Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6b/c171ca-4b1b-4187-ba46-a4fc9e2458ec/1/d7jPRUsJYtFqSFWAj9OrwVhSu9g.mft
File:                     d7jPRUsJYtFqSFWAj9OrwVhSu9g.mft (raw, json)
Hash identifier:          9hljxkfyVN7ZOgwsDhD1DoLXCCGQrtui6HqD+eC6ew4=
Subject key identifier:   AD:FA:42:E0:32:89:DC:65:9D:F9:34:DD:22:51:B0:B3:67:CB:62:B2
Authority key identifier: 77:B8:CF:45:4B:09:62:D1:6A:48:55:80:8F:D3:AB:C1:58:52:BB:D8
Certificate issuer:       /CN=77b8cf454b0962d16a4855808fd3abc15852bbd8
Certificate serial:       01962FAB4E7DF78B2C78B113485EAA45192D
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/d7jPRUsJYtFqSFWAj9OrwVhSu9g.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/6b/c171ca-4b1b-4187-ba46-a4fc9e2458ec/1/d7jPRUsJYtFqSFWAj9OrwVhSu9g.mft
Manifest number:          14F4
Signing time:             Sun 13 Apr 2025 15:01:17 +0000
Manifest this update:     Sun 13 Apr 2025 15:01:17 +0000
Manifest next update:     Mon 14 Apr 2025 15:01:17 +0000
Files and hashes:         1: GiuN6Z-Ii4hKkVx5VV-IMhBO3QY.roa (hash: iyQ6GAQjxqnJYL88mOpP3XC9PzL+98vR7m7z4r32/XE=)
                          2: I31zSlJ40fjjEolj5beTqF2Vpd4.roa (hash: Og0yQVlIZ0GIVCkTxKf0CrUvb1fixcYPJT0gMrkKe1k=)
                          3: d7jPRUsJYtFqSFWAj9OrwVhSu9g.crl (hash: BGBYtNXFZGwkVFIrbOSQoCsHqJ9/6o0VR3d9JIs6AY4=)
                          4: hWqbQCINw_eREZ5Cr4ZVsBmolHg.roa (hash: Udzjv6T0jDHHqGvPVeIEklKJjpCQoCFjU9XymlaTwRA=)
                          5: osKO7b8ccW31sbJ6_t6mywPVBHM.roa (hash: JM2OqJyCoa973ukFnr+UzzosklB0VPL9Ae/5a6wxzDM=)
                          6: pDrGdKgcXes4quzk7Lh5Ka1vr9k.roa (hash: JXmZvN6wvq9s/qrkI9tgKOrpx2n5jQb8xJL6vMObw8g=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2f:ab:4e:7d:f7:8b:2c:78:b1:13:48:5e:aa:45:19:2d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=77b8cf454b0962d16a4855808fd3abc15852bbd8
        Validity
            Not Before: Apr 13 15:01:17 2025 GMT
            Not After : Apr 14 15:01:17 2025 GMT
        Subject: CN=adfa42e03289dc659df934dd2251b0b367cb62b2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:de:5e:6c:9f:04:02:98:4a:b7:a9:0f:c2:56:80:
                    23:9a:c9:a7:8d:56:8d:7d:f8:ac:9a:fe:c1:e1:b0:
                    e1:5b:ed:52:90:2c:47:8b:44:ec:3b:02:6b:68:22:
                    05:fb:42:a3:57:57:96:f0:9d:f0:37:24:c4:a6:22:
                    98:21:b4:4f:76:4d:3d:29:dd:f7:d2:8f:96:37:0c:
                    68:2a:a6:cc:0c:5d:23:26:dd:77:5f:24:f0:14:6e:
                    dc:21:ee:91:61:42:22:8e:06:d5:9b:7f:65:90:6a:
                    44:99:43:4c:14:36:0b:57:f3:5e:a9:93:06:8a:cd:
                    58:2b:41:fc:a6:41:99:8c:f2:0c:3f:5a:eb:65:7e:
                    dd:65:8e:23:c7:19:76:89:47:ce:88:90:90:39:86:
                    4e:12:bd:d8:6a:7f:44:98:54:f6:14:43:80:40:67:
                    1b:9b:46:0b:6d:c7:1e:2e:28:79:73:f3:b2:04:5a:
                    53:97:25:d7:04:27:43:27:48:1a:da:0f:e7:e2:98:
                    d3:d8:1a:f7:ea:6c:77:81:80:52:2d:a2:ae:7b:42:
                    29:62:ad:bb:d6:75:82:5b:c7:51:75:9d:78:b4:52:
                    01:a6:05:ee:f6:e0:54:33:80:3a:22:0f:d7:c2:26:
                    94:9e:e9:18:25:c0:42:4a:05:9a:a1:83:09:f3:d2:
                    a4:5d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AD:FA:42:E0:32:89:DC:65:9D:F9:34:DD:22:51:B0:B3:67:CB:62:B2
            X509v3 Authority Key Identifier:
                keyid:77:B8:CF:45:4B:09:62:D1:6A:48:55:80:8F:D3:AB:C1:58:52:BB:D8

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/d7jPRUsJYtFqSFWAj9OrwVhSu9g.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6b/c171ca-4b1b-4187-ba46-a4fc9e2458ec/1/d7jPRUsJYtFqSFWAj9OrwVhSu9g.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/6b/c171ca-4b1b-4187-ba46-a4fc9e2458ec/1/d7jPRUsJYtFqSFWAj9OrwVhSu9g.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         6d:95:90:79:69:72:9e:33:ed:d6:b7:3b:3a:00:1f:3f:19:b5:
         c1:0f:7f:15:73:11:22:54:87:00:f9:55:fe:fb:79:b3:c3:39:
         2b:1d:39:70:ec:7d:9c:58:fe:b5:ff:6b:a7:26:5b:63:21:1c:
         17:e2:67:07:b9:8f:47:d1:01:d6:09:2c:e3:bd:54:7a:02:1a:
         83:ed:0b:59:bc:bd:1f:e9:a5:43:ac:d1:b8:26:41:fc:87:20:
         03:37:49:9f:b4:65:d1:9f:b1:d3:9c:00:bc:a0:63:89:5f:a8:
         73:e1:6c:c7:df:ed:2f:e6:42:ff:65:47:72:69:3d:41:45:f8:
         2e:0a:c2:59:7c:14:66:49:4c:b8:71:be:ba:ed:73:b5:2b:73:
         a2:f4:ca:c3:3a:35:92:7a:46:7f:e5:0e:0c:94:85:99:65:2e:
         6a:bc:b7:41:6b:41:83:83:a7:a6:b1:29:6d:be:8e:29:c8:d8:
         50:23:e1:05:03:44:7a:48:8e:b5:67:25:4e:cd:35:46:39:a7:
         c9:f1:cf:7c:41:ba:5a:ae:6c:25:43:2e:7c:ca:ab:9a:6c:70:
         d2:03:4f:e9:e9:b1:d7:07:34:3b:02:9e:1c:77:59:ef:af:33:
         53:84:0f:45:c7:d6:b0:52:4a:7d:0f:f5:c9:18:b6:ee:67:e7:
         db:3b:58:3b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----