Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/47/a6304b-6c59-4f5f-b646-5f0d91f4f908/1/c8vBR-rdgVSBUfNRDi3gnYaKxsw.mft
File:                     c8vBR-rdgVSBUfNRDi3gnYaKxsw.mft (raw, json)
Hash identifier:          K2UVrmyoz7QWPN2rVZaW6shjKB/oQm3A85s9oxtQCko=
Subject key identifier:   B4:53:72:99:57:A9:B5:32:E9:75:2B:49:02:CA:BA:1E:5C:5C:E4:57
Authority key identifier: 73:CB:C1:47:EA:DD:81:54:81:51:F3:51:0E:2D:E0:9D:86:8A:C6:CC
Certificate issuer:       /CN=73cbc147eadd81548151f3510e2de09d868ac6cc
Certificate serial:       01962DF442EF7C036EE46005E36F82CE4A81
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/c8vBR-rdgVSBUfNRDi3gnYaKxsw.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/47/a6304b-6c59-4f5f-b646-5f0d91f4f908/1/c8vBR-rdgVSBUfNRDi3gnYaKxsw.mft
Manifest number:          14E9
Signing time:             Sun 13 Apr 2025 07:01:44 +0000
Manifest this update:     Sun 13 Apr 2025 07:01:44 +0000
Manifest next update:     Mon 14 Apr 2025 07:01:44 +0000
Files and hashes:         1: YlBw5zZMyGmVSKcyUcis3LeoBu4.roa (hash: FNW2TVY99VnemA7lyfpV1rEplwNPKCZ+roIw6UfcWJE=)
                          2: c8vBR-rdgVSBUfNRDi3gnYaKxsw.crl (hash: Gh+1Vu+fcCy5nzcQTXnvNGLMUXNmLS4sD38vTAnPgIc=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2d:f4:42:ef:7c:03:6e:e4:60:05:e3:6f:82:ce:4a:81
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=73cbc147eadd81548151f3510e2de09d868ac6cc
        Validity
            Not Before: Apr 13 07:01:44 2025 GMT
            Not After : Apr 14 07:01:44 2025 GMT
        Subject: CN=b453729957a9b532e9752b4902caba1e5c5ce457
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cf:50:06:b9:b0:75:b7:64:ed:48:30:2f:e0:3c:
                    bd:f3:ad:bb:1d:1b:23:7d:9d:a7:9d:33:d0:28:fa:
                    0e:91:c0:cd:6f:7d:a5:f3:59:57:96:eb:31:b8:24:
                    42:49:e0:a9:cb:06:06:c4:63:16:3b:7d:14:4c:70:
                    be:05:fc:fb:ca:2c:b2:e0:b4:5c:95:ba:7c:48:a9:
                    d4:fc:33:f7:ad:40:8e:e2:8a:c9:99:2c:0e:cb:26:
                    56:80:3c:aa:5d:67:b3:c2:8f:67:22:d9:ab:44:b2:
                    ba:70:9c:cf:0a:a0:db:b1:0e:b1:68:38:ee:77:63:
                    f1:b2:dd:f5:7a:9a:1e:fc:63:c3:01:b8:43:79:a0:
                    d9:f0:e9:64:2d:2e:b5:9e:8a:21:62:e4:09:b7:eb:
                    38:32:23:7e:49:b6:a1:9e:42:05:5f:07:6f:0b:17:
                    88:a3:5a:2a:ad:f6:65:95:6a:4d:ca:e5:7a:a8:72:
                    af:2e:fc:52:53:ba:30:a4:fa:1a:f0:c7:2e:fe:59:
                    72:af:39:05:95:04:7e:95:21:8e:01:60:cf:ed:f3:
                    19:9d:f2:c4:be:5e:d0:35:22:53:c5:b1:3c:69:f8:
                    7e:7e:25:a8:5e:e5:b1:1c:79:b6:23:21:29:8c:e0:
                    d3:4a:a8:83:10:fd:96:68:94:97:f5:54:2d:cd:8b:
                    e5:2f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B4:53:72:99:57:A9:B5:32:E9:75:2B:49:02:CA:BA:1E:5C:5C:E4:57
            X509v3 Authority Key Identifier:
                keyid:73:CB:C1:47:EA:DD:81:54:81:51:F3:51:0E:2D:E0:9D:86:8A:C6:CC

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/c8vBR-rdgVSBUfNRDi3gnYaKxsw.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/47/a6304b-6c59-4f5f-b646-5f0d91f4f908/1/c8vBR-rdgVSBUfNRDi3gnYaKxsw.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/47/a6304b-6c59-4f5f-b646-5f0d91f4f908/1/c8vBR-rdgVSBUfNRDi3gnYaKxsw.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         a8:31:48:08:b5:45:1d:44:8f:23:1c:c1:e5:fe:af:78:e7:89:
         2f:10:12:ca:f7:e1:1a:87:8a:1c:02:ec:3a:b4:0b:c1:74:4f:
         4b:d2:d1:ba:97:1c:f2:d7:49:60:ee:71:fa:ad:7f:6f:18:dd:
         16:94:83:fb:d0:84:d4:16:7a:8d:98:53:86:0d:25:9e:c0:e2:
         1d:8e:b1:4b:25:cf:f4:84:6a:95:cf:8e:51:fc:a3:d9:b7:f7:
         9c:13:e1:5e:29:cc:2c:2e:61:0d:94:b7:37:cf:38:b7:08:8c:
         00:aa:06:ee:ef:c3:fd:01:b9:17:bd:78:b8:94:1f:71:7c:4a:
         85:4f:7e:99:ff:4d:7b:69:fb:24:86:56:5c:4e:7b:e4:1e:d3:
         b5:6f:35:3b:88:7a:c2:3a:2f:02:76:e7:d1:13:aa:cb:3a:88:
         48:f1:a5:3a:76:e2:5f:2b:80:1a:d9:a6:bc:60:f0:54:77:7d:
         52:30:14:ac:77:28:6e:a1:50:70:ea:f3:81:23:d2:57:85:95:
         91:69:79:4e:fc:0a:7e:2b:f6:9f:6d:39:44:ff:be:03:10:6e:
         b6:71:08:5e:90:53:f1:ff:9d:af:08:07:8d:22:2c:af:0f:2c:
         45:39:ec:65:b4:f2:03:7e:1d:c2:0d:61:3a:df:1a:b4:57:1c:
         ad:d3:f0:63
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----