Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/66/9f7b6b-b29d-486e-8478-27efc13aff1e/1/r-xPShbMUb1RYhARU5zrV0rBXQI.mft
File:                     r-xPShbMUb1RYhARU5zrV0rBXQI.mft (raw, json)
Hash identifier:          Dq7GHNVyFkCTXzfpbgluc163Ho7rpzsTGTSyjJkt5S4=
Subject key identifier:   31:44:5F:E0:F8:DB:A8:97:57:F0:F6:02:03:D9:3C:35:B8:CF:85:77
Authority key identifier: AF:EC:4F:4A:16:CC:51:BD:51:62:10:11:53:9C:EB:57:4A:C1:5D:02
Certificate issuer:       /CN=afec4f4a16cc51bd51621011539ceb574ac15d02
Certificate serial:       01962FAB4890E3E144CEF78257694DAD70D3
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/r-xPShbMUb1RYhARU5zrV0rBXQI.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/66/9f7b6b-b29d-486e-8478-27efc13aff1e/1/r-xPShbMUb1RYhARU5zrV0rBXQI.mft
Manifest number:          14F0
Signing time:             Sun 13 Apr 2025 15:01:16 +0000
Manifest this update:     Sun 13 Apr 2025 15:01:16 +0000
Manifest next update:     Mon 14 Apr 2025 15:01:16 +0000
Files and hashes:         1: 0kNkc387z7I2x4Yteehk0180PTE.roa (hash: Zuu2mJeRDdNqByIOk7bup5wFBYcY2Qe7ktpeoS994ec=)
                          2: Lul3hUvdV6C5cSn0ykUAxQPhSaQ.roa (hash: q+jHwWcary8atsFBUa3Y/27z3nJW8U1gs5fNpNDELkU=)
                          3: PIRRrWFSYrZNmeAa6_-TvMTmD6Q.roa (hash: V3+P79bG0jSa7b+MpAG52JNhfjYjObP7ww4sVt5PAYs=)
                          4: r-xPShbMUb1RYhARU5zrV0rBXQI.crl (hash: sn6DTDV0NxZx11s2api+vqnJdRuHTMe82Fq8cd8rG9Q=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2f:ab:48:90:e3:e1:44:ce:f7:82:57:69:4d:ad:70:d3
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=afec4f4a16cc51bd51621011539ceb574ac15d02
        Validity
            Not Before: Apr 13 15:01:16 2025 GMT
            Not After : Apr 14 15:01:16 2025 GMT
        Subject: CN=31445fe0f8dba89757f0f60203d93c35b8cf8577
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9a:b8:ee:9d:47:8c:34:c9:0b:df:e5:cc:ce:0b:
                    09:9f:56:39:2f:23:e9:c4:cf:18:17:85:95:08:0d:
                    4d:24:f4:76:7f:14:41:1f:0a:55:ca:d0:15:9c:81:
                    45:0c:37:54:06:9c:c3:2d:95:43:87:67:5c:bf:41:
                    43:5c:0e:f3:a8:ae:54:2d:27:e0:ba:90:53:bb:72:
                    3d:41:1f:63:2d:a8:1b:65:1c:05:45:2b:9f:9a:65:
                    0b:fd:09:d1:67:d9:f8:9a:47:fc:f4:62:b5:1f:04:
                    67:f8:95:b0:a3:f8:6e:ba:ce:42:20:af:8f:a1:09:
                    25:7d:cb:66:37:8d:b3:c1:26:e8:92:d4:4a:4c:7a:
                    9d:8a:b2:38:74:a5:a1:73:b0:3a:b5:e0:7b:1e:ce:
                    20:97:c8:54:db:99:15:70:41:b4:bb:4b:0c:c0:23:
                    eb:48:42:ec:73:b9:75:f8:ec:a4:81:0c:f8:e5:ef:
                    b1:29:37:41:39:d1:e8:7e:b5:f5:0a:e5:4f:b5:df:
                    ee:89:f6:1c:12:f9:06:41:5a:02:56:f9:8e:0a:d7:
                    fc:86:ae:b3:15:0a:e9:be:b1:9f:7a:df:51:45:a8:
                    56:19:27:c7:ee:d9:70:36:8d:f6:3a:6e:a4:2c:89:
                    f4:de:23:86:f5:6b:d3:95:b2:d9:a2:56:e2:17:79:
                    91:03
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                31:44:5F:E0:F8:DB:A8:97:57:F0:F6:02:03:D9:3C:35:B8:CF:85:77
            X509v3 Authority Key Identifier:
                keyid:AF:EC:4F:4A:16:CC:51:BD:51:62:10:11:53:9C:EB:57:4A:C1:5D:02

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/r-xPShbMUb1RYhARU5zrV0rBXQI.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/66/9f7b6b-b29d-486e-8478-27efc13aff1e/1/r-xPShbMUb1RYhARU5zrV0rBXQI.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/66/9f7b6b-b29d-486e-8478-27efc13aff1e/1/r-xPShbMUb1RYhARU5zrV0rBXQI.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         03:57:6d:d6:05:60:f7:04:b7:ce:53:45:c9:b3:b5:6a:3b:9a:
         e1:80:1d:52:13:09:ae:ef:92:31:73:ad:18:1f:6c:0e:1b:53:
         6d:05:a1:98:e8:f6:35:41:49:aa:b0:db:f2:9a:20:d0:4a:6e:
         71:b8:2c:9e:9d:55:f5:76:16:ac:7e:93:c7:b5:0b:3c:05:ed:
         45:eb:37:54:fb:4b:10:82:0d:c4:2b:9f:53:92:5a:a2:eb:18:
         13:20:5f:48:7d:e4:8f:5f:c1:75:d6:db:a6:1c:41:5f:17:80:
         cd:2e:83:5d:45:6e:1a:5d:8f:db:7f:4c:dc:e7:7d:7a:e4:78:
         b4:13:d7:ff:54:3b:1b:a6:18:52:60:f4:28:2b:f6:76:dc:fb:
         f5:c5:aa:01:83:e1:14:fa:f3:72:cc:90:0d:2c:ee:f7:30:c8:
         70:17:f8:74:e2:6d:d1:81:3e:85:22:44:93:1b:6a:73:72:67:
         ad:fb:6b:bf:19:f0:aa:1c:56:01:b5:0b:52:9a:33:d7:51:cb:
         bc:15:28:20:52:f3:79:59:60:2e:59:58:d9:38:da:ff:26:e4:
         c5:7c:7e:72:5d:e1:97:3c:5d:42:e5:5f:91:de:b6:6a:0b:dd:
         42:58:ad:2b:54:4d:21:a2:08:76:cb:67:b5:cc:13:5a:c7:74:
         3b:22:55:cd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----