Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/63/85fd31-fe91-4389-ab67-3651e40f1436/1/S58x5zUqhwe5jG0nNI6LxJPRqa8.mft
File:                     S58x5zUqhwe5jG0nNI6LxJPRqa8.mft (raw, json)
Hash identifier:          d9QMDJA+NCvLlAAbNwqj+Loez5FXUAOnhc5aYDP58ec=
Subject key identifier:   87:9F:B1:45:F9:3A:94:C1:E7:C7:CF:07:B3:ED:C0:7B:5C:E5:A3:7F
Authority key identifier: 4B:9F:31:E7:35:2A:87:07:B9:8C:6D:27:34:8E:8B:C4:93:D1:A9:AF
Certificate issuer:       /CN=4b9f31e7352a8707b98c6d27348e8bc493d1a9af
Certificate serial:       01962F743C018F90CFEEDA1EB69546A19D6B
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/S58x5zUqhwe5jG0nNI6LxJPRqa8.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/63/85fd31-fe91-4389-ab67-3651e40f1436/1/S58x5zUqhwe5jG0nNI6LxJPRqa8.mft
Manifest number:          14EB
Signing time:             Sun 13 Apr 2025 14:01:08 +0000
Manifest this update:     Sun 13 Apr 2025 14:01:08 +0000
Manifest next update:     Mon 14 Apr 2025 14:01:08 +0000
Files and hashes:         1: JOqhFiRetaCWX-COli2qt4epZmU.roa (hash: Tggn3wwdEvZYJd/9CH5nD5nBnaCH9L0m/C7cCJYB59s=)
                          2: S58x5zUqhwe5jG0nNI6LxJPRqa8.crl (hash: 2JOC8/rnUvFK9pyR9t3CFNXaaXJTs0SVGOJjzBugMJM=)
                          3: rPpO-fPVx8XfYvByx6grU3jDRqc.roa (hash: yhGIutrfrX3qPTF0PHHiWDvjrLT7q6l6BKv9z17Nw1s=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2f:74:3c:01:8f:90:cf:ee:da:1e:b6:95:46:a1:9d:6b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4b9f31e7352a8707b98c6d27348e8bc493d1a9af
        Validity
            Not Before: Apr 13 14:01:08 2025 GMT
            Not After : Apr 14 14:01:08 2025 GMT
        Subject: CN=879fb145f93a94c1e7c7cf07b3edc07b5ce5a37f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b4:a4:6f:77:51:b2:74:e1:4e:bf:4f:3d:91:bb:
                    ae:81:13:48:cd:ea:28:7e:22:d9:70:99:9b:a3:d7:
                    62:a8:4e:59:70:35:92:87:7b:45:b2:a0:52:e1:88:
                    92:7d:fe:63:ee:bc:92:88:90:e8:9b:fa:3e:e8:57:
                    a2:34:d2:27:1d:91:cd:a0:b7:6e:80:e7:08:60:3c:
                    b8:49:78:16:f8:84:ae:42:7c:ed:b6:30:02:ef:df:
                    66:4e:af:bb:0d:73:31:e1:de:ca:02:5e:78:2a:32:
                    81:b8:b1:cf:04:4d:86:92:37:0a:cd:ec:b2:54:9b:
                    ad:1f:16:d0:b4:bb:a2:21:f7:71:42:60:93:19:ab:
                    d6:3d:04:c3:7b:37:14:bb:ae:9a:c8:37:a8:9b:82:
                    b8:5c:0c:dc:ee:3c:dc:a0:c2:d8:c8:a1:f6:89:55:
                    23:23:5d:dc:9a:ca:b2:53:82:d6:c2:a5:65:dc:ac:
                    f1:c1:82:34:ae:ce:9b:b2:f2:ed:f0:7b:d2:e9:fe:
                    be:7f:67:b0:35:da:09:28:8d:98:78:cf:3c:75:0b:
                    f4:51:eb:65:74:b2:26:3d:c9:43:cb:39:9e:33:00:
                    91:a8:49:78:b6:56:96:fa:af:7d:93:28:c1:0e:62:
                    9f:0b:9b:7b:46:e5:ac:a4:96:88:bc:28:12:8c:08:
                    e2:19
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                87:9F:B1:45:F9:3A:94:C1:E7:C7:CF:07:B3:ED:C0:7B:5C:E5:A3:7F
            X509v3 Authority Key Identifier:
                keyid:4B:9F:31:E7:35:2A:87:07:B9:8C:6D:27:34:8E:8B:C4:93:D1:A9:AF

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/S58x5zUqhwe5jG0nNI6LxJPRqa8.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/63/85fd31-fe91-4389-ab67-3651e40f1436/1/S58x5zUqhwe5jG0nNI6LxJPRqa8.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/63/85fd31-fe91-4389-ab67-3651e40f1436/1/S58x5zUqhwe5jG0nNI6LxJPRqa8.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         83:19:d4:31:87:19:de:91:ed:e3:0b:1d:e8:9f:31:cd:a7:f3:
         c6:21:e6:b4:12:df:85:ec:4e:ae:79:30:95:a4:bf:81:f0:33:
         14:77:23:12:e7:61:fe:b6:ea:c2:ef:9f:96:47:35:6d:2d:da:
         52:d2:5d:b1:e4:cc:8e:4f:27:34:a6:fe:99:bf:09:b7:d1:8f:
         46:75:8c:fd:9f:a8:cd:09:62:82:0a:ec:b9:f8:9a:2a:a3:16:
         85:f8:c5:5b:20:12:1b:05:c7:5f:4b:2f:df:e9:8e:45:81:27:
         65:ac:21:9c:ab:d2:b8:0f:46:2d:78:b5:df:05:38:f5:5c:41:
         fd:f1:d6:66:d1:7b:77:10:3f:30:17:1d:49:95:8c:50:96:ae:
         6d:e2:02:44:cb:3c:82:24:d6:cc:f4:bb:f3:44:0b:ba:2f:4b:
         31:e7:61:9b:14:b7:da:4f:f5:cb:cc:6f:7f:1a:f2:11:bd:1a:
         76:89:83:b0:08:52:2c:ab:fa:31:59:0d:99:2c:22:76:d5:81:
         60:ae:fe:4b:ab:d0:99:9c:bb:3e:8f:17:d1:58:4c:08:09:54:
         ad:ff:2c:f5:55:43:1a:7d:50:21:38:06:2f:2d:b1:11:f3:59:
         93:75:97:d6:f4:d9:3d:bd:a4:a9:76:5a:fe:4c:f6:dd:a5:43:
         7e:1a:47:d4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----