Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5f/956db9-c8f7-4b9f-a56e-bc6db7248add/1/cPmxat8v0xmIhZkitEV0gd1-70A.mft
File:                     cPmxat8v0xmIhZkitEV0gd1-70A.mft (raw, json)
Hash identifier:          +WsvbEEG7S8L2Z8CCc3yTvkgnwFna9BBcIzkIo5NHsg=
Subject key identifier:   0C:14:3A:82:35:B7:03:97:64:BF:02:96:FC:7C:E2:EC:55:BC:00:E6
Authority key identifier: 70:F9:B1:6A:DF:2F:D3:19:88:85:99:22:B4:45:74:81:DD:7E:EF:40
Certificate issuer:       /CN=70f9b16adf2fd31988859922b4457481dd7eef40
Certificate serial:       01962FAB18141276CD5D480818C88C405FF7
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/cPmxat8v0xmIhZkitEV0gd1-70A.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/5f/956db9-c8f7-4b9f-a56e-bc6db7248add/1/cPmxat8v0xmIhZkitEV0gd1-70A.mft
Manifest number:          127F
Signing time:             Sun 13 Apr 2025 15:01:04 +0000
Manifest this update:     Sun 13 Apr 2025 15:01:04 +0000
Manifest next update:     Mon 14 Apr 2025 15:01:04 +0000
Files and hashes:         1: 5WpWrypca4XGx0ISHtuZYRT_cno.roa (hash: R8ZoU8UZw1Z3gy7t3IJTFumdlDzgJjWSubPKAJkbvV0=)
                          2: 8wA7Z8R93JqOIr4nUCX1S5SLIf0.roa (hash: 8DXy5Yj333BXczsMQt5oYuiRo4BwLMddhajfUUPGovk=)
                          3: F6JCJHWNmAP2LWubFGF0kgcQllw.roa (hash: 3vjfM2DsoeGWBaOxcOevxDfnWvJicHthaNg8MS17hIM=)
                          4: JOBERo-vgg6dldBoWViTCfV7X-A.roa (hash: ce+d5taUPY+G9x5sjcA70ndAe38v7dhbZx0JrAG/CD4=)
                          5: T1V76bxlhezLMl4Tzlvgqgk0pcg.roa (hash: Hk9kWyBSS3VZQ3ORtc2F2qsaXDclUxsqlus/HDJzLds=)
                          6: Z5phhVwVfpK6dkc5C1-vYmhcYUU.roa (hash: iIyIPk2NBxkdVR06TYJeH+vh01QOalQb+F2tpumtM+w=)
                          7: cPmxat8v0xmIhZkitEV0gd1-70A.crl (hash: 5bTnW1G6lteozyivTh/fgfQ/7DpCX9iQyJckoHJxJD4=)
                          8: ezMLdhISIqr2PAqGoulAf-qQ6FY.roa (hash: MoVmtNQ9G0A/NJidABkGuBmF42AfIIukbBtAhp8lY68=)
                          9: f1wW_BV7vZtAZNKpmUDuydqJlsA.roa (hash: CdljZlhyWSUXZqLfpyDj+9shC/3i0VNujpmPdvzAtoY=)
                          10: mA4IEAHXR0LDJS0AO7AgvdyymfA.roa (hash: B62czMPy2pKQJ5FL2R2C5ZUZdywtpL+Cj+O5hZ16Rv4=)
                          11: s_LwzLZPp9ORyCUddUg-S_10-4I.roa (hash: BVjFufYciX2m8CUZJZXmbAMr6Jv8LUvHUX1WKiH2vac=)
                          12: t-GC4kGf7lvSnOYAiTpgmlkKEL4.roa (hash: 9rNbslHDQxGg0Ew50MQa2Fk3HC4+vs4VNNeusuZLYr8=)
                          13: x9Pa4FjGFuSawk-SEv2Ok6k19yY.roa (hash: KV0RsDBtETgbugEI2r4ib263Vs08/yFDjc5KML8G+A0=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2f:ab:18:14:12:76:cd:5d:48:08:18:c8:8c:40:5f:f7
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=70f9b16adf2fd31988859922b4457481dd7eef40
        Validity
            Not Before: Apr 13 15:01:04 2025 GMT
            Not After : Apr 14 15:01:04 2025 GMT
        Subject: CN=0c143a8235b7039764bf0296fc7ce2ec55bc00e6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d5:06:75:08:05:a6:d6:52:03:c3:23:44:f1:d0:
                    b1:a5:82:1f:35:f1:29:a6:27:c4:56:85:04:08:af:
                    9a:1a:f2:74:1a:b0:9f:b5:0d:86:1d:64:d0:a6:a9:
                    fa:b3:42:3e:2b:4e:86:43:d2:b5:dc:d5:84:30:49:
                    ed:a8:7b:cc:33:3c:cc:50:49:e4:8c:83:a1:29:2f:
                    a8:e9:86:d8:c7:cc:7f:20:76:0a:6a:06:df:a4:05:
                    94:69:be:dd:dd:d3:c7:f6:d3:08:2a:cb:9d:fb:70:
                    f2:6b:3f:68:b8:8a:b3:5c:34:67:1d:bb:a8:74:19:
                    b8:0d:65:d5:03:2a:52:40:a6:89:2b:91:f3:68:03:
                    2f:39:7b:6f:ea:4b:7a:29:26:26:c9:e0:66:64:1f:
                    ee:37:38:2a:aa:d5:63:03:72:f2:dd:89:96:82:bd:
                    b9:b6:dc:04:6b:c0:64:47:5d:fe:b9:2c:9e:e8:23:
                    dc:bb:c7:78:04:0f:9e:84:d6:5f:c1:5f:46:8b:cd:
                    41:b5:63:01:c2:a5:29:50:62:7b:26:ca:17:df:68:
                    e9:b1:c7:78:e1:92:70:1a:b3:af:3d:0e:48:c3:04:
                    6a:02:bd:c2:8f:86:18:e4:49:2a:f9:8b:a2:9b:a0:
                    52:7f:b4:42:c9:ce:03:58:94:38:8e:4a:39:66:47:
                    4e:69
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0C:14:3A:82:35:B7:03:97:64:BF:02:96:FC:7C:E2:EC:55:BC:00:E6
            X509v3 Authority Key Identifier:
                keyid:70:F9:B1:6A:DF:2F:D3:19:88:85:99:22:B4:45:74:81:DD:7E:EF:40

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cPmxat8v0xmIhZkitEV0gd1-70A.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5f/956db9-c8f7-4b9f-a56e-bc6db7248add/1/cPmxat8v0xmIhZkitEV0gd1-70A.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/5f/956db9-c8f7-4b9f-a56e-bc6db7248add/1/cPmxat8v0xmIhZkitEV0gd1-70A.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         c6:92:dd:0f:ba:6d:92:c8:e3:3b:06:12:fc:5e:66:04:f9:a8:
         f2:6c:3a:e7:75:40:2b:d5:46:5e:51:b6:e2:ba:dc:71:5d:61:
         9a:89:51:a9:f8:72:f0:15:d8:d2:e2:a6:4b:89:d3:c3:3a:d7:
         98:f7:c7:4c:ee:f5:e3:21:21:e4:de:38:d7:d6:9f:e3:63:23:
         8a:28:99:75:c4:d9:b2:91:f2:ca:f1:a7:9c:2d:42:c4:c5:ef:
         8e:91:01:c9:f2:c7:ee:5a:b5:a4:da:14:61:de:5f:56:d4:87:
         28:a0:52:0d:b4:1c:5c:54:75:79:5e:c7:30:2c:26:1a:b0:77:
         4e:e2:cd:ce:80:99:78:9b:ea:d0:74:bb:ed:56:dd:78:4f:bd:
         3f:66:98:04:d7:d1:53:65:a8:4c:7b:f0:c5:c5:92:43:35:a2:
         0c:f3:ec:a1:b2:94:eb:0c:cb:f5:f5:2c:39:4b:18:97:9c:a2:
         d5:1f:36:76:62:d2:12:83:f4:a9:6c:d9:be:61:3f:1b:a9:1d:
         c6:54:4b:99:b4:36:ea:65:37:00:7d:15:ab:f5:a3:80:21:ad:
         5e:80:87:39:0e:1d:0f:50:8c:af:d4:ed:08:6b:0a:cf:64:3f:
         3b:26:9e:bd:44:eb:1b:77:1d:32:09:52:46:fe:1f:38:40:31:
         17:49:9e:59
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----