Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6f/fd2294-cf37-4fc9-9edd-a4f7b088bc1a/1/MtRJGf3QivuaTQqHeJIwESUd1_A.mft
File:                     MtRJGf3QivuaTQqHeJIwESUd1_A.mft (raw, json)
Hash identifier:          f7l4U65NuZSIIh1nQ24/reRufajRhtwKOScDn3KMGAY=
Subject key identifier:   62:FF:2B:7C:78:78:D3:EB:FF:C7:29:D5:59:31:14:BD:44:6B:65:93
Authority key identifier: 32:D4:49:19:FD:D0:8A:FB:9A:4D:0A:87:78:92:30:11:25:1D:D7:F0
Certificate issuer:       /CN=32d44919fdd08afb9a4d0a8778923011251dd7f0
Certificate serial:       01962E61FA00090CA37B52D1A5CE4472309F
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/MtRJGf3QivuaTQqHeJIwESUd1_A.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/6f/fd2294-cf37-4fc9-9edd-a4f7b088bc1a/1/MtRJGf3QivuaTQqHeJIwESUd1_A.mft
Manifest number:          0B6C
Signing time:             Sun 13 Apr 2025 09:01:35 +0000
Manifest this update:     Sun 13 Apr 2025 09:01:35 +0000
Manifest next update:     Mon 14 Apr 2025 09:01:35 +0000
Files and hashes:         1: EcMSrqduSSEdpF-7ulVjTtPYpNE.roa (hash: ZA8qM0bISMva3I03nVcIL7KQUByRBGHdqun/Plkp8KA=)
                          2: MtRJGf3QivuaTQqHeJIwESUd1_A.crl (hash: fGkVNaXHO7p1iL5+j2BMwaHXGvKXGBsb4LtKfjdDwVg=)
                          3: ant41ZKD96l4WAVLo9wrXso0aLA.roa (hash: 4K6WUz90Jye7WV1VDdQMdxKlwlzmRn7OIrbr4mY6WUc=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2e:61:fa:00:09:0c:a3:7b:52:d1:a5:ce:44:72:30:9f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=32d44919fdd08afb9a4d0a8778923011251dd7f0
        Validity
            Not Before: Apr 13 09:01:35 2025 GMT
            Not After : Apr 14 09:01:35 2025 GMT
        Subject: CN=62ff2b7c7878d3ebffc729d5593114bd446b6593
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c1:da:6e:e7:61:c0:b2:90:2a:9f:cc:93:63:08:
                    65:b8:87:1a:e2:c6:c8:8e:9b:e3:83:3b:d5:15:25:
                    39:5b:e3:9f:44:f0:6b:1e:23:f4:6c:46:ed:a7:6c:
                    9b:0d:dd:4d:61:7e:d3:17:19:0c:82:d2:c4:cb:c5:
                    f9:6b:0d:2a:08:76:c7:40:31:40:98:34:16:26:5f:
                    83:2a:9d:73:43:76:e0:91:42:22:7e:c1:0b:cc:db:
                    6f:c8:34:13:9c:f7:79:b5:df:b1:85:8f:aa:b2:bd:
                    46:35:54:68:b2:da:c0:59:4a:ad:58:c1:ca:c2:db:
                    34:38:79:f8:b3:88:a9:8e:aa:5f:9d:35:c7:15:54:
                    51:4e:96:d1:88:34:8b:64:fa:e3:c8:86:b7:63:dd:
                    65:5b:92:0b:61:78:14:8d:2e:ac:21:f7:4a:42:7e:
                    52:b9:8c:b3:af:40:65:c3:c3:22:fa:57:7d:80:d2:
                    03:5a:44:74:94:27:cd:29:e1:b5:35:3d:96:65:d6:
                    38:89:82:90:0c:35:87:de:5a:68:b4:fe:91:cb:e1:
                    ad:b8:f7:4c:2d:13:b2:72:bc:bd:37:46:30:c7:7d:
                    4c:cd:a1:a6:2a:e0:ff:2d:e8:fa:75:b8:d5:a6:71:
                    4a:59:96:eb:ad:0c:7e:b6:fa:92:78:af:f1:92:d5:
                    3f:4b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                62:FF:2B:7C:78:78:D3:EB:FF:C7:29:D5:59:31:14:BD:44:6B:65:93
            X509v3 Authority Key Identifier:
                keyid:32:D4:49:19:FD:D0:8A:FB:9A:4D:0A:87:78:92:30:11:25:1D:D7:F0

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/MtRJGf3QivuaTQqHeJIwESUd1_A.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6f/fd2294-cf37-4fc9-9edd-a4f7b088bc1a/1/MtRJGf3QivuaTQqHeJIwESUd1_A.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/6f/fd2294-cf37-4fc9-9edd-a4f7b088bc1a/1/MtRJGf3QivuaTQqHeJIwESUd1_A.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         b3:a8:b4:c3:91:7e:1c:23:6c:d7:fd:17:e2:31:94:f4:5a:da:
         09:39:66:db:ae:83:08:88:e1:2f:b5:44:9a:9d:cf:2e:07:4e:
         7d:85:70:a1:f2:d5:58:db:c0:4e:b4:99:46:c7:ca:16:20:fa:
         d2:c4:00:1c:c3:c7:77:fd:35:47:31:24:b1:47:cc:89:7f:bd:
         bd:e5:d4:b1:e9:56:4a:3c:fe:12:25:b8:c9:80:bd:d3:b0:64:
         81:c5:36:9e:99:9f:a7:73:fc:54:91:56:ed:ca:c1:00:8b:47:
         8a:13:a8:58:53:f3:34:34:dd:a8:8b:42:e7:bb:0a:01:44:f8:
         ed:cf:78:30:0a:c5:d6:23:d9:a7:9c:1b:62:f5:57:7a:48:b5:
         6d:e5:8a:cd:65:76:6e:1b:f2:37:5f:ce:97:3c:69:87:f0:13:
         d0:da:84:cc:1a:a7:af:3d:b7:36:2c:d7:ec:e9:c7:05:db:f1:
         d0:51:23:b7:95:32:fa:25:e9:9e:72:94:f2:c0:f9:19:28:12:
         9f:8b:27:dd:a1:a1:27:62:81:7a:af:6f:97:1b:67:b7:b0:b9:
         df:37:9e:33:df:e6:ce:02:59:da:10:2c:00:56:a7:b5:fa:a3:
         87:eb:bb:12:f4:1c:2a:68:67:2d:56:f9:8c:73:29:26:e9:cf:
         01:af:7c:05
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----