Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/49/44e8f5-3584-490e-9979-cdc31d5fb8a4/1/bTnOTCmrP4Avnekz9ElQJsTQ7ko.mft
File:                     bTnOTCmrP4Avnekz9ElQJsTQ7ko.mft (raw, json)
Hash identifier:          LvJyARGM5/EBR9Gj0cYtMXVlVoIGj+r4D8CCt7wf1lY=
Subject key identifier:   07:AB:C8:4F:A2:47:E3:AC:74:D1:60:14:D8:17:4F:25:96:7F:23:0A
Authority key identifier: 6D:39:CE:4C:29:AB:3F:80:2F:9D:E9:33:F4:49:50:26:C4:D0:EE:4A
Certificate issuer:       /CN=6d39ce4c29ab3f802f9de933f4495026c4d0ee4a
Certificate serial:       01962E618ABA05585F2B24152804F6B6D206
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/bTnOTCmrP4Avnekz9ElQJsTQ7ko.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/49/44e8f5-3584-490e-9979-cdc31d5fb8a4/1/bTnOTCmrP4Avnekz9ElQJsTQ7ko.mft
Manifest number:          14ED
Signing time:             Sun 13 Apr 2025 09:01:06 +0000
Manifest this update:     Sun 13 Apr 2025 09:01:06 +0000
Manifest next update:     Mon 14 Apr 2025 09:01:06 +0000
Files and hashes:         1: B88mtx2_fceD3WkM3Ksi4WlT4VA.roa (hash: hwcvppQs1/EhDdVb55MlIRMH3/Ucbiv1u1DToUqStmU=)
                          2: GGvj9NChg8eWX1toJcMcvoB6snw.roa (hash: G6byTPu5CqswnTX3x2G6lOagD0K04nQHqQ2npvg0QJA=)
                          3: MhjkAgDs0QfDcSw47owKsNYasoc.roa (hash: /uniHG73LlrpdpREk+1GNcIkLbBqDOzY7tim2Uz2A1Q=)
                          4: b0d-qfJdm7KXvPqj7MUgyB5kK74.roa (hash: fvVm8gj2uIsJVJxMD6tVJ79pU7XevSxKYETzYwMIORU=)
                          5: bTnOTCmrP4Avnekz9ElQJsTQ7ko.crl (hash: U71cn2IINVYKubngWn3i54TxYXSZbd2ccOEpQK2Xq5k=)
                          6: iZS0QA1yC9FLBck4FKpodWGaBn8.roa (hash: iTrLDy7AWbv/5JNUdB4E4LLm4ULatVdoRSUk6RJfSwk=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2e:61:8a:ba:05:58:5f:2b:24:15:28:04:f6:b6:d2:06
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6d39ce4c29ab3f802f9de933f4495026c4d0ee4a
        Validity
            Not Before: Apr 13 09:01:06 2025 GMT
            Not After : Apr 14 09:01:06 2025 GMT
        Subject: CN=07abc84fa247e3ac74d16014d8174f25967f230a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a3:32:96:a2:73:7f:e2:07:63:80:b0:09:ed:db:
                    33:12:90:c4:a5:f6:4f:5d:5e:61:28:81:73:45:ff:
                    5a:4b:b4:18:5a:88:92:23:b2:34:7b:a1:62:c9:de:
                    a4:ab:d9:7c:22:ed:5f:c2:93:d0:a9:35:f0:4f:93:
                    28:71:ed:17:70:67:94:2e:67:35:4b:b0:b2:95:0e:
                    1d:fb:04:cc:d8:9e:e8:0b:b9:86:a4:e0:a9:6f:cf:
                    5a:6e:b9:4a:9f:83:8f:63:92:2d:70:c1:55:40:05:
                    29:3a:b1:cd:e6:a0:5f:5d:83:ca:31:01:62:ea:1a:
                    36:ef:3c:df:e1:ac:81:c6:6a:b2:01:78:7a:ee:83:
                    84:a7:51:37:55:0d:1e:50:6a:fa:5a:0f:bb:67:7c:
                    a8:80:bd:54:be:0a:ce:02:07:60:65:40:5f:7d:39:
                    29:7b:6a:ee:41:ee:00:73:e4:91:61:48:a1:56:ed:
                    50:9f:3a:b3:7c:35:f4:e5:8f:3e:e2:6f:53:fc:14:
                    bd:35:76:53:5b:01:57:73:a0:72:6c:96:c0:b5:ad:
                    9c:80:ce:ae:8f:45:c6:d4:96:68:47:72:1e:2f:f8:
                    1e:55:ca:17:02:d8:da:5d:d7:3d:18:51:ad:fd:4e:
                    73:65:0a:36:a0:be:51:07:af:ab:fd:d5:d9:b4:95:
                    88:ed
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                07:AB:C8:4F:A2:47:E3:AC:74:D1:60:14:D8:17:4F:25:96:7F:23:0A
            X509v3 Authority Key Identifier:
                keyid:6D:39:CE:4C:29:AB:3F:80:2F:9D:E9:33:F4:49:50:26:C4:D0:EE:4A

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/bTnOTCmrP4Avnekz9ElQJsTQ7ko.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/49/44e8f5-3584-490e-9979-cdc31d5fb8a4/1/bTnOTCmrP4Avnekz9ElQJsTQ7ko.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/49/44e8f5-3584-490e-9979-cdc31d5fb8a4/1/bTnOTCmrP4Avnekz9ElQJsTQ7ko.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         3d:1f:4c:d0:b0:09:67:34:cf:1e:00:a8:20:ef:af:fa:64:38:
         9e:20:55:63:ec:6f:67:95:3c:94:15:c8:8b:c3:fb:a0:d9:64:
         12:ce:9b:b8:ba:6f:7c:95:67:cd:65:6d:ce:65:24:f5:10:b7:
         2e:35:81:3d:a4:47:b6:79:f6:37:9d:77:2c:75:26:de:74:05:
         f2:0a:24:91:51:3b:dc:46:44:b6:2f:62:c7:2a:be:35:16:57:
         d4:42:38:31:93:e0:48:87:fb:17:92:5a:ef:09:66:40:87:7e:
         9b:9d:7d:79:5c:2a:cb:26:07:79:ff:c8:3b:80:96:a1:9b:f3:
         35:5c:e6:7c:2f:14:da:9f:e4:b1:d3:21:20:a0:f7:ee:dd:12:
         e6:31:86:bb:01:ec:05:45:68:dd:b6:24:86:2d:c2:6f:fd:da:
         e4:30:10:ec:96:23:ba:40:cd:2c:a2:3f:33:1f:b0:cb:26:c9:
         09:2b:1b:05:85:c8:19:c3:a6:1a:c0:b8:15:2f:cc:60:f4:2c:
         a5:93:eb:52:06:b0:fc:c6:b4:42:18:63:f0:ad:b2:4e:bf:6b:
         34:31:7c:5b:d9:66:9e:e9:63:85:c0:24:db:d4:05:3b:0d:2b:
         69:2b:a2:9b:22:6f:b6:62:11:98:ee:f7:c6:28:dd:0a:66:bc:
         de:fb:6e:d6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----