Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/29/af41cb-ff91-459c-9a64-aba113f3e3ae/1/SKvyn974VwUC9LUb5f_AXE2bNGU.mft
File:                     SKvyn974VwUC9LUb5f_AXE2bNGU.mft (raw, json)
Hash identifier:          Uq9gGqQl2xtyxW+7z3UIe06i77B4i3pDUbpG2hhW/8Y=
Subject key identifier:   91:B1:73:CD:06:B8:11:FE:97:E1:5D:FB:13:15:CD:B2:C7:72:1C:6D
Authority key identifier: 48:AB:F2:9F:DE:F8:57:05:02:F4:B5:1B:E5:FF:C0:5C:4D:9B:34:65
Certificate issuer:       /CN=48abf29fdef8570502f4b51be5ffc05c4d9b3465
Certificate serial:       01962ECFD39321717F32B5CC4C21EB655F08
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/SKvyn974VwUC9LUb5f_AXE2bNGU.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/29/af41cb-ff91-459c-9a64-aba113f3e3ae/1/SKvyn974VwUC9LUb5f_AXE2bNGU.mft
Manifest number:          0E33
Signing time:             Sun 13 Apr 2025 11:01:33 +0000
Manifest this update:     Sun 13 Apr 2025 11:01:33 +0000
Manifest next update:     Mon 14 Apr 2025 11:01:33 +0000
Files and hashes:         1: 1ohlvL5PZw_3hcwGQ_J581-Kfkw.roa (hash: okrFXmsJ6KTYYIjnZcAOYjjx16+oQFPNv0K3PQHdWEg=)
                          2: GM87yoid4HvMFU0831meRD7aTrw.roa (hash: pAqrn8lneMfUM7XREKFFDTTB8aq7tLTz2G9UF3aA0BU=)
                          3: SKvyn974VwUC9LUb5f_AXE2bNGU.crl (hash: QYg0LiiiJqwRgemvT8qMoXmoH1dv0MfGkApZNJ3+FXw=)
                          4: YmWNecN7XYdIQOw5isqM5uZJr6o.roa (hash: qgjgkbZfX+RrYxvoH+GzWI4Ldi/tsJF4AVz6jSadRjw=)
                          5: d5fKf4HMjFTPvFv1g-extK9TjY0.roa (hash: jvG0QqsqMCFOCxZ5OCB/lB/g5oXzEXu+iNot1r/2b24=)
                          6: yenk1FulFKKzRy_UkUqeujhCFDE.roa (hash: 88ixtFP90mmpbbschipnIT/GNXMn5zvObfjytzgQofg=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2e:cf:d3:93:21:71:7f:32:b5:cc:4c:21:eb:65:5f:08
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=48abf29fdef8570502f4b51be5ffc05c4d9b3465
        Validity
            Not Before: Apr 13 11:01:33 2025 GMT
            Not After : Apr 14 11:01:33 2025 GMT
        Subject: CN=91b173cd06b811fe97e15dfb1315cdb2c7721c6d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:96:b1:88:6b:3b:6a:cc:95:96:14:21:ba:bf:8c:
                    ef:d1:90:b9:64:d3:4b:78:50:7e:e4:85:02:33:94:
                    7a:09:a7:75:00:39:9f:b7:8b:6d:06:9a:b5:35:0f:
                    f2:8f:46:8b:96:a3:63:d3:a3:a7:42:fb:87:29:b6:
                    94:b6:2b:06:9a:c9:61:fc:05:25:b0:26:d6:a3:03:
                    7c:e6:11:6d:fc:85:d2:68:01:f0:67:40:92:d5:22:
                    cf:80:41:b8:1c:d4:c0:00:57:86:2a:ab:5e:48:d4:
                    9d:f8:4f:23:72:dd:59:2e:24:b6:4f:e5:c7:9d:63:
                    84:1a:b0:99:a2:e2:a1:08:e2:47:d8:a5:69:d2:d6:
                    31:44:d2:94:c2:e6:86:fe:bb:27:db:4a:7f:26:16:
                    7b:88:68:62:b4:1d:6b:9a:3b:d4:45:ac:58:ff:ce:
                    e1:a6:23:2f:95:4e:eb:67:52:1d:ae:ab:9f:a2:b4:
                    ec:33:ce:54:bb:d0:b8:04:23:a7:4d:ab:20:3a:0c:
                    0d:cd:b0:d3:3e:1d:36:a3:2e:19:bf:d2:9b:ff:b1:
                    6b:49:e9:b0:19:b8:40:2c:58:3e:47:46:97:f8:39:
                    4d:4e:59:96:24:73:f1:82:57:8d:88:e5:80:ec:94:
                    d7:34:4c:90:7b:fe:e8:c0:13:67:37:fe:1a:3f:4b:
                    4e:43
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                91:B1:73:CD:06:B8:11:FE:97:E1:5D:FB:13:15:CD:B2:C7:72:1C:6D
            X509v3 Authority Key Identifier:
                keyid:48:AB:F2:9F:DE:F8:57:05:02:F4:B5:1B:E5:FF:C0:5C:4D:9B:34:65

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/SKvyn974VwUC9LUb5f_AXE2bNGU.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/29/af41cb-ff91-459c-9a64-aba113f3e3ae/1/SKvyn974VwUC9LUb5f_AXE2bNGU.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/29/af41cb-ff91-459c-9a64-aba113f3e3ae/1/SKvyn974VwUC9LUb5f_AXE2bNGU.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         64:3c:0a:c6:e1:33:dd:d8:93:ab:9b:3d:72:07:ac:b2:c8:45:
         08:f5:b3:1c:90:3b:d4:ee:5a:a2:b4:33:a8:d7:80:38:7c:86:
         60:d0:46:83:72:8c:41:8e:63:fc:07:c7:e3:25:0e:47:13:48:
         b5:10:d2:67:2a:3d:f9:9a:93:a5:d0:4b:6b:4c:8a:70:5b:35:
         f8:26:27:98:20:30:68:ce:a2:17:c6:a7:59:09:f9:ba:de:a6:
         6e:bb:1d:47:2c:d6:a9:53:a5:a8:f7:48:4f:2d:9d:c6:ac:d6:
         75:59:64:ca:d1:cd:72:a8:af:d5:46:90:38:be:3d:91:cf:53:
         d7:cb:8f:26:98:52:33:29:37:af:27:9d:30:7b:04:0f:ac:d9:
         c4:bd:82:89:65:a7:78:1c:dd:06:1c:09:e2:74:04:0a:45:7a:
         ec:c7:69:4e:a7:96:40:35:45:ba:fd:e7:2e:27:ff:f5:15:d1:
         b7:70:c5:2d:48:4a:2c:40:01:b3:29:fc:54:7e:5b:41:4e:19:
         c5:9d:27:40:04:3c:36:c4:cc:f0:c7:9e:72:f4:91:8d:0d:15:
         46:e3:90:96:9a:2a:c9:66:fa:6e:d7:d3:f0:e8:30:1e:43:8b:
         e4:23:e5:20:d4:f0:61:b4:eb:65:7e:80:3c:e4:93:cb:d9:da:
         1e:68:e5:36
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----