Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4f/bef6e8-8873-4529-8e72-238c6d8a4c17/1/pId4Lj9wxc0nsy9SdNDlvGLpXK8.mft
File:                     pId4Lj9wxc0nsy9SdNDlvGLpXK8.mft (raw, json)
Hash identifier:          4ll36/uwx5bKSUcleO2c8vBlZRcjLv6FLnJ2jNbWVHk=
Subject key identifier:   61:FC:8C:9A:6F:E1:77:FD:36:79:A6:97:02:C6:5B:99:AA:ED:B2:5C
Authority key identifier: A4:87:78:2E:3F:70:C5:CD:27:B3:2F:52:74:D0:E5:BC:62:E9:5C:AF
Certificate issuer:       /CN=a487782e3f70c5cd27b32f5274d0e5bc62e95caf
Certificate serial:       01962FAB4A3173992ECE7033F7BA1B4AD6D7
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/pId4Lj9wxc0nsy9SdNDlvGLpXK8.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/4f/bef6e8-8873-4529-8e72-238c6d8a4c17/1/pId4Lj9wxc0nsy9SdNDlvGLpXK8.mft
Manifest number:          0EDA
Signing time:             Sun 13 Apr 2025 15:01:16 +0000
Manifest this update:     Sun 13 Apr 2025 15:01:16 +0000
Manifest next update:     Mon 14 Apr 2025 15:01:16 +0000
Files and hashes:         1: 03LlpQC3OthhaMKAkoHkTsK5DvM.roa (hash: MXfk52dc+50VpTuEktAwLc5jK+27W4bau786/NbUnKQ=)
                          2: FDaJnwtdKIaCGJVg6QNctNX3wpA.roa (hash: nG1/6+0MejULa30YNNdRkzBTjiM/zpm9raBFToCey7o=)
                          3: pId4Lj9wxc0nsy9SdNDlvGLpXK8.crl (hash: oxhUz4D7lrFPuFB4bCPP3Vpxb+nf2o1YXg/t0OStVOI=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2f:ab:4a:31:73:99:2e:ce:70:33:f7:ba:1b:4a:d6:d7
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=a487782e3f70c5cd27b32f5274d0e5bc62e95caf
        Validity
            Not Before: Apr 13 15:01:16 2025 GMT
            Not After : Apr 14 15:01:16 2025 GMT
        Subject: CN=61fc8c9a6fe177fd3679a69702c65b99aaedb25c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e2:11:6c:61:4d:99:f1:3a:47:53:3e:7b:43:3d:
                    31:5a:b0:cf:cc:15:a0:de:45:88:87:fc:66:eb:59:
                    8c:62:a2:55:f5:25:50:cc:7a:11:06:55:2b:b8:28:
                    a7:ab:cd:a6:94:b7:c9:0e:f0:75:f6:eb:ed:0c:30:
                    0a:71:23:22:f3:ac:4f:f6:0b:56:33:94:f4:5a:77:
                    82:21:83:c3:e7:40:a9:1f:56:4b:3e:f4:b3:c2:17:
                    48:07:a9:03:b8:5b:84:2e:d7:3f:ff:7e:7b:14:2e:
                    26:19:80:6a:9b:7f:cb:85:f8:84:e4:48:c4:5d:85:
                    e6:92:21:7e:7f:eb:6e:ac:d9:1f:b2:22:87:f5:be:
                    37:14:35:49:6e:d3:30:26:14:a6:c0:df:6b:e8:02:
                    b0:73:15:c2:b1:c1:8f:34:31:41:93:2f:b0:ba:0b:
                    2b:18:ba:cf:b9:2d:f7:c5:00:9d:f7:01:6c:c5:aa:
                    1e:9b:09:a8:45:db:90:1f:3c:df:1c:63:4c:26:b2:
                    3f:3b:d2:de:f0:95:ee:96:5c:90:86:1d:d7:54:25:
                    87:87:3b:b3:70:fb:f3:d1:63:45:2d:92:bb:69:ee:
                    a1:4b:3c:98:27:b5:4e:de:c0:4f:53:88:83:36:56:
                    a8:2c:e5:b0:4f:4e:67:12:3a:f9:cc:0e:6d:7d:28:
                    f1:c7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                61:FC:8C:9A:6F:E1:77:FD:36:79:A6:97:02:C6:5B:99:AA:ED:B2:5C
            X509v3 Authority Key Identifier:
                keyid:A4:87:78:2E:3F:70:C5:CD:27:B3:2F:52:74:D0:E5:BC:62:E9:5C:AF

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/pId4Lj9wxc0nsy9SdNDlvGLpXK8.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4f/bef6e8-8873-4529-8e72-238c6d8a4c17/1/pId4Lj9wxc0nsy9SdNDlvGLpXK8.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/4f/bef6e8-8873-4529-8e72-238c6d8a4c17/1/pId4Lj9wxc0nsy9SdNDlvGLpXK8.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         aa:be:89:79:12:38:a1:49:b8:a6:da:e7:2f:29:e0:45:34:c1:
         e4:a4:bb:ae:84:2c:60:dc:10:be:d7:80:b8:49:3f:e8:52:0c:
         7f:8e:b8:39:ea:4c:a7:07:0d:87:d6:69:35:b9:d2:30:4d:80:
         7f:0f:a4:9a:9f:c6:0b:5f:ac:b8:51:88:5b:17:b2:27:1d:79:
         8c:66:21:54:5d:44:2b:09:0a:70:37:73:5e:70:d2:ce:01:8a:
         8b:24:de:ca:ca:69:14:fb:24:e8:0d:af:2e:64:cd:94:af:6a:
         d0:15:69:b9:07:0f:f3:bc:de:f1:f2:11:59:4a:a0:95:10:ba:
         47:1d:c5:a6:0f:ea:e8:a7:98:f9:1c:67:6a:cd:cf:a4:8a:e9:
         be:99:fe:0d:7f:1a:e4:54:98:95:8c:8b:40:74:1b:ad:0b:e4:
         67:cd:ce:83:95:e9:19:1b:ea:09:4f:e9:62:2a:5e:3b:b7:59:
         8f:ae:a8:93:53:d0:f4:a2:f1:54:93:c1:c8:15:6b:c7:bc:3e:
         39:39:52:f3:02:88:49:f9:4e:b5:a8:19:6a:9a:09:5a:c0:c2:
         b1:5a:25:2b:f7:a4:cb:d3:00:c9:b7:56:67:1f:e1:12:6b:11:
         66:8e:38:cb:3e:d3:3e:9a:73:52:da:14:49:c4:7d:14:c5:de:
         ef:bf:9c:23
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----