Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/88/84d026-17e4-4787-a439-473d74a5e20f/1/roP3h5wsdKEWUrXgivZKrJCACwQ.mft
File:                     roP3h5wsdKEWUrXgivZKrJCACwQ.mft (raw, json)
Hash identifier:          T/z+66eUMx1/O1lWTrCRJjX8Gue/UpEYxM1V9ET+Sd4=
Subject key identifier:   99:9A:45:3C:FB:46:CD:42:1F:14:16:6B:DB:5E:B7:9E:C2:EB:A2:CD
Authority key identifier: AE:83:F7:87:9C:2C:74:A1:16:52:B5:E0:8A:F6:4A:AC:90:80:0B:04
Certificate issuer:       /CN=ae83f7879c2c74a11652b5e08af64aac90800b04
Certificate serial:       01962F06B87BAB4A6AC7C059DB81F883B68F
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/roP3h5wsdKEWUrXgivZKrJCACwQ.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/88/84d026-17e4-4787-a439-473d74a5e20f/1/roP3h5wsdKEWUrXgivZKrJCACwQ.mft
Manifest number:          14EB
Signing time:             Sun 13 Apr 2025 12:01:31 +0000
Manifest this update:     Sun 13 Apr 2025 12:01:31 +0000
Manifest next update:     Mon 14 Apr 2025 12:01:31 +0000
Files and hashes:         1: MybCmB4b1BFDPTACJ5YE-7C3a3E.roa (hash: wDv5owiZFkNYSTe+2a532nAjJGNE7mvoA0ctW2ktRc0=)
                          2: roP3h5wsdKEWUrXgivZKrJCACwQ.crl (hash: O+CC1lS5SYoCfhujR5nFU8EzCh31ek48THghuE4iRkM=)
                          3: s4BqNapwmXilT71OYAf_1FRui4w.roa (hash: kbEYYaNpnssAu6Bf0kAHSemqVpHFQtEnzKXJ44cMHxw=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2f:06:b8:7b:ab:4a:6a:c7:c0:59:db:81:f8:83:b6:8f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=ae83f7879c2c74a11652b5e08af64aac90800b04
        Validity
            Not Before: Apr 13 12:01:31 2025 GMT
            Not After : Apr 14 12:01:31 2025 GMT
        Subject: CN=999a453cfb46cd421f14166bdb5eb79ec2eba2cd
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b0:52:29:d8:37:73:07:b0:77:70:8d:cc:ad:95:
                    3f:3c:6e:06:81:94:88:86:df:3f:e4:92:8f:68:8f:
                    72:5e:25:9f:84:c6:f1:05:71:28:a2:4f:44:12:04:
                    bf:ac:ab:49:ca:33:2c:38:7f:dd:66:62:ef:d2:9f:
                    11:a1:c3:3f:30:39:db:eb:a9:7d:ed:cf:3c:a8:f9:
                    e8:f1:89:0e:54:04:a3:4a:bb:78:86:38:81:e4:67:
                    24:d4:0c:25:52:05:b0:1f:a9:11:2b:73:15:31:77:
                    7d:0a:85:b6:85:27:7e:46:bb:09:7f:fc:62:be:57:
                    8e:46:8e:54:af:a5:93:9b:5c:07:f0:2c:01:88:04:
                    44:34:3b:df:50:36:19:e6:c1:19:4e:e7:dd:e6:2b:
                    79:ac:65:69:ef:2a:d3:b8:29:0a:ea:8a:03:20:e1:
                    96:b7:c0:62:a7:02:30:1c:5e:cf:74:c2:3f:72:ce:
                    57:f7:fe:40:85:56:12:51:a2:ea:5c:b6:8b:8e:7e:
                    05:10:d8:28:04:80:43:c0:4f:9c:cc:e5:28:29:81:
                    39:cf:9b:08:96:39:21:95:bf:ab:d0:52:7d:ad:55:
                    81:3a:af:ea:73:fc:c4:09:e6:f3:58:ee:d0:13:6f:
                    f8:84:25:6e:38:d1:0c:01:20:35:c7:8e:09:5f:5a:
                    7c:37
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                99:9A:45:3C:FB:46:CD:42:1F:14:16:6B:DB:5E:B7:9E:C2:EB:A2:CD
            X509v3 Authority Key Identifier:
                keyid:AE:83:F7:87:9C:2C:74:A1:16:52:B5:E0:8A:F6:4A:AC:90:80:0B:04

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/roP3h5wsdKEWUrXgivZKrJCACwQ.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/88/84d026-17e4-4787-a439-473d74a5e20f/1/roP3h5wsdKEWUrXgivZKrJCACwQ.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/88/84d026-17e4-4787-a439-473d74a5e20f/1/roP3h5wsdKEWUrXgivZKrJCACwQ.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         71:83:c1:94:b9:51:c5:9b:58:1f:de:7c:8f:83:10:29:ab:16:
         31:43:c9:85:2b:a7:b9:2a:6d:37:31:d2:bc:81:33:5e:a7:83:
         63:61:f5:73:12:b9:21:b7:69:b4:91:61:cf:dc:8a:20:25:67:
         d5:aa:15:43:29:71:ee:f7:8f:73:9c:54:41:c0:0d:e8:8e:b7:
         fa:d2:39:c4:aa:7f:85:a8:e7:ce:45:0c:b6:e7:76:d4:bb:a1:
         1e:63:d1:98:83:4d:7d:c2:5f:4b:4f:73:64:52:83:54:65:fa:
         db:8f:64:eb:df:78:04:5b:8b:a1:50:aa:5a:39:4c:56:93:bf:
         75:21:d8:a6:99:51:a8:04:d4:ad:28:51:ec:26:ca:54:dd:95:
         27:ae:93:af:ca:9f:d4:08:fc:b3:bd:44:15:81:32:41:a8:60:
         d9:27:8b:3b:b8:30:9a:98:c8:32:6f:01:00:4b:98:3d:9b:28:
         64:53:a0:5f:f7:8f:64:c3:30:e5:4a:43:3b:ce:38:9b:59:d6:
         b5:31:4c:4e:69:ef:56:2e:72:9b:e6:d7:08:90:39:79:c8:1f:
         37:d4:49:75:84:77:4f:34:2a:66:72:a7:94:21:22:9f:78:0e:
         47:92:51:c2:42:58:cf:7a:91:20:af:43:4c:3c:5d:35:b8:7e:
         da:fe:96:6a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----