Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6e/52b199-9e1f-4ec7-b0aa-4a4e0f424f17/1/rwNoFqMX3ZnSU4OjKmgYWcBHtf8.mft
File:                     rwNoFqMX3ZnSU4OjKmgYWcBHtf8.mft (raw, json)
Hash identifier:          n/vELCTqrbOqDYRgLTpGStKiRdyCEz7ii3GvXmmy3ws=
Subject key identifier:   2A:D9:84:96:73:96:7A:2F:79:27:C1:03:12:2A:83:02:F5:A5:16:35
Authority key identifier: AF:03:68:16:A3:17:DD:99:D2:53:83:A3:2A:68:18:59:C0:47:B5:FF
Certificate issuer:       /CN=af036816a317dd99d25383a32a681859c047b5ff
Certificate serial:       01962F74BEE96500911F0F50F23610060F1D
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/rwNoFqMX3ZnSU4OjKmgYWcBHtf8.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/6e/52b199-9e1f-4ec7-b0aa-4a4e0f424f17/1/rwNoFqMX3ZnSU4OjKmgYWcBHtf8.mft
Manifest number:          0F46
Signing time:             Sun 13 Apr 2025 14:01:42 +0000
Manifest this update:     Sun 13 Apr 2025 14:01:42 +0000
Manifest next update:     Mon 14 Apr 2025 14:01:42 +0000
Files and hashes:         1: dv2-CubAEzDgm9-A6q6tebm8sb8.roa (hash: TsKOArcBjp/tutNspO+BZ3fNFViji2g9Yje5CxDDQXE=)
                          2: rwNoFqMX3ZnSU4OjKmgYWcBHtf8.crl (hash: 2XKr3bNljBNemFhLCGQy7jYCEd2fl3B2c/N96t1v9Q8=)
                          3: uPmBIiMy_mwoAMwRr2tHb8mN_DQ.roa (hash: HueNCAsjAp0HpCdgeRDBaDeI3suLIq9xXvHT44od5wE=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2f:74:be:e9:65:00:91:1f:0f:50:f2:36:10:06:0f:1d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=af036816a317dd99d25383a32a681859c047b5ff
        Validity
            Not Before: Apr 13 14:01:42 2025 GMT
            Not After : Apr 14 14:01:42 2025 GMT
        Subject: CN=2ad9849673967a2f7927c103122a8302f5a51635
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b6:f6:9d:84:85:54:dc:c0:3e:2f:35:3c:58:e7:
                    1f:1f:26:57:24:e2:9a:73:e0:17:cd:3b:e8:67:e4:
                    02:a8:6d:d4:41:93:3d:28:1f:f4:f6:ae:84:59:ca:
                    95:ae:1f:c7:1c:e2:dd:7f:b3:f6:0d:3f:90:a5:42:
                    19:a8:43:a8:9e:28:dd:26:cb:1e:4d:2b:8c:aa:e9:
                    40:21:c2:66:d8:5b:db:08:bd:5b:c4:02:65:cf:75:
                    b7:0e:91:04:63:19:4b:4e:76:2e:4d:64:a9:4a:c4:
                    7b:60:e9:f0:4f:06:6d:74:fc:6a:c0:ef:7b:47:1e:
                    4e:a3:8f:f0:f8:1e:0d:ce:64:6b:76:ab:39:28:21:
                    aa:7e:a9:89:60:b0:dd:2d:31:d5:6d:b2:ca:98:16:
                    80:d8:62:b8:e5:f9:03:c0:b6:ae:ae:11:22:c3:9d:
                    24:e8:6f:8c:b0:df:8b:82:40:16:1c:1c:86:f1:96:
                    7c:95:07:ad:84:80:62:5d:d2:1d:50:16:dc:af:3e:
                    f0:0a:2e:6a:cd:68:74:ec:b0:37:8e:0a:63:b2:0d:
                    b1:3c:27:17:67:d3:c1:59:f2:c6:77:7d:87:f7:96:
                    4a:a0:97:af:08:17:1a:06:d1:c2:8d:ac:2c:1b:3f:
                    8a:b5:2a:a3:33:bb:04:05:70:1a:b1:a6:ed:4b:64:
                    79:69
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2A:D9:84:96:73:96:7A:2F:79:27:C1:03:12:2A:83:02:F5:A5:16:35
            X509v3 Authority Key Identifier:
                keyid:AF:03:68:16:A3:17:DD:99:D2:53:83:A3:2A:68:18:59:C0:47:B5:FF

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/rwNoFqMX3ZnSU4OjKmgYWcBHtf8.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6e/52b199-9e1f-4ec7-b0aa-4a4e0f424f17/1/rwNoFqMX3ZnSU4OjKmgYWcBHtf8.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/6e/52b199-9e1f-4ec7-b0aa-4a4e0f424f17/1/rwNoFqMX3ZnSU4OjKmgYWcBHtf8.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         3a:f4:6e:3b:ed:0d:1d:9f:f0:a7:8d:10:f4:53:91:a8:17:75:
         71:a8:60:2c:26:2c:9b:32:3c:f6:57:75:c1:ad:07:0b:60:0a:
         5b:df:04:e4:6d:03:44:ee:0b:9f:8a:ff:68:f6:6c:df:cb:2f:
         eb:b2:1b:15:9f:62:34:a3:9e:1c:f9:c6:55:f6:dd:99:7e:f4:
         c8:bf:49:b8:95:11:c2:5e:11:f9:0c:2f:33:38:1b:7f:f3:df:
         ab:ab:fb:4b:96:86:10:24:0a:8e:85:ae:15:d0:d0:5b:bf:74:
         3d:0e:81:d1:59:5f:0a:11:7e:0b:08:82:42:fe:c3:cb:3c:f3:
         bf:6b:0a:9e:3f:02:38:47:73:93:86:fe:55:49:97:4a:b8:81:
         22:83:00:6d:8e:19:dd:d8:c6:c8:8e:8b:03:22:c2:66:82:0c:
         c5:72:60:e4:3d:33:d6:7e:c6:a3:de:77:e1:68:99:d2:78:be:
         14:67:2b:1c:c3:1f:eb:bf:47:be:10:1e:0f:e7:30:70:96:f7:
         6d:55:e6:78:a9:76:b4:ae:47:65:52:e4:bf:0a:08:4f:20:a8:
         2a:ee:67:22:93:9f:bd:19:4a:ba:5d:24:c3:c5:0a:e5:0c:8c:
         4f:27:ce:c2:ed:44:03:e1:d1:8a:78:5c:0d:3b:1b:3d:7c:b0:
         02:cb:2b:03
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----