Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/74/112ce7-7415-4c5d-a890-ec95148fd236/1/MxcGuRW6uNrCtVR_vIet62Hmrt4.mft
File:                     MxcGuRW6uNrCtVR_vIet62Hmrt4.mft (raw, json)
Hash identifier:          8XqbibxUWQQP4T4iF+2oYE9AT1n87ZRiuTv6YEeoUI8=
Subject key identifier:   14:C9:65:0C:C8:03:66:94:D2:5D:A5:4B:3A:9E:85:49:93:AB:0D:92
Authority key identifier: 33:17:06:B9:15:BA:B8:DA:C2:B5:54:7F:BC:87:AD:EB:61:E6:AE:DE
Certificate issuer:       /CN=331706b915bab8dac2b5547fbc87adeb61e6aede
Certificate serial:       01962ECF5DC858560BA1719541AD09199129
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/MxcGuRW6uNrCtVR_vIet62Hmrt4.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/74/112ce7-7415-4c5d-a890-ec95148fd236/1/MxcGuRW6uNrCtVR_vIet62Hmrt4.mft
Manifest number:          077B
Signing time:             Sun 13 Apr 2025 11:01:03 +0000
Manifest this update:     Sun 13 Apr 2025 11:01:03 +0000
Manifest next update:     Mon 14 Apr 2025 11:01:03 +0000
Files and hashes:         1: EcvpEe6KcBt993JKLu8YO04Un5I.roa (hash: 7xYAacsPzggqlf+PnqOQYKnKBIIQsMXOuun1bs1Hcdk=)
                          2: Ie7P_6BcQVG-_xqWyQ0Sev5T9YA.roa (hash: Q0YJZsowQKDF/z7KdU4WhwUtmGCYU5boJyobBWG4I6Q=)
                          3: MxcGuRW6uNrCtVR_vIet62Hmrt4.crl (hash: h/CEm+qbeg1b8W3kPGRBlf7fbs5He7EhgGy2KD0oOqQ=)
                          4: ZZIDCIv8-GccnsBYJt5xKtntjOQ.roa (hash: ap49oW7G881Kt0INkjiskZ/mpP9C38OyqUyPASpvmms=)
                          5: fP5gK7Clsw9SsVF2kXkfiUCqIsc.roa (hash: sN82/8ck4cE58TeZQmemT9dreS3hgLroKAZO+qJp+VQ=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2e:cf:5d:c8:58:56:0b:a1:71:95:41:ad:09:19:91:29
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=331706b915bab8dac2b5547fbc87adeb61e6aede
        Validity
            Not Before: Apr 13 11:01:03 2025 GMT
            Not After : Apr 14 11:01:03 2025 GMT
        Subject: CN=14c9650cc8036694d25da54b3a9e854993ab0d92
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cd:6d:8b:95:53:42:77:4e:61:82:7c:76:3f:3b:
                    40:57:93:9c:d3:e8:25:00:18:da:7e:ee:25:0c:f0:
                    33:97:f4:2d:d6:10:1b:93:cf:48:30:b3:cc:02:d7:
                    7d:95:38:4e:85:c2:78:a9:09:c8:d0:50:3c:52:26:
                    82:b1:61:57:d6:e7:f0:f8:64:fc:36:33:20:e5:97:
                    02:3e:39:eb:8d:45:e6:5c:fe:ab:15:cb:fc:d6:b1:
                    80:09:ee:33:58:6a:bf:61:6e:87:a0:3b:a2:d7:f7:
                    ba:6c:1a:23:34:d7:e2:fb:12:d1:49:8d:34:49:7a:
                    f7:02:b8:9a:88:86:e9:7d:7e:2b:58:64:88:d0:82:
                    f6:30:65:e3:24:e3:d9:7a:7f:dd:37:b7:13:ff:ff:
                    30:ee:cf:b0:2a:81:91:6f:ee:6c:09:7b:f9:2f:8f:
                    77:58:e2:c8:3c:73:c9:00:f3:32:4b:7a:6d:c4:d2:
                    96:9b:2c:86:9d:31:86:43:4b:fa:3b:eb:98:98:1a:
                    ec:5a:99:5c:a2:3f:8a:f5:28:06:ad:24:29:a4:9c:
                    27:e3:5e:90:51:32:af:43:80:e4:00:d6:b0:b7:5d:
                    8a:4f:05:ae:24:ec:c8:9c:cc:59:ea:4e:c6:e2:78:
                    47:84:14:56:b9:97:4e:bd:ab:24:70:5a:4b:b9:e2:
                    db:55
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                14:C9:65:0C:C8:03:66:94:D2:5D:A5:4B:3A:9E:85:49:93:AB:0D:92
            X509v3 Authority Key Identifier:
                keyid:33:17:06:B9:15:BA:B8:DA:C2:B5:54:7F:BC:87:AD:EB:61:E6:AE:DE

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/MxcGuRW6uNrCtVR_vIet62Hmrt4.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/74/112ce7-7415-4c5d-a890-ec95148fd236/1/MxcGuRW6uNrCtVR_vIet62Hmrt4.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/74/112ce7-7415-4c5d-a890-ec95148fd236/1/MxcGuRW6uNrCtVR_vIet62Hmrt4.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         44:05:03:de:a9:60:08:d0:b2:08:aa:9f:0d:40:45:c4:79:3a:
         53:bc:95:42:4b:9a:f8:2e:e4:cd:6c:42:8a:69:8c:dd:69:58:
         87:43:5d:6e:98:6f:9c:2e:e0:1b:bc:16:c6:ce:00:b3:b0:ab:
         a0:f7:e2:0e:1b:de:06:21:af:53:79:fb:59:9b:f2:4a:ca:a2:
         e3:ea:9f:53:0f:2f:50:a8:75:35:92:14:1e:88:8a:fd:f2:37:
         3e:94:27:11:61:77:b3:d3:2a:82:6f:3b:8f:dc:ae:21:b2:e4:
         b6:4b:60:80:61:07:89:15:f4:29:66:82:fa:40:bd:b2:11:ee:
         d3:5e:a3:8c:09:b4:b1:ec:d9:7b:16:4c:a2:a3:1a:6b:23:1d:
         b0:4c:ef:ea:7e:f1:0a:98:c7:3b:6c:c4:c1:1b:d6:0e:2e:da:
         d1:e7:dd:b2:e2:3c:19:f7:b6:a1:20:30:96:58:b9:6b:b5:66:
         94:5c:98:ff:06:6f:66:0c:ea:9d:2d:ec:c2:f1:cf:93:0c:52:
         b6:95:71:ab:6d:10:58:ae:09:54:d7:e9:03:b3:69:f1:ec:3f:
         d8:7a:a5:26:9b:f1:71:85:e0:99:c3:4a:65:6d:bc:82:0d:d0:
         64:2a:8a:c0:58:68:3e:42:7e:a0:02:cd:78:06:73:1c:98:e5:
         98:0b:64:bb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----