Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4d/ae4547-2ca2-4cbd-a1b5-3cf3b463a86a/1/A_fnz4F24wJ2TUgpn8Iqm9xrpoM.mft
File:                     A_fnz4F24wJ2TUgpn8Iqm9xrpoM.mft (raw, json)
Hash identifier:          l28Lq9uQEj/k9S1v+MQesgyMdCwdnI1t+kIXd3cTPRc=
Subject key identifier:   8E:52:1B:27:1C:00:E6:D0:3F:7A:D7:9A:E4:C5:79:DE:0F:3E:69:08
Authority key identifier: 03:F7:E7:CF:81:76:E3:02:76:4D:48:29:9F:C2:2A:9B:DC:6B:A6:83
Certificate issuer:       /CN=03f7e7cf8176e302764d48299fc22a9bdc6ba683
Certificate serial:       01962F3D47717B4B9B86DAEED4A51D23147F
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/A_fnz4F24wJ2TUgpn8Iqm9xrpoM.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/4d/ae4547-2ca2-4cbd-a1b5-3cf3b463a86a/1/A_fnz4F24wJ2TUgpn8Iqm9xrpoM.mft
Manifest number:          0F33
Signing time:             Sun 13 Apr 2025 13:01:07 +0000
Manifest this update:     Sun 13 Apr 2025 13:01:07 +0000
Manifest next update:     Mon 14 Apr 2025 13:01:07 +0000
Files and hashes:         1: 8ea9JzqwyGDT2dMFgAmUz7EOwao.roa (hash: VSNDXOm1+cAC798c36135Xw4x7+9RwirArr3iwfbiGQ=)
                          2: A_fnz4F24wJ2TUgpn8Iqm9xrpoM.crl (hash: OW/TFBls/TITBLM64HeUG82xz1SwWJbd62FmIw2ZO2I=)
                          3: CGoYKUbztdIKKtCC46FwnLxxAJQ.roa (hash: x68KjIodNUgVtCpjw6Q/mHOmDSpKRwUfcYK1IisVAiw=)
                          4: TtMpw78SmRxgZIGYNEHEXtMRk7M.roa (hash: A34HD6vBs6SuS2D6qkJmN0sK8pKEio3YxA+zTTW9xgA=)
                          5: lIr5yIALJv3-BOg4uAYoEY_kNlo.roa (hash: f+GijD6e1+UQuvYwAF3v/POqX5KPaUvIB4vfF6bFgTQ=)
                          6: wp6rgT_ySJ7oIdAAI_SCvm21yFU.roa (hash: z87ZPo/PyE4etTlqKK3OFQbBD0NBmeieu4d4u91gewk=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2f:3d:47:71:7b:4b:9b:86:da:ee:d4:a5:1d:23:14:7f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=03f7e7cf8176e302764d48299fc22a9bdc6ba683
        Validity
            Not Before: Apr 13 13:01:07 2025 GMT
            Not After : Apr 14 13:01:07 2025 GMT
        Subject: CN=8e521b271c00e6d03f7ad79ae4c579de0f3e6908
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ae:f0:23:31:e1:50:55:97:70:9d:9d:dd:b7:2c:
                    2a:03:67:ce:f9:af:1c:69:56:b0:8b:58:0f:6c:be:
                    35:64:ba:b0:9f:06:6e:24:ce:c9:3e:43:19:39:2c:
                    86:f2:1c:8d:a4:49:53:50:5d:55:9d:d1:09:dd:6d:
                    eb:7a:c0:a2:6c:dc:b1:74:7d:65:27:5a:74:f2:b3:
                    83:05:7f:1f:76:7d:e8:48:69:f4:ab:22:c4:b9:b3:
                    85:f0:b2:5d:c1:8a:43:65:e6:f8:56:e6:ac:10:71:
                    0a:66:ee:88:80:51:b5:d3:31:64:15:9a:ae:a0:8a:
                    b8:7f:5d:02:bb:91:2a:bd:80:67:ae:07:e3:f9:24:
                    12:22:1b:a6:ce:ab:11:cb:49:f4:04:1b:0a:85:06:
                    05:19:77:37:ec:98:7b:5b:bf:4f:b5:ed:4e:fa:21:
                    74:7f:8c:2c:4a:c5:9a:c9:f6:af:77:e5:f3:6b:46:
                    f3:e4:e0:88:1b:57:08:61:63:58:97:1e:bf:0d:41:
                    1b:36:ce:13:c7:b5:3b:0a:f8:d9:ba:a1:c8:39:77:
                    1f:2b:d5:59:39:7e:f3:a8:34:a1:f2:b6:5a:1f:94:
                    16:cb:71:79:fa:e8:77:a3:7a:48:89:5d:aa:05:02:
                    0e:37:c8:66:7e:b1:d5:52:ba:37:09:a9:4f:33:df:
                    29:d7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8E:52:1B:27:1C:00:E6:D0:3F:7A:D7:9A:E4:C5:79:DE:0F:3E:69:08
            X509v3 Authority Key Identifier:
                keyid:03:F7:E7:CF:81:76:E3:02:76:4D:48:29:9F:C2:2A:9B:DC:6B:A6:83

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/A_fnz4F24wJ2TUgpn8Iqm9xrpoM.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4d/ae4547-2ca2-4cbd-a1b5-3cf3b463a86a/1/A_fnz4F24wJ2TUgpn8Iqm9xrpoM.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/4d/ae4547-2ca2-4cbd-a1b5-3cf3b463a86a/1/A_fnz4F24wJ2TUgpn8Iqm9xrpoM.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         72:07:51:bc:c4:2c:3b:38:df:91:dd:9f:89:8b:4a:f2:8c:a6:
         50:06:1f:a6:27:f7:a1:62:65:90:05:9b:b9:3f:87:f9:04:e3:
         61:9a:16:35:42:2a:7d:1f:c0:68:e0:4f:92:1f:f3:1c:40:cb:
         4c:d1:f5:f1:51:22:52:14:54:b3:1c:2d:85:5c:ab:ef:e7:cb:
         1d:1e:18:51:68:a3:5a:ca:33:66:7f:48:28:1c:7d:45:ed:13:
         85:78:db:9d:4f:98:bc:f6:8e:a3:2c:49:1c:45:17:e2:02:4d:
         2a:91:41:b7:52:75:3c:73:ca:21:38:e2:30:65:98:eb:31:03:
         9a:d6:d8:18:5a:83:ee:79:62:de:79:63:29:3c:93:c6:69:3b:
         6c:48:35:83:c1:1f:ae:4e:6a:f1:de:02:ea:fc:b4:fc:eb:b1:
         91:b7:fd:6f:c2:49:6f:47:4a:f4:a9:86:2d:e6:eb:b6:06:d1:
         f2:fe:be:99:e1:6f:0d:1a:b4:1a:0b:04:e4:1b:d6:d7:25:61:
         8a:4c:67:cb:7d:51:0a:12:87:35:b1:11:5b:02:c6:7f:75:65:
         46:44:3e:f0:d3:94:3e:27:75:c7:3d:6e:68:b2:5c:1c:f6:69:
         15:9d:be:89:e0:ef:2d:2e:c8:3e:de:95:1a:2f:04:33:85:b6:
         9e:92:6b:a0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----