Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8e/1f5e07-32b6-4114-8b0d-d3b58f698148/1/rPkQ82KRw8Ik3bWW2VZUMZfxY94.mft
File:                     rPkQ82KRw8Ik3bWW2VZUMZfxY94.mft (raw, json)
Hash identifier:          kQFW9HvI5+9/zcBSAFK8c8IM7OFumDI3ja4x+Rf9kDs=
Subject key identifier:   6A:18:08:44:5D:FF:87:DF:77:DB:37:DC:46:20:D1:F4:FA:74:E0:1B
Authority key identifier: AC:F9:10:F3:62:91:C3:C2:24:DD:B5:96:D9:56:54:31:97:F1:63:DE
Certificate issuer:       /CN=acf910f36291c3c224ddb596d956543197f163de
Certificate serial:       01962E98633EFE399C924633DA2A5FF4C838
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/rPkQ82KRw8Ik3bWW2VZUMZfxY94.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/8e/1f5e07-32b6-4114-8b0d-d3b58f698148/1/rPkQ82KRw8Ik3bWW2VZUMZfxY94.mft
Manifest number:          14AB
Signing time:             Sun 13 Apr 2025 10:01:00 +0000
Manifest this update:     Sun 13 Apr 2025 10:01:00 +0000
Manifest next update:     Mon 14 Apr 2025 10:01:00 +0000
Files and hashes:         1: 8eCmueBEOSsAwO1CHji1gE-_3LI.roa (hash: l5xAz+doohGBqrtfOFmej8JqC0mnQVYKQDeIBm1ToAM=)
                          2: DtvFUItZKqyAuC0qVO7xK12HQO0.roa (hash: z+RXHMTUA/r+jPrvwbj//4T8rVTRPjeJiPQfneeOdNs=)
                          3: J5Nzje0wm67y5K6t3cH8za4h1d0.roa (hash: qpAZrfLDKqU9NwWz286x02NAvGgP6kk6hcqmLvVKz8c=)
                          4: klr8zXHLn6mli5IxFQr4R9FyMV0.roa (hash: I+JofOB+oo9ML4ISV8ODtPvO84Ef+x27qR0wwlNvvJ8=)
                          5: q0Eds_oIDCgE88gdpI6r4kp33h8.roa (hash: sqISDzfU6JYm1UcY8Gcz5wDK5BeEeTVU67gC4Pg+KUk=)
                          6: rPkQ82KRw8Ik3bWW2VZUMZfxY94.crl (hash: GfQ/H8MbYwrz25UQpItvxaPSA1QVRWMjKDMzNj2fqdM=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2e:98:63:3e:fe:39:9c:92:46:33:da:2a:5f:f4:c8:38
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=acf910f36291c3c224ddb596d956543197f163de
        Validity
            Not Before: Apr 13 10:01:00 2025 GMT
            Not After : Apr 14 10:01:00 2025 GMT
        Subject: CN=6a1808445dff87df77db37dc4620d1f4fa74e01b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d3:bc:63:58:bd:41:b6:06:2f:9e:10:a4:2a:77:
                    fb:f5:11:c4:dd:24:63:92:ae:7e:5c:39:c5:b7:cc:
                    19:0f:20:af:36:b8:2f:49:f4:b7:56:12:16:6c:ce:
                    3b:c1:ec:b4:cb:a4:38:b1:42:40:0d:0d:85:3c:de:
                    5f:77:61:f3:3f:d7:d3:01:cf:b0:1f:e5:19:fe:ee:
                    b2:f1:2f:ae:16:d8:df:74:a2:be:5d:f7:8d:90:5e:
                    9c:d4:07:fb:a0:70:06:9e:40:03:50:2c:b0:77:89:
                    5a:fd:c7:59:c2:61:c4:4d:02:6a:40:e2:a6:98:db:
                    62:63:5a:29:ba:a0:c2:64:27:ff:96:1b:13:a3:1d:
                    3d:9a:ea:d0:e9:56:c7:07:1f:67:15:cf:77:96:78:
                    54:9c:8e:99:5f:a6:45:c9:31:d4:e7:7f:03:35:9d:
                    57:f1:9b:4e:74:89:1c:5a:b5:cd:8a:c0:05:6e:02:
                    3b:a3:5e:a6:cc:62:d8:84:d0:e0:97:c8:a3:07:f8:
                    07:37:be:cc:65:36:db:55:0d:cd:ae:e2:c3:e0:9b:
                    c4:b5:85:3a:5d:18:2b:6b:54:83:96:0e:f6:ca:86:
                    bf:0b:ef:e3:a9:8c:53:e7:62:04:de:53:08:33:af:
                    98:7d:a9:fa:bd:70:0e:2f:fd:d0:b5:0a:c6:fc:0b:
                    77:b7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6A:18:08:44:5D:FF:87:DF:77:DB:37:DC:46:20:D1:F4:FA:74:E0:1B
            X509v3 Authority Key Identifier:
                keyid:AC:F9:10:F3:62:91:C3:C2:24:DD:B5:96:D9:56:54:31:97:F1:63:DE

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/rPkQ82KRw8Ik3bWW2VZUMZfxY94.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/1f5e07-32b6-4114-8b0d-d3b58f698148/1/rPkQ82KRw8Ik3bWW2VZUMZfxY94.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/1f5e07-32b6-4114-8b0d-d3b58f698148/1/rPkQ82KRw8Ik3bWW2VZUMZfxY94.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         12:fd:e6:db:2e:5d:67:52:e6:b2:65:f4:58:d9:19:fd:3a:4b:
         90:40:9c:d8:cd:aa:0d:f9:53:6d:c9:ff:ca:65:12:43:83:ec:
         bb:9e:ab:bf:6f:5b:13:82:0a:e4:01:fa:1c:91:22:f5:92:ec:
         18:c4:5b:3b:3b:3d:0f:de:76:00:31:38:3b:38:96:66:8e:77:
         e5:8a:40:5d:f8:48:b6:ec:ee:27:2c:2d:13:87:15:c3:80:2e:
         9c:70:27:a1:82:ea:f3:e2:2a:09:73:1a:24:73:31:44:fe:76:
         52:0a:08:96:67:03:97:98:1b:50:dd:f1:50:29:bf:d9:24:90:
         df:2e:f4:c3:5e:ce:8c:04:f1:e2:88:4a:2a:39:32:94:24:2b:
         1d:ba:e0:11:6f:79:31:7a:48:87:4e:b4:17:32:60:bb:a8:36:
         65:b5:22:d4:cf:f2:f3:6d:ce:d3:f2:db:d8:0d:5e:b8:fc:9b:
         2d:5f:4c:5e:a3:14:9a:4c:3c:6d:71:9d:02:23:1f:16:49:37:
         8b:42:cd:be:de:71:a3:87:6a:50:40:f8:03:f7:b4:a9:45:80:
         fa:50:43:84:96:9f:91:05:ca:7f:74:91:9b:c5:2c:7a:1f:51:
         af:aa:5e:45:f1:8f:d2:4d:b3:74:3c:3b:87:35:0d:33:74:75:
         07:d9:be:22
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----