Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4d/ebd0c9-7a36-4036-8658-1de00bd8912c/1/rFjrfGF1DM4zPNACbHfJPL5GXZg.mft
File:                     rFjrfGF1DM4zPNACbHfJPL5GXZg.mft (raw, json)
Hash identifier:          P8O8tsm2g84OaEji/rNoRknw5a4V1cs1pikMpdqIL1U=
Subject key identifier:   A8:94:0B:99:4A:E8:84:A2:CC:5A:99:13:EB:3A:2F:55:CA:49:AA:33
Authority key identifier: AC:58:EB:7C:61:75:0C:CE:33:3C:D0:02:6C:77:C9:3C:BE:46:5D:98
Certificate issuer:       /CN=ac58eb7c61750cce333cd0026c77c93cbe465d98
Certificate serial:       01962ECF7AAD56EB81C2C55B4023E7802309
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/rFjrfGF1DM4zPNACbHfJPL5GXZg.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/4d/ebd0c9-7a36-4036-8658-1de00bd8912c/1/rFjrfGF1DM4zPNACbHfJPL5GXZg.mft
Manifest number:          0939
Signing time:             Sun 13 Apr 2025 11:01:11 +0000
Manifest this update:     Sun 13 Apr 2025 11:01:11 +0000
Manifest next update:     Mon 14 Apr 2025 11:01:11 +0000
Files and hashes:         1: dYveMxpV9vTvL48rADeNQga7MgQ.roa (hash: cc3Bn2ZybQkob9bKAAN2kkILYEKK4Ym19QeA8svRfJQ=)
                          2: rFjrfGF1DM4zPNACbHfJPL5GXZg.crl (hash: UdQO3xZABsPMpGhqD68o0T1sSqOP6/ttzZuHc9L9OLo=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2e:cf:7a:ad:56:eb:81:c2:c5:5b:40:23:e7:80:23:09
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=ac58eb7c61750cce333cd0026c77c93cbe465d98
        Validity
            Not Before: Apr 13 11:01:11 2025 GMT
            Not After : Apr 14 11:01:11 2025 GMT
        Subject: CN=a8940b994ae884a2cc5a9913eb3a2f55ca49aa33
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d0:ab:3e:96:02:70:b3:84:d1:aa:bf:fa:74:b3:
                    76:0c:bc:fa:f9:c2:fa:ef:d5:2a:1b:6c:b4:fb:43:
                    db:22:4c:dd:e5:f5:57:a0:7a:03:6c:36:fe:c4:b1:
                    5a:fd:36:3e:6a:43:9a:b9:eb:b3:26:1f:18:87:02:
                    ad:a3:56:54:e6:88:1d:a1:eb:3b:80:cb:c7:bb:1f:
                    2e:84:16:37:28:be:43:c9:d4:ec:e7:bf:28:a6:5a:
                    3f:34:48:80:25:86:af:83:d8:fe:a1:d7:d8:76:09:
                    07:d2:d5:0a:df:11:de:33:66:45:e0:fc:e2:08:38:
                    0c:12:e1:48:6f:a8:9a:8f:da:50:7e:95:6b:ed:eb:
                    75:e6:06:07:11:a4:25:f3:fa:bf:4e:d7:d4:5a:fe:
                    1f:df:3b:fa:d8:99:35:a9:ff:4f:93:fe:61:0c:db:
                    b4:36:fb:b7:21:10:b8:c1:09:a2:c0:26:e0:9c:29:
                    ad:ec:bb:d3:ba:0d:4c:20:d4:5d:53:29:26:13:29:
                    fb:b5:c7:b9:11:80:2f:ef:1b:39:42:72:17:96:02:
                    f1:7b:15:52:8c:67:4f:47:76:d2:7f:44:0c:e7:4e:
                    b1:84:37:de:ca:e9:3c:8e:9c:0e:82:9a:06:3e:f7:
                    17:16:c5:c7:1f:d4:29:d9:af:14:46:a3:1b:97:fe:
                    54:57
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A8:94:0B:99:4A:E8:84:A2:CC:5A:99:13:EB:3A:2F:55:CA:49:AA:33
            X509v3 Authority Key Identifier:
                keyid:AC:58:EB:7C:61:75:0C:CE:33:3C:D0:02:6C:77:C9:3C:BE:46:5D:98

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/rFjrfGF1DM4zPNACbHfJPL5GXZg.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4d/ebd0c9-7a36-4036-8658-1de00bd8912c/1/rFjrfGF1DM4zPNACbHfJPL5GXZg.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/4d/ebd0c9-7a36-4036-8658-1de00bd8912c/1/rFjrfGF1DM4zPNACbHfJPL5GXZg.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         28:53:45:67:b6:23:9b:51:e1:a7:20:5e:14:f9:57:cc:74:69:
         94:03:93:0f:77:40:32:0a:21:09:6e:2f:58:f9:13:ff:44:4e:
         64:35:92:c8:1f:03:55:b4:f8:a3:7a:36:45:a5:af:f8:e4:5d:
         9f:dd:d0:cf:49:30:a1:5d:c8:61:bf:a0:7a:a6:07:dd:54:28:
         df:1c:ee:b1:40:32:60:f6:84:60:54:be:88:4d:3b:88:da:0e:
         80:8a:54:58:69:1c:fe:3d:92:21:6b:50:70:52:de:ca:02:56:
         ae:1a:a4:c1:e7:48:bd:96:ba:19:e2:45:c3:48:f0:55:db:0a:
         4d:e6:ed:9a:8d:23:54:14:41:2d:7a:4a:22:c1:65:5d:0e:7f:
         44:ea:0f:b3:f6:9f:6b:b3:4a:f6:74:2b:84:9e:fd:32:02:a5:
         17:69:93:2f:bf:ee:57:8b:12:7b:62:0d:35:fb:27:a2:20:89:
         80:ee:8b:b7:8d:1f:1e:c3:fb:3a:d7:0d:42:39:3b:6a:a9:17:
         90:45:d8:84:47:9d:6a:31:6f:89:b1:d0:45:59:0d:2e:6f:c6:
         30:40:3d:b6:b5:30:56:3e:fb:de:25:3e:97:01:32:3a:fb:fe:
         8c:e9:db:db:e9:31:92:23:1b:c8:0a:ce:fc:26:ac:11:7f:7e:
         49:99:d1:0c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----