Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4b/0789aa-9e73-45ee-91b6-143ff60d9991/1/RA6IwxN_ipFffaG1wDQcoYwsI0w.mft
File:                     RA6IwxN_ipFffaG1wDQcoYwsI0w.mft (raw, json)
Hash identifier:          qFa6ixVKYbEw+g6sN78qGJX0y3aMmnu+PBJilwHn3ks=
Subject key identifier:   56:7F:38:48:04:16:F7:54:31:E1:DC:00:85:0E:01:BB:96:46:6E:A0
Authority key identifier: 44:0E:88:C3:13:7F:8A:91:5F:7D:A1:B5:C0:34:1C:A1:8C:2C:23:4C
Certificate issuer:       /CN=440e88c3137f8a915f7da1b5c0341ca18c2c234c
Certificate serial:       01962F74E3CD6E1972B2BAB31307A72F591E
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/RA6IwxN_ipFffaG1wDQcoYwsI0w.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/4b/0789aa-9e73-45ee-91b6-143ff60d9991/1/RA6IwxN_ipFffaG1wDQcoYwsI0w.mft
Manifest number:          0E
Signing time:             Sun 13 Apr 2025 14:01:51 +0000
Manifest this update:     Sun 13 Apr 2025 14:01:51 +0000
Manifest next update:     Mon 14 Apr 2025 14:01:51 +0000
Files and hashes:         1: ERKKjb9maK6l2D8S98DiUvq_sHY.roa (hash: K5h5Qq2Di55EgzF5bOxkfD2fsAbyW8q02xX4iijsUmk=)
                          2: RA6IwxN_ipFffaG1wDQcoYwsI0w.crl (hash: YOu5JkF3y3X7aYfdrJ2gYJ3axxtkTRRxtHAUSgqEblE=)
                          3: uC4_l-E2xjwrvlqz30Q-HpJhGxI.roa (hash: eCi9fijMSbE+YJ8x/iuJrnNqx//o/hxhFT+nJZyvJ+A=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2f:74:e3:cd:6e:19:72:b2:ba:b3:13:07:a7:2f:59:1e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=440e88c3137f8a915f7da1b5c0341ca18c2c234c
        Validity
            Not Before: Apr 13 14:01:51 2025 GMT
            Not After : Apr 14 14:01:51 2025 GMT
        Subject: CN=567f38480416f75431e1dc00850e01bb96466ea0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c5:4a:3d:01:a1:69:4d:fd:17:03:60:a7:3b:7c:
                    30:63:85:cf:6d:44:e3:34:c3:91:e6:18:6b:45:4b:
                    97:ce:53:4d:fa:0c:a9:fb:9c:91:a3:68:06:35:0b:
                    86:e9:1d:d1:af:3a:2e:83:13:2b:3c:18:cd:53:83:
                    1d:00:3e:a1:a3:88:5c:c1:50:a8:bb:1e:09:8a:18:
                    e3:b2:31:1a:49:ad:98:55:e7:76:6d:0c:78:a5:74:
                    f1:c1:79:00:ed:07:8f:4c:f8:8b:ae:25:8b:95:fb:
                    ba:3c:79:47:c7:7e:1b:01:01:84:e2:ed:cd:fb:f5:
                    e1:6f:3d:3f:df:77:8d:37:82:77:48:9f:63:c8:83:
                    b1:d4:fb:e0:cd:5d:7a:49:36:40:65:db:70:4e:20:
                    61:10:05:c0:bf:cf:2b:63:f5:bf:ee:f9:7d:08:89:
                    0e:7f:c1:78:be:f2:ff:51:49:18:60:4d:3e:ad:3e:
                    cd:0c:f9:35:e9:7f:ac:98:78:fe:aa:5c:7e:02:00:
                    19:04:43:f7:27:6d:cd:98:b1:02:ad:6a:ff:91:9a:
                    d0:2e:b4:ac:d9:da:4e:c7:44:ec:3a:f3:d0:67:77:
                    17:78:0f:23:86:28:a1:ea:b7:f1:f1:bd:a1:14:4e:
                    e5:3c:b1:90:1c:89:e1:f4:4a:15:d8:c0:b9:98:56:
                    8b:71
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                56:7F:38:48:04:16:F7:54:31:E1:DC:00:85:0E:01:BB:96:46:6E:A0
            X509v3 Authority Key Identifier:
                keyid:44:0E:88:C3:13:7F:8A:91:5F:7D:A1:B5:C0:34:1C:A1:8C:2C:23:4C

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/RA6IwxN_ipFffaG1wDQcoYwsI0w.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4b/0789aa-9e73-45ee-91b6-143ff60d9991/1/RA6IwxN_ipFffaG1wDQcoYwsI0w.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/4b/0789aa-9e73-45ee-91b6-143ff60d9991/1/RA6IwxN_ipFffaG1wDQcoYwsI0w.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         35:66:4a:27:f6:e4:39:8b:3f:23:2a:f8:75:58:c5:dd:8f:6c:
         dc:13:d4:18:59:e2:24:1e:58:dd:ec:4b:24:ba:aa:09:00:21:
         82:05:f8:ab:93:7b:f3:8f:5e:be:f2:50:31:38:09:e7:c0:d2:
         32:af:52:af:e4:6e:a7:90:39:de:32:45:7e:52:95:88:bb:77:
         42:dd:4d:16:d1:2d:4b:c4:94:21:de:93:e6:ac:24:ef:93:ef:
         03:92:b8:37:c4:64:06:ac:e7:3c:23:2a:64:c5:ca:ad:3f:fc:
         c5:cd:2c:09:c2:01:60:4c:83:d0:c8:96:25:8d:4e:58:7e:0e:
         d2:30:25:09:51:a9:31:15:51:f9:d8:ad:a6:b6:e8:d0:39:d4:
         56:53:ac:46:d0:e3:a9:1d:0a:ac:b3:e9:b2:6b:93:8b:8c:8b:
         19:2e:12:e7:44:af:bf:c3:dd:53:38:98:b9:51:6c:02:7b:41:
         b3:72:bb:10:75:d2:90:73:bc:f1:f8:a4:11:43:26:74:ed:75:
         c2:07:f5:ef:cf:df:13:c5:0f:3b:37:97:d0:8d:ac:17:11:8d:
         e9:8e:6d:14:3e:f0:d6:9d:f9:3b:e4:6b:96:7a:10:96:f2:33:
         cb:ca:e7:2b:3c:87:ae:3e:af:70:c2:e5:d6:23:9a:83:e3:d1:
         ca:9c:8c:31
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----