Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/87/e06713-d6da-401c-bae5-65d33f1b58c8/1/m5MZAlcz2oftj8ogMuP4pmBJWnE.mft
File:                     m5MZAlcz2oftj8ogMuP4pmBJWnE.mft (raw, json)
Hash identifier:          zjeBYRLuhW7NT/YsBvRZkFTmzMIezaVwYLxOvScIqgQ=
Subject key identifier:   A8:08:38:3D:4C:71:03:C2:1C:CA:4F:E2:5E:21:F2:B4:DE:4A:83:46
Authority key identifier: 9B:93:19:02:57:33:DA:87:ED:8F:CA:20:32:E3:F8:A6:60:49:5A:71
Certificate issuer:       /CN=9b9319025733da87ed8fca2032e3f8a660495a71
Certificate serial:       01962ECF8B2191A11567EB2B5C0FD88E9E58
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/m5MZAlcz2oftj8ogMuP4pmBJWnE.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/87/e06713-d6da-401c-bae5-65d33f1b58c8/1/m5MZAlcz2oftj8ogMuP4pmBJWnE.mft
Manifest number:          1336
Signing time:             Sun 13 Apr 2025 11:01:15 +0000
Manifest this update:     Sun 13 Apr 2025 11:01:15 +0000
Manifest next update:     Mon 14 Apr 2025 11:01:15 +0000
Files and hashes:         1: m5MZAlcz2oftj8ogMuP4pmBJWnE.crl (hash: +S7hqW6of3hgbjk2DB9w7cWevPiezBsvbPovZ2kTDxI=)
                          2: ngQh5dUp9npBOACQWIONz3R5Xk4.roa (hash: t653pV8nTjyLsaWC3Zk3Ik5pVuX0VX8PrLjKO3PU3B4=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2e:cf:8b:21:91:a1:15:67:eb:2b:5c:0f:d8:8e:9e:58
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9b9319025733da87ed8fca2032e3f8a660495a71
        Validity
            Not Before: Apr 13 11:01:15 2025 GMT
            Not After : Apr 14 11:01:15 2025 GMT
        Subject: CN=a808383d4c7103c21cca4fe25e21f2b4de4a8346
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ac:64:84:f1:1d:86:6c:31:f1:92:4a:45:cb:82:
                    af:03:4e:59:78:cf:5e:7f:80:f7:44:93:7c:c4:99:
                    55:4a:6e:9d:3b:7c:c9:7d:3d:59:14:ac:5d:7d:88:
                    04:27:66:14:4c:61:42:c4:77:67:5b:70:88:83:27:
                    f0:00:34:de:82:21:3e:e1:1e:69:5f:ba:04:61:0e:
                    f9:75:cf:a4:e4:67:e5:22:c5:a7:ff:b5:e8:3f:15:
                    e2:cd:94:32:40:8b:9f:c3:fb:85:31:d9:1c:0f:20:
                    65:d7:82:cd:29:89:22:be:d9:35:fa:d1:f4:0e:8f:
                    96:2f:c3:a1:18:2c:c8:26:66:08:7c:40:10:74:3b:
                    3f:86:ba:49:fb:3a:ad:47:92:84:0f:a4:2a:4d:4d:
                    89:73:ab:a8:3c:2e:0c:ea:32:db:6a:b6:cd:c0:1b:
                    8f:a3:b9:b8:a6:42:05:1d:c6:f5:a3:26:fb:66:1a:
                    04:60:84:bf:da:99:4e:79:38:75:72:c4:b4:e3:65:
                    91:fb:41:76:63:e8:e8:67:bf:53:c5:33:6a:26:43:
                    46:f4:6e:e0:ef:8e:aa:44:b8:dc:72:b5:16:8c:69:
                    75:23:eb:f4:85:c0:8e:ed:65:b4:e3:bc:9a:2f:a4:
                    ce:8b:48:e3:ad:b6:fe:dd:12:6b:99:91:bf:60:fc:
                    ab:09
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A8:08:38:3D:4C:71:03:C2:1C:CA:4F:E2:5E:21:F2:B4:DE:4A:83:46
            X509v3 Authority Key Identifier:
                keyid:9B:93:19:02:57:33:DA:87:ED:8F:CA:20:32:E3:F8:A6:60:49:5A:71

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/m5MZAlcz2oftj8ogMuP4pmBJWnE.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/87/e06713-d6da-401c-bae5-65d33f1b58c8/1/m5MZAlcz2oftj8ogMuP4pmBJWnE.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/87/e06713-d6da-401c-bae5-65d33f1b58c8/1/m5MZAlcz2oftj8ogMuP4pmBJWnE.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         16:73:e8:35:d1:9a:be:aa:6b:e3:ed:0d:bd:9b:c0:b1:a6:6e:
         e9:d8:5f:27:09:fa:90:90:45:d9:66:03:07:38:de:89:87:f2:
         25:d5:22:cc:d6:11:b8:83:67:78:52:70:b1:1b:8a:36:1d:8b:
         3c:21:d1:80:e7:3d:b4:ed:75:f7:70:4f:0d:04:79:a1:9b:d5:
         0c:60:ee:ef:c0:27:ce:55:f2:20:23:a6:31:99:7f:5d:aa:2a:
         b3:73:51:b9:e7:4a:cc:e5:c8:c3:38:33:65:2a:09:8b:db:cc:
         ca:60:10:99:2f:7c:24:ab:65:07:ed:90:89:a4:56:db:38:cf:
         da:0a:19:be:b3:cf:b8:bd:09:df:b6:b8:02:ce:ff:ce:78:48:
         73:9f:a4:2c:75:19:3d:10:04:c4:b3:d8:53:62:42:1f:bb:3e:
         1a:29:3c:05:c0:b9:e4:25:b3:21:f2:65:51:81:61:3b:7d:aa:
         a0:74:b8:e0:a5:20:a4:36:a4:38:93:fc:a3:4d:3c:1f:36:7d:
         b9:ba:13:75:03:2e:2c:15:66:cd:8c:89:c9:5c:c5:f8:fa:1f:
         fc:ed:48:3b:49:1f:16:dc:e0:82:07:5e:c4:2d:2a:a4:0b:bd:
         73:ac:82:e9:12:31:78:ae:1b:1a:9f:fa:6c:0a:ec:0f:5e:f0:
         04:04:05:e6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----