Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/83/66bd3a-5121-490d-8c92-6ea94a961d4c/1/T02gn7vpD7efDwiyB_g18PDaKf4.mft
File:                     T02gn7vpD7efDwiyB_g18PDaKf4.mft (raw, json)
Hash identifier:          xDqQw+K5xqDqUKs80zHAHaH+WLVRlK+6ObN7DO3Q8rA=
Subject key identifier:   1B:6C:AF:3B:B4:03:B4:60:26:54:CB:9E:7D:79:6F:7F:EB:F8:77:3E
Authority key identifier: 4F:4D:A0:9F:BB:E9:0F:B7:9F:0F:08:B2:07:F8:35:F0:F0:DA:29:FE
Certificate issuer:       /CN=4f4da09fbbe90fb79f0f08b207f835f0f0da29fe
Certificate serial:       01962ECFB7EC4E83383E7D2160B0373B940C
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/T02gn7vpD7efDwiyB_g18PDaKf4.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/83/66bd3a-5121-490d-8c92-6ea94a961d4c/1/T02gn7vpD7efDwiyB_g18PDaKf4.mft
Manifest number:          14EC
Signing time:             Sun 13 Apr 2025 11:01:27 +0000
Manifest this update:     Sun 13 Apr 2025 11:01:27 +0000
Manifest next update:     Mon 14 Apr 2025 11:01:27 +0000
Files and hashes:         1: FuAE5x8IJALIfmhZTsiAE9-IbCg.roa (hash: MfUFICZEyn8ysR/zcHy2Sq4j5nmV7SDJce70wP8HCVI=)
                          2: T02gn7vpD7efDwiyB_g18PDaKf4.crl (hash: jft25oeA3WtqOBnsCMdlGQI5uBRB7zkGzuQgpqvnumc=)
                          3: gdPSlZVyk0yt_ww6hr6rZwJTSYc.roa (hash: BWCu7uf0+bhsgilLRDC1frTnR4k0Kb5AA6w389paaDU=)
                          4: oFSSiFC3Vzphxz9KorzB0pMi8q0.roa (hash: TQSnPR7Rlvrd62e7kQsHyRbc3iccQgnfslp/ytEFEMY=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2e:cf:b7:ec:4e:83:38:3e:7d:21:60:b0:37:3b:94:0c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4f4da09fbbe90fb79f0f08b207f835f0f0da29fe
        Validity
            Not Before: Apr 13 11:01:27 2025 GMT
            Not After : Apr 14 11:01:27 2025 GMT
        Subject: CN=1b6caf3bb403b4602654cb9e7d796f7febf8773e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:af:ec:bc:66:40:da:9e:14:c6:27:c3:38:31:3f:
                    fb:07:65:d3:23:89:ed:97:c1:d9:95:4a:d1:8f:09:
                    5f:0e:80:fc:ae:3b:87:4b:75:2f:74:96:73:d0:01:
                    91:9a:d5:fc:20:bb:14:cc:6c:fe:95:5a:77:63:91:
                    9a:43:42:a4:24:9f:fc:d7:c7:f5:0d:b3:e3:89:9c:
                    30:8e:fe:99:34:57:86:95:8a:91:5f:24:7c:94:25:
                    fd:f9:a4:06:27:b4:07:13:08:9b:db:38:c0:5d:62:
                    01:74:9a:83:0c:73:e6:07:cb:b8:bc:d3:3c:2f:29:
                    94:34:8d:db:e4:c4:d7:46:7b:15:cf:c0:d3:07:a7:
                    56:2c:d4:94:6b:bd:ce:c1:8c:f5:07:fd:3d:39:57:
                    1d:c3:e2:c4:ca:9f:87:50:99:b7:8f:04:0d:ec:5d:
                    4f:80:9b:b7:e2:ea:04:fd:b2:c6:f4:c4:82:6e:ab:
                    29:35:50:fc:7d:de:ef:f2:58:3b:57:a2:cb:44:a0:
                    a3:b7:07:85:a6:32:38:12:11:ea:23:74:13:77:87:
                    05:8d:d4:05:3f:c2:12:5c:a0:16:eb:2e:05:6e:54:
                    9e:bc:72:13:98:d1:2e:e4:16:c7:ee:8a:4e:30:17:
                    c1:31:d5:4d:50:ff:f4:e4:fd:54:0d:57:3e:fd:04:
                    d1:0b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1B:6C:AF:3B:B4:03:B4:60:26:54:CB:9E:7D:79:6F:7F:EB:F8:77:3E
            X509v3 Authority Key Identifier:
                keyid:4F:4D:A0:9F:BB:E9:0F:B7:9F:0F:08:B2:07:F8:35:F0:F0:DA:29:FE

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/T02gn7vpD7efDwiyB_g18PDaKf4.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/83/66bd3a-5121-490d-8c92-6ea94a961d4c/1/T02gn7vpD7efDwiyB_g18PDaKf4.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/83/66bd3a-5121-490d-8c92-6ea94a961d4c/1/T02gn7vpD7efDwiyB_g18PDaKf4.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         27:57:a6:62:ca:b1:18:ce:e9:05:18:54:b2:75:98:a8:67:0c:
         a7:3c:ac:87:dd:76:0c:6d:6a:0e:04:07:d6:a2:54:ef:4b:9e:
         de:39:ed:4d:98:d2:5f:84:87:d8:7d:92:49:19:f6:a8:28:4a:
         3f:77:0b:98:e0:88:84:84:87:6f:75:da:23:c9:62:c7:dc:a3:
         cf:60:0c:22:80:44:0f:d1:48:f9:a3:bd:ad:cc:57:f7:b6:7a:
         1f:0a:d9:c9:1c:9f:6b:16:47:fa:0e:9e:e6:d7:14:72:bc:7c:
         15:fa:4d:b2:60:73:df:45:d1:c4:4e:52:e3:5b:39:af:c2:7f:
         67:f7:39:8b:fe:3d:79:e7:46:45:4d:8f:03:ca:71:61:e4:17:
         f8:d0:30:04:e7:78:b2:46:ba:28:70:05:73:de:87:43:6e:85:
         e2:3a:a6:43:df:e0:d2:de:67:01:10:7f:ea:ac:2c:86:11:cb:
         38:47:9e:e3:44:e6:bd:78:f1:53:a3:67:19:b4:8b:f6:6a:e5:
         04:8f:b8:90:e1:42:8b:2d:21:fd:4e:83:26:7e:ca:de:08:81:
         53:7c:a9:ae:2d:0c:d4:5f:d9:28:0d:08:75:cd:20:f4:af:a8:
         9e:5d:f1:92:0e:68:31:b3:f7:8e:af:93:a3:31:dd:5d:59:be:
         d8:43:b8:fd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----