Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9f/df719a-492f-47cb-9212-644bd0fc7f80/1/r_b4Wq0QHEVsGsmgGnGS_FeI6Sw.mft
File:                     r_b4Wq0QHEVsGsmgGnGS_FeI6Sw.mft (raw, json)
Hash identifier:          PzijokwNKUZCW0ARxsPZGDAN4CyhJjkrvBxv+G/M0V0=
Subject key identifier:   47:02:1A:75:FC:AB:80:EC:62:3C:71:30:C5:F5:6C:72:ED:AF:3E:60
Authority key identifier: AF:F6:F8:5A:AD:10:1C:45:6C:1A:C9:A0:1A:71:92:FC:57:88:E9:2C
Certificate issuer:       /CN=aff6f85aad101c456c1ac9a01a7192fc5788e92c
Certificate serial:       01962F3D379CEEE477E842CBC551CD6102B2
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/r_b4Wq0QHEVsGsmgGnGS_FeI6Sw.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/9f/df719a-492f-47cb-9212-644bd0fc7f80/1/r_b4Wq0QHEVsGsmgGnGS_FeI6Sw.mft
Manifest number:          0EC3
Signing time:             Sun 13 Apr 2025 13:01:02 +0000
Manifest this update:     Sun 13 Apr 2025 13:01:02 +0000
Manifest next update:     Mon 14 Apr 2025 13:01:02 +0000
Files and hashes:         1: 4fpK3rH7dDsLZcwC8fv__9MCBNk.roa (hash: H+mNwrXZUXB3OGGb/VrqoSQBBpWlzYIXILfgLQd6xuU=)
                          2: 4niQy2euydDFq7GTJuaxJySkYgE.roa (hash: lEIj5wjui/e5DTBCiecGhk5U5JYfLtQIN+3o7VCLqqU=)
                          3: 5XUzA9Cm_VS0l_J-BI180iVrsSQ.roa (hash: dTmUbt8r9KTK4oCfqPnmc0NkXc8ljy+XbX2k8rf1LxQ=)
                          4: DWF9Jo3FImxKenqMCCuMh99Ds_I.roa (hash: VPrgFeIcUkZV1CVnwsWbonO9j9PHcQRDHPIETmI4o3E=)
                          5: UNKbAcEAJHWJC-HG72D-vYqbVfQ.roa (hash: m35AjrcjrDzhORVJU0fjE54zFfVUjrq+cuZi9udA0+8=)
                          6: cLFAPtOqlcUfpbbbNNENVqdfu8I.roa (hash: fE/OxbEqrhzEaEBEiWo6VY8shfzEaI5zfx5000I8b5Q=)
                          7: hgq-3QFFzN187B-65tYpaJQwwz8.roa (hash: l85+PXj1Myvhf7HIXT0WO1F3ljNUQ844ImZJ7Pq6XL8=)
                          8: r_b4Wq0QHEVsGsmgGnGS_FeI6Sw.crl (hash: zDjK1Ti/7D/26DZZ1s4ov8p/jTlLmOQydIt0gMf9ZDE=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2f:3d:37:9c:ee:e4:77:e8:42:cb:c5:51:cd:61:02:b2
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=aff6f85aad101c456c1ac9a01a7192fc5788e92c
        Validity
            Not Before: Apr 13 13:01:02 2025 GMT
            Not After : Apr 14 13:01:02 2025 GMT
        Subject: CN=47021a75fcab80ec623c7130c5f56c72edaf3e60
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b8:8d:c8:f2:47:81:a8:fc:88:2a:e7:a3:8a:84:
                    26:1d:ae:0e:18:83:a4:13:fe:46:6b:33:ea:da:a6:
                    de:91:d0:a7:49:c4:79:b7:07:58:34:7f:b4:f2:e2:
                    d3:fb:2d:91:2b:a0:e0:7d:43:87:ed:1a:9e:f6:ae:
                    ff:39:ed:7f:6e:e7:1f:a2:68:e2:33:1d:cf:54:a1:
                    2a:78:ab:68:38:31:ec:cb:11:84:4a:98:86:94:52:
                    58:95:0c:db:1c:39:02:dd:9d:5f:4c:c2:bf:d1:c1:
                    63:df:d7:06:d0:ca:1c:72:fc:4f:44:0b:62:c5:f2:
                    c2:6c:5a:31:4a:b5:86:1d:47:47:08:10:12:c4:05:
                    aa:53:a2:a2:b1:1d:0d:49:aa:1b:d0:83:35:a8:2a:
                    ea:b8:e2:0e:14:79:93:88:e7:6f:6c:e9:76:2b:6b:
                    a2:79:47:bf:5e:6a:7a:9c:f6:84:72:96:7a:c9:9c:
                    3d:0c:fa:42:29:b7:82:c5:4c:f4:20:0b:02:e7:e0:
                    14:02:f7:ee:79:93:08:05:cf:4e:ab:92:a9:9c:1c:
                    30:e1:43:6b:a2:19:b2:69:81:c4:23:85:c6:18:b9:
                    35:40:b7:f7:90:32:d7:91:dc:8f:19:a4:87:32:e8:
                    1e:20:e3:5e:11:4e:08:d7:6a:cb:df:bb:62:e3:df:
                    70:09
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                47:02:1A:75:FC:AB:80:EC:62:3C:71:30:C5:F5:6C:72:ED:AF:3E:60
            X509v3 Authority Key Identifier:
                keyid:AF:F6:F8:5A:AD:10:1C:45:6C:1A:C9:A0:1A:71:92:FC:57:88:E9:2C

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/r_b4Wq0QHEVsGsmgGnGS_FeI6Sw.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9f/df719a-492f-47cb-9212-644bd0fc7f80/1/r_b4Wq0QHEVsGsmgGnGS_FeI6Sw.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/9f/df719a-492f-47cb-9212-644bd0fc7f80/1/r_b4Wq0QHEVsGsmgGnGS_FeI6Sw.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         6a:a6:31:d0:89:50:c6:c6:b8:b9:d9:69:5b:17:06:5c:68:53:
         c7:d8:3d:31:0a:3d:f2:63:1e:90:c2:93:9c:64:42:71:04:d8:
         bb:85:fb:0f:68:d0:e0:11:28:ab:a7:98:b0:a3:68:8d:d9:80:
         25:4a:8c:42:ab:a4:ab:0b:23:ba:d8:31:1b:88:da:ed:14:df:
         2d:eb:91:9d:e6:b5:67:f9:48:4e:64:8d:8a:22:ad:fc:56:d5:
         34:b8:d0:10:8c:1d:61:c8:7f:8e:51:2a:72:4c:3c:83:50:e1:
         7b:6f:fe:b3:7b:6f:35:fd:69:bb:a5:7c:3e:96:38:b0:f5:65:
         30:fd:be:27:50:f8:e1:47:8d:0d:7a:88:70:f9:2c:2a:db:fd:
         d8:ff:10:d6:5b:3b:17:28:b9:e7:2a:04:10:34:f2:1c:34:24:
         5b:66:68:f3:42:c6:cd:06:11:bf:c0:a2:17:4e:ba:c3:6b:5f:
         32:1b:72:19:25:16:6f:7e:29:e5:31:b7:fb:23:96:fc:43:54:
         7b:12:59:65:ad:64:45:fa:ea:c0:e3:ed:6e:62:6d:41:d5:e2:
         95:42:92:60:e9:a4:08:01:a8:a2:c6:4a:d1:67:a0:13:2b:17:
         22:f0:a4:f9:33:68:76:d3:94:c2:76:0f:1f:37:2b:88:ee:ec:
         46:d3:cf:4e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----