Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/65/a8007b-08ce-4af4-a383-c4a52dcee23d/1/33mFgec3BO44yb4V5yNw8XbGAxE.mft
File:                     33mFgec3BO44yb4V5yNw8XbGAxE.mft (raw, json)
Hash identifier:          eStYcOfjQRWmXPsru+zFwtVyR+p04ASejSCZH2GcS1c=
Subject key identifier:   59:71:F5:29:00:69:49:05:EA:CB:CC:5D:A4:02:9A:DB:C8:D5:25:8C
Authority key identifier: DF:79:85:81:E7:37:04:EE:38:C9:BE:15:E7:23:70:F1:76:C6:03:11
Certificate issuer:       /CN=df798581e73704ee38c9be15e72370f176c60311
Certificate serial:       01962E99BEB0515DE24FBE9A8C2566F72494
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/33mFgec3BO44yb4V5yNw8XbGAxE.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/65/a8007b-08ce-4af4-a383-c4a52dcee23d/1/33mFgec3BO44yb4V5yNw8XbGAxE.mft
Manifest number:          0BBA
Signing time:             Sun 13 Apr 2025 10:02:29 +0000
Manifest this update:     Sun 13 Apr 2025 10:02:29 +0000
Manifest next update:     Mon 14 Apr 2025 10:02:29 +0000
Files and hashes:         1: 33mFgec3BO44yb4V5yNw8XbGAxE.crl (hash: 5ecTxrwEn+FqlXGX2xuUafXXTBgbj79vpbFHhIZTg7U=)
                          2: X5QUkOGvHqh9gBLgmTrzZjA-KpU.roa (hash: TYyUH6vAfC7UVEyV/Tp3p/GTvzBAfizXPNzuW80HHa4=)
                          3: Xwst9NE_3divRmhP7hMoEPIJ7JI.roa (hash: mL30JNi0AE38khocNGadQDEvIJt5kPRBkClagiJzVtg=)
                          4: uhJiD75LxMes30E_4QTof6b_YKo.roa (hash: 8v1Ivf0LlH5hxOrfPBFKSQVS+iiijBXLavAlKY719r8=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2e:99:be:b0:51:5d:e2:4f:be:9a:8c:25:66:f7:24:94
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=df798581e73704ee38c9be15e72370f176c60311
        Validity
            Not Before: Apr 13 10:02:29 2025 GMT
            Not After : Apr 14 10:02:29 2025 GMT
        Subject: CN=5971f52900694905eacbcc5da4029adbc8d5258c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ac:44:ef:34:1e:b9:8c:9a:93:45:c1:1b:f5:8c:
                    92:3f:95:47:79:58:fd:18:f3:04:3a:44:80:7a:24:
                    de:1c:67:a6:6c:d9:ae:17:53:38:85:26:d8:38:7e:
                    07:17:fb:2c:51:47:79:59:dc:ec:6e:4d:e0:3a:14:
                    88:91:8a:a4:d4:dc:9b:cb:6a:17:fa:df:fe:b2:59:
                    70:e5:e2:35:51:90:4d:db:90:4c:bc:41:22:c4:e2:
                    7f:b0:5a:ae:3a:84:ec:79:d2:c4:2f:e3:60:41:c5:
                    b9:56:03:19:d1:f2:0b:4c:d9:4c:16:e2:39:3f:2a:
                    b4:22:6a:94:a1:d8:07:91:52:df:21:d9:85:91:9c:
                    b0:1b:c6:fd:da:55:9d:3d:e2:d1:b8:ca:91:14:2c:
                    3a:00:69:34:d8:18:81:24:ed:45:70:43:23:ad:e9:
                    46:24:07:8c:06:88:97:2e:86:75:80:19:40:ee:04:
                    d4:44:b3:83:3d:77:ef:1a:10:f7:dc:fd:e6:e9:db:
                    f5:9e:c2:65:4e:02:cf:77:11:b8:41:ee:7d:07:d1:
                    57:e2:e6:76:24:d1:50:b2:b0:a6:37:76:2d:8b:9c:
                    5c:93:c1:ab:88:69:8f:71:85:39:6f:14:21:a5:97:
                    d6:53:0c:3d:eb:33:6c:3d:fc:84:56:43:7f:1f:e5:
                    94:e7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                59:71:F5:29:00:69:49:05:EA:CB:CC:5D:A4:02:9A:DB:C8:D5:25:8C
            X509v3 Authority Key Identifier:
                keyid:DF:79:85:81:E7:37:04:EE:38:C9:BE:15:E7:23:70:F1:76:C6:03:11

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/33mFgec3BO44yb4V5yNw8XbGAxE.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/65/a8007b-08ce-4af4-a383-c4a52dcee23d/1/33mFgec3BO44yb4V5yNw8XbGAxE.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/65/a8007b-08ce-4af4-a383-c4a52dcee23d/1/33mFgec3BO44yb4V5yNw8XbGAxE.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         79:9b:a0:53:90:85:58:7c:44:5c:38:5e:9d:5a:cd:32:71:b8:
         e6:d6:b9:aa:f7:e9:f8:f0:c7:f2:69:de:85:99:b2:58:1d:09:
         d3:a0:e3:9f:72:fc:98:2b:e5:e8:cc:52:94:a7:c8:62:ff:0d:
         eb:03:b2:aa:69:f4:1b:f2:ee:62:e0:87:8a:05:6d:00:16:17:
         77:df:bb:f6:8b:e3:f5:20:79:33:4c:af:d1:30:70:b9:51:2f:
         ad:9c:7f:f5:b1:1f:ae:bb:60:4b:87:4c:67:1a:13:cf:d5:44:
         4f:75:f9:4f:3f:30:13:11:7c:38:36:50:ec:18:b0:d4:fe:ba:
         1b:64:0f:65:71:a9:2e:80:40:e5:57:8f:40:d3:b3:4a:9c:f8:
         a8:9c:b0:ba:81:97:5f:32:d1:42:f9:f1:eb:23:a7:c7:c9:05:
         23:1b:65:39:0d:c8:de:14:2b:57:18:21:1d:cc:fc:bd:ac:90:
         a2:9d:55:f5:f5:6d:c4:be:11:e5:6f:50:2b:47:e2:05:43:e0:
         1a:93:63:07:72:6d:6e:7e:07:a3:39:10:3d:8a:11:b6:26:62:
         0b:a1:23:b1:ed:37:cc:83:63:12:ff:00:5b:bb:db:a7:85:94:
         39:ec:54:ca:fc:2c:ab:7d:4b:ca:a7:4c:3e:51:70:c5:97:ba:
         43:eb:ef:6d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----