Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6d/56d267-1c43-47c8-afb2-64d29c86bf3e/1/rB9yG3t-bQSfv-Ug4cqJwcolaBM.mft
File:                     rB9yG3t-bQSfv-Ug4cqJwcolaBM.mft (raw, json)
Hash identifier:          pnGvJqxWcnWzTFSpUzKoUqYhembcpKSycH+tBWRuBNE=
Subject key identifier:   32:65:11:7D:54:7F:D9:35:59:79:58:18:07:BF:12:97:D3:D8:85:DA
Authority key identifier: AC:1F:72:1B:7B:7E:6D:04:9F:BF:E5:20:E1:CA:89:C1:CA:25:68:13
Certificate issuer:       /CN=ac1f721b7b7e6d049fbfe520e1ca89c1ca256813
Certificate serial:       01962F0724E1167CF620E4F471D98C5F480E
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/rB9yG3t-bQSfv-Ug4cqJwcolaBM.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/6d/56d267-1c43-47c8-afb2-64d29c86bf3e/1/rB9yG3t-bQSfv-Ug4cqJwcolaBM.mft
Manifest number:          0975
Signing time:             Sun 13 Apr 2025 12:01:59 +0000
Manifest this update:     Sun 13 Apr 2025 12:01:59 +0000
Manifest next update:     Mon 14 Apr 2025 12:01:59 +0000
Files and hashes:         1: 2yuHeP9Kzi2-iDsOvnhCDYlo6Uw.roa (hash: IHxChvWb85sgNgotrA/BnsV06YpBeOkmN/tTfoFuUvc=)
                          2: 84vkoPKxTF7pgwUvztDxRbjDrhQ.roa (hash: Wg3Ofao0gloehi9CthP/SdUCVsO6QMEQd9BpLHe3B8o=)
                          3: GKSQanExligYvTlhCHXIb80j450.roa (hash: xKvcqXgNWsJgbD21bBVQq7NU5gjELOTuBMVHtTDoCVI=)
                          4: Tyo6VF1ELTbvwtJyS6nZJLA8K-0.roa (hash: umfGkIDiH0PEP4Dex0coyv4+UbwotSLBPIcupKuR1h8=)
                          5: ekkDxJqu-ZlE3YVqxLbl94UD6sQ.roa (hash: +gZe1v06dqZXZbhN48Df/j5IB56FQCKk5ahi88pFN9Q=)
                          6: kNcVhQpRqGRKtRoApGjZuA5ACHo.roa (hash: EghVSyPoJOgbCHk/V4h5/7YBe1j1EcoGI/60cjBIYNw=)
                          7: rB9yG3t-bQSfv-Ug4cqJwcolaBM.crl (hash: TbqBB62YJS4KDtF9/rawo+ghnvrsm4bofv/w8KSG8hA=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2f:07:24:e1:16:7c:f6:20:e4:f4:71:d9:8c:5f:48:0e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=ac1f721b7b7e6d049fbfe520e1ca89c1ca256813
        Validity
            Not Before: Apr 13 12:01:59 2025 GMT
            Not After : Apr 14 12:01:59 2025 GMT
        Subject: CN=3265117d547fd9355979581807bf1297d3d885da
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d5:20:fd:45:c4:e0:97:98:d0:6e:88:f9:4f:89:
                    db:6f:5d:70:f1:e3:b6:b1:de:3b:82:1a:65:bf:cf:
                    33:65:c8:f6:e4:0e:5c:7b:07:40:5c:9b:c9:b5:75:
                    aa:e6:0f:59:17:7c:9e:1c:55:0e:05:77:83:e4:02:
                    a2:53:ac:f3:6a:b0:bd:76:25:40:1b:6c:0e:77:eb:
                    e5:d2:0e:b8:10:9f:26:85:b0:01:21:b0:7c:d5:22:
                    2f:3e:57:6c:9b:dc:10:ce:f0:b8:b6:c8:5f:b9:2f:
                    b9:b8:06:e9:0b:81:cc:c4:85:c5:33:9e:27:40:7a:
                    4d:af:1d:21:ba:c4:07:4f:ff:f4:82:ae:3f:53:21:
                    e2:d1:99:57:d7:e5:a6:a2:d2:6c:25:e9:ff:f0:07:
                    b2:b6:94:d5:95:fa:e8:cf:58:c0:4e:0c:85:d3:b2:
                    ef:48:46:66:84:2a:0b:09:5c:cc:68:d6:8a:c9:4c:
                    f1:6f:6f:8d:22:db:d1:45:d2:81:ed:c7:00:b0:ff:
                    5f:36:40:e8:51:2f:ee:28:df:c4:d5:aa:b2:f9:ab:
                    47:65:f8:78:67:c0:eb:b2:cd:9f:7e:f6:e1:28:d8:
                    34:77:22:f6:d1:c0:f4:24:bf:73:e0:d6:ac:23:41:
                    40:61:e8:4a:4a:86:02:d0:14:e8:4d:08:48:81:cc:
                    19:d9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                32:65:11:7D:54:7F:D9:35:59:79:58:18:07:BF:12:97:D3:D8:85:DA
            X509v3 Authority Key Identifier:
                keyid:AC:1F:72:1B:7B:7E:6D:04:9F:BF:E5:20:E1:CA:89:C1:CA:25:68:13

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/rB9yG3t-bQSfv-Ug4cqJwcolaBM.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6d/56d267-1c43-47c8-afb2-64d29c86bf3e/1/rB9yG3t-bQSfv-Ug4cqJwcolaBM.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/6d/56d267-1c43-47c8-afb2-64d29c86bf3e/1/rB9yG3t-bQSfv-Ug4cqJwcolaBM.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         8e:67:8e:29:e2:ff:51:d8:05:80:6c:ca:82:47:79:62:67:60:
         fe:23:52:b7:af:59:80:03:c9:26:0a:5b:25:a8:4c:47:3d:56:
         73:fd:b0:1e:04:26:b3:af:da:5a:ce:e2:6e:68:68:e3:f0:37:
         5c:fc:01:97:62:7e:5a:38:79:9a:a6:ce:f9:01:0f:e7:a4:aa:
         96:a7:21:59:7d:d8:dc:77:ec:45:30:c9:4d:9f:6b:28:cb:4c:
         83:c7:76:51:a2:53:66:76:2d:f1:e3:e8:c0:4f:77:1a:c4:42:
         05:7f:65:ea:15:95:db:f1:51:99:95:a6:dd:1e:d4:2f:eb:b5:
         fa:60:29:ce:33:e0:de:45:60:7e:89:3c:06:3e:8b:b6:16:eb:
         c3:a5:f1:b6:d4:d2:54:d7:57:42:61:40:55:e5:7a:d6:0d:5e:
         ba:a6:68:16:93:b9:41:06:cb:39:bd:1e:1c:16:0e:ba:09:95:
         fe:19:76:07:0b:c2:7b:79:f3:ea:b7:69:d3:1f:eb:73:1c:e2:
         f2:09:11:fe:e3:e8:97:9a:e7:a1:c4:87:68:cc:8a:06:3a:91:
         c0:30:a5:7e:56:73:2d:3a:e9:70:f2:e5:c0:0a:14:c1:c6:b5:
         01:a9:50:c6:9b:8e:dc:a9:55:58:95:2e:ec:79:d4:5f:fd:72:
         4d:a9:58:13
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----