Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/37/d2974f-7efa-4611-8827-260c377a314a/1/cGt_6orTURHKaHqc0ApJ-aTwRZs.mft
File:                     cGt_6orTURHKaHqc0ApJ-aTwRZs.mft (raw, json)
Hash identifier:          NmHsI3+LahkB1/H3pomyeGp8isUuUWFSPwCMBrT9edk=
Subject key identifier:   E6:9B:01:B2:11:CD:F2:D7:3D:A7:6B:DC:9B:F9:CE:76:F1:BF:57:55
Authority key identifier: 70:6B:7F:EA:8A:D3:51:11:CA:68:7A:9C:D0:0A:49:F9:A4:F0:45:9B
Certificate issuer:       /CN=706b7fea8ad35111ca687a9cd00a49f9a4f0459b
Certificate serial:       01962FAB8E6C99DA96745DF6F8E94EE1CC57
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/cGt_6orTURHKaHqc0ApJ-aTwRZs.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/37/d2974f-7efa-4611-8827-260c377a314a/1/cGt_6orTURHKaHqc0ApJ-aTwRZs.mft
Manifest number:          14E3
Signing time:             Sun 13 Apr 2025 15:01:34 +0000
Manifest this update:     Sun 13 Apr 2025 15:01:34 +0000
Manifest next update:     Mon 14 Apr 2025 15:01:34 +0000
Files and hashes:         1: 1-i7nGTwXEwybr4Pzt1yuXERVK6c.roa (hash: 6WebZuQEVFb53qv4JdObZh7gRJmnrMnS1KiKHpMOHA8=)
                          2: F98rZRsLL_WSYn3n29uuLg-FPR0.roa (hash: 73uq7x903k93laF4iGlteDX6rFg0Y3etQUcDdi1l7lg=)
                          3: R66tp2YspSa0WKGVVBRpgjOOMSc.roa (hash: vAJd7pQTatYNcNboScZHezKRexmDJyWedTR7sHg29G0=)
                          4: VPHhytFNuubbFjm4tYvAl8Nd2ZE.roa (hash: 6/FzWhj3KyFvDY5lx/pXSGk3g0b0b2s63jOD/2yTOio=)
                          5: cGt_6orTURHKaHqc0ApJ-aTwRZs.crl (hash: 9Z8ZgCb2kPIJ0qN6X0uJRGIPp31E/N7u2P0bayiM92k=)
                          6: zMZkIjmJ2QpgvnpDUAinKvhQb1o.roa (hash: Y7E9I/njb2IhcUidLKH3fAcdQ31FJYDtFn4eagm4C1Q=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2f:ab:8e:6c:99:da:96:74:5d:f6:f8:e9:4e:e1:cc:57
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=706b7fea8ad35111ca687a9cd00a49f9a4f0459b
        Validity
            Not Before: Apr 13 15:01:34 2025 GMT
            Not After : Apr 14 15:01:34 2025 GMT
        Subject: CN=e69b01b211cdf2d73da76bdc9bf9ce76f1bf5755
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b6:8a:5a:07:41:ab:97:2b:60:da:72:05:25:cf:
                    b0:e0:1b:d7:5e:e6:c2:d9:db:fa:d5:38:89:95:e6:
                    35:44:c1:09:51:d8:78:7d:57:11:b7:5c:10:15:b3:
                    d7:15:68:86:e5:a8:31:a0:bf:63:61:32:61:1a:74:
                    0f:6e:3c:9c:10:09:7d:d8:74:eb:69:ba:3e:8d:1e:
                    79:6b:95:a1:7a:f4:9c:5e:a4:1f:15:1a:1f:11:92:
                    d9:56:08:18:8a:03:c8:2f:25:02:70:cb:23:65:1d:
                    6e:21:59:93:3d:08:9f:d1:d3:ce:72:77:6c:38:a0:
                    b2:fc:f7:ed:e6:35:75:dc:2d:b9:9d:98:b2:90:f6:
                    f1:2f:bf:da:6e:a2:e3:7a:0a:4d:01:5f:64:7d:17:
                    69:f4:b0:af:bd:29:73:3c:3e:f5:65:6a:e9:64:60:
                    38:4b:a3:bc:f6:13:7f:a4:2b:8a:d7:a0:36:61:37:
                    5f:1c:65:62:44:12:ed:4a:56:79:6f:ec:65:e4:b5:
                    93:ba:66:29:b3:61:58:b2:e8:2a:6f:1f:e7:19:56:
                    5f:2c:55:a5:d0:f2:b5:57:45:5b:59:5c:51:b1:fb:
                    81:31:c7:d7:a4:8c:a4:d5:27:68:7c:01:ae:c8:98:
                    ed:50:f5:dc:9d:40:09:ba:c2:31:36:29:f8:17:f7:
                    71:3b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E6:9B:01:B2:11:CD:F2:D7:3D:A7:6B:DC:9B:F9:CE:76:F1:BF:57:55
            X509v3 Authority Key Identifier:
                keyid:70:6B:7F:EA:8A:D3:51:11:CA:68:7A:9C:D0:0A:49:F9:A4:F0:45:9B

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cGt_6orTURHKaHqc0ApJ-aTwRZs.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/37/d2974f-7efa-4611-8827-260c377a314a/1/cGt_6orTURHKaHqc0ApJ-aTwRZs.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/37/d2974f-7efa-4611-8827-260c377a314a/1/cGt_6orTURHKaHqc0ApJ-aTwRZs.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         78:3d:c4:7e:1a:5c:c4:f6:14:bd:64:ed:b7:ca:aa:8d:c2:84:
         91:24:a5:04:2a:b4:6f:1f:3b:a1:ce:d7:b5:5a:34:da:2d:c9:
         48:ff:b0:94:c0:43:60:25:03:5b:3c:7d:f2:8a:eb:ef:2b:35:
         75:54:98:24:f2:4b:2b:1e:d0:a7:54:83:93:ec:6b:8c:bb:c7:
         f0:29:1c:fc:b8:32:2f:aa:39:83:8f:6d:95:54:4d:48:b7:fc:
         a1:49:f4:8d:40:fb:15:f3:bd:fc:1b:be:84:fa:9c:4b:e9:06:
         e9:fe:87:27:c1:74:91:b1:c7:fd:95:16:36:7e:3c:c5:f3:ff:
         7f:5c:7d:f2:be:55:28:9f:3e:09:fc:5b:93:4e:21:73:44:4d:
         1c:d9:54:4a:46:e9:1b:67:f6:f0:14:a8:a1:b9:1b:ef:ba:6e:
         9b:4a:3a:df:38:33:e7:69:c9:ff:ac:1d:06:07:e0:b9:9e:4d:
         12:90:f9:3d:00:a7:3f:d1:88:37:63:4a:b8:2f:0b:11:b8:c3:
         9d:85:d9:b7:2b:26:de:9d:02:c1:63:d1:bd:90:82:9d:a6:7c:
         ae:e3:72:dd:8d:78:59:b8:e8:86:1a:58:26:c3:18:1d:19:c7:
         ab:9a:08:38:5e:fc:c4:9e:96:e3:7f:b2:ec:aa:da:0f:72:e6:
         44:38:7f:de
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----