Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3e/51210c-a380-4b59-b2ad-45a21b29023d/1/Sy6Typ-dRt5UP_fC0FQOiX3BT-4.mft
File:                     Sy6Typ-dRt5UP_fC0FQOiX3BT-4.mft (raw, json)
Hash identifier:          H3XEDxOBs0TQ7STQ3FBxhm+L383Al8RC2KVmN6Mzwio=
Subject key identifier:   32:9B:B8:63:8A:24:32:5F:4D:B5:2F:10:E0:47:9F:31:86:A6:EE:01
Authority key identifier: 4B:2E:93:CA:9F:9D:46:DE:54:3F:F7:C2:D0:54:0E:89:7D:C1:4F:EE
Certificate issuer:       /CN=4b2e93ca9f9d46de543ff7c2d0540e897dc14fee
Certificate serial:       01962E2B25BCE9D88FE92784BF6EAD1D81C2
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/Sy6Typ-dRt5UP_fC0FQOiX3BT-4.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/3e/51210c-a380-4b59-b2ad-45a21b29023d/1/Sy6Typ-dRt5UP_fC0FQOiX3BT-4.mft
Manifest number:          14EB
Signing time:             Sun 13 Apr 2025 08:01:41 +0000
Manifest this update:     Sun 13 Apr 2025 08:01:41 +0000
Manifest next update:     Mon 14 Apr 2025 08:01:41 +0000
Files and hashes:         1: BFNpBumDp1kCbOkRPfNeeb9eg3Q.roa (hash: W2NfednhtlR7QdA8fAAqksCstG5fL7QYtGvfqI9Vs8k=)
                          2: Sy6Typ-dRt5UP_fC0FQOiX3BT-4.crl (hash: cHhcYpu88j31IJpeREvmj+8eNixSKbMWzIt9YUT7Cqg=)
                          3: zaqITKpKgeaAwvYpqmoD7gvhk3k.roa (hash: RNANRJqVDcBX4aReT0CnM2M60vTk0XR3zW0I73Wa0pE=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2e:2b:25:bc:e9:d8:8f:e9:27:84:bf:6e:ad:1d:81:c2
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4b2e93ca9f9d46de543ff7c2d0540e897dc14fee
        Validity
            Not Before: Apr 13 08:01:41 2025 GMT
            Not After : Apr 14 08:01:41 2025 GMT
        Subject: CN=329bb8638a24325f4db52f10e0479f3186a6ee01
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:be:ac:12:71:83:1d:b4:2c:c0:21:46:f9:a7:93:
                    12:f1:6e:dd:92:fa:47:73:f1:88:28:73:a5:36:02:
                    28:30:68:21:de:71:ed:be:3b:93:04:8e:30:87:f2:
                    81:1f:60:4a:ba:58:99:f4:0c:5b:fe:78:e9:e2:9c:
                    04:46:33:02:ff:78:48:c2:32:df:44:ec:10:fd:90:
                    2a:f1:ff:b8:02:a8:20:c6:32:16:67:b7:bd:23:78:
                    ae:ff:96:1e:43:12:7e:26:bf:9b:7f:81:ef:67:05:
                    df:1e:9a:a8:20:82:fd:d8:b5:0d:b0:42:20:0a:09:
                    ee:58:c6:95:ff:d0:a5:e1:a6:51:d2:1e:40:63:8d:
                    49:5c:5f:33:fc:38:d0:8b:27:b1:0b:50:4b:4f:53:
                    41:ef:28:43:46:9d:6b:f7:fb:f7:e9:be:f1:01:ce:
                    8d:74:9c:79:e4:22:94:24:e0:34:c5:37:e6:0e:87:
                    9f:8a:ce:96:d9:a5:2a:a4:87:33:b4:82:88:a1:87:
                    22:db:44:6c:23:02:d0:9a:c4:bb:82:25:a8:8c:e1:
                    a6:fb:03:4d:c6:c6:61:fc:61:bd:6d:74:ca:99:a4:
                    ea:52:76:49:c8:d3:12:34:15:0b:31:03:d0:f1:f7:
                    29:3a:07:fa:5c:1f:80:3e:32:e4:b7:7c:3b:c0:41:
                    d5:ef
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                32:9B:B8:63:8A:24:32:5F:4D:B5:2F:10:E0:47:9F:31:86:A6:EE:01
            X509v3 Authority Key Identifier:
                keyid:4B:2E:93:CA:9F:9D:46:DE:54:3F:F7:C2:D0:54:0E:89:7D:C1:4F:EE

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Sy6Typ-dRt5UP_fC0FQOiX3BT-4.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3e/51210c-a380-4b59-b2ad-45a21b29023d/1/Sy6Typ-dRt5UP_fC0FQOiX3BT-4.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/3e/51210c-a380-4b59-b2ad-45a21b29023d/1/Sy6Typ-dRt5UP_fC0FQOiX3BT-4.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         45:a3:10:93:fd:4f:98:35:b5:2e:13:9a:1a:d0:f3:90:54:27:
         0f:57:92:6b:bc:7f:c3:71:17:6e:37:6c:61:44:3d:fd:8c:9b:
         84:cd:aa:e6:40:f5:2c:a7:4f:17:9a:a7:79:89:d7:d7:92:0e:
         1d:ae:4b:b8:bf:10:90:eb:de:7a:2d:ef:43:ca:78:ce:cc:0d:
         9a:7e:19:56:15:af:fb:68:31:5f:85:78:5d:b3:41:5b:1a:39:
         5e:c6:f0:46:cb:04:aa:a2:f4:93:dd:c2:e4:07:65:97:7b:04:
         51:a8:da:16:77:56:86:f5:6b:62:22:12:fb:39:bf:3d:43:41:
         19:df:79:27:e9:c0:d8:c1:ef:0c:20:72:ad:b3:68:6c:c6:9e:
         a6:0c:ce:20:3c:26:18:e7:33:40:54:cc:5e:ba:18:4b:77:5f:
         e9:24:c3:f8:da:be:ef:00:00:e8:83:13:6a:b8:6e:6b:39:8d:
         c2:b8:67:5d:61:57:df:11:49:b3:33:30:77:4a:6f:dd:38:a4:
         71:e2:b0:eb:1e:70:26:0a:a3:ed:bc:7d:57:1e:1c:3a:54:fb:
         52:61:8c:8d:41:df:37:bc:89:fb:9e:40:43:46:22:08:d3:26:
         2c:31:42:98:80:b6:4d:35:f8:48:55:1a:0a:8d:e9:0f:c7:16:
         4b:64:c4:c0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----