Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/79/bbcd53-c4f8-4245-bb90-00a154b8ecb1/1/c-FXspGMrcqKWp-8Zul3YIpt9eE.mft
File:                     c-FXspGMrcqKWp-8Zul3YIpt9eE.mft (raw, json)
Hash identifier:          GwPN9qAKUbwGIBsiPeA1b/SembbIdujIzQyvWyFY6Bw=
Subject key identifier:   31:78:91:8E:5F:68:67:38:FC:58:5C:99:0F:40:54:DD:38:28:2C:51
Authority key identifier: 73:E1:57:B2:91:8C:AD:CA:8A:5A:9F:BC:66:E9:77:60:8A:6D:F5:E1
Certificate issuer:       /CN=73e157b2918cadca8a5a9fbc66e977608a6df5e1
Certificate serial:       01962F3DBE5FD0D2D89C3B1C2B3C823D6FE3
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/c-FXspGMrcqKWp-8Zul3YIpt9eE.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/79/bbcd53-c4f8-4245-bb90-00a154b8ecb1/1/c-FXspGMrcqKWp-8Zul3YIpt9eE.mft
Manifest number:          14F3
Signing time:             Sun 13 Apr 2025 13:01:37 +0000
Manifest this update:     Sun 13 Apr 2025 13:01:37 +0000
Manifest next update:     Mon 14 Apr 2025 13:01:37 +0000
Files and hashes:         1: 9Vc3AbW6vlZ_1l6ygzFXdiG_9DU.roa (hash: XyjyaFRHv8L+Xv8vUnenIR3U/Eb6y+TGYMaeT4tV8mY=)
                          2: F8Nk--QAXVfgvDbLL_6xQcd6OeY.roa (hash: B5PNCVqEZ3htMuoUo9SXwMTUf5kV2N6tfRSmohV4ztI=)
                          3: c-FXspGMrcqKWp-8Zul3YIpt9eE.crl (hash: fRjG1COV9xMH8kTrFkKlTa7Y+y08P5LDAjBUTNBlJ+Y=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2f:3d:be:5f:d0:d2:d8:9c:3b:1c:2b:3c:82:3d:6f:e3
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=73e157b2918cadca8a5a9fbc66e977608a6df5e1
        Validity
            Not Before: Apr 13 13:01:37 2025 GMT
            Not After : Apr 14 13:01:37 2025 GMT
        Subject: CN=3178918e5f686738fc585c990f4054dd38282c51
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ba:8a:72:a1:c9:94:f9:76:35:c3:78:ba:b2:71:
                    db:ce:69:09:3f:db:72:ca:0e:d5:fa:5a:a9:37:a0:
                    6f:04:6a:d4:26:74:1a:a6:14:6d:23:68:3d:61:8b:
                    de:0e:46:04:df:65:4b:af:2f:2d:e9:29:f0:3e:0a:
                    e9:08:50:b2:8a:31:f4:b0:fc:8b:48:3b:72:20:aa:
                    e7:8c:d7:bc:f5:27:c9:5a:52:da:b6:ab:f1:5a:75:
                    50:9f:e8:1e:56:b9:e3:a5:99:f0:4e:1b:b7:3b:02:
                    7a:a1:16:63:38:bb:7f:90:a4:70:8a:92:99:a7:0a:
                    a8:ea:b6:37:56:78:bb:7a:a4:a2:70:1a:ae:e2:1d:
                    56:cc:c9:77:86:7b:d9:e8:23:44:af:ec:a7:22:61:
                    8e:5d:dc:79:44:6f:e6:e7:48:b0:80:ce:8d:a1:6d:
                    9f:10:3b:6a:a1:8d:f0:46:80:6f:f0:98:fe:63:00:
                    4e:fb:ad:c1:52:29:5d:20:2b:ef:fb:b0:c8:ba:f2:
                    67:7e:42:fc:2a:ea:0a:54:07:30:22:b8:83:6d:6c:
                    56:50:41:b4:f1:03:76:53:98:5b:52:d1:ad:72:99:
                    4f:b3:49:37:68:a1:c2:ad:ba:06:ba:f6:40:d1:6e:
                    18:fa:85:d0:a2:b5:a2:28:2c:22:6a:c4:0d:09:43:
                    e7:f7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                31:78:91:8E:5F:68:67:38:FC:58:5C:99:0F:40:54:DD:38:28:2C:51
            X509v3 Authority Key Identifier:
                keyid:73:E1:57:B2:91:8C:AD:CA:8A:5A:9F:BC:66:E9:77:60:8A:6D:F5:E1

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/c-FXspGMrcqKWp-8Zul3YIpt9eE.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/79/bbcd53-c4f8-4245-bb90-00a154b8ecb1/1/c-FXspGMrcqKWp-8Zul3YIpt9eE.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/79/bbcd53-c4f8-4245-bb90-00a154b8ecb1/1/c-FXspGMrcqKWp-8Zul3YIpt9eE.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         2a:2a:08:4b:0f:e8:4b:6b:19:64:70:bd:cf:1b:a9:68:37:38:
         89:54:4f:25:89:4e:89:da:53:28:c1:1c:e0:f1:80:ce:cb:37:
         9e:e1:d8:29:45:f5:d8:90:69:b2:7c:83:a6:22:8e:97:f5:3c:
         9c:f5:18:d8:96:aa:a5:c3:b5:ef:07:bf:60:ae:fc:f8:57:a2:
         c7:83:59:fc:49:4e:ec:9a:39:70:06:76:e7:d9:ea:77:67:a4:
         64:04:8b:d6:22:75:76:29:83:62:71:50:d4:da:5b:d5:1e:c1:
         c8:94:02:df:ae:65:2d:a6:b5:ee:a2:98:c4:e1:3b:51:b8:e7:
         0e:59:ac:79:aa:06:53:ee:d4:f7:e4:79:5b:30:d9:b5:5c:d9:
         36:78:fd:5a:77:c5:c3:86:97:3d:52:06:fb:9e:e4:62:c2:aa:
         fa:9d:a2:84:dd:ec:a7:6a:3e:3a:b7:66:e5:fb:9f:55:5e:26:
         c9:6d:18:28:2e:be:aa:03:f4:36:13:e4:46:a5:97:c1:72:24:
         a1:58:10:29:94:85:94:99:e5:df:27:47:ec:61:ca:d4:50:94:
         e8:a2:47:af:18:bc:d6:cd:97:c3:8c:ea:d6:66:4b:8c:2e:4f:
         b0:84:c2:1c:09:77:fe:6e:02:a9:05:07:e8:a6:28:7d:07:ea:
         cf:2e:08:1c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----