Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5e/4ae175-55d0-484d-8d11-8c9d5823bad9/1/f4XpkDVDl-NsDKkDoMYgx3Ce_c0.mft
File:                     f4XpkDVDl-NsDKkDoMYgx3Ce_c0.mft (raw, json)
Hash identifier:          pj5T7e7BSYBI58F4wZLiO2ZAZ23v0nmX/uwOpcPsjJA=
Subject key identifier:   76:B1:2B:FC:31:7B:42:24:9E:21:69:40:26:25:54:C7:2F:E9:36:A6
Authority key identifier: 7F:85:E9:90:35:43:97:E3:6C:0C:A9:03:A0:C6:20:C7:70:9E:FD:CD
Certificate issuer:       /CN=7f85e990354397e36c0ca903a0c620c7709efdcd
Certificate serial:       01962F0643CCEBECFCAE2B3ABDFCFFD59C04
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/f4XpkDVDl-NsDKkDoMYgx3Ce_c0.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/5e/4ae175-55d0-484d-8d11-8c9d5823bad9/1/f4XpkDVDl-NsDKkDoMYgx3Ce_c0.mft
Manifest number:          0118
Signing time:             Sun 13 Apr 2025 12:01:01 +0000
Manifest this update:     Sun 13 Apr 2025 12:01:01 +0000
Manifest next update:     Mon 14 Apr 2025 12:01:01 +0000
Files and hashes:         1: XIAriGwKiXIV89XyokuVSU6ok94.roa (hash: hF3zC1oiW03gwgTs9lo/n7vUmEiv8dfR/NI1cnnwuzk=)
                          2: f4XpkDVDl-NsDKkDoMYgx3Ce_c0.crl (hash: 5zBaAE/wIkPhHJr0zv1naQmjdryjx+fYKCMqMaEeKhs=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2f:06:43:cc:eb:ec:fc:ae:2b:3a:bd:fc:ff:d5:9c:04
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7f85e990354397e36c0ca903a0c620c7709efdcd
        Validity
            Not Before: Apr 13 12:01:01 2025 GMT
            Not After : Apr 14 12:01:01 2025 GMT
        Subject: CN=76b12bfc317b42249e216940262554c72fe936a6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bd:87:67:0f:ad:b0:aa:de:13:62:cf:62:a1:95:
                    07:b9:58:bd:e5:45:f7:34:de:fb:42:f4:08:69:06:
                    c5:9d:f2:9c:7f:54:00:7e:e4:d9:ad:43:59:bb:10:
                    b2:33:fa:f5:2b:bd:5a:dd:ce:44:c7:ff:28:a3:7a:
                    2c:fb:1b:cf:fc:77:16:17:83:86:b3:b2:ba:c2:d6:
                    85:26:e4:c9:c8:22:14:dd:f0:53:9c:bb:1d:73:43:
                    78:10:62:e3:e6:17:66:2d:4b:78:9d:bb:18:03:bb:
                    c6:e9:23:f6:a3:10:8d:1b:77:3b:a8:48:a8:fb:d2:
                    2d:f8:2b:99:8c:90:83:8a:12:13:fd:88:1a:2d:4e:
                    76:22:11:d7:0d:5d:89:16:5a:10:8e:a1:d7:8c:66:
                    12:f0:33:30:a4:66:27:df:34:39:7c:51:4f:a7:de:
                    de:a4:08:19:02:1c:1d:27:48:c9:47:a0:c2:5b:07:
                    3d:ae:f4:16:d6:8a:fc:d7:8b:fb:23:c2:33:a2:f3:
                    d9:82:10:fa:1f:cb:7d:8a:18:02:ef:1b:53:76:44:
                    46:0e:d8:82:5b:1e:44:58:54:88:e6:d5:a1:4f:85:
                    db:c3:73:7c:ac:89:bb:74:3a:3a:1b:8b:61:55:73:
                    f7:10:e2:b2:34:f0:2e:39:50:d2:12:9f:32:30:cb:
                    0b:81
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                76:B1:2B:FC:31:7B:42:24:9E:21:69:40:26:25:54:C7:2F:E9:36:A6
            X509v3 Authority Key Identifier:
                keyid:7F:85:E9:90:35:43:97:E3:6C:0C:A9:03:A0:C6:20:C7:70:9E:FD:CD

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/f4XpkDVDl-NsDKkDoMYgx3Ce_c0.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/4ae175-55d0-484d-8d11-8c9d5823bad9/1/f4XpkDVDl-NsDKkDoMYgx3Ce_c0.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/4ae175-55d0-484d-8d11-8c9d5823bad9/1/f4XpkDVDl-NsDKkDoMYgx3Ce_c0.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         ae:0c:1e:71:e7:77:6f:3c:b2:38:93:f4:a4:4e:8d:f2:f3:d8:
         18:81:1b:2d:04:bb:3d:2e:82:04:b0:eb:bf:f2:13:d1:f6:59:
         7b:f2:81:0f:71:d0:3b:c9:12:34:00:b6:28:b3:8f:9c:40:83:
         1b:42:73:48:96:07:b0:92:72:d5:77:a7:02:1c:c4:62:0b:f6:
         5f:62:d3:f0:4a:20:2c:2e:fd:b4:f8:b3:e3:ac:42:d9:96:0e:
         1d:02:b6:58:9e:23:24:01:3f:d2:a7:28:6d:22:73:ea:4e:d6:
         d4:83:1f:05:08:66:b3:17:5e:64:f6:21:c4:f4:50:38:68:b3:
         0c:6c:15:b5:57:75:d5:2a:b1:48:0e:6b:3f:01:0b:0a:9b:f6:
         62:34:b9:8e:d1:38:5e:ca:bb:28:f9:1d:b4:6f:5e:52:b1:f2:
         93:be:a5:d6:58:ca:58:45:a8:30:bf:99:66:b5:20:2c:b8:9b:
         e3:3e:c7:42:f8:09:df:cc:f6:2f:3a:b0:12:11:56:bb:0b:4d:
         a0:ed:04:77:cf:0a:71:54:69:cc:d2:5d:69:be:f5:24:6b:ee:
         4a:68:e9:ec:23:89:bb:dc:94:0a:00:d4:00:2f:a3:c6:71:55:
         9c:86:18:a0:fb:da:16:2c:07:a4:fc:7c:8a:ac:fb:3e:04:5c:
         bc:48:ba:80
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----