Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3d/8b5f7c-b3ae-4b58-81bb-25a40c075f12/1/Rj-RcHf489DjOMdC6iHWQ1jRnVI.mft
File:                     Rj-RcHf489DjOMdC6iHWQ1jRnVI.mft (raw, json)
Hash identifier:          NUutwgaw1aiexq4lrj7wqriER23t2/HJSyVHy2wajBU=
Subject key identifier:   F7:00:0E:9F:DE:7F:CA:FE:D5:52:74:2B:81:52:ED:D7:5A:4B:65:60
Authority key identifier: 46:3F:91:70:77:F8:F3:D0:E3:38:C7:42:EA:21:D6:43:58:D1:9D:52
Certificate issuer:       /CN=463f917077f8f3d0e338c742ea21d64358d19d52
Certificate serial:       01962E61B8F1D44CA26A7E7EBC9E0DA450A8
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/Rj-RcHf489DjOMdC6iHWQ1jRnVI.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/3d/8b5f7c-b3ae-4b58-81bb-25a40c075f12/1/Rj-RcHf489DjOMdC6iHWQ1jRnVI.mft
Manifest number:          0452
Signing time:             Sun 13 Apr 2025 09:01:18 +0000
Manifest this update:     Sun 13 Apr 2025 09:01:18 +0000
Manifest next update:     Mon 14 Apr 2025 09:01:18 +0000
Files and hashes:         1: K-1cBvMFbalkBJFw0sJ7i1WTZEs.roa (hash: 3Ikel/xplePBRCnzN26gvmaI2UYrfX6N2d00Q4SBcaQ=)
                          2: Rj-RcHf489DjOMdC6iHWQ1jRnVI.crl (hash: BjHUNQJpvhLp0pEHElIe+qxGPkfeUlZt9oGALwoN1Lg=)
                          3: cpmcqEkiElTb72sko05fp48X-FM.roa (hash: xqlsImmQ/9E7U68AUDQtcRJOydRd1Euow8hua9KaN+Y=)
                          4: moiKPG2LP_pIBJ3oE3uKFFimTvs.roa (hash: 7/+kCaotJP3wY1l3ZzCfImaKj4/imFC7lov/Lv+DrVg=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2e:61:b8:f1:d4:4c:a2:6a:7e:7e:bc:9e:0d:a4:50:a8
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=463f917077f8f3d0e338c742ea21d64358d19d52
        Validity
            Not Before: Apr 13 09:01:18 2025 GMT
            Not After : Apr 14 09:01:18 2025 GMT
        Subject: CN=f7000e9fde7fcafed552742b8152edd75a4b6560
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a8:aa:69:6d:0a:61:e7:7a:bf:d8:72:c1:2d:c0:
                    20:5d:54:ed:ce:1a:c6:99:98:4f:b0:f0:c2:28:c5:
                    51:13:05:08:a4:e7:a6:b6:1f:a3:a5:c8:f1:d2:42:
                    15:b4:d7:fa:67:47:b2:4d:48:f2:8e:54:77:7b:bd:
                    06:d9:b3:6c:7a:1c:e1:c9:31:2b:91:36:43:a0:84:
                    67:ca:a1:e8:96:83:44:1a:15:14:b8:92:1a:08:a6:
                    6a:1c:87:13:67:06:97:2b:f4:6b:c5:6b:de:ff:79:
                    a6:85:2d:e9:31:c0:ad:2c:df:01:3b:2d:77:9f:a5:
                    8a:9c:8a:17:f3:00:2d:2d:0d:be:8e:71:aa:fb:e8:
                    d1:a4:98:bb:4c:0b:17:d6:b0:0c:2a:85:30:d8:70:
                    76:bb:c3:4c:35:85:bf:0f:61:f3:1a:99:49:b1:2f:
                    bb:bd:90:2b:19:24:24:ce:0c:22:74:97:08:d7:92:
                    f4:62:d9:15:1b:94:d5:d5:bd:90:40:7f:a4:74:98:
                    66:38:02:8d:7c:a1:79:cf:a7:43:13:dc:12:72:d2:
                    6d:88:39:d8:a0:89:3e:8f:ff:4c:61:2b:1f:54:b1:
                    63:40:e9:2e:67:a3:a8:f7:92:c1:e4:ae:18:ff:c5:
                    f4:55:bd:8f:43:50:97:15:fd:e8:0f:40:a8:ed:08:
                    a7:b5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F7:00:0E:9F:DE:7F:CA:FE:D5:52:74:2B:81:52:ED:D7:5A:4B:65:60
            X509v3 Authority Key Identifier:
                keyid:46:3F:91:70:77:F8:F3:D0:E3:38:C7:42:EA:21:D6:43:58:D1:9D:52

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Rj-RcHf489DjOMdC6iHWQ1jRnVI.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3d/8b5f7c-b3ae-4b58-81bb-25a40c075f12/1/Rj-RcHf489DjOMdC6iHWQ1jRnVI.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/3d/8b5f7c-b3ae-4b58-81bb-25a40c075f12/1/Rj-RcHf489DjOMdC6iHWQ1jRnVI.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         46:8e:3c:04:e3:77:92:e8:44:d4:29:02:62:10:d4:2e:36:33:
         ae:34:ef:5f:ae:b1:01:c1:b1:eb:1d:66:a1:c6:62:5f:33:e7:
         a0:cb:ce:30:5b:b9:6e:fa:45:89:49:64:72:e0:f3:e7:04:60:
         58:65:0d:6f:9e:6a:2c:fa:91:77:f9:72:a0:78:00:51:40:e0:
         78:48:0d:9f:fe:25:90:b7:73:18:36:8f:a3:bd:f2:4a:3c:b7:
         8a:7e:ad:ad:f7:71:a3:a6:ce:f0:cd:6e:38:fa:30:3d:3a:65:
         2d:b6:3d:96:5d:d2:93:62:a5:a4:ea:3a:64:86:fd:8f:96:33:
         98:4b:69:36:fa:75:62:06:d5:d6:de:cb:8f:32:bb:13:75:82:
         4d:05:01:1a:bb:6e:d0:62:fb:61:7c:f7:bd:85:e4:c9:6a:83:
         ce:46:e4:15:ff:e4:5f:02:28:e7:27:3f:38:bc:9c:e2:cf:76:
         cb:55:fc:79:6a:25:04:74:51:1c:31:8e:cc:3f:cb:b6:38:e6:
         f7:e5:2a:0c:32:30:ed:71:d5:19:3d:0a:46:1e:17:93:1d:89:
         81:27:8f:49:23:d0:c1:0e:b4:64:66:e0:82:8b:d7:af:2a:98:
         ff:62:40:80:e7:eb:f9:ec:9f:96:39:22:ff:aa:76:5f:34:df:
         ab:1d:b3:38
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----