Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4f/e768bd-f512-4b8a-936a-06c9296f08a2/1/preJsy4W6d0vcFExGdx36mH_Hgk.mft
File:                     preJsy4W6d0vcFExGdx36mH_Hgk.mft (raw, json)
Hash identifier:          rnweimnPdhrZ2sjNaWLirSBcs/JFmkzwsjj8bQ4WWoU=
Subject key identifier:   CE:58:8B:BA:12:73:6D:5E:3B:6C:3B:FE:F4:CA:2A:C2:E5:39:72:47
Authority key identifier: A6:B7:89:B3:2E:16:E9:DD:2F:70:51:31:19:DC:77:EA:61:FF:1E:09
Certificate issuer:       /CN=a6b789b32e16e9dd2f70513119dc77ea61ff1e09
Certificate serial:       01962F3D7D22C1AC965CBA41DDAB179C08F7
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/preJsy4W6d0vcFExGdx36mH_Hgk.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/4f/e768bd-f512-4b8a-936a-06c9296f08a2/1/preJsy4W6d0vcFExGdx36mH_Hgk.mft
Manifest number:          1371
Signing time:             Sun 13 Apr 2025 13:01:20 +0000
Manifest this update:     Sun 13 Apr 2025 13:01:20 +0000
Manifest next update:     Mon 14 Apr 2025 13:01:20 +0000
Files and hashes:         1: 6R635Ptd67sQbUozDAHL15KwAZ8.roa (hash: FeJLdgD5f1a4PRbLvL4XZUcT1XCVqYv8DaI7m1HKYu4=)
                          2: BGlv0Nq1aORhjho_eomErpdENqs.roa (hash: tJlt0s+DB+Wx1B02lbAuTeaAFj/Rwy4EK+7+WopLHuY=)
                          3: EcvOEckBpGv8WcgKGLbyF5bYsw8.roa (hash: iM/JhqVxaPI3RLw6TbcIGYCT5pzlMW9q0BUKqfAvA2s=)
                          4: PHALUzcgKSrWpp9PLu5bWuqYals.roa (hash: ipz2KfdlfbDQbWsB2hP2+lgmuhx6HeNDSZnM+uKEXUI=)
                          5: k94_YS0wqPGUh9Li10sS34dlvmM.roa (hash: BUjj7NfQhPbheGokvO6j0wOKq8xKD5UoEM8obUQTSDg=)
                          6: preJsy4W6d0vcFExGdx36mH_Hgk.crl (hash: rA8eMUZf8riIIdxpWyhNt55/3EmLS5MpVNzoZuC+7Lc=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2f:3d:7d:22:c1:ac:96:5c:ba:41:dd:ab:17:9c:08:f7
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=a6b789b32e16e9dd2f70513119dc77ea61ff1e09
        Validity
            Not Before: Apr 13 13:01:20 2025 GMT
            Not After : Apr 14 13:01:20 2025 GMT
        Subject: CN=ce588bba12736d5e3b6c3bfef4ca2ac2e5397247
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9b:08:ae:f0:30:1d:dd:c2:d0:40:f3:27:9b:b9:
                    19:57:46:6f:b5:fb:82:fc:10:f9:80:74:90:18:02:
                    40:7e:27:b1:af:28:1a:b1:9b:38:21:4d:aa:d5:2f:
                    87:3f:2c:9e:bb:bc:18:b2:15:de:4b:03:15:49:5e:
                    f8:e3:73:00:90:7b:cb:8b:33:ca:fd:92:7f:41:56:
                    79:38:64:18:73:cc:6a:c9:ba:d4:20:5d:f6:1c:73:
                    25:96:ae:c7:be:7d:5a:46:fd:99:11:37:7d:e3:46:
                    1a:d1:10:f8:61:b2:2a:7b:23:32:6f:95:f0:41:78:
                    a0:22:de:2c:89:87:71:d4:ee:47:b1:dd:a5:fe:5c:
                    14:5f:d1:a8:7a:f4:32:66:79:17:c3:1c:66:ed:cd:
                    4d:de:0d:d7:07:fd:24:da:87:f1:80:b5:2d:68:8c:
                    75:bf:56:79:8e:c0:04:c8:b9:8b:4c:9c:a2:ac:0b:
                    49:b5:10:d3:52:be:d7:b5:4f:d4:6e:5a:02:f1:ed:
                    16:af:2b:40:2b:e8:18:6f:0d:55:4c:ff:00:1e:3a:
                    f0:7a:b9:68:c9:2b:36:e4:49:c0:2f:cd:67:10:bc:
                    b6:8d:42:fb:3e:e2:5f:4d:ca:13:5c:8b:21:fa:d7:
                    3c:1d:2f:db:48:45:b6:b3:88:1d:90:c8:20:51:f7:
                    00:21
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CE:58:8B:BA:12:73:6D:5E:3B:6C:3B:FE:F4:CA:2A:C2:E5:39:72:47
            X509v3 Authority Key Identifier:
                keyid:A6:B7:89:B3:2E:16:E9:DD:2F:70:51:31:19:DC:77:EA:61:FF:1E:09

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/preJsy4W6d0vcFExGdx36mH_Hgk.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4f/e768bd-f512-4b8a-936a-06c9296f08a2/1/preJsy4W6d0vcFExGdx36mH_Hgk.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/4f/e768bd-f512-4b8a-936a-06c9296f08a2/1/preJsy4W6d0vcFExGdx36mH_Hgk.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         00:7e:7c:5b:48:f6:71:06:c8:e1:1a:95:3e:ad:8e:cc:6d:46:
         e7:64:02:4b:e2:0c:55:ef:6e:38:8b:44:55:d8:37:ff:82:2f:
         bf:ed:e7:38:e7:b0:78:eb:5b:9c:30:04:2c:ef:ea:2c:b0:04:
         4e:43:ec:7a:7b:9d:81:37:3f:19:0a:0e:45:e2:f6:15:0b:ab:
         b2:71:5f:c8:0d:be:d3:36:f9:02:7a:0f:de:37:57:ce:7b:94:
         7f:a0:2a:07:2f:0d:76:79:b9:f7:6d:bb:ab:63:40:b1:c3:85:
         a8:01:4c:51:39:51:c1:99:41:2a:5d:e0:10:bd:1e:12:dd:8f:
         e3:bc:6d:3a:12:6e:2f:fb:c6:7d:d6:19:0c:eb:4b:ad:ac:6c:
         1a:d2:07:bc:fd:9c:bf:64:98:0f:7a:2c:f3:e7:3a:f6:1a:99:
         3f:21:92:ef:05:84:ed:b6:72:b5:fb:f1:3a:1a:27:d3:89:0c:
         54:56:aa:d3:70:77:77:73:7f:c1:5e:6e:a6:7c:59:0f:0a:76:
         c5:77:18:a3:ce:40:d3:fa:fd:14:0a:fb:7c:09:d7:78:41:0c:
         71:37:bb:e8:65:68:d9:f1:0d:c3:47:04:5a:cb:f7:8a:ad:67:
         9f:b8:d9:38:db:03:43:7f:5e:b3:8c:07:9a:4b:cb:f7:56:fb:
         81:1d:71:e6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----