Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4e/ac681f-05d2-4045-ae10-5ebdd9e2887c/1/t0zj88XlovnYuKTHeoNh-KIW860.mft
File:                     t0zj88XlovnYuKTHeoNh-KIW860.mft (raw, json)
Hash identifier:          UtnaGckzYZ0NOJjfXMdfhM2kq5iJ3BldDyQvwBzJcpU=
Subject key identifier:   2E:88:E1:D7:0A:A6:E9:57:F8:32:7D:E3:F8:5A:20:67:AE:66:AD:39
Authority key identifier: B7:4C:E3:F3:C5:E5:A2:F9:D8:B8:A4:C7:7A:83:61:F8:A2:16:F3:AD
Certificate issuer:       /CN=b74ce3f3c5e5a2f9d8b8a4c77a8361f8a216f3ad
Certificate serial:       01962FAB9CA8940D1238DBF56C0438C1808A
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/t0zj88XlovnYuKTHeoNh-KIW860.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/4e/ac681f-05d2-4045-ae10-5ebdd9e2887c/1/t0zj88XlovnYuKTHeoNh-KIW860.mft
Manifest number:          1006
Signing time:             Sun 13 Apr 2025 15:01:37 +0000
Manifest this update:     Sun 13 Apr 2025 15:01:37 +0000
Manifest next update:     Mon 14 Apr 2025 15:01:37 +0000
Files and hashes:         1: CWinuPyhpx9dz9dUy6hm9U-hSH0.roa (hash: kzRVIrmXy5CpUKL1SvqWwqKDXVmBwcHxugVImN5DgH0=)
                          2: _YcVUBg4pBpfDLeQd5mPM0GEYXY.roa (hash: TyordHwYJ+m11Vugk833ssnB80M13ALr7nNUHskLV34=)
                          3: t0zj88XlovnYuKTHeoNh-KIW860.crl (hash: vPi02vEJn9u/sGh7nJxoASdUbtmB8YhoMfZYdAGCl08=)
                          4: yXmhizI4Z65kZAreixYHF_jmabo.roa (hash: fvFB8WtSEXeTN1SuEvO/tTJVrm8z5zv+uzQCLKVxzdI=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2f:ab:9c:a8:94:0d:12:38:db:f5:6c:04:38:c1:80:8a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b74ce3f3c5e5a2f9d8b8a4c77a8361f8a216f3ad
        Validity
            Not Before: Apr 13 15:01:37 2025 GMT
            Not After : Apr 14 15:01:37 2025 GMT
        Subject: CN=2e88e1d70aa6e957f8327de3f85a2067ae66ad39
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a1:10:b3:1b:76:e0:fd:7c:76:81:6b:57:fa:8d:
                    1c:e6:0f:90:e7:d8:04:aa:71:e6:be:44:52:ec:ec:
                    ed:de:01:3d:59:94:83:80:c7:22:e9:46:b7:ea:a6:
                    0b:43:ae:93:9b:a3:3d:5a:85:3b:80:d4:d7:32:47:
                    4d:b3:bc:87:29:f2:8f:45:23:99:8c:a9:f3:05:22:
                    2b:74:48:50:97:fd:28:11:1f:9a:0a:66:13:1b:33:
                    3f:d2:a9:19:6b:e0:75:01:03:6f:36:bb:0b:82:07:
                    0c:8e:e8:7b:b2:02:15:df:94:d9:cc:7c:4b:0c:0f:
                    5b:d5:19:dd:84:22:01:72:76:ca:ad:31:b6:c8:58:
                    ef:a5:28:aa:b7:d5:67:c6:76:7c:ef:69:a6:5e:9d:
                    5d:99:58:ea:86:2f:0a:ab:9c:9d:01:2b:05:18:93:
                    15:36:23:93:7b:13:c9:93:82:57:40:2b:dd:1e:9b:
                    06:c9:a1:82:3e:d0:d9:98:5d:ce:33:4d:22:4f:45:
                    94:40:6b:5e:7b:c3:bc:2e:47:27:94:d9:9a:dd:95:
                    e3:9a:ba:61:aa:be:42:12:08:96:0a:be:98:a6:57:
                    41:28:47:f0:79:25:03:6f:0e:65:c6:11:00:3a:f4:
                    95:b5:f3:45:13:90:5f:e6:30:96:fb:11:d8:5c:e8:
                    97:1d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2E:88:E1:D7:0A:A6:E9:57:F8:32:7D:E3:F8:5A:20:67:AE:66:AD:39
            X509v3 Authority Key Identifier:
                keyid:B7:4C:E3:F3:C5:E5:A2:F9:D8:B8:A4:C7:7A:83:61:F8:A2:16:F3:AD

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/t0zj88XlovnYuKTHeoNh-KIW860.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4e/ac681f-05d2-4045-ae10-5ebdd9e2887c/1/t0zj88XlovnYuKTHeoNh-KIW860.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/4e/ac681f-05d2-4045-ae10-5ebdd9e2887c/1/t0zj88XlovnYuKTHeoNh-KIW860.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         68:61:de:42:fb:de:2a:c0:b8:cc:6b:03:91:f4:7f:7b:9a:a9:
         a5:24:aa:a1:f8:4f:44:7e:e2:ed:8c:b7:fc:5c:43:22:f9:ca:
         dd:44:a4:68:08:c6:ac:59:5c:a9:d8:84:fb:c7:5d:16:2f:2e:
         86:2b:b4:53:66:e3:b1:c6:a5:8f:21:7f:25:20:24:61:7c:b4:
         9e:a3:c3:14:8b:da:a0:2b:01:88:5b:5c:84:90:fb:84:ab:ea:
         c7:41:57:49:a0:d6:9f:f3:9a:a0:91:25:e7:5a:b7:0e:1b:4c:
         61:0e:c7:0d:1c:31:41:b5:1f:ff:fc:e7:ac:55:77:0e:98:a1:
         59:a7:ba:3a:55:b2:da:f0:91:7b:ba:53:c4:a4:10:e9:1e:92:
         d2:c8:b8:02:ea:06:94:d4:56:0e:b0:ba:58:28:8a:42:b7:75:
         fb:b7:52:0d:22:c6:fc:8b:90:a3:94:6a:56:c1:04:f1:40:20:
         2e:e6:29:1c:c3:1b:f8:24:34:c6:fb:39:5d:27:ad:ec:f7:88:
         fc:8f:76:bf:00:2e:b9:7b:70:e6:28:35:75:4a:fb:3d:c3:15:
         84:ce:de:3d:50:ec:c3:34:81:40:aa:80:55:bf:6f:42:6f:9a:
         a6:3a:a7:c0:59:eb:47:df:68:be:cf:1f:a3:87:09:b0:a0:b0:
         be:63:36:29
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----