Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8b/c49d19-8c79-4f77-b450-c08cf197a10c/1/cpNPw8ra3m8HkHrrbgvlqexEB7k.mft
File:                     cpNPw8ra3m8HkHrrbgvlqexEB7k.mft (raw, json)
Hash identifier:          AMn29nDMm8jKCBXIxoInJTGaECc80YqrtL1WUJm0PXw=
Subject key identifier:   7A:0C:D7:9C:7C:BD:19:E0:43:66:7F:C2:DC:BA:D7:4B:0E:DB:F1:39
Authority key identifier: 72:93:4F:C3:CA:DA:DE:6F:07:90:7A:EB:6E:0B:E5:A9:EC:44:07:B9
Certificate issuer:       /CN=72934fc3cadade6f07907aeb6e0be5a9ec4407b9
Certificate serial:       01962FAB1790471D3580BCAC77D3F9E206B5
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/cpNPw8ra3m8HkHrrbgvlqexEB7k.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/8b/c49d19-8c79-4f77-b450-c08cf197a10c/1/cpNPw8ra3m8HkHrrbgvlqexEB7k.mft
Manifest number:          8A
Signing time:             Sun 13 Apr 2025 15:01:03 +0000
Manifest this update:     Sun 13 Apr 2025 15:01:03 +0000
Manifest next update:     Mon 14 Apr 2025 15:01:03 +0000
Files and hashes:         1: 5gtuF__7I-RTiMG2ukg-OsX2MbQ.roa (hash: Ba0mjq3pimajTCvvrrrZyoHBHvgCNhQury7Kq+n9Wpw=)
                          2: cpNPw8ra3m8HkHrrbgvlqexEB7k.crl (hash: 3J6ArdkRSoSik11ymrV5TIdIUOcESIIZz0Vk3LQtJoU=)
                          3: ejCYeubtEX2rMSmkNAwpyfa0Enw.roa (hash: 4hn9ccLxIO+b+OCd227Erjt+kM9+/9+bRDsSA2RYfoU=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2f:ab:17:90:47:1d:35:80:bc:ac:77:d3:f9:e2:06:b5
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=72934fc3cadade6f07907aeb6e0be5a9ec4407b9
        Validity
            Not Before: Apr 13 15:01:03 2025 GMT
            Not After : Apr 14 15:01:03 2025 GMT
        Subject: CN=7a0cd79c7cbd19e043667fc2dcbad74b0edbf139
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cb:e2:28:c9:6c:ef:2c:36:5c:d5:1f:e7:cf:40:
                    d9:1e:7f:16:35:c7:84:af:0a:0f:61:ea:0b:b8:37:
                    b0:31:00:e4:d4:13:d5:75:68:5f:34:96:36:b3:60:
                    dc:53:b1:5a:7a:3f:00:40:1d:a0:6a:9f:a8:08:00:
                    10:a9:c3:80:d1:9b:80:ed:ff:57:bb:70:dd:6b:47:
                    d4:fa:60:d9:da:b7:f4:4f:0a:91:d5:de:fa:39:84:
                    6a:43:8c:ac:90:f1:c2:6e:45:f7:c4:d4:f7:c7:14:
                    d4:3e:78:5f:96:b0:59:0b:12:e9:2c:7b:ee:a4:80:
                    12:bc:0c:63:5d:70:39:26:21:96:bb:12:63:79:88:
                    5e:7d:a6:f3:88:5e:eb:b1:3a:f1:df:a8:3b:21:49:
                    08:35:75:5f:4c:49:85:a0:39:d1:c5:ea:c7:13:ed:
                    e6:60:68:b4:9e:e6:a3:b7:c0:c8:32:f1:79:21:3d:
                    45:2c:26:39:a0:e1:bd:e7:da:4f:c0:f2:9f:44:c5:
                    60:4a:51:df:5b:e1:d1:3b:29:bf:d3:79:72:1d:55:
                    8a:dd:c8:db:2a:49:dc:51:a0:2d:a5:66:5b:0a:24:
                    5d:dc:8a:58:d7:fa:bd:7d:f5:b2:3c:7f:91:7c:a1:
                    a8:83:8c:df:98:bd:56:8a:6f:15:a8:a4:cb:9d:11:
                    a9:fb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7A:0C:D7:9C:7C:BD:19:E0:43:66:7F:C2:DC:BA:D7:4B:0E:DB:F1:39
            X509v3 Authority Key Identifier:
                keyid:72:93:4F:C3:CA:DA:DE:6F:07:90:7A:EB:6E:0B:E5:A9:EC:44:07:B9

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cpNPw8ra3m8HkHrrbgvlqexEB7k.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8b/c49d19-8c79-4f77-b450-c08cf197a10c/1/cpNPw8ra3m8HkHrrbgvlqexEB7k.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/8b/c49d19-8c79-4f77-b450-c08cf197a10c/1/cpNPw8ra3m8HkHrrbgvlqexEB7k.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         26:4d:45:82:4f:1b:57:e5:b8:d6:ae:9f:6d:97:06:7f:1e:4b:
         ad:cb:6e:e2:6b:f3:9a:ae:88:21:39:61:66:07:9b:41:9c:34:
         07:e5:5b:4d:83:9e:27:44:4a:9c:ab:aa:b6:fd:cd:04:a9:20:
         0c:50:42:d8:76:aa:6b:8e:c0:e1:a5:25:13:19:15:d3:29:c6:
         f5:35:b7:41:42:c8:14:dd:ca:2c:91:ce:17:84:24:3e:dd:1a:
         48:5c:a7:3a:b8:4b:55:bf:21:f4:ad:04:ec:05:b4:1f:55:3b:
         9b:63:23:11:70:85:0a:b5:cc:54:a3:5a:36:f2:35:8e:3c:65:
         8b:e8:5f:2c:9d:f7:c7:ae:7e:86:6e:16:75:2d:71:8b:f7:72:
         3a:6c:a4:ab:37:1a:ab:7a:a8:a0:4a:2e:db:07:75:73:c4:44:
         97:86:1e:5a:dd:ec:10:cd:d5:24:82:ac:d0:d0:60:7a:e7:b4:
         d6:e5:3a:8b:0e:fc:6b:16:58:e1:7a:db:20:4c:93:da:bf:67:
         eb:5c:8f:91:ab:b8:9b:19:d0:cf:b6:95:f2:44:90:6f:b7:3b:
         9b:eb:a8:2c:12:04:51:7e:bd:d4:a0:3c:67:40:70:74:b9:80:
         05:80:07:75:af:3e:3e:d3:db:af:94:a6:1b:f2:45:27:86:48:
         76:44:96:98
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----