Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4c/47275d-5fa7-4bb2-99eb-1f00737cb2a2/1/mur6lsnVY-ZQulkv-wbizutqCFk.mft
File:                     mur6lsnVY-ZQulkv-wbizutqCFk.mft (raw, json)
Hash identifier:          +Z1qXt4OvsnK1YpmMBm5Hfe+FGMa5dVDG+xgiRbh4xA=
Subject key identifier:   76:A8:1D:32:53:85:12:A3:97:DA:8F:04:6B:2E:37:A9:19:B2:F5:F8
Authority key identifier: 9A:EA:FA:96:C9:D5:63:E6:50:BA:59:2F:FB:06:E2:CE:EB:6A:08:59
Certificate issuer:       /CN=9aeafa96c9d563e650ba592ffb06e2ceeb6a0859
Certificate serial:       01962DF42E94DED47A9F730F7A27DD6DB6CE
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/mur6lsnVY-ZQulkv-wbizutqCFk.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/4c/47275d-5fa7-4bb2-99eb-1f00737cb2a2/1/mur6lsnVY-ZQulkv-wbizutqCFk.mft
Manifest number:          14EC
Signing time:             Sun 13 Apr 2025 07:01:39 +0000
Manifest this update:     Sun 13 Apr 2025 07:01:39 +0000
Manifest next update:     Mon 14 Apr 2025 07:01:39 +0000
Files and hashes:         1: Uwd9Y3NnCMGZmVRE34P-tV7c6CA.roa (hash: 7yboFI0VfCPRE/G2/gMEN7pPuKOLyqEoyViA8/cI6kQ=)
                          2: irj1HjAurNUv-4zFYoq9zYDgdlE.roa (hash: Q709g8riB8kWPE65HcwVtvNF/Lb15QFI8yUUJR0G7Y0=)
                          3: mur6lsnVY-ZQulkv-wbizutqCFk.crl (hash: LvYFiaDoErETOW+a9nwb9VgKKOV8rJ6P7Gg2fb2LqR8=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2d:f4:2e:94:de:d4:7a:9f:73:0f:7a:27:dd:6d:b6:ce
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9aeafa96c9d563e650ba592ffb06e2ceeb6a0859
        Validity
            Not Before: Apr 13 07:01:39 2025 GMT
            Not After : Apr 14 07:01:39 2025 GMT
        Subject: CN=76a81d32538512a397da8f046b2e37a919b2f5f8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c5:53:d6:22:16:79:5b:33:3c:99:44:08:b7:7e:
                    28:1f:5c:12:b8:13:d6:e8:31:d0:44:e7:66:29:39:
                    21:fb:0b:f3:0b:41:a5:84:49:30:b9:26:71:33:80:
                    7e:50:fb:0b:26:83:28:bf:00:fc:90:87:f9:43:36:
                    97:cc:f2:a3:5d:d0:25:09:1f:61:15:f1:59:96:aa:
                    51:74:47:a4:55:24:fd:70:3d:45:a7:4f:18:71:54:
                    3c:f7:82:4c:40:e4:c1:2b:ee:a2:8e:43:be:f3:18:
                    02:6c:90:50:57:51:f6:09:a1:8b:1c:a9:31:16:8e:
                    a7:07:3b:19:f4:93:86:69:90:bd:c5:99:f9:ee:ff:
                    66:dd:b4:86:20:33:50:de:e6:83:c7:d1:31:cb:3b:
                    90:82:f9:26:1c:be:22:23:c2:3b:7e:3e:9e:40:f7:
                    71:ba:7a:4b:fc:29:be:81:b4:0e:a5:43:c9:96:f0:
                    cc:be:e2:83:f9:ec:3e:dc:36:f0:ad:a9:49:e7:b7:
                    f3:a0:60:6b:12:de:16:34:5a:84:a9:37:2f:8c:50:
                    9d:76:3a:d1:fc:0c:35:cd:38:a2:0f:a3:8e:08:82:
                    09:53:2e:31:65:6a:f0:d5:8b:9c:48:d4:fb:9b:6a:
                    08:62:29:64:1f:da:17:9a:68:0f:24:93:ba:db:57:
                    e2:53
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                76:A8:1D:32:53:85:12:A3:97:DA:8F:04:6B:2E:37:A9:19:B2:F5:F8
            X509v3 Authority Key Identifier:
                keyid:9A:EA:FA:96:C9:D5:63:E6:50:BA:59:2F:FB:06:E2:CE:EB:6A:08:59

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/mur6lsnVY-ZQulkv-wbizutqCFk.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4c/47275d-5fa7-4bb2-99eb-1f00737cb2a2/1/mur6lsnVY-ZQulkv-wbizutqCFk.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/4c/47275d-5fa7-4bb2-99eb-1f00737cb2a2/1/mur6lsnVY-ZQulkv-wbizutqCFk.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         29:35:b1:50:8d:ed:4b:0a:e9:0c:13:43:ed:08:e8:56:4c:f2:
         8b:21:2a:49:27:e2:f0:a8:b0:35:8f:23:7c:c5:ee:c4:0c:8d:
         b6:a2:aa:50:68:56:fb:b6:a4:93:8d:24:73:1d:62:0e:ca:09:
         13:d1:32:8d:e4:e5:90:22:b8:19:88:68:f2:f2:d5:82:22:6f:
         9a:d1:92:36:13:be:ce:06:d2:af:df:37:fc:54:b0:0f:f3:33:
         d5:de:63:b0:f0:18:ff:c7:21:16:af:fe:34:46:ca:d8:73:06:
         86:f2:e4:45:a0:19:38:c5:58:c4:11:8d:0c:1f:a4:dc:57:cf:
         3a:06:eb:ad:15:76:a5:97:b6:d6:36:a7:91:8a:25:b0:8d:93:
         d3:ba:be:87:fb:76:42:f3:42:79:63:03:ab:ed:cf:0f:ab:8d:
         b4:fb:7c:39:c1:9a:d3:62:35:89:6c:05:fc:50:ad:2f:53:14:
         aa:54:ff:55:b6:f5:27:c4:2a:86:a1:2f:73:ae:2a:94:fc:61:
         73:dd:28:90:a1:34:f2:fc:03:31:9f:10:4f:0e:bb:f5:18:16:
         b4:7c:de:00:f5:5c:49:2a:71:0b:cd:2e:c2:06:58:84:48:76:
         a7:9b:4c:d6:72:7e:ea:a6:09:d1:49:2d:6c:23:6c:07:0a:8e:
         ed:e1:59:ac
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----