Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9f/df8d9a-8ddb-44b3-9ac0-cd572fd044ee/1/gUbejOwB0FJTbA8I3-eotT-arsI.mft
File:                     gUbejOwB0FJTbA8I3-eotT-arsI.mft (raw, json)
Hash identifier:          krJD2xJzNalFgQg4otOpuoEtqS1+q8j7rNxdNhlptIA=
Subject key identifier:   8D:09:F2:A1:FA:93:28:7A:00:79:8A:87:95:5F:3D:B1:69:EF:2D:1F
Authority key identifier: 81:46:DE:8C:EC:01:D0:52:53:6C:0F:08:DF:E7:A8:B5:3F:9A:AE:C2
Certificate issuer:       /CN=8146de8cec01d052536c0f08dfe7a8b53f9aaec2
Certificate serial:       01962F066A427BE982011AC23629EEBB4F77
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/gUbejOwB0FJTbA8I3-eotT-arsI.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/9f/df8d9a-8ddb-44b3-9ac0-cd572fd044ee/1/gUbejOwB0FJTbA8I3-eotT-arsI.mft
Manifest number:          14E8
Signing time:             Sun 13 Apr 2025 12:01:11 +0000
Manifest this update:     Sun 13 Apr 2025 12:01:11 +0000
Manifest next update:     Mon 14 Apr 2025 12:01:11 +0000
Files and hashes:         1: A4PQ0gQ7q04XkXEWkOpsFcG55U0.roa (hash: BlIGTUdhWCkztoNKbN33qtlZGYIZKP+ZzvO3VxYHAQ8=)
                          2: S1ukHOQHwZ5FXTblgAJkMrxdPMo.roa (hash: nsbro8MsYnPkoUuF8RjKDn+GAEU45Dqsh1VzCFmduco=)
                          3: gUbejOwB0FJTbA8I3-eotT-arsI.crl (hash: 2zoj1ivCGHfsNCHBa7YfEIO5VjpHS6JNp5KhabVDZ6M=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2f:06:6a:42:7b:e9:82:01:1a:c2:36:29:ee:bb:4f:77
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8146de8cec01d052536c0f08dfe7a8b53f9aaec2
        Validity
            Not Before: Apr 13 12:01:11 2025 GMT
            Not After : Apr 14 12:01:11 2025 GMT
        Subject: CN=8d09f2a1fa93287a00798a87955f3db169ef2d1f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a5:73:07:cd:48:26:05:f9:a9:a2:0c:1b:35:a1:
                    86:02:e1:ec:9c:1e:ba:bc:1e:6c:f1:d9:48:dc:c0:
                    8e:47:89:c0:12:77:b7:0b:74:4b:9f:fb:aa:02:1b:
                    5f:ea:bf:b0:f0:5d:8e:a4:6a:62:cd:50:32:cc:d7:
                    93:5f:3a:94:72:29:b6:4f:3b:0b:bd:db:e5:e8:6d:
                    19:28:98:c5:63:ea:eb:f9:a7:c7:b4:a7:46:f6:c6:
                    27:cf:64:cc:d7:d8:c8:77:67:43:af:89:3d:02:27:
                    2b:44:c5:fc:25:9b:71:50:4d:01:90:c3:f3:cc:ab:
                    85:ee:4c:c5:15:0f:d5:45:b4:fe:21:d0:0a:e1:4c:
                    e2:73:4d:ae:f5:5c:18:2d:ce:b8:92:fe:41:b1:2e:
                    1f:a0:74:7c:71:30:29:69:04:0e:0b:6e:17:4d:29:
                    0d:d8:7d:09:43:a9:44:e5:76:d8:89:72:ad:41:4d:
                    2a:81:1e:56:25:2e:94:5e:5f:bc:4e:d7:dd:f6:06:
                    e0:fc:62:01:74:d1:a1:fe:a9:01:ad:e9:bd:7c:df:
                    6b:28:b5:00:47:0e:93:fe:ae:1b:b8:1c:5e:8f:74:
                    a5:a1:c5:25:5e:b6:42:2e:4c:b5:94:ca:c8:55:7a:
                    72:42:43:d2:bd:05:af:dc:96:8a:1a:9e:ba:35:6c:
                    8e:23
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8D:09:F2:A1:FA:93:28:7A:00:79:8A:87:95:5F:3D:B1:69:EF:2D:1F
            X509v3 Authority Key Identifier:
                keyid:81:46:DE:8C:EC:01:D0:52:53:6C:0F:08:DF:E7:A8:B5:3F:9A:AE:C2

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/gUbejOwB0FJTbA8I3-eotT-arsI.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9f/df8d9a-8ddb-44b3-9ac0-cd572fd044ee/1/gUbejOwB0FJTbA8I3-eotT-arsI.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/9f/df8d9a-8ddb-44b3-9ac0-cd572fd044ee/1/gUbejOwB0FJTbA8I3-eotT-arsI.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         40:41:ff:58:65:e0:7a:8d:26:e0:a6:8d:98:f6:2a:65:e8:7a:
         5f:27:da:77:29:15:61:5a:bc:c0:4b:06:37:30:5d:12:37:ea:
         e6:b4:62:00:b0:c9:b4:73:36:41:20:a6:88:2f:d9:d7:27:12:
         ee:6c:8e:0e:d0:8d:60:70:db:d2:e2:21:84:a3:07:60:47:05:
         73:a1:d8:88:2e:24:bf:20:02:0e:ac:11:37:66:6d:23:ed:52:
         af:a4:72:bd:8d:10:9c:b2:53:19:de:cf:a9:69:bc:98:11:6f:
         4b:87:a4:8f:0e:5a:27:a0:9f:a9:dd:86:29:ac:f6:48:05:0c:
         0a:8e:0a:a9:cb:1d:7d:cf:02:47:4c:b3:f6:76:57:f2:3a:16:
         5e:03:14:16:1e:4c:66:b0:8d:67:26:08:a9:c9:47:46:72:21:
         41:e4:bd:b7:d4:54:23:72:fd:51:3a:61:1f:2e:fc:c1:50:ee:
         3f:d9:2d:4a:11:8e:9e:88:61:92:94:a6:45:38:57:dd:7c:d9:
         e8:a9:28:3f:7f:4e:ed:b1:55:9d:c6:62:84:fb:bc:46:b2:1a:
         d3:d3:60:e7:af:4e:0c:bd:a2:6c:bb:75:16:a7:12:a9:f7:34:
         7d:4a:37:17:bc:91:15:fb:d0:0f:27:9e:b0:26:4a:a8:59:21:
         3e:2c:c0:6b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----