Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/67/ddc1aa-5a3a-4163-b5e8-15ea337a7840/1/nT1ifCl_5ULYNZqG2OL569lWWoE.mft
File:                     nT1ifCl_5ULYNZqG2OL569lWWoE.mft (raw, json)
Hash identifier:          wGhyFJVdJXXDbAmHwC9k9J0MqZPXOevY3DgCFN4kBfU=
Subject key identifier:   0F:5E:11:69:FC:C7:0B:E5:D4:37:E3:85:B1:0D:2C:69:A7:04:4B:60
Authority key identifier: 9D:3D:62:7C:29:7F:E5:42:D8:35:9A:86:D8:E2:F9:EB:D9:56:5A:81
Certificate issuer:       /CN=9d3d627c297fe542d8359a86d8e2f9ebd9565a81
Certificate serial:       01962FAB0F4676D2417CEC879847F1D16001
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/nT1ifCl_5ULYNZqG2OL569lWWoE.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/67/ddc1aa-5a3a-4163-b5e8-15ea337a7840/1/nT1ifCl_5ULYNZqG2OL569lWWoE.mft
Manifest number:          14ED
Signing time:             Sun 13 Apr 2025 15:01:01 +0000
Manifest this update:     Sun 13 Apr 2025 15:01:01 +0000
Manifest next update:     Mon 14 Apr 2025 15:01:01 +0000
Files and hashes:         1: LAf6z2y7d_FvHWa2exDFEGsDUYk.roa (hash: yLu10ItcbqMAqor4DiKoo4ryX77evtxiM9mUG5P0yVc=)
                          2: kgdBEe32jL4o_RNVND7NTLfwJwI.roa (hash: PZIGs+YorN99DtOYFOROjFtihI/jC535mZ5OqGnLcRA=)
                          3: nT1ifCl_5ULYNZqG2OL569lWWoE.crl (hash: 72EJruO/u5bpUpozYMJsv3nBoUYmAP9Sk1tMfboDH7E=)
                          4: qO2F63snosgQCd-tQ25OAd4civA.roa (hash: KELhV9b4nDo2k2LkjCvA0ufUmi/5QZ+HPUiWXl9d83Q=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2f:ab:0f:46:76:d2:41:7c:ec:87:98:47:f1:d1:60:01
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9d3d627c297fe542d8359a86d8e2f9ebd9565a81
        Validity
            Not Before: Apr 13 15:01:01 2025 GMT
            Not After : Apr 14 15:01:01 2025 GMT
        Subject: CN=0f5e1169fcc70be5d437e385b10d2c69a7044b60
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:dc:3b:85:1c:0f:52:c0:17:18:e8:16:59:88:e2:
                    ad:af:9f:ff:b7:db:19:b7:83:72:c8:c9:16:13:4d:
                    2e:e0:a0:6e:4b:81:8f:9c:48:1c:d1:4e:a8:19:f5:
                    49:e1:19:bd:0c:96:05:99:e3:e5:39:47:7d:56:2d:
                    da:8f:3c:8c:56:1b:e6:9c:fd:65:39:16:b2:5b:a8:
                    b8:0a:e1:c7:bb:ae:92:a1:de:2c:b6:78:9b:a1:c5:
                    96:ad:2a:2c:1c:07:c0:92:a6:de:3c:32:7e:af:81:
                    37:cb:df:4a:81:50:2f:6e:65:4b:f9:3c:c4:e5:0c:
                    4d:40:99:49:3a:e1:f2:e9:11:95:26:42:ca:c3:4c:
                    9a:fd:c2:64:91:ac:16:88:74:33:56:29:4a:7b:1c:
                    89:0c:75:b0:84:7b:94:c3:fe:f2:4e:9f:1f:ea:2c:
                    53:29:c5:44:9f:69:24:fd:7f:b3:f6:40:16:a3:19:
                    5e:b0:a7:4f:84:65:0a:59:53:35:4b:de:31:17:fb:
                    7c:e3:da:09:b5:e2:8e:55:b1:5f:32:93:8e:39:c4:
                    d7:a7:bd:fc:96:3e:5b:16:c9:41:a1:b7:e8:e2:c8:
                    6c:ff:63:42:60:00:c1:6b:04:1e:c6:6d:21:24:65:
                    17:4e:86:ab:a5:1d:6e:38:1c:1b:a5:f1:bf:74:9d:
                    85:47
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0F:5E:11:69:FC:C7:0B:E5:D4:37:E3:85:B1:0D:2C:69:A7:04:4B:60
            X509v3 Authority Key Identifier:
                keyid:9D:3D:62:7C:29:7F:E5:42:D8:35:9A:86:D8:E2:F9:EB:D9:56:5A:81

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/nT1ifCl_5ULYNZqG2OL569lWWoE.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/67/ddc1aa-5a3a-4163-b5e8-15ea337a7840/1/nT1ifCl_5ULYNZqG2OL569lWWoE.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/67/ddc1aa-5a3a-4163-b5e8-15ea337a7840/1/nT1ifCl_5ULYNZqG2OL569lWWoE.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         94:25:42:de:0f:4c:aa:4c:30:b9:60:06:46:cc:ef:c4:df:7d:
         49:4b:eb:43:1f:31:a6:c5:4e:5a:46:18:c2:73:7c:b7:c4:63:
         21:c2:9b:60:36:b0:45:49:83:fd:7f:05:e4:64:4c:d0:15:db:
         e1:f0:5f:82:fc:ce:68:3c:3f:49:df:de:4b:d5:73:a1:64:a8:
         15:01:93:d3:c3:b8:ac:ed:01:dd:22:25:6b:9c:d0:b4:2c:cc:
         05:ad:3e:1f:73:fe:90:94:3a:f9:9d:d7:5e:16:ba:4e:dd:e1:
         6a:c9:40:30:ac:c3:ad:88:9e:cf:95:41:d6:dc:9d:3f:31:49:
         69:4b:10:0c:a7:90:61:83:ba:29:f0:1a:0e:cf:f9:ba:3a:cc:
         cf:4e:76:f5:b1:ac:cd:79:e8:17:15:70:24:86:bb:00:af:8e:
         ec:5f:bd:62:4f:3c:91:93:f1:43:5e:a0:91:07:4c:c0:70:6e:
         52:fc:52:a7:5d:e5:17:42:3c:d6:b8:4e:f2:6b:80:7b:cb:09:
         26:81:6c:07:6d:4c:9b:9e:71:08:99:45:ad:82:95:65:70:cf:
         79:30:70:19:7d:d4:eb:2c:62:95:e9:6f:b7:9b:5e:a7:b0:51:
         bf:61:8f:3c:5e:f2:0b:81:c6:c8:ac:3a:39:bf:5f:4f:19:c7:
         e0:00:4c:9e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----