Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/33/800ffd-c53b-4646-b26e-6ef5c4735e8a/1/sK_Qy5d1_0ePGF-PmA1bHZLUvk8.mft
File:                     sK_Qy5d1_0ePGF-PmA1bHZLUvk8.mft (raw, json)
Hash identifier:          sKBG/tNRrxyw5po68RHkEuoXww4725FcM0va+d7t1t4=
Subject key identifier:   B6:18:FD:B3:99:AF:D8:AE:D3:25:FB:1D:9C:A9:AE:8E:63:DD:B4:A4
Authority key identifier: B0:AF:D0:CB:97:75:FF:47:8F:18:5F:8F:98:0D:5B:1D:92:D4:BE:4F
Certificate issuer:       /CN=b0afd0cb9775ff478f185f8f980d5b1d92d4be4f
Certificate serial:       01962ECFD7B1A441856B5A639BF7688BB845
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/sK_Qy5d1_0ePGF-PmA1bHZLUvk8.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/33/800ffd-c53b-4646-b26e-6ef5c4735e8a/1/sK_Qy5d1_0ePGF-PmA1bHZLUvk8.mft
Manifest number:          14E8
Signing time:             Sun 13 Apr 2025 11:01:35 +0000
Manifest this update:     Sun 13 Apr 2025 11:01:35 +0000
Manifest next update:     Mon 14 Apr 2025 11:01:35 +0000
Files and hashes:         1: 3y9VMN9BUcZB2fmchyviGBmGtxw.roa (hash: WvArAvEQlUAHpEjB63U5q0z8PqLe+6GgRYCWBvbd2yM=)
                          2: sK_Qy5d1_0ePGF-PmA1bHZLUvk8.crl (hash: OPxSF0SbTsiNhn15ikQyDYEZxH8PTGNMbkox7rIVVXo=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2e:cf:d7:b1:a4:41:85:6b:5a:63:9b:f7:68:8b:b8:45
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b0afd0cb9775ff478f185f8f980d5b1d92d4be4f
        Validity
            Not Before: Apr 13 11:01:35 2025 GMT
            Not After : Apr 14 11:01:35 2025 GMT
        Subject: CN=b618fdb399afd8aed325fb1d9ca9ae8e63ddb4a4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ea:7b:e4:99:0d:fc:56:cb:57:8c:2d:ea:7a:0a:
                    7e:f9:d3:c4:bb:f7:5d:0c:26:5e:fe:34:7c:c2:ae:
                    28:ca:ec:8b:1c:cf:3f:95:2e:50:57:77:fd:34:ba:
                    41:c0:6f:39:f0:39:37:e2:78:40:96:28:ac:18:06:
                    7d:1d:0f:69:60:82:b4:7c:7c:5e:68:f1:64:89:7f:
                    e4:74:4e:9f:66:b8:3e:d7:1d:c7:0c:e4:1d:b2:57:
                    3f:66:1b:4a:87:c2:bc:10:45:d9:7c:85:c8:8d:d1:
                    df:4d:ab:43:64:ea:24:44:38:05:e7:65:ea:dc:6c:
                    f2:a3:ea:9a:13:9f:03:c0:34:9c:0f:ea:b5:11:d1:
                    0b:b2:e5:50:30:ae:e1:18:5a:74:dc:a9:5a:44:2a:
                    7c:18:4e:51:49:21:4f:ff:67:f1:0e:fa:c6:d0:bd:
                    71:3b:72:f4:d2:8e:38:45:b4:d8:1e:f2:06:86:da:
                    3d:79:17:41:e4:df:e5:4a:d0:4a:33:d5:6f:eb:e6:
                    d9:9f:57:26:24:93:ad:d6:e7:4c:31:b2:fd:7b:16:
                    bf:0c:b5:45:9e:63:34:9a:ab:8f:b9:89:97:5a:29:
                    72:2a:ea:c6:11:fa:ec:aa:14:2b:43:65:36:f9:19:
                    67:2e:bd:fa:ec:71:f1:82:ea:51:ec:28:0b:d8:58:
                    4b:97
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B6:18:FD:B3:99:AF:D8:AE:D3:25:FB:1D:9C:A9:AE:8E:63:DD:B4:A4
            X509v3 Authority Key Identifier:
                keyid:B0:AF:D0:CB:97:75:FF:47:8F:18:5F:8F:98:0D:5B:1D:92:D4:BE:4F

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/sK_Qy5d1_0ePGF-PmA1bHZLUvk8.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/33/800ffd-c53b-4646-b26e-6ef5c4735e8a/1/sK_Qy5d1_0ePGF-PmA1bHZLUvk8.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/33/800ffd-c53b-4646-b26e-6ef5c4735e8a/1/sK_Qy5d1_0ePGF-PmA1bHZLUvk8.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         24:90:75:d7:e7:07:13:f4:ff:b2:7b:76:2b:9b:d7:5c:4f:54:
         d2:7a:33:79:d4:39:38:3f:62:b8:0a:3d:c3:1a:cf:b1:f5:23:
         7a:ff:87:e4:3f:9a:f8:27:43:40:63:80:c3:6a:ee:0c:74:11:
         45:21:b6:fa:ba:d5:0c:ae:77:b1:96:60:73:af:d7:83:09:3e:
         1e:8d:12:e2:54:b8:f9:13:7b:bd:0f:5e:bb:07:81:4f:76:cc:
         21:bc:bf:a7:19:8f:17:83:c2:bb:bd:92:cc:00:6f:70:7d:b0:
         32:88:cb:34:cc:b5:91:1e:2b:4c:e1:cd:5e:c9:ec:17:ad:15:
         42:34:a5:f8:bb:c6:8a:ce:ff:96:02:72:9c:c2:71:3a:f9:96:
         58:96:53:2e:88:3d:68:10:cc:e1:b7:4b:02:ff:8f:61:53:60:
         e1:56:78:23:a1:27:d6:01:22:49:00:c3:6b:40:b2:9c:f6:e1:
         24:78:17:0b:65:52:c8:a5:80:b8:b7:e2:cc:c6:54:c1:f1:72:
         72:29:3f:76:7e:03:b2:55:81:3d:79:5b:35:5a:eb:89:ef:99:
         27:a4:c3:93:fe:2f:05:fa:d7:03:09:42:74:6f:87:12:c0:1a:
         f5:6c:2b:31:ef:e1:d4:6e:42:98:13:e8:ea:a7:55:91:b2:ed:
         de:84:5d:39
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----