Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/44/1b813a-5e86-45b0-99cd-28b9d261ecb1/1/py0XjI5T9SExwftkdDyWDPiX_Qw.mft
File:                     py0XjI5T9SExwftkdDyWDPiX_Qw.mft (raw, json)
Hash identifier:          7dmtB7aml5BeyfgpvGMJNOXWZOY7LY5nfeEShSX6KLA=
Subject key identifier:   C0:51:9B:F3:A4:28:67:B5:B9:D3:1A:32:E3:2B:3A:A3:6B:74:32:BE
Authority key identifier: A7:2D:17:8C:8E:53:F5:21:31:C1:FB:64:74:3C:96:0C:F8:97:FD:0C
Certificate issuer:       /CN=a72d178c8e53f52131c1fb64743c960cf897fd0c
Certificate serial:       01962F3DD8A3A4C11DEA5749C3FBF907DCE8
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/py0XjI5T9SExwftkdDyWDPiX_Qw.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/44/1b813a-5e86-45b0-99cd-28b9d261ecb1/1/py0XjI5T9SExwftkdDyWDPiX_Qw.mft
Manifest number:          1215
Signing time:             Sun 13 Apr 2025 13:01:44 +0000
Manifest this update:     Sun 13 Apr 2025 13:01:44 +0000
Manifest next update:     Mon 14 Apr 2025 13:01:44 +0000
Files and hashes:         1: JNAtdBMSX5VhwApOgTuAEW816wE.roa (hash: /ZrZUMi4cKx5uDajSWU/yOuRSvJFXt9XoQWTgblnDdM=)
                          2: Kk_Nqx-T7Pv-J68aF1UpAxcFsyI.roa (hash: SIEfBbEbGt2Z3RQ6DVZe/KIGqB2xRs2VDt+6m/NBCj4=)
                          3: py0XjI5T9SExwftkdDyWDPiX_Qw.crl (hash: NZe8jLFTpB6x9swBjatWkfjzLzvXPu1NJVA7s79IaY4=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2f:3d:d8:a3:a4:c1:1d:ea:57:49:c3:fb:f9:07:dc:e8
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=a72d178c8e53f52131c1fb64743c960cf897fd0c
        Validity
            Not Before: Apr 13 13:01:44 2025 GMT
            Not After : Apr 14 13:01:44 2025 GMT
        Subject: CN=c0519bf3a42867b5b9d31a32e32b3aa36b7432be
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:89:7c:8a:23:58:dd:ac:7e:c1:16:b8:ea:56:b2:
                    48:b5:e0:66:5a:6d:c1:1e:a8:32:b3:aa:97:94:80:
                    ac:02:3a:ba:1a:09:c8:bc:76:b5:d6:cb:dd:16:b6:
                    33:dd:7b:6b:25:35:00:52:9e:1f:5e:43:b5:37:dc:
                    2d:89:1a:0c:db:2f:69:d2:ca:0f:35:10:4c:cc:9a:
                    8e:33:aa:35:53:d2:75:47:59:84:5d:35:7f:9c:9a:
                    cf:2c:98:ef:44:82:0c:6b:84:cc:bb:48:84:20:b5:
                    20:76:05:30:47:5d:d7:95:29:dd:9a:c2:6d:1d:1e:
                    8e:0c:ae:bc:8b:10:46:bd:cb:2c:14:43:5e:d5:b1:
                    25:eb:0e:d1:47:c9:f2:43:9a:20:ba:51:46:4a:77:
                    b7:65:b6:d3:e5:c1:64:be:63:78:cd:b1:5c:00:13:
                    f8:27:48:41:67:f3:8f:a1:9e:8d:0d:2a:e6:f9:ab:
                    e6:45:1b:be:4f:cf:00:5e:f3:a2:ce:75:7d:9f:97:
                    93:a9:38:56:47:98:ee:89:8d:e5:62:d4:27:2b:69:
                    5d:fb:0f:ec:8b:55:c8:5e:7b:87:57:4b:71:f7:48:
                    ce:bc:b6:66:a8:2c:59:ff:3d:9f:c5:41:11:9f:2c:
                    b5:a8:13:f4:86:a7:0d:65:55:6e:8c:2b:e5:a3:32:
                    f7:9b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C0:51:9B:F3:A4:28:67:B5:B9:D3:1A:32:E3:2B:3A:A3:6B:74:32:BE
            X509v3 Authority Key Identifier:
                keyid:A7:2D:17:8C:8E:53:F5:21:31:C1:FB:64:74:3C:96:0C:F8:97:FD:0C

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/py0XjI5T9SExwftkdDyWDPiX_Qw.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/44/1b813a-5e86-45b0-99cd-28b9d261ecb1/1/py0XjI5T9SExwftkdDyWDPiX_Qw.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/44/1b813a-5e86-45b0-99cd-28b9d261ecb1/1/py0XjI5T9SExwftkdDyWDPiX_Qw.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         71:16:19:06:0d:6b:cf:40:c4:e0:a8:5a:a0:a3:5c:6a:4a:6a:
         b6:dd:06:c9:f5:3c:4d:44:02:c6:f9:ee:3e:5f:19:29:01:c9:
         98:6e:25:ac:3d:bc:3b:d5:54:86:2a:9c:ec:7d:5d:c8:52:d7:
         13:72:55:70:9f:30:cf:94:f1:73:b5:ee:d5:21:e0:32:83:19:
         e2:e9:2f:0e:6f:d4:b9:8a:ea:a4:26:0a:f1:e2:85:88:1c:6f:
         45:d4:23:39:05:60:1f:25:01:7a:fc:8a:4f:19:72:a3:d2:a8:
         9a:eb:c4:dc:1e:6b:d9:c1:66:89:62:c6:54:70:69:53:c9:06:
         ce:b4:f0:fa:b4:10:36:52:9c:10:6b:55:91:4c:49:a4:db:e4:
         ff:77:2d:75:17:22:03:96:dc:3f:44:26:ad:33:7e:1e:bc:f9:
         b4:0e:74:7a:c4:b1:ec:da:d0:aa:a8:f8:42:0f:e5:47:48:f3:
         65:fb:09:20:9d:58:da:5f:99:21:2f:86:4d:6d:01:cc:4b:37:
         0f:ee:03:dd:28:12:2d:56:bd:78:be:68:d8:5c:5e:14:9a:17:
         bc:d1:6c:4a:9e:46:cd:2b:86:7b:90:98:d5:4d:12:96:fc:a3:
         8e:62:8b:28:2e:43:c7:49:99:2c:f7:20:ad:a9:d6:aa:bf:60:
         d7:17:a9:9f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----