Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/58/2581f4-8410-4a43-9186-0fab2269ea8e/1/M8Ww18CpzSS3PNy5LIdG6FpKW48.mft
File:                     M8Ww18CpzSS3PNy5LIdG6FpKW48.mft (raw, json)
Hash identifier:          ouvcasbDB9rWLtF4oNy0UXXJa489kmeuBIXtjKn5rPE=
Subject key identifier:   F2:07:76:CD:EF:E6:F3:51:EA:1E:DD:70:F3:EA:CC:5C:08:3E:B4:1F
Authority key identifier: 33:C5:B0:D7:C0:A9:CD:24:B7:3C:DC:B9:2C:87:46:E8:5A:4A:5B:8F
Certificate issuer:       /CN=33c5b0d7c0a9cd24b73cdcb92c8746e85a4a5b8f
Certificate serial:       01962E98603FF07822E2226F98B9EC0EBFFF
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/M8Ww18CpzSS3PNy5LIdG6FpKW48.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/58/2581f4-8410-4a43-9186-0fab2269ea8e/1/M8Ww18CpzSS3PNy5LIdG6FpKW48.mft
Manifest number:          090F
Signing time:             Sun 13 Apr 2025 10:01:00 +0000
Manifest this update:     Sun 13 Apr 2025 10:01:00 +0000
Manifest next update:     Mon 14 Apr 2025 10:01:00 +0000
Files and hashes:         1: G9IMCDRzOQuPbahdvenWDMel-ec.roa (hash: KIE/h3OnsvTFha1HUMyujy3OIfah+sKBRWCgbRO+mg8=)
                          2: M8Ww18CpzSS3PNy5LIdG6FpKW48.crl (hash: k/oejBVSlyTKJm5ClYEQ5681MVec+EvjgL+u3m9RFeg=)
                          3: kaCKh69UCH1e8YxXvfDRSIMinp4.roa (hash: 1RbgYWWGOgFXxNNpggiv1pAr13/5f1ITVmQGcqYLD8s=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2e:98:60:3f:f0:78:22:e2:22:6f:98:b9:ec:0e:bf:ff
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=33c5b0d7c0a9cd24b73cdcb92c8746e85a4a5b8f
        Validity
            Not Before: Apr 13 10:01:00 2025 GMT
            Not After : Apr 14 10:01:00 2025 GMT
        Subject: CN=f20776cdefe6f351ea1edd70f3eacc5c083eb41f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a1:1d:d9:c9:41:a6:8f:81:ab:8b:cf:6a:48:1f:
                    fa:a2:55:16:af:e1:ea:0b:a0:6f:41:69:d9:e9:ec:
                    e7:17:98:ab:31:e5:b0:9e:f1:f2:15:34:17:c5:8a:
                    4e:ea:6a:81:01:22:2f:8b:cf:26:72:f5:04:25:5c:
                    2b:1d:40:33:60:de:31:09:1c:66:3c:89:1e:bc:36:
                    12:71:e8:60:a4:6c:7d:37:d6:9d:9a:b2:1e:f1:44:
                    51:03:c6:89:30:9e:24:c4:84:b6:91:db:33:a0:47:
                    81:c4:f4:42:16:0b:00:f4:be:9a:7b:53:ce:a6:58:
                    92:ea:5c:c6:fc:ff:a4:5e:bb:86:36:1d:42:1d:32:
                    d1:82:1f:cc:50:f1:f5:b6:42:82:53:fb:e4:67:63:
                    0a:d5:75:f4:2e:93:63:c8:7e:88:e4:1e:fe:76:54:
                    2c:a5:a4:4c:ff:28:8b:d3:37:b5:d8:c4:72:6f:b0:
                    5e:d4:32:57:85:93:4c:6d:e7:d0:1a:ba:4d:4a:ed:
                    f4:49:cb:88:f2:28:b6:45:c4:1e:48:cc:5e:2b:9f:
                    a9:ff:12:f3:ee:8b:c0:f1:0d:cf:66:71:33:6b:b4:
                    c8:fd:1c:a9:5d:43:37:6c:ce:da:22:ec:b2:3b:29:
                    29:9a:62:6f:62:b3:f5:72:bd:b0:80:98:6c:e0:86:
                    7f:3f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F2:07:76:CD:EF:E6:F3:51:EA:1E:DD:70:F3:EA:CC:5C:08:3E:B4:1F
            X509v3 Authority Key Identifier:
                keyid:33:C5:B0:D7:C0:A9:CD:24:B7:3C:DC:B9:2C:87:46:E8:5A:4A:5B:8F

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/M8Ww18CpzSS3PNy5LIdG6FpKW48.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/58/2581f4-8410-4a43-9186-0fab2269ea8e/1/M8Ww18CpzSS3PNy5LIdG6FpKW48.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/58/2581f4-8410-4a43-9186-0fab2269ea8e/1/M8Ww18CpzSS3PNy5LIdG6FpKW48.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         8e:b1:f4:69:16:ff:15:ab:e4:3a:34:b3:b1:a0:ad:2d:d6:65:
         a1:6e:55:51:93:7b:58:82:e9:e0:54:26:17:59:c5:c7:00:b5:
         b3:5d:32:b1:2e:05:ec:6e:e9:ec:6e:20:93:cf:a9:1e:90:b6:
         21:a2:d1:2c:f4:6e:f7:d2:49:ea:7a:5a:5d:d2:ea:70:1f:19:
         6a:5c:99:b6:5e:60:59:36:dd:9d:21:9d:67:1f:2a:48:9d:fb:
         17:6a:65:55:e6:2d:6d:3e:01:c1:21:97:55:b2:ac:9f:8e:fb:
         81:ca:11:34:23:3d:ce:4e:e0:10:5a:5c:fb:0f:66:e3:42:4f:
         d4:14:1c:a1:16:dd:dd:57:db:88:96:b3:2b:fa:fe:53:3e:8a:
         3b:3e:21:d8:e1:4b:6f:15:e1:39:af:ca:65:79:53:dd:d4:80:
         0e:fb:74:da:57:9d:5d:f4:c9:fb:d2:f7:00:0e:62:4e:8f:f7:
         6a:c6:67:31:6b:33:0f:d1:a9:4e:e6:2f:7c:90:09:d0:4d:64:
         23:71:d2:b8:88:bf:22:d4:7c:fb:5d:41:40:b8:7b:fe:dd:04:
         10:f0:3c:5b:0b:c4:47:24:7e:4e:b3:2e:16:37:b5:29:84:81:
         90:78:83:49:25:24:11:34:80:1d:c4:91:99:0a:c6:41:b6:a0:
         68:5b:c1:4c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----