Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/66/eb3e00-e2aa-447f-91f3-8a545cb35a9a/1/T5AEs7-KHhe9YGbgUYltO-vWaXM.mft
File:                     T5AEs7-KHhe9YGbgUYltO-vWaXM.mft (raw, json)
Hash identifier:          g6iOcEyk2kXvkLOkzTcGtvoqQMBXQxpksLmEcnXtA5k=
Subject key identifier:   8F:21:01:81:04:FA:D5:E2:3B:85:B8:C3:16:1E:7F:46:3A:51:D8:32
Authority key identifier: 4F:90:04:B3:BF:8A:1E:17:BD:60:66:E0:51:89:6D:3B:EB:D6:69:73
Certificate issuer:       /CN=4f9004b3bf8a1e17bd6066e051896d3bebd66973
Certificate serial:       01962F3D4E29ECF31A49287749957EBEA2C0
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/T5AEs7-KHhe9YGbgUYltO-vWaXM.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/66/eb3e00-e2aa-447f-91f3-8a545cb35a9a/1/T5AEs7-KHhe9YGbgUYltO-vWaXM.mft
Manifest number:          5D
Signing time:             Sun 13 Apr 2025 13:01:08 +0000
Manifest this update:     Sun 13 Apr 2025 13:01:08 +0000
Manifest next update:     Mon 14 Apr 2025 13:01:08 +0000
Files and hashes:         1: MtCu6sFrD1432kk0IRfc5KNTGfc.roa (hash: mq6V3hOgU2VesW7dh8aKsr7RVyaB9UHKkJnet/uS01g=)
                          2: T5AEs7-KHhe9YGbgUYltO-vWaXM.crl (hash: 4Cre48U1s2fauOXzZYIV9OkmU+wVZmmTz7NVYRQAJAg=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2f:3d:4e:29:ec:f3:1a:49:28:77:49:95:7e:be:a2:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4f9004b3bf8a1e17bd6066e051896d3bebd66973
        Validity
            Not Before: Apr 13 13:01:08 2025 GMT
            Not After : Apr 14 13:01:08 2025 GMT
        Subject: CN=8f21018104fad5e23b85b8c3161e7f463a51d832
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c3:54:30:61:13:3f:63:5b:e7:d6:b3:4d:88:06:
                    a6:2b:69:61:2a:9a:a7:04:a8:78:65:8e:fa:c1:7b:
                    5e:9e:41:6e:b7:df:9f:5f:72:e3:db:b6:df:a4:fc:
                    d1:b1:94:e6:cd:41:72:76:d6:80:a1:37:d1:bd:0a:
                    63:d6:0d:20:f8:cf:4d:e6:54:83:82:be:65:bb:34:
                    f7:c4:47:be:e2:10:5e:18:b6:7c:16:c6:7d:b7:29:
                    b3:8a:cf:59:26:99:b7:78:61:b1:16:d1:9c:38:c0:
                    18:28:f8:b9:f6:39:d0:6d:ec:73:54:4d:8f:aa:04:
                    9f:4c:cc:64:11:bd:e9:34:a7:6c:ab:f4:02:f5:ec:
                    0b:c4:74:9d:0e:8c:54:19:bc:c4:a9:b8:0b:9c:ab:
                    e0:25:a3:ff:16:d6:4c:99:29:de:c5:7b:a8:90:21:
                    22:cb:b7:dd:e6:a8:6e:03:34:f3:9e:37:13:51:ed:
                    ae:7c:5a:40:bf:bf:59:0b:b3:42:17:53:99:97:fe:
                    c0:4d:87:bc:84:26:8d:5b:02:75:70:a5:d2:97:3d:
                    d6:2e:e2:94:fe:eb:21:1e:f4:f5:7f:9a:d0:83:6a:
                    58:9f:b8:f0:ce:46:86:c4:36:15:50:5a:5f:7e:7e:
                    aa:f4:fb:bd:f8:cf:8c:1b:4a:3d:8d:f7:9f:63:a6:
                    c2:d9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8F:21:01:81:04:FA:D5:E2:3B:85:B8:C3:16:1E:7F:46:3A:51:D8:32
            X509v3 Authority Key Identifier:
                keyid:4F:90:04:B3:BF:8A:1E:17:BD:60:66:E0:51:89:6D:3B:EB:D6:69:73

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/T5AEs7-KHhe9YGbgUYltO-vWaXM.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/66/eb3e00-e2aa-447f-91f3-8a545cb35a9a/1/T5AEs7-KHhe9YGbgUYltO-vWaXM.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/66/eb3e00-e2aa-447f-91f3-8a545cb35a9a/1/T5AEs7-KHhe9YGbgUYltO-vWaXM.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         92:4d:11:bf:65:63:1e:4d:e8:7f:c3:19:7d:ac:40:2d:eb:ed:
         57:92:53:3a:df:73:33:c0:3f:34:cb:91:3d:5d:20:d3:20:cb:
         42:0a:c4:8c:ab:73:fe:08:01:cf:9a:62:cb:49:be:40:44:e3:
         86:7e:2d:2c:aa:c9:82:5b:59:12:f1:f7:52:d2:52:14:10:6c:
         e0:fb:e5:31:6d:ff:8c:8d:e4:89:41:92:d2:ae:24:67:16:e2:
         0d:da:f2:dc:91:42:10:d5:62:be:61:2c:63:d1:2e:7f:87:4e:
         f7:4b:9b:22:9e:d8:14:4b:6a:60:16:39:1f:54:6d:9e:06:7c:
         38:36:22:0a:7e:69:ed:c1:37:10:bb:ab:2c:10:f2:7c:c9:86:
         80:dd:eb:20:55:c9:16:3d:21:83:ef:8c:05:3f:84:2d:07:bf:
         be:d1:f3:ee:14:11:07:a7:7b:a7:4e:24:4a:70:cb:f8:d0:c3:
         bd:12:21:69:b9:dd:8f:ac:7c:94:ad:e3:43:12:df:d3:51:12:
         60:da:3a:84:24:b1:95:83:f3:7e:45:85:ee:a2:da:88:a0:91:
         79:3b:cc:01:80:7d:83:52:66:22:9e:5a:c2:c2:0f:e9:97:a9:
         c7:9e:e7:07:e5:d4:9c:d4:44:fb:4d:ce:36:2f:2d:a6:08:f7:
         54:28:d9:2f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----