Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8b/0f19e9-1b2b-4812-ab5a-fdf84f83a274/1/M5VDMDSfV1Aqdq5umZh-_D47gQk.mft
File:                     M5VDMDSfV1Aqdq5umZh-_D47gQk.mft (raw, json)
Hash identifier:          wftWnxVQ/NphTM0xbzq2iRNT9yjUSLwMJXG/mCXwWHA=
Subject key identifier:   06:B7:37:1A:C7:5F:EB:D5:02:C9:CF:49:AD:CA:C8:76:BB:59:A2:26
Authority key identifier: 33:95:43:30:34:9F:57:50:2A:76:AE:6E:99:98:7E:FC:3E:3B:81:09
Certificate issuer:       /CN=33954330349f57502a76ae6e99987efc3e3b8109
Certificate serial:       01962F3D9D37BA4FC4AA2C00EC79570E9A51
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/M5VDMDSfV1Aqdq5umZh-_D47gQk.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/8b/0f19e9-1b2b-4812-ab5a-fdf84f83a274/1/M5VDMDSfV1Aqdq5umZh-_D47gQk.mft
Manifest number:          14F2
Signing time:             Sun 13 Apr 2025 13:01:29 +0000
Manifest this update:     Sun 13 Apr 2025 13:01:29 +0000
Manifest next update:     Mon 14 Apr 2025 13:01:29 +0000
Files and hashes:         1: M5VDMDSfV1Aqdq5umZh-_D47gQk.crl (hash: Eidz84yDaIYBHnGUVKzuYjAGrxDzqPF1B4Ge1F79IPY=)
                          2: dZXpVyrQ8VbKvAp5COr0Cumw1Ew.roa (hash: tReFkDEyNqbnnxeZucnGGCRzuWm3mLRotTGRZWTwBCk=)
                          3: lq6yBpxyj8mQu1pcN8Yet01eUsA.roa (hash: jOVFBLabQ2MHZZoWNADP7Z+CInLcq/pubwpgW9d7+lE=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2f:3d:9d:37:ba:4f:c4:aa:2c:00:ec:79:57:0e:9a:51
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=33954330349f57502a76ae6e99987efc3e3b8109
        Validity
            Not Before: Apr 13 13:01:29 2025 GMT
            Not After : Apr 14 13:01:29 2025 GMT
        Subject: CN=06b7371ac75febd502c9cf49adcac876bb59a226
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e3:90:3d:7f:4f:3b:94:db:5c:b4:77:c7:23:b8:
                    eb:bb:df:f1:e0:ee:95:f5:38:21:8f:63:ae:5f:4a:
                    e2:58:ec:82:57:d9:bf:4d:ba:ce:90:82:09:ec:94:
                    39:bb:8b:0e:19:26:b6:e8:2a:97:92:d9:fb:4f:45:
                    b8:8e:c3:b3:de:9c:98:2f:bf:b5:0e:50:85:7b:2c:
                    45:71:06:22:d1:8b:da:00:3b:b6:f8:04:1b:fc:fd:
                    78:77:f5:13:10:5a:4c:1e:31:36:d6:47:27:db:c2:
                    ae:ae:6d:63:55:9b:4f:82:75:b5:ee:36:82:22:f2:
                    ef:7b:a8:49:27:de:b2:72:23:07:ef:bf:ff:11:37:
                    f2:21:31:35:6e:22:2e:9d:41:44:8f:e2:df:c2:e9:
                    f2:8e:23:be:8e:aa:d3:c9:eb:79:fb:2f:4a:5b:24:
                    e0:86:a3:51:92:47:40:19:96:81:6a:13:1a:09:f3:
                    53:e9:9d:72:0b:ce:17:b6:95:3a:f2:c0:2f:6b:a0:
                    67:67:51:40:b5:13:07:ea:7b:d7:b3:92:2e:a7:94:
                    9e:35:74:77:13:94:a4:44:a4:03:76:0a:5e:6a:4b:
                    2a:99:90:46:5b:c9:23:1f:b4:34:d3:50:ac:2c:9e:
                    b3:84:85:30:b1:55:54:de:81:0f:c3:07:da:57:e0:
                    bf:a1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                06:B7:37:1A:C7:5F:EB:D5:02:C9:CF:49:AD:CA:C8:76:BB:59:A2:26
            X509v3 Authority Key Identifier:
                keyid:33:95:43:30:34:9F:57:50:2A:76:AE:6E:99:98:7E:FC:3E:3B:81:09

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/M5VDMDSfV1Aqdq5umZh-_D47gQk.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8b/0f19e9-1b2b-4812-ab5a-fdf84f83a274/1/M5VDMDSfV1Aqdq5umZh-_D47gQk.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/8b/0f19e9-1b2b-4812-ab5a-fdf84f83a274/1/M5VDMDSfV1Aqdq5umZh-_D47gQk.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         18:70:53:33:ad:de:e5:b5:d4:c3:c2:d0:65:95:79:ec:f8:dd:
         65:24:e9:0c:38:f4:8a:76:99:20:f5:19:69:09:61:b4:e8:f9:
         e8:6b:cd:66:d7:4c:10:fa:26:ac:e6:e7:59:00:34:f2:08:2e:
         b1:22:d7:b5:c6:72:56:b2:4e:9c:f6:a1:32:d1:55:d9:81:3e:
         ce:10:99:b1:0f:36:90:95:b1:3d:6d:38:5e:80:54:f0:e1:f1:
         6e:ed:f4:75:16:f5:a9:3a:c3:a4:e3:ab:fb:0b:40:ff:07:32:
         d1:c6:74:f4:be:a3:ad:03:e5:e3:bd:63:13:70:71:27:10:17:
         e9:ed:fb:1e:5d:9f:34:0c:0d:39:9d:89:e0:1d:30:02:bd:23:
         1b:48:05:f5:23:7a:fc:c1:42:b2:26:bc:ca:87:9e:5f:52:e5:
         37:aa:fe:0d:05:47:b9:03:b6:04:49:a7:0b:33:bf:fd:7d:e2:
         58:cd:35:f3:19:1d:a3:1a:37:75:70:28:d0:4a:75:89:27:84:
         83:ec:d5:64:7a:4c:3d:99:df:0e:d4:27:0d:36:d8:da:c1:96:
         d0:85:81:6b:4c:e4:47:7a:e4:38:12:38:9b:14:d7:26:6f:88:
         0e:0d:2b:ad:79:2d:ea:bb:09:c6:93:5e:6b:97:43:95:eb:f0:
         21:35:2b:b2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----