Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/81/3ae379-79e1-46ab-b04d-0f0fa6b6e4bd/1/8cSYM_Q5ueBnfY078fUt-_ssYk8.mft
File:                     8cSYM_Q5ueBnfY078fUt-_ssYk8.mft (raw, json)
Hash identifier:          t0ywE+bST9oQQ3UsDAecpZjoGKFe4lFbFw8oPwn69SY=
Subject key identifier:   B4:A0:DA:8E:0C:8F:CC:B5:FB:5D:3D:B7:1D:99:8E:32:7A:4A:A6:6A
Authority key identifier: F1:C4:98:33:F4:39:B9:E0:67:7D:8D:3B:F1:F5:2D:FB:FB:2C:62:4F
Certificate issuer:       /CN=f1c49833f439b9e0677d8d3bf1f52dfbfb2c624f
Certificate serial:       01962FAB7FE2BF03E4B00AEA5C2559B41EEF
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/8cSYM_Q5ueBnfY078fUt-_ssYk8.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/81/3ae379-79e1-46ab-b04d-0f0fa6b6e4bd/1/8cSYM_Q5ueBnfY078fUt-_ssYk8.mft
Manifest number:          08D4
Signing time:             Sun 13 Apr 2025 15:01:30 +0000
Manifest this update:     Sun 13 Apr 2025 15:01:30 +0000
Manifest next update:     Mon 14 Apr 2025 15:01:30 +0000
Files and hashes:         1: 3ZpH3IW99tcCAzGjbjQTTiu70Eg.roa (hash: DLWTw4UKdSLOETh6kocBhjPqoC9NP+EApW6Oj+8OWfw=)
                          2: 8cSYM_Q5ueBnfY078fUt-_ssYk8.crl (hash: 8dxsdnffQ9+Sdm5sRQ9IMk/08q2OvrdCUyt3y2yTCy0=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2f:ab:7f:e2:bf:03:e4:b0:0a:ea:5c:25:59:b4:1e:ef
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=f1c49833f439b9e0677d8d3bf1f52dfbfb2c624f
        Validity
            Not Before: Apr 13 15:01:30 2025 GMT
            Not After : Apr 14 15:01:30 2025 GMT
        Subject: CN=b4a0da8e0c8fccb5fb5d3db71d998e327a4aa66a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d2:57:78:77:a9:69:cd:ee:58:a2:f8:6f:43:2c:
                    de:10:18:cd:f1:32:1a:79:2b:d0:08:d3:31:13:2e:
                    76:cd:b1:60:76:97:01:96:e9:8f:bf:e0:d4:85:53:
                    b6:90:1b:8a:0a:d1:95:08:89:49:1d:a9:08:4d:dd:
                    be:85:e0:f4:5b:53:87:61:6b:c8:90:18:f9:bf:74:
                    fa:fd:12:7e:1d:9e:ae:8c:80:6d:f1:b7:be:d0:23:
                    16:da:a3:8b:b7:bb:fb:48:5a:c1:0f:ae:6d:f9:36:
                    64:27:c0:90:ed:46:26:5f:dd:35:e1:61:13:31:01:
                    49:67:61:2f:2e:7a:75:e4:43:5b:53:8d:c4:ea:71:
                    ee:4e:79:e1:00:dc:e4:94:47:19:82:69:d0:31:7c:
                    75:91:8b:cc:3e:32:19:8c:5d:02:87:51:3d:50:01:
                    60:f9:65:22:65:cd:b3:0f:2f:6d:6a:c4:c2:3e:0c:
                    a2:34:4c:5a:72:fa:1b:49:c9:59:7d:af:69:d4:46:
                    e5:90:e5:23:f7:9a:c8:2d:30:c9:46:5d:8c:60:f2:
                    f1:dd:af:84:ab:6d:80:21:b7:98:9e:6c:98:a5:54:
                    87:9e:46:43:27:3d:aa:28:e9:16:05:da:4b:10:cf:
                    94:54:30:a7:9b:3a:a5:c0:e8:63:1b:10:f0:3b:ca:
                    9d:79
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B4:A0:DA:8E:0C:8F:CC:B5:FB:5D:3D:B7:1D:99:8E:32:7A:4A:A6:6A
            X509v3 Authority Key Identifier:
                keyid:F1:C4:98:33:F4:39:B9:E0:67:7D:8D:3B:F1:F5:2D:FB:FB:2C:62:4F

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/8cSYM_Q5ueBnfY078fUt-_ssYk8.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/81/3ae379-79e1-46ab-b04d-0f0fa6b6e4bd/1/8cSYM_Q5ueBnfY078fUt-_ssYk8.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/81/3ae379-79e1-46ab-b04d-0f0fa6b6e4bd/1/8cSYM_Q5ueBnfY078fUt-_ssYk8.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         59:81:c1:40:21:27:4b:22:b9:4b:f8:9e:c1:d0:1c:9c:d9:f1:
         d6:79:ab:22:7c:00:ad:16:0a:ef:c1:e4:97:e2:c2:01:64:14:
         c3:db:fa:73:07:b5:64:38:22:4f:fc:44:d0:bf:65:93:08:a7:
         cc:23:11:0f:44:43:14:c7:fd:eb:77:7b:3f:dc:36:8c:73:40:
         22:12:47:c0:92:18:bc:50:8f:07:7d:01:b7:4f:4e:e5:76:19:
         d0:00:0d:8c:38:6d:22:22:dc:35:4d:a0:f0:31:05:6e:2d:b8:
         a3:02:0f:dd:1d:21:2a:ad:c3:0b:a5:d6:d4:ad:09:9b:7a:7b:
         87:83:9c:c7:62:6b:b4:a6:f2:8c:2a:05:b8:00:88:46:5b:bc:
         fe:5c:cc:d9:9a:3e:c6:6c:98:8f:41:72:c8:81:ae:48:ab:85:
         8e:43:5e:3e:10:ee:a7:9f:b9:d0:6c:3a:c8:72:5d:37:f4:5b:
         51:cb:57:46:6e:3f:fb:f2:77:9f:2e:0f:c1:35:84:03:d6:50:
         60:f9:6b:18:33:bb:4a:63:86:e9:b4:da:79:bf:9e:16:1a:ed:
         92:5b:1b:b9:ec:fe:38:77:26:aa:47:34:8a:f5:92:ac:fd:af:
         17:20:82:ac:fb:55:50:ef:d3:47:75:90:1e:97:45:c7:57:a0:
         cb:a8:2f:0c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----