:16:42:f0:
         24:14:86:73:a8:b4:46:c7:06:ac:66:e9:8d:a8:6c:6e:42:89:
         65:98:a4:2f:e5:ca:e7:09:31:42:01:2d:08:7b:df:ee:24:25:
         52:8f:36:a8:86:2f:f1:a9:b0:d4:2f:1e:04:10:18:d9:b2:89:
         9f:1c:2c:2d:c0:25:4a:f2:05:d1:33:d9:5f:9d:60:c7:74:d6:
         88:65:1a:69:75:a9:e3:00:a1:28:c5:5e:2f:a7:df:87:e3:ff:
         bd:46:36:7f:1d:89:bf:2b:9f:ac:fb:cc:77:54:04:eb:ab:a9:
         be:76:5e:ec:62:c7:5d:be:d2:97:0d:ab:39:3a:ef:78:8c:71:
         12:3c:53:a5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----