Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/53/5a8e04-dd07-435a-b1bf-adedcaa3d26e/1/mn7erAxsIOpJ1JKZDkhYVB0ZD_E.mft
File:                     mn7erAxsIOpJ1JKZDkhYVB0ZD_E.mft (raw, json)
Hash identifier:          Bsact+IVO1oBVSIqCx4IIWSYkaM7XFs2f3403ZQ0A4M=
Subject key identifier:   8E:96:B1:C4:4C:4A:19:45:73:1E:A5:ED:50:7A:7C:A6:90:7D:5E:17
Authority key identifier: 9A:7E:DE:AC:0C:6C:20:EA:49:D4:92:99:0E:48:58:54:1D:19:0F:F1
Certificate issuer:       /CN=9a7edeac0c6c20ea49d492990e4858541d190ff1
Certificate serial:       01962F06AE6E6CFB6715C8412054FFD552C6
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/mn7erAxsIOpJ1JKZDkhYVB0ZD_E.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/53/5a8e04-dd07-435a-b1bf-adedcaa3d26e/1/mn7erAxsIOpJ1JKZDkhYVB0ZD_E.mft
Manifest number:          122C
Signing time:             Sun 13 Apr 2025 12:01:29 +0000
Manifest this update:     Sun 13 Apr 2025 12:01:29 +0000
Manifest next update:     Mon 14 Apr 2025 12:01:29 +0000
Files and hashes:         1: 34VAKZ3gTB0K6y5Jn98OpVnf6K0.roa (hash: 0+PPWp0o1/rwBJiAmqaqRlxFY24T5j6RDdie2DfGC7Q=)
                          2: CqJnQHuWTrr1JOb1x2qlCn7qYBQ.roa (hash: raq5ehc6BfIUJsoK2h14SXHgtvt48xPVADOcv/2fuZ8=)
                          3: mn7erAxsIOpJ1JKZDkhYVB0ZD_E.crl (hash: TICBhiPy4i0mryLcjL0QdvXpL1aWaSRtHXgOwv2FKFg=)
                          4: n5tnQjmPsSAa7e0U_BISzqIEQuY.roa (hash: MzEMfBEyS0reuH82ojDXQdP0KgBQQ3sK4Mxn6oyxx3Y=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2f:06:ae:6e:6c:fb:67:15:c8:41:20:54:ff:d5:52:c6
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9a7edeac0c6c20ea49d492990e4858541d190ff1
        Validity
            Not Before: Apr 13 12:01:29 2025 GMT
            Not After : Apr 14 12:01:29 2025 GMT
        Subject: CN=8e96b1c44c4a1945731ea5ed507a7ca6907d5e17
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a7:c0:37:c2:01:98:95:ce:7d:28:e2:5e:9c:53:
                    9b:29:2f:f3:25:3f:30:2b:65:e6:ed:08:12:0d:34:
                    21:7f:0c:58:d0:85:c4:80:c5:2d:6c:d0:7d:06:c7:
                    93:85:d1:f8:46:4b:ac:6e:34:1f:c0:02:54:2b:fa:
                    16:ac:8f:06:8b:d1:aa:0c:7e:17:4f:11:01:83:5e:
                    d7:f0:67:e0:0e:b8:39:5f:10:d8:7a:52:e1:2a:5f:
                    7c:bd:40:87:87:1b:22:d4:cc:e3:b9:e0:32:3a:a3:
                    79:5a:7b:39:f0:68:19:1f:6e:49:e7:70:00:b1:c3:
                    b3:d2:f0:2d:8c:ff:40:28:3f:fc:a8:81:62:5c:b6:
                    c8:e8:d5:63:84:41:8b:be:b6:15:d9:5a:9a:7a:96:
                    23:c0:a1:17:9f:08:24:ab:46:18:7f:e7:5c:df:c9:
                    2b:c1:c3:54:6b:d2:a0:34:04:7e:6a:87:de:ef:29:
                    c4:48:02:dd:91:eb:34:d1:f6:3c:00:b6:22:eb:86:
                    15:a4:59:91:01:3a:41:61:ae:85:2b:4c:42:fc:19:
                    ac:54:ce:a9:ac:07:bd:67:c9:9d:58:d3:d8:4b:27:
                    8b:32:04:89:11:b6:6a:b2:86:f8:5a:09:3f:4f:02:
                    34:24:e5:4d:41:71:51:7f:a6:b3:6e:96:78:aa:a5:
                    c8:e7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8E:96:B1:C4:4C:4A:19:45:73:1E:A5:ED:50:7A:7C:A6:90:7D:5E:17
            X509v3 Authority Key Identifier:
                keyid:9A:7E:DE:AC:0C:6C:20:EA:49:D4:92:99:0E:48:58:54:1D:19:0F:F1

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/mn7erAxsIOpJ1JKZDkhYVB0ZD_E.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/53/5a8e04-dd07-435a-b1bf-adedcaa3d26e/1/mn7erAxsIOpJ1JKZDkhYVB0ZD_E.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/53/5a8e04-dd07-435a-b1bf-adedcaa3d26e/1/mn7erAxsIOpJ1JKZDkhYVB0ZD_E.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         75:64:db:51:1f:44:ef:61:e5:1e:e5:b4:f7:4d:21:44:b6:93:
         95:e6:5c:02:f5:9f:9b:13:0a:3a:4a:fc:f5:0f:5f:76:6c:c3:
         26:5c:22:74:4c:60:dc:27:e0:72:c1:fe:5b:b6:f0:d5:23:9d:
         ef:fc:68:97:63:c7:cf:10:93:a9:fe:7f:b2:5d:87:96:18:a9:
         14:bd:f3:ec:8a:37:81:c7:75:3c:f7:26:f4:d3:31:4f:f5:6c:
         f5:f0:a2:ce:2a:ff:fd:6c:64:61:87:68:50:c4:85:fb:50:5e:
         ce:fd:9e:a6:4c:76:2e:76:36:5a:47:29:d3:20:ad:d8:9c:cb:
         67:12:d2:9e:9f:83:0b:d1:60:e8:46:90:58:98:d7:c8:e7:32:
         7a:14:35:57:55:33:f4:df:35:ce:ec:b5:f7:6a:42:e5:9b:de:
         90:55:12:69:ea:e7:41:83:eb:2c:86:ee:90:73:67:bf:d0:f1:
         49:0c:de:a2:b8:e9:ab:2b:d3:6a:2f:7d:b4:41:96:86:e4:6f:
         7b:dd:64:07:65:b5:57:d6:2f:cd:52:ac:16:5a:84:61:66:b2:
         ba:18:29:61:37:a0:f1:12:db:77:76:de:45:e3:70:62:12:94:
         ff:3a:27:4b:df:f2:d8:7c:73:bd:62:a9:c8:b4:47:1e:22:42:
         1b:22:cf:cb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----