Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/58/952230-c262-41cc-b956-cfc46a76ec78/1/N04nKbFzaYkKFRL2Q80I5Lov9BQ.mft
File:                     N04nKbFzaYkKFRL2Q80I5Lov9BQ.mft (raw, json)
Hash identifier:          aXz4/L+amq+t4Qw89/OhSGe6moendgz/ColTkr3LsGw=
Subject key identifier:   B1:B8:B7:58:9E:13:9B:44:E7:25:A7:B1:E0:47:F4:01:EA:FC:55:3B
Authority key identifier: 37:4E:27:29:B1:73:69:89:0A:15:12:F6:43:CD:08:E4:BA:2F:F4:14
Certificate issuer:       /CN=374e2729b17369890a1512f643cd08e4ba2ff414
Certificate serial:       01962DF42EB95806C856FC84F07B5B9222C4
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/N04nKbFzaYkKFRL2Q80I5Lov9BQ.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/58/952230-c262-41cc-b956-cfc46a76ec78/1/N04nKbFzaYkKFRL2Q80I5Lov9BQ.mft
Manifest number:          0D58
Signing time:             Sun 13 Apr 2025 07:01:39 +0000
Manifest this update:     Sun 13 Apr 2025 07:01:39 +0000
Manifest next update:     Mon 14 Apr 2025 07:01:39 +0000
Files and hashes:         1: 3520iAwmR0BvV2MPg7TBl3ALKj4.roa (hash: w6lShDZfgepO7x4Np/TeK1Ek0txjQUSZQ5viOdvUQa4=)
                          2: C_WFK57ORMYmTPM8C6MEKdkZzcw.roa (hash: UGi0NlFvaky9A83aLUwpBw47ySnkhX86em/MvBBhL6E=)
                          3: N04nKbFzaYkKFRL2Q80I5Lov9BQ.crl (hash: nG0ZMp1fkkH20W0TBBqaqxrC4i/6uLdqSN8rvdQeHFw=)
                          4: TBUQGbvGy8WpxYe11EDrGLGBcx8.roa (hash: 3whARzgV373Hq7bJRQXnA+BqWKOJ6PlgdDArlf/RCOg=)
                          5: mtEhXVsq4tQu2Q9mIDoxxW8IYZw.roa (hash: AojxXVHH/gbQ3MPiJY/87qknZA5A4RNwVQYYZL9bDe8=)
                          6: wg9s7DQX6eW3dDdaARTAPpRTzqc.roa (hash: BT19Mg+zBya+5K3DArKvF9emtWlSQhaPjSW20vhvIVk=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2d:f4:2e:b9:58:06:c8:56:fc:84:f0:7b:5b:92:22:c4
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=374e2729b17369890a1512f643cd08e4ba2ff414
        Validity
            Not Before: Apr 13 07:01:39 2025 GMT
            Not After : Apr 14 07:01:39 2025 GMT
        Subject: CN=b1b8b7589e139b44e725a7b1e047f401eafc553b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:92:e8:ba:bf:e1:ee:44:d4:99:93:28:bb:c1:75:
                    2d:cd:87:30:52:4d:0e:cf:8c:82:1d:ce:57:40:55:
                    96:27:d9:2e:8a:b6:a2:c8:4c:79:de:df:97:2b:b4:
                    0c:ef:b8:df:41:9c:41:70:71:8f:86:aa:4b:b5:3e:
                    10:64:3d:f7:f2:76:4a:5b:4d:10:75:94:34:0a:fd:
                    34:b4:74:b2:86:f2:74:42:e6:c7:89:96:1d:19:a1:
                    cf:39:ba:99:5c:97:91:b6:74:e1:4e:20:91:90:03:
                    ff:0b:a7:cb:ed:0d:27:05:c6:32:89:82:b3:f9:0c:
                    ef:79:b4:1e:e8:5d:0b:0e:f9:38:09:e2:b3:c9:cc:
                    b5:f5:8a:e2:50:c6:13:ab:a1:db:a7:79:91:83:74:
                    9f:22:00:7e:af:3f:56:8d:3c:45:db:83:1c:b6:e7:
                    dd:ee:7f:a3:cf:ee:f5:45:12:e8:1c:a6:6f:1d:7f:
                    22:13:a1:ff:a0:fd:12:73:5c:21:54:de:ab:c5:4d:
                    96:d1:e5:d4:79:de:f5:8b:34:88:9c:9e:05:22:ff:
                    c7:2a:e7:b8:39:05:c5:bd:c6:d2:a8:2c:f1:4f:e5:
                    e2:90:f6:ab:ef:75:11:8e:61:14:0c:17:da:7b:0d:
                    13:d8:c5:cc:e5:5a:77:8e:fd:84:4d:3a:31:c2:6d:
                    47:1f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B1:B8:B7:58:9E:13:9B:44:E7:25:A7:B1:E0:47:F4:01:EA:FC:55:3B
            X509v3 Authority Key Identifier:
                keyid:37:4E:27:29:B1:73:69:89:0A:15:12:F6:43:CD:08:E4:BA:2F:F4:14

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/N04nKbFzaYkKFRL2Q80I5Lov9BQ.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/58/952230-c262-41cc-b956-cfc46a76ec78/1/N04nKbFzaYkKFRL2Q80I5Lov9BQ.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/58/952230-c262-41cc-b956-cfc46a76ec78/1/N04nKbFzaYkKFRL2Q80I5Lov9BQ.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         3a:da:06:24:cd:fb:70:b8:b4:5d:61:eb:4d:6b:1c:ac:df:17:
         34:86:9c:b5:0f:49:9c:bf:30:87:48:11:5b:2d:ba:c5:4d:41:
         8f:dc:00:68:44:d0:1b:89:1a:06:c8:86:f7:c3:84:35:ba:3b:
         ca:a3:41:45:2d:4d:2d:80:d9:9c:54:93:5f:b4:81:07:f5:4d:
         73:34:7a:e0:2e:90:4b:76:26:9a:d0:c0:23:3e:db:df:9b:c6:
         7b:a8:c5:43:d8:8a:45:d7:5b:bf:25:41:c9:be:05:6d:1e:05:
         12:5e:67:86:1c:74:f8:6d:31:09:0d:d7:4c:4f:e4:99:10:0e:
         8e:ac:84:6f:31:36:84:00:c2:52:59:a2:c0:d5:0c:83:7d:34:
         d4:f2:ac:3e:44:a5:60:33:df:fc:dc:12:64:c6:37:60:71:8d:
         65:97:cf:29:51:9c:e5:fc:b8:d6:4e:31:bb:c8:d3:16:44:4a:
         0f:fd:0f:04:c2:66:de:ba:3f:99:e7:43:00:52:26:8a:93:90:
         4b:d7:ec:4b:1c:95:99:d8:9a:da:66:94:58:1e:14:fc:d2:6b:
         4a:94:2d:4c:97:ed:49:e0:dc:a9:6f:79:36:ed:28:e3:a7:03:
         ab:3e:a7:84:0f:60:83:1a:0f:c1:e4:2b:59:28:ce:a8:63:6d:
         d3:af:3b:50
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----