Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3a/21fbca-80e0-4b8c-8622-4e86ad64f774/1/f1byiUjIMvLUNLtE1d4OoSJgGwU.mft
File:                     f1byiUjIMvLUNLtE1d4OoSJgGwU.mft (raw, json)
Hash identifier:          dVaBUFseKGzb/BpK7tIGuxazcmkFVvsq0VI1tWmO+Do=
Subject key identifier:   EA:C8:26:FE:6B:5B:C1:13:8A:E7:B8:26:CB:6C:34:0B:79:FA:83:75
Authority key identifier: 7F:56:F2:89:48:C8:32:F2:D4:34:BB:44:D5:DE:0E:A1:22:60:1B:05
Certificate issuer:       /CN=7f56f28948c832f2d434bb44d5de0ea122601b05
Certificate serial:       01962E98D382A51FA645F4BB55968DC9147B
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/f1byiUjIMvLUNLtE1d4OoSJgGwU.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/3a/21fbca-80e0-4b8c-8622-4e86ad64f774/1/f1byiUjIMvLUNLtE1d4OoSJgGwU.mft
Manifest number:          14EA
Signing time:             Sun 13 Apr 2025 10:01:29 +0000
Manifest this update:     Sun 13 Apr 2025 10:01:29 +0000
Manifest next update:     Mon 14 Apr 2025 10:01:29 +0000
Files and hashes:         1: NvmfsV1sm7XmyjVKzPOWhb7earQ.roa (hash: r7bWWSDXyiXMj/Swi3flONfAIYfEqRkATWw60gas71A=)
                          2: WPpLjvv6YbGI7GsTe1ygm0Vy3Lk.roa (hash: N+pPrOkjdISbUNAALF5nqmKzIaYbhj0lt6NwOuwgniw=)
                          3: f1byiUjIMvLUNLtE1d4OoSJgGwU.crl (hash: 68y9ESptuGepIgzf3zMXwu2sR+kswvBAHaBfRYVlRHQ=)
                          4: tLoY5nfmVJWTJGYh886gVbz0Hf0.roa (hash: g2GCG3am8xDu8ahhY94JoBYaTCS9zIT5JVCSvfgRMSE=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2e:98:d3:82:a5:1f:a6:45:f4:bb:55:96:8d:c9:14:7b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7f56f28948c832f2d434bb44d5de0ea122601b05
        Validity
            Not Before: Apr 13 10:01:29 2025 GMT
            Not After : Apr 14 10:01:29 2025 GMT
        Subject: CN=eac826fe6b5bc1138ae7b826cb6c340b79fa8375
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c9:6a:39:27:b5:a4:c0:8a:f4:40:b1:21:13:b4:
                    ee:6e:3a:fd:c1:40:5b:5e:0a:2e:f2:c6:42:a3:0a:
                    2d:10:71:ea:83:9d:c9:c6:2e:da:f1:03:3e:14:9c:
                    41:01:09:99:31:0a:93:55:5f:1a:4c:98:67:4d:f3:
                    0b:81:75:b5:92:38:4b:7a:60:19:89:72:ce:a2:4c:
                    12:64:86:ed:d7:4d:5a:cd:1f:ad:18:28:b9:a1:ec:
                    d6:ab:6d:86:c8:a6:98:0d:0a:72:88:2e:bb:b1:dd:
                    52:81:bd:54:62:57:6e:f0:f6:9f:66:fe:0a:98:46:
                    7d:09:0e:fb:07:b7:8b:02:f0:46:a3:ea:e6:ce:f5:
                    cf:a9:49:78:7f:4a:92:b6:a2:f3:33:21:58:56:7e:
                    c9:46:c9:0e:91:42:6b:a0:39:a6:59:ec:2b:50:82:
                    86:de:b1:10:96:bf:7e:eb:3d:bc:2e:00:c9:0e:b0:
                    11:4f:9b:21:03:1c:97:92:a5:e3:0a:0a:f4:56:c0:
                    01:29:16:f6:4d:21:04:d1:04:85:c8:3f:1f:87:af:
                    19:cf:cb:05:59:a4:d2:19:b5:65:e2:3b:a3:19:58:
                    0c:52:f4:a2:c0:97:3d:ec:97:c9:67:c0:2f:41:82:
                    d7:38:16:56:bf:7a:00:30:04:61:45:c3:8c:e8:0f:
                    66:29
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                EA:C8:26:FE:6B:5B:C1:13:8A:E7:B8:26:CB:6C:34:0B:79:FA:83:75
            X509v3 Authority Key Identifier:
                keyid:7F:56:F2:89:48:C8:32:F2:D4:34:BB:44:D5:DE:0E:A1:22:60:1B:05

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/f1byiUjIMvLUNLtE1d4OoSJgGwU.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3a/21fbca-80e0-4b8c-8622-4e86ad64f774/1/f1byiUjIMvLUNLtE1d4OoSJgGwU.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/3a/21fbca-80e0-4b8c-8622-4e86ad64f774/1/f1byiUjIMvLUNLtE1d4OoSJgGwU.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         6f:68:05:c6:8c:5c:d1:10:9c:27:16:dd:20:9f:b3:ba:11:97:
         d3:4b:53:60:7f:8a:a4:15:97:4e:89:48:84:c6:92:5a:7a:90:
         54:c5:99:74:86:47:03:f7:5c:c3:65:18:2b:c9:2f:22:7e:22:
         73:e5:08:d2:d1:28:19:74:f5:ef:95:0e:4b:7e:c4:03:14:ae:
         f3:39:f1:8b:e2:c8:d1:6e:e7:ef:94:a4:80:86:43:01:b1:90:
         84:96:2b:4a:25:94:4f:c0:5e:a9:4a:ee:72:b0:08:58:3d:70:
         96:87:ff:94:83:67:f0:c4:fc:99:c2:c4:8b:e6:c1:76:a4:24:
         66:6f:68:46:a6:50:36:1b:71:7e:3a:05:c8:94:4b:d9:9c:40:
         64:e6:88:31:20:f4:2c:8e:3e:99:cf:b5:18:7b:8a:6d:01:d0:
         39:2b:7d:7a:86:8c:29:6f:e7:89:15:aa:c6:83:44:76:91:64:
         fb:34:49:a8:a5:bb:10:b8:61:04:fa:dd:7c:a0:d0:09:11:b6:
         7c:bf:b4:1b:cc:b6:43:2c:15:66:fe:f8:64:06:f7:35:b3:cd:
         f9:62:5e:94:49:19:be:b6:d0:5d:3f:4b:ad:bd:85:b1:30:03:
         a6:e9:26:c8:ed:32:29:29:c0:43:66:ee:63:0f:58:f3:17:03:
         a5:7a:72:cd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----