Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/71/0f6470-e7f4-4151-8ad9-d3b27a0225b0/1/1z6DFGpDhp9ldFHnbQowXxWnruk.mft
File:                     1z6DFGpDhp9ldFHnbQowXxWnruk.mft (raw, json)
Hash identifier:          QH5Y8FZI6gZVdCIV0rAThPof7x3EuP/qJYovJR9o+JU=
Subject key identifier:   A7:21:2C:DB:27:CA:C3:B3:B8:F9:B7:33:96:6B:A2:9C:4B:5A:85:4D
Authority key identifier: D7:3E:83:14:6A:43:86:9F:65:74:51:E7:6D:0A:30:5F:15:A7:AE:E9
Certificate issuer:       /CN=d73e83146a43869f657451e76d0a305f15a7aee9
Certificate serial:       01962F3DD801C5E53B855942A5F0318235EC
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/1z6DFGpDhp9ldFHnbQowXxWnruk.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/71/0f6470-e7f4-4151-8ad9-d3b27a0225b0/1/1z6DFGpDhp9ldFHnbQowXxWnruk.mft
Manifest number:          14EC
Signing time:             Sun 13 Apr 2025 13:01:44 +0000
Manifest this update:     Sun 13 Apr 2025 13:01:44 +0000
Manifest next update:     Mon 14 Apr 2025 13:01:44 +0000
Files and hashes:         1: 1z6DFGpDhp9ldFHnbQowXxWnruk.crl (hash: lOsSMUT9Iebw9Dmrx5yIZAE45qU6hFfp5VS1onNsVBw=)
                          2: GjRTUlniyanmn4Afv90LXdtB2CM.roa (hash: H05QDr/ZorYcXmze9XYmHh1Yk5vgO9UM/lypXH5003s=)
                          3: fpuO1KgXHawIqKkMRIDlnRPTQ7U.roa (hash: ue6Kig6bA97Pget/ASgsuFmh3TVF1nlHcCgCcC+PS30=)
                          4: iDcx17jqSt5evXMH3ZR7hspxCwo.roa (hash: HtASD4funhOSBzbbYi7dYm93HfUK3vhLncjZn0KAr1A=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2f:3d:d8:01:c5:e5:3b:85:59:42:a5:f0:31:82:35:ec
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d73e83146a43869f657451e76d0a305f15a7aee9
        Validity
            Not Before: Apr 13 13:01:44 2025 GMT
            Not After : Apr 14 13:01:44 2025 GMT
        Subject: CN=a7212cdb27cac3b3b8f9b733966ba29c4b5a854d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cf:5f:a7:52:72:5f:22:ca:f4:53:23:41:d6:1b:
                    62:0f:b7:56:05:94:a6:f6:60:8a:04:8f:61:6d:4a:
                    04:e0:e2:97:2a:1d:fa:6f:5a:fa:40:bf:93:ea:0c:
                    43:be:ed:4d:27:ef:ab:a2:53:8c:e4:1a:2e:b0:d2:
                    bc:22:82:e9:d8:68:03:0f:8a:6d:eb:e4:b2:fd:24:
                    02:ea:9d:f9:0f:5c:ff:b0:52:d4:c0:5c:a5:33:c3:
                    f9:b8:a7:a5:ec:7a:1f:ff:08:26:6b:0d:b4:a5:d2:
                    45:15:21:e0:fd:0a:ee:c5:59:25:15:9b:cb:43:81:
                    a0:29:cb:97:e4:fb:5a:d5:dc:91:d9:95:27:19:c0:
                    75:43:9c:a2:ec:51:79:58:a2:6e:a1:44:51:8c:4a:
                    6d:89:cc:57:bc:02:30:d4:3c:1f:26:90:eb:30:78:
                    95:b2:26:a1:dd:3f:c5:56:b1:3c:7d:3e:04:a3:72:
                    fb:94:02:31:0b:3f:6f:5d:4d:b2:03:53:61:8a:4c:
                    92:ba:e1:cc:65:ee:31:8c:5c:2b:85:7c:db:b1:c6:
                    fd:f7:65:d5:d6:66:29:45:b8:9f:02:76:d5:76:61:
                    f0:f1:cb:8a:04:5f:83:1f:25:03:25:72:53:71:9e:
                    5f:9c:6d:8b:fe:38:e5:bf:ce:49:61:76:9b:d7:48:
                    57:41
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A7:21:2C:DB:27:CA:C3:B3:B8:F9:B7:33:96:6B:A2:9C:4B:5A:85:4D
            X509v3 Authority Key Identifier:
                keyid:D7:3E:83:14:6A:43:86:9F:65:74:51:E7:6D:0A:30:5F:15:A7:AE:E9

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1z6DFGpDhp9ldFHnbQowXxWnruk.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/71/0f6470-e7f4-4151-8ad9-d3b27a0225b0/1/1z6DFGpDhp9ldFHnbQowXxWnruk.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/71/0f6470-e7f4-4151-8ad9-d3b27a0225b0/1/1z6DFGpDhp9ldFHnbQowXxWnruk.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         0e:ac:40:f3:eb:d4:79:06:6e:7f:71:7e:e2:36:b9:40:ca:54:
         57:f9:05:3c:23:e3:91:91:27:3e:a3:cb:0e:f6:1f:3d:e2:85:
         65:7a:15:f1:47:a6:1d:8b:ee:9e:7e:2d:93:06:95:bd:c7:9f:
         70:fa:b7:ba:f3:98:6b:a1:75:3a:f1:a6:93:9e:04:d4:61:42:
         28:1a:ed:5d:16:7b:9f:ec:ac:8e:0f:2b:95:a4:2d:27:05:c3:
         27:bb:25:89:45:dd:b1:48:ad:4b:6b:5c:ed:96:b3:87:d5:e3:
         07:e5:1c:11:c5:f3:66:6a:c2:fb:81:81:81:de:d1:28:9b:79:
         c3:cf:60:82:fa:af:a0:d2:47:de:54:55:e4:07:33:6b:c7:14:
         af:e1:77:9e:60:be:7e:a9:c7:88:c0:67:c1:2a:fd:aa:c8:41:
         4f:9e:47:18:3e:e7:0f:9e:31:08:68:08:12:76:a4:15:51:14:
         b2:e4:bf:fb:b0:e9:8f:e7:1a:ea:45:0e:75:f1:4d:85:b7:0f:
         6a:28:26:ee:76:91:18:c1:0e:31:b8:57:3e:79:08:c2:0a:b6:
         bc:6b:c3:43:4e:28:ac:30:d2:dc:74:26:9e:0d:0d:1c:25:48:
         24:86:58:ef:ec:c4:25:6b:5f:ab:3d:7e:d1:c7:5c:a4:bc:18:
         6a:ff:7b:6f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----