Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/94/b35513-ebdb-4550-a7d4-12f9f733dc4f/1/4mNuAvFVT3DZcaZWhJwBvf8TjOg.mft
File:                     4mNuAvFVT3DZcaZWhJwBvf8TjOg.mft (raw, json)
Hash identifier:          2NTGqAi/Q3l7EHqI7vqchmcCdYPKJJ5YOBjJDz9j4GY=
Subject key identifier:   60:A8:A4:78:8C:2C:14:2B:BC:DF:AD:E8:5A:FB:D8:7A:92:0E:D9:43
Authority key identifier: E2:63:6E:02:F1:55:4F:70:D9:71:A6:56:84:9C:01:BD:FF:13:8C:E8
Certificate issuer:       /CN=e2636e02f1554f70d971a656849c01bdff138ce8
Certificate serial:       01962F06BACE19494F4EA23CBC4183E6D873
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/4mNuAvFVT3DZcaZWhJwBvf8TjOg.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/94/b35513-ebdb-4550-a7d4-12f9f733dc4f/1/4mNuAvFVT3DZcaZWhJwBvf8TjOg.mft
Manifest number:          06D7
Signing time:             Sun 13 Apr 2025 12:01:32 +0000
Manifest this update:     Sun 13 Apr 2025 12:01:32 +0000
Manifest next update:     Mon 14 Apr 2025 12:01:32 +0000
Files and hashes:         1: 4mNuAvFVT3DZcaZWhJwBvf8TjOg.crl (hash: jeiWo45gXQgXXRNuE6a4obS8uaKCLBxpC3c+A2KiVVE=)
                          2: 7dRcXbElWutmb-vx1yNlkmHljSE.roa (hash: WZ+TCSmEO4aTN64/UdH9rIveS1dVo6wGMMxf2jnWiPU=)
                          3: 8ledFww48tlGlLdCdc6wJh5gkIA.roa (hash: Tmx1stFU3W6NXlv6YnpijkUZCwIIoq5vNpNXxvyHtoo=)
                          4: cvEKFsSTsStMmItt_2492mBbnFo.roa (hash: /gDWOgEA4TF8vJ8vkcEBambiiNBw5mr+XGx4Ku2Xa3g=)
                          5: kNp_3YkCixoFt65dB3MqrcA0XPo.roa (hash: yKQUvFhZ+Z1swcvVEnDhUbffbwLlIa/3aCYRRPNo5TY=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2f:06:ba:ce:19:49:4f:4e:a2:3c:bc:41:83:e6:d8:73
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e2636e02f1554f70d971a656849c01bdff138ce8
        Validity
            Not Before: Apr 13 12:01:32 2025 GMT
            Not After : Apr 14 12:01:32 2025 GMT
        Subject: CN=60a8a4788c2c142bbcdfade85afbd87a920ed943
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b3:98:1f:fb:22:81:d4:bf:55:ca:7c:ab:e4:e5:
                    c4:79:43:05:3d:f4:87:a0:f0:81:f3:10:f5:28:6c:
                    f5:b5:a5:6e:0b:56:ec:5c:cd:b5:f5:cb:07:ce:76:
                    99:06:36:ef:cb:6e:74:19:c2:04:ce:13:a0:fe:ab:
                    1c:9d:2c:d0:6b:0f:a5:97:47:01:2b:ae:17:3e:7f:
                    68:3f:49:9f:d9:e5:a3:4e:5e:7f:9a:48:a1:36:14:
                    d4:2a:30:1d:66:aa:4a:82:5b:de:70:52:0d:4c:00:
                    23:36:e6:9c:9f:5f:ea:93:a8:f0:80:2f:1e:31:92:
                    fc:fb:82:3b:b1:21:ff:16:e0:d2:21:e4:14:d8:51:
                    a8:27:f2:ca:ec:2c:3c:6c:0b:9a:25:34:c8:38:f7:
                    5a:44:7c:9e:6b:b5:ba:71:db:88:9a:f3:bb:4c:b8:
                    28:b2:11:7f:82:e2:d3:ea:30:ea:77:86:01:9f:92:
                    b7:3c:f2:97:0b:1a:03:e4:0a:2a:63:ef:84:18:07:
                    0e:73:cb:df:9d:c0:80:b6:eb:00:0e:29:57:2a:7b:
                    9b:77:b6:9b:0a:fa:08:54:d6:c5:f9:45:80:0f:80:
                    7b:a5:2d:ef:a2:fc:a6:7c:eb:da:5d:a4:bf:09:90:
                    94:db:f4:02:bc:87:8b:95:76:cd:cd:23:14:25:ba:
                    d3:d9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                60:A8:A4:78:8C:2C:14:2B:BC:DF:AD:E8:5A:FB:D8:7A:92:0E:D9:43
            X509v3 Authority Key Identifier:
                keyid:E2:63:6E:02:F1:55:4F:70:D9:71:A6:56:84:9C:01:BD:FF:13:8C:E8

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/4mNuAvFVT3DZcaZWhJwBvf8TjOg.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/94/b35513-ebdb-4550-a7d4-12f9f733dc4f/1/4mNuAvFVT3DZcaZWhJwBvf8TjOg.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/94/b35513-ebdb-4550-a7d4-12f9f733dc4f/1/4mNuAvFVT3DZcaZWhJwBvf8TjOg.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         a7:1c:5c:83:c2:bd:63:32:c7:94:67:90:2c:d9:bd:f9:a1:a3:
         cf:2c:d4:e2:8e:64:bf:e3:97:c3:ed:b2:ea:46:1d:08:ed:0b:
         4e:eb:15:e4:36:17:20:59:3e:ea:bc:a8:1f:20:32:a7:bb:78:
         b1:74:d3:31:ea:2e:c3:91:07:4b:36:3a:fb:3d:72:43:ba:ad:
         28:8a:a2:d7:b6:de:1d:da:27:61:b5:49:42:47:bb:f4:35:55:
         80:32:d3:af:49:6a:7d:1c:4d:76:6c:ef:0a:35:94:79:e2:b8:
         64:91:be:63:cd:39:32:00:13:b9:d3:44:3e:23:28:f3:9e:11:
         6d:ea:1a:b9:ef:87:16:45:c1:29:a0:fd:9d:16:ff:97:15:1c:
         f3:a8:1f:ec:36:5b:98:67:c0:9f:af:a3:5b:f5:c0:9f:25:28:
         f4:50:c8:a4:de:02:5f:4f:7f:3f:ca:08:1f:4a:5c:c9:98:91:
         55:27:42:43:23:1d:d9:ea:98:6b:ea:61:54:57:8f:41:7c:d8:
         08:4e:bd:4a:5d:f0:f6:56:b6:3e:b3:97:d4:65:36:d2:e5:2d:
         ec:8b:35:67:ce:59:27:74:36:2a:5a:21:54:6e:61:2c:09:23:
         39:7e:93:96:9f:95:25:86:96:a5:29:cb:34:3b:39:56:ea:27:
         3d:86:38:74
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----