Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7b/4aa5a7-8bec-4247-a15f-5a3612352b37/1/s2DwCXvkgcIbsdUchdRPZXQViqk.mft
File:                     s2DwCXvkgcIbsdUchdRPZXQViqk.mft (raw, json)
Hash identifier:          GLYXbF7Y216bEzzcExCd1ud9584lVk9PN6OUFuxBHGQ=
Subject key identifier:   4A:EC:53:4B:8D:7B:AD:1C:67:DC:F1:0B:FC:59:3A:43:90:2E:C1:70
Authority key identifier: B3:60:F0:09:7B:E4:81:C2:1B:B1:D5:1C:85:D4:4F:65:74:15:8A:A9
Certificate issuer:       /CN=b360f0097be481c21bb1d51c85d44f6574158aa9
Certificate serial:       01962DF3B4C07234158FCB1593F3FBFA1004
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/s2DwCXvkgcIbsdUchdRPZXQViqk.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/7b/4aa5a7-8bec-4247-a15f-5a3612352b37/1/s2DwCXvkgcIbsdUchdRPZXQViqk.mft
Manifest number:          055B
Signing time:             Sun 13 Apr 2025 07:01:08 +0000
Manifest this update:     Sun 13 Apr 2025 07:01:08 +0000
Manifest next update:     Mon 14 Apr 2025 07:01:08 +0000
Files and hashes:         1: 0FvyRdwuNrCgMP49Gm05_Jf24wo.roa (hash: VrNtxHJD5r4AAcIekiYzDFEjX0OLNvQVaPqP96ejauo=)
                          2: XJdcwddEgs-q78gmSagWMovn85I.roa (hash: Je76MM+YNyOi1CdfvkLH4QNZ11rGS/XGNeifQiQFCLA=)
                          3: eRE1hc1OAUXn9B2yIqa6q1KtEng.roa (hash: 2kkOJHVByX9Ad1TRTPwMrwhabgTLNmB9YR0YC04Cis4=)
                          4: s2DwCXvkgcIbsdUchdRPZXQViqk.crl (hash: Vy+vsdOWYSCplQPHI5OhVJHTn6GX8sWPnf0jRV7dugA=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2d:f3:b4:c0:72:34:15:8f:cb:15:93:f3:fb:fa:10:04
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b360f0097be481c21bb1d51c85d44f6574158aa9
        Validity
            Not Before: Apr 13 07:01:08 2025 GMT
            Not After : Apr 14 07:01:08 2025 GMT
        Subject: CN=4aec534b8d7bad1c67dcf10bfc593a43902ec170
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b1:79:59:9e:63:44:d6:b8:ba:d9:24:97:2a:c0:
                    84:b7:71:1c:82:44:c5:df:a6:9a:18:3d:bf:ec:fb:
                    0e:2b:1e:57:ab:8e:95:6c:31:37:83:26:f9:97:5b:
                    8b:f3:07:0d:6a:8f:dc:f7:6f:c8:3a:ea:de:de:26:
                    e0:ab:41:ca:8c:3d:1d:87:a5:43:04:a6:c2:1b:b8:
                    d9:d6:bb:7c:a8:b1:8b:03:e0:9f:aa:7d:77:2a:4f:
                    9b:43:4e:f8:33:a1:6c:af:a7:bc:00:ec:71:13:67:
                    de:a7:03:13:39:44:04:70:9f:0b:15:2a:ea:f6:ec:
                    c6:3b:74:98:db:d2:4c:19:cc:a5:02:38:e2:5c:90:
                    24:af:56:25:0d:d3:48:13:d6:4b:6d:7a:85:5d:b6:
                    c1:c1:8d:65:69:35:27:95:44:ac:fb:45:89:5c:11:
                    8e:21:7f:7f:95:b2:e9:f1:a6:7d:9d:e1:0f:af:4e:
                    d2:a3:2f:bc:5a:f0:2a:5a:67:b3:a6:50:f9:6c:07:
                    62:81:45:75:44:7b:f2:de:3c:3e:84:60:d3:0d:9c:
                    67:08:8f:bb:01:01:c9:16:10:55:59:6b:59:11:45:
                    af:ec:c3:32:6e:99:11:d6:82:35:4e:1f:ea:c1:23:
                    67:62:87:e9:bf:d5:a7:3c:bb:e3:74:85:23:b2:a7:
                    6e:dd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4A:EC:53:4B:8D:7B:AD:1C:67:DC:F1:0B:FC:59:3A:43:90:2E:C1:70
            X509v3 Authority Key Identifier:
                keyid:B3:60:F0:09:7B:E4:81:C2:1B:B1:D5:1C:85:D4:4F:65:74:15:8A:A9

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/s2DwCXvkgcIbsdUchdRPZXQViqk.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7b/4aa5a7-8bec-4247-a15f-5a3612352b37/1/s2DwCXvkgcIbsdUchdRPZXQViqk.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/7b/4aa5a7-8bec-4247-a15f-5a3612352b37/1/s2DwCXvkgcIbsdUchdRPZXQViqk.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         76:5f:7f:2e:2c:bd:aa:0f:4c:56:d0:66:52:f8:25:94:21:c9:
         8a:39:74:30:5e:20:fa:51:68:3b:ac:67:2d:c2:b8:39:98:e1:
         8e:e3:8d:0d:e7:69:2d:3d:07:26:2c:d7:47:03:d8:25:d9:bf:
         fa:49:cb:e9:7d:ed:f3:3f:b4:ad:8c:9e:fc:95:68:46:58:48:
         c5:b6:37:59:30:bb:12:7d:2c:0e:38:57:12:68:75:43:40:58:
         be:7a:fe:5b:ee:18:c6:f2:26:c9:05:1d:47:52:cb:f6:59:09:
         b3:9b:73:e6:a3:8e:73:23:98:35:e7:26:49:cc:eb:c5:28:87:
         b8:5d:dc:c3:34:6e:32:ad:4d:18:28:46:fa:f6:a9:44:87:67:
         4e:06:76:34:ea:fa:42:68:12:7f:0e:f4:b4:d7:c7:57:d5:d6:
         5c:61:9a:02:34:22:25:5d:1d:f6:c8:50:a0:23:5e:19:84:88:
         2b:43:9a:6b:c2:d1:7d:aa:1b:26:5f:bf:a2:97:77:3a:38:7b:
         b7:e0:ec:21:45:8b:9c:1f:11:06:3b:01:33:47:26:ab:d8:8d:
         41:8c:5f:8f:ab:74:ad:e1:1e:16:38:12:46:02:58:61:d1:ad:
         8a:a4:fc:c9:a1:21:50:9b:d8:13:77:19:12:d3:80:17:fb:da:
         d8:79:51:11
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----