Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2f/4459b4-1838-4231-bd2c-40c0a652450a/1/c0-mGwhlEDj6-B6_El7IRbGWGIM.mft
File:                     c0-mGwhlEDj6-B6_El7IRbGWGIM.mft (raw, json)
Hash identifier:          e7UkT4z4PuKGnycLzaB2EaZTNyAFbqpq6/Jp3cN8msE=
Subject key identifier:   8C:BD:FE:CF:DF:36:22:7E:19:3A:10:E5:07:41:70:5E:AA:ED:59:99
Authority key identifier: 73:4F:A6:1B:08:65:10:38:FA:F8:1E:BF:12:5E:C8:45:B1:96:18:83
Certificate issuer:       /CN=734fa61b08651038faf81ebf125ec845b1961883
Certificate serial:       01962E995D124C64F06759802B447DDCCC82
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/c0-mGwhlEDj6-B6_El7IRbGWGIM.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/2f/4459b4-1838-4231-bd2c-40c0a652450a/1/c0-mGwhlEDj6-B6_El7IRbGWGIM.mft
Manifest number:          05F9
Signing time:             Sun 13 Apr 2025 10:02:04 +0000
Manifest this update:     Sun 13 Apr 2025 10:02:04 +0000
Manifest next update:     Mon 14 Apr 2025 10:02:04 +0000
Files and hashes:         1: Ef_L0S4-Bp45a4AhicIQvktRdz4.roa (hash: /8pqkPBMXDiyNztqWEzFfiF8Q4r48DyQf1X0AGe+tXU=)
                          2: KD8apQsVPJ4S-o7CJiMR0Jx51PQ.roa (hash: 8wRRkrMsyRGit65zp+ividrP3xMpOsDdKqxjsreQ+LE=)
                          3: c0-mGwhlEDj6-B6_El7IRbGWGIM.crl (hash: jbeYfdxKKEfAR6tcaCnOtvVhHOh3wu/PicixSJ43zCU=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2e:99:5d:12:4c:64:f0:67:59:80:2b:44:7d:dc:cc:82
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=734fa61b08651038faf81ebf125ec845b1961883
        Validity
            Not Before: Apr 13 10:02:04 2025 GMT
            Not After : Apr 14 10:02:04 2025 GMT
        Subject: CN=8cbdfecfdf36227e193a10e50741705eaaed5999
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:f6:ad:e4:a4:be:bd:04:6a:08:6c:27:ea:a9:9a:
                    89:9e:09:b0:91:d1:30:b7:13:a3:e2:7a:ad:13:61:
                    3a:54:c1:3f:4b:51:a4:d2:d1:d3:bc:ef:92:60:05:
                    3c:e3:ec:e7:68:2b:fa:aa:19:67:e2:6d:3f:75:d5:
                    b6:7c:14:f6:78:3f:46:bb:4b:22:9a:80:fd:6a:85:
                    13:d1:6c:4e:5a:c4:c7:20:47:72:01:d6:d6:b7:f6:
                    4d:59:bd:a3:c3:a0:94:27:53:8c:26:e0:41:4d:9f:
                    61:d7:aa:20:14:f4:73:d8:38:0c:14:8b:db:a6:89:
                    df:98:35:e4:9a:c9:e9:2f:fe:06:10:d6:14:3f:58:
                    0d:5a:63:08:f0:8c:4e:89:6d:12:c1:f2:bf:9d:db:
                    20:8a:77:35:12:bc:1b:d9:31:85:b6:43:bf:7e:97:
                    00:98:a2:a7:e3:c5:d7:0b:d6:7a:de:24:5f:10:f1:
                    fe:25:dc:44:9f:ce:53:8d:a6:b0:aa:af:58:7a:e0:
                    27:5e:87:ad:33:20:a6:98:9f:fc:59:39:3f:ae:e2:
                    92:23:80:55:cd:ab:4c:f1:85:15:96:12:fe:77:79:
                    56:81:ab:03:c8:d9:e7:8f:3e:2b:44:f7:d8:88:1b:
                    f8:68:e4:a9:0a:a6:01:9a:7e:69:e2:0b:7b:c2:50:
                    41:93
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8C:BD:FE:CF:DF:36:22:7E:19:3A:10:E5:07:41:70:5E:AA:ED:59:99
            X509v3 Authority Key Identifier:
                keyid:73:4F:A6:1B:08:65:10:38:FA:F8:1E:BF:12:5E:C8:45:B1:96:18:83

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/c0-mGwhlEDj6-B6_El7IRbGWGIM.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2f/4459b4-1838-4231-bd2c-40c0a652450a/1/c0-mGwhlEDj6-B6_El7IRbGWGIM.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/2f/4459b4-1838-4231-bd2c-40c0a652450a/1/c0-mGwhlEDj6-B6_El7IRbGWGIM.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         77:9c:67:54:ab:67:27:fc:21:17:c9:76:f7:f6:60:f8:14:54:
         ff:44:cc:98:fc:d8:38:a6:6c:07:bf:e6:07:fd:ae:95:f5:c1:
         85:f4:72:38:56:cd:a5:55:cf:a1:9d:01:06:80:c8:57:d2:9d:
         42:1a:bc:ef:ec:14:49:3f:60:ce:35:21:12:37:b6:00:36:11:
         a6:7c:5b:1a:4c:41:dd:07:30:99:3e:fc:8b:eb:11:e9:87:a4:
         52:e9:a2:3d:af:b6:d7:6f:ae:32:64:4f:ac:89:c2:e2:d1:04:
         d4:36:ad:81:fc:14:3f:a8:02:e6:a2:34:45:b0:df:53:69:b4:
         ea:c5:ac:64:58:33:90:4f:35:ae:c8:41:c9:b0:2e:8d:1c:f3:
         0d:63:70:f0:39:08:9a:ca:38:c4:a7:43:c5:44:29:2a:43:31:
         3b:c4:6e:e4:64:8d:37:d4:df:ab:65:81:f9:a3:1b:91:21:c3:
         d7:22:ca:36:71:a9:6e:6b:07:ba:23:27:3c:ea:a4:87:4d:01:
         1c:aa:07:3a:f6:03:c8:3e:df:77:9c:53:97:02:d8:32:cf:a2:
         13:21:4a:9f:49:6d:f0:03:fe:81:f2:45:0b:ed:29:88:60:37:
         e6:1b:ce:76:ad:ad:76:f9:07:5c:d1:dd:94:03:c9:c5:b0:90:
         d3:dc:8d:f3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----