Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/68/518e42-ebae-4547-8b22-9b1e6a8e40f3/1/M6Udf_AtIfrBk65K7R8MOVbORRU.mft
File:                     M6Udf_AtIfrBk65K7R8MOVbORRU.mft (raw, json)
Hash identifier:          60m/EFJpaboQO4Yww+Ct4aQqJXVmURSgnS3uKnC/bCo=
Subject key identifier:   90:CF:6F:BB:9F:B6:93:A6:AC:FD:2A:78:6C:C8:E7:F7:31:4D:29:63
Authority key identifier: 33:A5:1D:7F:F0:2D:21:FA:C1:93:AE:4A:ED:1F:0C:39:56:CE:45:15
Certificate issuer:       /CN=33a51d7ff02d21fac193ae4aed1f0c3956ce4515
Certificate serial:       01962F3D8F1D4819E852BDE7A73AB507A6D9
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/M6Udf_AtIfrBk65K7R8MOVbORRU.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/68/518e42-ebae-4547-8b22-9b1e6a8e40f3/1/M6Udf_AtIfrBk65K7R8MOVbORRU.mft
Manifest number:          147C
Signing time:             Sun 13 Apr 2025 13:01:25 +0000
Manifest this update:     Sun 13 Apr 2025 13:01:25 +0000
Manifest next update:     Mon 14 Apr 2025 13:01:25 +0000
Files and hashes:         1: H2UoMEQTfVfxYbD6DFEWnWSxzqY.roa (hash: oJCJ/WCUnFQh0GodJuWi0NgjkG4tPt6myP/qxDdyB6E=)
                          2: M6Udf_AtIfrBk65K7R8MOVbORRU.crl (hash: Y3yp+ycrOBPiobvZQ2bgJMPuXJz93roF8xnkieYLt0M=)
                          3: OcsKAT2NPT0ZOF4-_8aYdFedfrQ.roa (hash: hRZG/6yJi8ntHxlEybLhU4Ft+uUUaPLYRTeNmVj2zdc=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2f:3d:8f:1d:48:19:e8:52:bd:e7:a7:3a:b5:07:a6:d9
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=33a51d7ff02d21fac193ae4aed1f0c3956ce4515
        Validity
            Not Before: Apr 13 13:01:25 2025 GMT
            Not After : Apr 14 13:01:25 2025 GMT
        Subject: CN=90cf6fbb9fb693a6acfd2a786cc8e7f7314d2963
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a2:2e:0e:ce:6f:05:37:40:62:4c:7b:4a:06:dc:
                    6d:bf:f7:50:5e:45:6d:66:8a:0e:18:67:82:15:4e:
                    77:e5:f9:d6:d7:e9:5b:b9:de:a0:d2:b3:ff:f6:de:
                    15:c2:6c:51:a0:11:88:70:28:b5:ca:bc:f3:aa:a1:
                    a1:1d:c9:1a:45:5e:2a:ee:af:f7:7c:97:2e:12:2a:
                    8a:b9:c0:6a:62:76:6d:42:87:5b:49:a7:cb:19:70:
                    7e:4e:27:88:ac:e7:1a:07:1e:a0:0d:f8:a3:17:bd:
                    3c:d3:c5:50:a0:ea:6c:35:77:fb:3e:d6:d7:0a:4e:
                    b0:4c:a2:c3:f0:79:66:36:78:05:86:5f:a6:d1:7b:
                    0b:d4:21:5e:d6:01:99:64:ad:0b:89:07:78:31:fd:
                    8f:2c:d5:0f:d8:f9:ed:5a:2f:97:57:79:76:f3:ce:
                    85:54:e0:4d:1e:42:a7:88:4b:4a:f4:a1:b1:2c:6d:
                    e4:e1:b4:4d:fd:53:c9:0a:70:6e:bf:7d:c2:dd:41:
                    db:9c:3c:e8:63:82:94:1d:de:dd:62:0d:07:90:f4:
                    46:b8:58:5b:7e:ee:17:62:37:35:14:58:d2:14:2b:
                    6a:30:8a:c2:74:05:19:84:74:f1:fa:47:83:5c:e6:
                    68:1b:25:19:7d:4f:41:13:aa:c6:d2:34:85:82:87:
                    2c:89
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                90:CF:6F:BB:9F:B6:93:A6:AC:FD:2A:78:6C:C8:E7:F7:31:4D:29:63
            X509v3 Authority Key Identifier:
                keyid:33:A5:1D:7F:F0:2D:21:FA:C1:93:AE:4A:ED:1F:0C:39:56:CE:45:15

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/M6Udf_AtIfrBk65K7R8MOVbORRU.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/68/518e42-ebae-4547-8b22-9b1e6a8e40f3/1/M6Udf_AtIfrBk65K7R8MOVbORRU.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/68/518e42-ebae-4547-8b22-9b1e6a8e40f3/1/M6Udf_AtIfrBk65K7R8MOVbORRU.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         99:a2:95:6c:f3:3f:f3:4b:1d:3b:cf:f9:df:5c:c9:9e:31:91:
         5f:98:e0:89:e7:09:4e:67:5a:f1:22:11:7d:dc:6b:7e:3a:fc:
         db:d4:4c:0b:5a:eb:96:b4:3c:a5:f8:46:30:75:60:83:65:4c:
         5d:4c:5b:92:9f:b9:00:6b:00:99:c6:48:54:c8:d9:6a:3d:69:
         bf:ba:ca:0b:ac:89:68:54:8a:bd:13:2f:24:3f:c0:cf:8c:21:
         d9:32:14:87:6d:01:1b:05:ca:c3:13:81:05:41:10:83:47:ba:
         6b:fa:9d:6c:f2:c8:18:b8:94:c5:18:db:10:bc:07:0c:95:d6:
         13:f9:4f:f9:01:ce:38:21:2d:b5:ef:eb:a7:76:41:9c:d7:6b:
         e8:37:c4:d4:48:c6:52:c5:cc:cf:d9:0d:2a:18:6a:b2:c2:f7:
         72:09:7b:72:76:e4:76:1d:87:20:57:39:92:ab:76:33:09:1f:
         90:39:8b:a1:39:3b:e4:8f:fc:db:a0:45:3a:f0:72:96:3d:53:
         5d:0a:ca:b9:9d:a9:4f:96:a3:a5:c3:34:99:3b:8d:77:47:20:
         90:83:74:8e:61:82:f9:ac:1e:8f:24:d5:6f:13:51:ca:aa:95:
         f0:2c:13:e2:47:80:17:2b:03:ad:c5:96:6a:f7:fc:9d:23:b3:
         97:73:ed:d8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----