Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/37/8809bb-2468-41e6-8a42-de25cdc8f211/1/Rf0zdMesPAN3hwfzZ_kUjx_gOQ0.mft
File:                     Rf0zdMesPAN3hwfzZ_kUjx_gOQ0.mft (raw, json)
Hash identifier:          qP6wFd7RBKocmT76gQKLrZ0CM1FiT20Ui4lEbwNVI6w=
Subject key identifier:   2B:41:B1:0F:08:E9:73:D6:AA:A9:C1:61:64:3F:33:2F:21:D9:62:A5
Authority key identifier: 45:FD:33:74:C7:AC:3C:03:77:87:07:F3:67:F9:14:8F:1F:E0:39:0D
Certificate issuer:       /CN=45fd3374c7ac3c03778707f367f9148f1fe0390d
Certificate serial:       01962E98961F1503E64A8DBFDB17B41F9595
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/Rf0zdMesPAN3hwfzZ_kUjx_gOQ0.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/37/8809bb-2468-41e6-8a42-de25cdc8f211/1/Rf0zdMesPAN3hwfzZ_kUjx_gOQ0.mft
Manifest number:          111D
Signing time:             Sun 13 Apr 2025 10:01:13 +0000
Manifest this update:     Sun 13 Apr 2025 10:01:13 +0000
Manifest next update:     Mon 14 Apr 2025 10:01:13 +0000
Files and hashes:         1: CInCW1-lseNxjR1N7IQV758AByA.roa (hash: WQM0UCIORrjfQkm9SW+GVd+jlu9ooi0KVsLj7jyMiok=)
                          2: Rf0zdMesPAN3hwfzZ_kUjx_gOQ0.crl (hash: pxq0wwrMXtbv7OBxfOt9hiNyedigEyhaCWR7TR7Z8DE=)
                          3: U2paNb4m2qyQATbnhVbTs0-s6jM.roa (hash: S1RxCh/LJopZIJfT5SmUwql4+1cPwTZJIOK40saTkcw=)
                          4: zbSAdSSsmOU8X5iO-yfCK2-GsNo.roa (hash: qlcz7bJ9k+K7bMbtiBCeKabs37EBPQzpy/kDcVYHEOo=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2e:98:96:1f:15:03:e6:4a:8d:bf:db:17:b4:1f:95:95
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=45fd3374c7ac3c03778707f367f9148f1fe0390d
        Validity
            Not Before: Apr 13 10:01:13 2025 GMT
            Not After : Apr 14 10:01:13 2025 GMT
        Subject: CN=2b41b10f08e973d6aaa9c161643f332f21d962a5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c5:76:4b:ae:f4:97:e1:41:49:73:e4:60:04:17:
                    9b:d4:40:01:d9:54:8e:c4:9e:7c:97:9e:4d:72:e6:
                    5a:b1:58:18:08:5c:78:56:06:cf:88:34:e9:d7:db:
                    41:79:26:aa:73:9f:e5:77:94:34:b7:ac:c6:55:59:
                    1b:18:c8:25:ba:1c:7c:4d:67:54:d8:1f:57:b2:ef:
                    e1:f0:7a:4b:4a:68:d6:f4:f3:3c:80:92:9d:2f:06:
                    bc:c8:a1:22:bb:30:96:4b:a9:de:23:f9:81:d9:bf:
                    3c:4e:08:71:ad:2b:d4:5f:e1:60:1d:30:56:af:86:
                    94:8d:07:a9:88:a9:f6:8d:1f:85:c0:5e:55:72:ca:
                    85:35:5c:dc:bf:2a:42:74:b6:4a:51:84:23:bb:14:
                    cd:6c:35:2d:72:32:ec:7b:8c:99:14:bb:70:8a:d6:
                    f8:df:06:9d:b9:48:03:fc:e0:ba:14:1d:4e:59:6e:
                    5f:8e:2e:94:4d:cc:89:72:a3:d7:14:3e:1a:b9:a6:
                    6e:5e:14:49:b0:29:f8:10:3f:6f:45:f9:5e:01:5d:
                    ca:6b:ac:33:85:92:80:28:46:f2:5d:23:a0:72:a8:
                    63:0d:10:bf:9e:b3:ae:30:8f:2e:ac:8a:9f:cf:2b:
                    cb:b2:01:65:1f:0d:2b:7e:db:bd:57:4b:c8:80:80:
                    30:8b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2B:41:B1:0F:08:E9:73:D6:AA:A9:C1:61:64:3F:33:2F:21:D9:62:A5
            X509v3 Authority Key Identifier:
                keyid:45:FD:33:74:C7:AC:3C:03:77:87:07:F3:67:F9:14:8F:1F:E0:39:0D

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Rf0zdMesPAN3hwfzZ_kUjx_gOQ0.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/37/8809bb-2468-41e6-8a42-de25cdc8f211/1/Rf0zdMesPAN3hwfzZ_kUjx_gOQ0.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/37/8809bb-2468-41e6-8a42-de25cdc8f211/1/Rf0zdMesPAN3hwfzZ_kUjx_gOQ0.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         94:cb:37:ea:1f:9c:98:3f:67:20:fe:b5:ff:b8:93:a4:18:3c:
         c6:3f:db:2b:75:9b:57:17:17:1d:49:53:e9:83:5a:56:3d:20:
         80:08:86:c3:54:d0:61:30:f0:5b:26:67:4f:1e:d6:ab:33:4e:
         99:35:ab:d8:7e:dc:94:3f:de:33:48:ee:79:1a:c0:5c:db:63:
         c9:69:6b:7a:a4:8d:82:c8:7b:eb:c8:8a:ee:bc:35:c1:3d:43:
         6c:58:92:77:d5:74:c3:20:6c:47:8a:25:1d:09:9f:e7:7a:2d:
         81:86:c7:4c:c2:e0:fb:ab:4d:43:3d:c8:aa:c0:71:ce:51:fc:
         7b:2f:27:cf:9d:a8:2d:e7:3c:e1:88:d3:74:ed:bc:ff:74:8a:
         36:38:3d:de:7f:75:ce:47:e3:00:c2:5b:7b:74:f5:19:c0:64:
         6e:b3:d3:05:7e:47:8d:4a:ff:bc:ee:6b:6c:da:b4:89:6a:6f:
         f9:c9:1b:bb:f2:2b:84:3f:a2:1b:15:c1:3e:e5:a5:43:16:ea:
         d8:84:17:21:97:d0:13:95:81:10:0c:26:4b:a9:1c:53:e0:6a:
         81:74:9f:56:01:be:20:a6:de:34:61:b3:ab:58:d4:67:0c:3d:
         e0:30:7d:97:8e:3b:0d:7f:f6:1f:a2:72:a5:c0:c3:15:2c:82:
         f9:23:d7:e9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----