Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/33/9062e2-95ae-4656-b2ee-984a8eb51e45/1/Mss8BdaixRwv9S3Z3LnitVxASPk.mft
File:                     Mss8BdaixRwv9S3Z3LnitVxASPk.mft (raw, json)
Hash identifier:          oS2qtsZpKjdImCoyZ2FWvzBM3ZXOWsAWDcUs8ZiwFfo=
Subject key identifier:   8B:94:31:66:67:12:C2:D3:90:DE:86:A5:23:BF:F3:01:AD:61:AB:8F
Authority key identifier: 32:CB:3C:05:D6:A2:C5:1C:2F:F5:2D:D9:DC:B9:E2:B5:5C:40:48:F9
Certificate issuer:       /CN=32cb3c05d6a2c51c2ff52dd9dcb9e2b55c4048f9
Certificate serial:       01962F06BB3322EC069A4544C6D826109645
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/Mss8BdaixRwv9S3Z3LnitVxASPk.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/33/9062e2-95ae-4656-b2ee-984a8eb51e45/1/Mss8BdaixRwv9S3Z3LnitVxASPk.mft
Manifest number:          14E8
Signing time:             Sun 13 Apr 2025 12:01:32 +0000
Manifest this update:     Sun 13 Apr 2025 12:01:32 +0000
Manifest next update:     Mon 14 Apr 2025 12:01:32 +0000
Files and hashes:         1: Mss8BdaixRwv9S3Z3LnitVxASPk.crl (hash: rqNTaESlbAjPQcjCngad+j7zNOHatyAHOH/vOhofatM=)
                          2: pkl1dG1Tn-y8sIzafCzQdaxLGO0.roa (hash: +t+HSalevZKgrBOwo+A1WYwHvxUsDh9dx8CrhAZYnCE=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2f:06:bb:33:22:ec:06:9a:45:44:c6:d8:26:10:96:45
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=32cb3c05d6a2c51c2ff52dd9dcb9e2b55c4048f9
        Validity
            Not Before: Apr 13 12:01:32 2025 GMT
            Not After : Apr 14 12:01:32 2025 GMT
        Subject: CN=8b9431666712c2d390de86a523bff301ad61ab8f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:af:f5:11:fc:04:55:e3:db:c2:aa:53:9d:54:82:
                    e2:be:d4:2e:04:a4:c7:47:c7:be:0d:85:18:13:5c:
                    49:c2:09:75:b0:91:bf:cb:cf:76:c4:37:06:b9:e9:
                    a7:ca:5e:dc:72:63:ef:f3:2f:4f:43:5e:e4:f0:8c:
                    d0:b5:ab:22:e5:f3:1f:8a:44:41:12:12:49:0a:7e:
                    0d:bb:68:2e:6f:c4:60:08:eb:9f:9e:0d:7e:42:22:
                    ce:09:88:32:fb:54:6c:43:f0:57:25:f8:d0:8f:9c:
                    00:68:d7:a7:7f:35:2a:45:08:e2:f1:f9:85:1c:15:
                    f7:ff:f4:0b:dd:c1:92:82:18:51:c5:a1:16:e8:ad:
                    f6:75:3f:7d:f1:e7:f6:3c:3f:a9:75:fe:f5:6e:61:
                    dd:8b:5d:69:2f:1f:ac:1c:bc:b5:4b:38:38:c3:f7:
                    37:4b:7c:16:14:28:09:e1:2b:d9:68:b8:35:f5:ad:
                    36:23:f2:5e:a2:5a:19:c4:89:95:10:c7:b7:89:3e:
                    fd:a9:03:9d:24:17:e6:6c:02:88:f5:4f:dd:1d:49:
                    fe:64:1f:04:fe:df:dc:b7:3d:f7:be:f2:f2:cd:f3:
                    d0:6a:a2:d2:68:11:68:98:55:4c:65:37:7f:c3:18:
                    f5:48:24:06:6e:7e:ba:8d:be:27:16:33:04:fd:c2:
                    88:8d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8B:94:31:66:67:12:C2:D3:90:DE:86:A5:23:BF:F3:01:AD:61:AB:8F
            X509v3 Authority Key Identifier:
                keyid:32:CB:3C:05:D6:A2:C5:1C:2F:F5:2D:D9:DC:B9:E2:B5:5C:40:48:F9

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Mss8BdaixRwv9S3Z3LnitVxASPk.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/33/9062e2-95ae-4656-b2ee-984a8eb51e45/1/Mss8BdaixRwv9S3Z3LnitVxASPk.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/33/9062e2-95ae-4656-b2ee-984a8eb51e45/1/Mss8BdaixRwv9S3Z3LnitVxASPk.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         1e:92:2a:0e:66:91:72:77:e0:a0:cf:ec:64:e9:d9:14:de:ff:
         62:0e:f1:96:73:fc:77:3e:4e:20:6d:4a:00:db:be:78:d6:2a:
         c5:fc:d9:f1:f1:9e:d0:81:09:cf:f3:60:2e:13:82:3a:59:f6:
         41:30:c0:c2:7a:7c:ed:64:b4:25:71:b9:b5:bd:ed:32:80:9c:
         97:e9:bf:a8:d6:38:e3:3d:bd:a5:0d:57:b6:ad:a2:dc:27:8a:
         5b:db:3e:df:4e:27:8d:c0:e8:f9:9a:94:e1:7d:e0:79:c9:0b:
         56:20:d4:c2:a8:32:48:b5:e8:25:71:a9:04:07:d7:7f:fa:f0:
         4d:c3:11:61:28:2c:c9:7d:cb:e9:6e:9d:c7:ad:58:86:60:ab:
         49:1a:b8:b7:e6:61:55:a5:fb:74:70:32:90:87:d1:a3:21:c1:
         c0:de:57:11:d0:49:a8:4f:6e:ca:ca:68:a7:84:55:89:17:44:
         d6:f4:a8:f9:38:c3:c9:9f:b3:48:18:c0:90:c9:a9:c2:4e:c8:
         c0:ad:f0:7b:01:54:ce:3a:09:29:a5:75:a0:25:78:cf:6d:94:
         29:46:b2:dc:1d:99:8d:de:b7:5f:69:f1:54:e6:84:df:5a:c7:
         0b:db:e0:ea:d9:a8:61:4b:9d:2e:ec:e7:a4:34:ae:a0:76:68:
         ea:8c:b5:24
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----