Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4e/def555-9651-4e81-828c-7a94da7d9ee2/1/rmrw1fOCidNMIbpnxMOXh6QqZp4.mft
File:                     rmrw1fOCidNMIbpnxMOXh6QqZp4.mft (raw, json)
Hash identifier:          rzViHqZj7HVVJ9ngMCNa7yFM293+Jv4j8IKITweRb8M=
Subject key identifier:   B6:70:51:A3:C7:B5:77:F4:BB:71:A6:BB:51:0E:BF:78:1F:BB:87:DC
Authority key identifier: AE:6A:F0:D5:F3:82:89:D3:4C:21:BA:67:C4:C3:97:87:A4:2A:66:9E
Certificate issuer:       /CN=ae6af0d5f38289d34c21ba67c4c39787a42a669e
Certificate serial:       01962F74C28A5D3095E6CE557078FD8965D7
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/rmrw1fOCidNMIbpnxMOXh6QqZp4.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/4e/def555-9651-4e81-828c-7a94da7d9ee2/1/rmrw1fOCidNMIbpnxMOXh6QqZp4.mft
Manifest number:          14E7
Signing time:             Sun 13 Apr 2025 14:01:43 +0000
Manifest this update:     Sun 13 Apr 2025 14:01:43 +0000
Manifest next update:     Mon 14 Apr 2025 14:01:43 +0000
Files and hashes:         1: W8HdoS1T8uaMpM9YFeme5afjmm8.roa (hash: MVcxUXAqk+tB4gBwDZOl3zZvyfrQXKh2vGJmtjrVMqc=)
                          2: dC665gBaSCufZLjae0l6pAdLs6Q.roa (hash: kur7Pc6RtMGt0xkEhTapoaHBlvXxGfD2IjX+NyztpmY=)
                          3: rmrw1fOCidNMIbpnxMOXh6QqZp4.crl (hash: SPz1cSWFkfO6Vh4aJ5HfiGZljWOmkc1S8Rkc0FI7Hp4=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2f:74:c2:8a:5d:30:95:e6:ce:55:70:78:fd:89:65:d7
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=ae6af0d5f38289d34c21ba67c4c39787a42a669e
        Validity
            Not Before: Apr 13 14:01:43 2025 GMT
            Not After : Apr 14 14:01:43 2025 GMT
        Subject: CN=b67051a3c7b577f4bb71a6bb510ebf781fbb87dc
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b4:d2:c2:d5:61:5d:e4:92:0b:aa:58:04:63:d5:
                    69:bd:73:24:24:eb:ed:09:53:96:54:07:d3:b8:02:
                    47:5f:26:7c:e8:cc:83:cb:20:0b:23:66:84:17:bd:
                    d0:82:ae:88:2c:44:9e:13:42:dd:58:f2:0e:5d:f5:
                    e2:b4:4f:ff:fc:83:19:7e:29:c5:93:bb:50:a3:d5:
                    b5:e5:06:ab:e0:3f:bd:f8:26:92:b5:82:ee:61:34:
                    83:a2:33:88:4f:50:b9:37:65:13:02:8f:29:ed:fa:
                    c9:60:dd:6a:e0:81:6d:2c:2a:e8:1d:de:e1:c4:7a:
                    a6:24:6e:35:60:d8:40:1c:6b:90:1d:7c:1e:10:19:
                    c9:49:98:fc:b9:c3:f4:43:0e:bd:b4:2b:1a:2a:c2:
                    df:b8:d2:0a:73:a4:fc:66:49:37:2f:f6:83:f2:4a:
                    96:c5:06:6b:23:0f:5e:33:9b:eb:fc:3e:87:4b:9e:
                    14:95:6a:04:78:9b:a8:b9:8d:ae:5a:d4:74:2a:23:
                    f8:d8:09:b2:ca:5e:f1:2f:88:f3:90:24:35:f7:ea:
                    7d:58:52:80:b4:a3:8f:f5:8b:59:e9:98:a5:1c:0d:
                    60:64:c7:1d:7b:c5:11:d6:ac:c0:50:97:e3:d9:f9:
                    44:e2:f2:5e:cb:96:b3:a3:f8:55:f3:77:61:64:b5:
                    63:e3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B6:70:51:A3:C7:B5:77:F4:BB:71:A6:BB:51:0E:BF:78:1F:BB:87:DC
            X509v3 Authority Key Identifier:
                keyid:AE:6A:F0:D5:F3:82:89:D3:4C:21:BA:67:C4:C3:97:87:A4:2A:66:9E

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/rmrw1fOCidNMIbpnxMOXh6QqZp4.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4e/def555-9651-4e81-828c-7a94da7d9ee2/1/rmrw1fOCidNMIbpnxMOXh6QqZp4.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/4e/def555-9651-4e81-828c-7a94da7d9ee2/1/rmrw1fOCidNMIbpnxMOXh6QqZp4.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         4e:f5:63:ae:0d:31:85:fc:3c:9e:dc:ed:9a:b3:81:dd:e1:3e:
         60:cb:ba:6f:53:8c:93:ec:5e:a7:ad:1c:05:24:e6:d7:6d:c6:
         ef:f7:3b:d2:65:e9:e4:29:6f:ea:62:e1:a2:de:ed:d2:2b:2d:
         10:47:e1:6b:53:cf:74:bd:8f:75:ef:2e:e6:51:e7:61:c2:03:
         b4:4f:da:05:d9:10:dd:db:5c:0a:98:e5:f0:a4:bc:d9:f2:89:
         03:ce:e7:89:c7:fe:c1:2c:81:d9:da:c1:d3:fd:df:c5:12:ee:
         98:d5:71:ac:9e:7e:39:d9:42:f8:ac:0c:24:91:43:b2:bd:48:
         a4:81:91:4e:e1:b1:89:5a:14:4e:7c:9b:09:e0:56:05:ed:8e:
         ab:73:1c:62:0b:2a:64:56:e7:c5:9c:63:e2:0a:f5:5f:bb:9d:
         27:42:64:e4:f6:55:f6:f4:e6:c6:16:b1:28:d6:5f:ee:ff:8c:
         6c:fb:c2:9d:4a:5d:90:c2:c2:94:2a:ed:1a:45:b8:34:1e:7a:
         10:98:ed:17:47:77:88:df:0a:18:71:25:87:fa:23:21:2e:0e:
         1c:92:1a:16:4d:54:e2:d2:36:2d:24:c0:a5:58:72:b5:f7:e1:
         61:35:eb:77:44:38:a3:5f:fc:3e:44:53:c5:1f:98:76:ff:6d:
         2b:74:94:09
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----