Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2f/cd410f-9de4-4d82-8091-59e792fe14cc/1/M0sJdD7Sr9avtHxYNg7jESqVzTQ.mft
File:                     M0sJdD7Sr9avtHxYNg7jESqVzTQ.mft (raw, json)
Hash identifier:          UIgw5roH+CbKmh3b0DTHFhOGogRmge/kXcOC9OB8x5Q=
Subject key identifier:   8A:F9:F0:20:FF:C1:D1:56:7F:96:36:6B:70:6A:B9:25:A0:02:58:AE
Authority key identifier: 33:4B:09:74:3E:D2:AF:D6:AF:B4:7C:58:36:0E:E3:11:2A:95:CD:34
Certificate issuer:       /CN=334b09743ed2afd6afb47c58360ee3112a95cd34
Certificate serial:       01962E99561C64873F13E85C539A364C3D41
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/M0sJdD7Sr9avtHxYNg7jESqVzTQ.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/2f/cd410f-9de4-4d82-8091-59e792fe14cc/1/M0sJdD7Sr9avtHxYNg7jESqVzTQ.mft
Manifest number:          04C4
Signing time:             Sun 13 Apr 2025 10:02:02 +0000
Manifest this update:     Sun 13 Apr 2025 10:02:02 +0000
Manifest next update:     Mon 14 Apr 2025 10:02:02 +0000
Files and hashes:         1: KGg38ybeN3fvyEo89Wp9trP-DE4.roa (hash: o4s5h0G+Hrss7Tf1oF8r4jzhp+l0giYxBrA89MUtebs=)
                          2: M0sJdD7Sr9avtHxYNg7jESqVzTQ.crl (hash: kw8K9IWxsg5l0wWcFc7vR0n8AanasTBfHm53mmhftV4=)
                          3: P4Ok1kDh3dB-OfcpRjQxiOoay-8.roa (hash: KIn/EsS9ND9RtV2Bj6/EsO8jeh9wAaPztupLYU69+Mk=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2e:99:56:1c:64:87:3f:13:e8:5c:53:9a:36:4c:3d:41
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=334b09743ed2afd6afb47c58360ee3112a95cd34
        Validity
            Not Before: Apr 13 10:02:02 2025 GMT
            Not After : Apr 14 10:02:02 2025 GMT
        Subject: CN=8af9f020ffc1d1567f96366b706ab925a00258ae
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e3:d9:89:96:e0:ba:50:f5:2a:03:61:60:13:89:
                    f9:5d:1b:c6:cf:80:52:ac:91:99:b6:b1:28:44:77:
                    ba:55:ee:31:ae:3f:95:ab:a0:9f:1e:c9:0f:e4:14:
                    3a:5a:ad:21:d1:3b:e8:13:29:27:20:1e:22:ff:41:
                    85:31:5c:95:f6:fc:53:f5:03:ae:e5:36:7e:05:b2:
                    b4:6b:8b:73:96:da:95:2f:10:f0:2e:d5:7c:b4:ed:
                    fa:10:20:39:2d:3d:9e:30:39:95:26:5a:53:df:f5:
                    84:5c:97:4d:7c:09:ff:2e:d9:18:b2:57:e4:18:06:
                    f3:3c:02:32:1f:95:2f:e2:29:20:f0:dc:50:5d:bc:
                    7a:33:67:bf:b7:c0:bd:4a:87:4d:2d:79:d7:14:25:
                    f9:11:d7:7c:a2:b7:ff:e9:04:4b:26:a5:e3:cf:63:
                    57:a5:4f:5f:ab:d9:66:89:63:c2:2e:b3:2c:63:ff:
                    86:89:7d:25:41:22:ee:99:17:4c:ab:ab:e9:92:54:
                    73:68:2f:c3:da:ce:9a:73:f3:ea:65:c9:ee:61:3a:
                    56:a7:97:ce:f6:92:de:c1:30:89:5f:4f:c1:f6:22:
                    1e:a1:0a:54:fa:3e:f3:4b:8d:23:c7:7c:59:80:4a:
                    89:bb:aa:9a:3e:6c:86:9e:7d:ba:b7:ab:52:73:41:
                    3b:83
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8A:F9:F0:20:FF:C1:D1:56:7F:96:36:6B:70:6A:B9:25:A0:02:58:AE
            X509v3 Authority Key Identifier:
                keyid:33:4B:09:74:3E:D2:AF:D6:AF:B4:7C:58:36:0E:E3:11:2A:95:CD:34

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/M0sJdD7Sr9avtHxYNg7jESqVzTQ.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2f/cd410f-9de4-4d82-8091-59e792fe14cc/1/M0sJdD7Sr9avtHxYNg7jESqVzTQ.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/2f/cd410f-9de4-4d82-8091-59e792fe14cc/1/M0sJdD7Sr9avtHxYNg7jESqVzTQ.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         a4:44:35:2e:56:1c:91:27:2d:d3:00:98:fb:f3:ec:25:e9:8e:
         6b:7f:e9:1d:9a:d0:76:b8:2c:59:38:8e:96:d9:c1:39:ea:de:
         e4:ec:1e:22:fe:69:31:48:7a:97:bb:f6:c2:d8:57:1c:46:80:
         78:e9:a3:ff:b7:a5:80:22:15:8e:33:be:5c:c4:64:b7:8e:c8:
         58:68:3c:42:ce:1f:86:1a:ba:a9:1c:65:77:87:71:27:c5:b5:
         40:97:f1:84:7d:bb:c5:e4:a4:32:7b:02:d5:c1:95:ea:10:7e:
         cb:c8:79:0e:34:64:89:9b:3b:98:2c:db:ef:9f:7c:f6:cf:64:
         65:74:d4:66:2e:6b:41:43:69:c7:5a:05:2c:5c:a7:2a:e8:b9:
         50:28:e8:4d:07:85:82:0e:50:94:9e:5d:54:49:4d:1a:7b:1a:
         79:26:86:e8:70:49:7c:e7:06:66:96:5d:fa:34:ed:d3:f0:60:
         cf:49:45:e6:46:9a:eb:ef:61:da:8c:5e:c7:4c:2b:b3:a5:61:
         41:84:e6:97:f7:90:ad:58:ed:df:09:f8:ba:17:a0:d0:81:cd:
         45:5f:e8:e4:e6:b6:09:c9:de:d1:cc:a0:5c:71:e7:52:bf:04:
         43:9e:0f:59:b5:71:9d:e2:c5:b5:8c:4c:f5:ec:ee:39:86:5b:
         c5:15:10:26
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----