Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a0/76c905-e5af-48ae-b7ac-bfa96392ac5d/1/Sp0WbGSEc4ly6bM5OBZfRImlFow.mft
File:                     Sp0WbGSEc4ly6bM5OBZfRImlFow.mft (raw, json)
Hash identifier:          VDbyDPVCFjO0BAf+e6KEQF92co4L/94R8eaodoYGNdA=
Subject key identifier:   5D:88:16:37:A6:9C:A3:26:BA:C5:43:D4:29:55:22:0C:8B:C0:F3:15
Authority key identifier: 4A:9D:16:6C:64:84:73:89:72:E9:B3:39:38:16:5F:44:89:A5:16:8C
Certificate issuer:       /CN=4a9d166c6484738972e9b33938165f4489a5168c
Certificate serial:       01962F7423966314AB585A87E8E481AD7ACB
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/Sp0WbGSEc4ly6bM5OBZfRImlFow.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/a0/76c905-e5af-48ae-b7ac-bfa96392ac5d/1/Sp0WbGSEc4ly6bM5OBZfRImlFow.mft
Manifest number:          0861
Signing time:             Sun 13 Apr 2025 14:01:02 +0000
Manifest this update:     Sun 13 Apr 2025 14:01:02 +0000
Manifest next update:     Mon 14 Apr 2025 14:01:02 +0000
Files and hashes:         1: 2Akoy2U5XTKN_WZkzZk8pbH_WvU.roa (hash: z7wlSbeXCPnKRT5F6st24jvggmZT5WHmth3yDlecnKg=)
                          2: Sp0WbGSEc4ly6bM5OBZfRImlFow.crl (hash: g/pBF8xMhylqdLg8nAteYIStfISyDeGBXCmQXsmTOh0=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2f:74:23:96:63:14:ab:58:5a:87:e8:e4:81:ad:7a:cb
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4a9d166c6484738972e9b33938165f4489a5168c
        Validity
            Not Before: Apr 13 14:01:02 2025 GMT
            Not After : Apr 14 14:01:02 2025 GMT
        Subject: CN=5d881637a69ca326bac543d42955220c8bc0f315
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b1:d9:21:b7:be:3f:c3:71:4a:f1:0c:ef:e5:d8:
                    0e:4f:02:07:e9:07:d8:c3:3d:a1:98:3f:c6:0d:de:
                    0f:aa:31:54:1b:8c:5a:40:ee:4e:4a:08:c1:2c:10:
                    54:15:0b:4b:e2:04:db:41:97:75:3b:54:c4:8c:e8:
                    91:f8:e3:46:50:3f:78:b1:3d:a5:bb:46:e6:3f:8a:
                    77:9f:94:0b:65:15:a2:17:60:14:eb:55:74:b4:66:
                    f5:24:c4:68:bf:37:42:47:3b:36:cf:d9:c5:2f:ee:
                    c0:c3:a3:94:84:38:be:0b:a6:05:e9:51:51:75:6d:
                    98:ef:4e:2b:ea:15:90:cb:6e:ac:3e:e4:9d:52:d5:
                    c2:aa:9d:83:6e:3a:71:ff:8e:ba:f0:9c:9a:7e:52:
                    69:d5:05:b9:d2:aa:38:61:3e:b8:dc:17:3a:18:fa:
                    2b:82:72:c9:2f:01:1e:64:26:2e:e0:01:02:1b:a7:
                    f1:41:c1:47:6c:ef:40:43:59:e0:7e:ed:b6:f1:d6:
                    a4:96:b4:42:61:87:87:b8:4b:b4:3c:b6:64:37:95:
                    70:1e:8c:83:a7:46:80:ae:c9:39:b8:42:f4:7c:9f:
                    92:e1:ca:a5:93:e9:af:83:15:35:16:65:5a:3b:3b:
                    28:9e:dc:cc:65:2b:89:e7:4a:18:20:70:11:e9:e7:
                    55:db
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5D:88:16:37:A6:9C:A3:26:BA:C5:43:D4:29:55:22:0C:8B:C0:F3:15
            X509v3 Authority Key Identifier:
                keyid:4A:9D:16:6C:64:84:73:89:72:E9:B3:39:38:16:5F:44:89:A5:16:8C

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Sp0WbGSEc4ly6bM5OBZfRImlFow.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a0/76c905-e5af-48ae-b7ac-bfa96392ac5d/1/Sp0WbGSEc4ly6bM5OBZfRImlFow.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/a0/76c905-e5af-48ae-b7ac-bfa96392ac5d/1/Sp0WbGSEc4ly6bM5OBZfRImlFow.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         78:02:cb:c2:d0:51:3d:57:1b:1f:88:92:c4:8f:a0:8e:e1:d7:
         f0:b9:21:b3:53:4f:dc:05:58:2b:1c:36:5f:f3:7d:ad:01:97:
         11:99:04:e4:bc:f4:7b:19:fd:c5:2a:77:59:16:30:37:b1:f7:
         1d:c3:cf:44:ba:b0:58:71:86:5d:a9:f0:68:fd:64:54:8d:c9:
         66:43:49:e0:30:bb:04:a2:76:4a:49:fc:c8:61:5c:69:fb:2f:
         69:5f:84:b5:f7:8e:73:8a:19:4d:44:5c:a0:39:3f:00:8f:8e:
         e2:ba:ce:63:a1:40:c1:eb:41:0a:e8:3d:68:b0:42:5b:e4:2e:
         29:76:07:bd:a3:fa:44:fd:5e:83:bb:db:bd:65:6e:36:2a:86:
         ad:3d:a6:3f:21:90:1d:58:67:98:92:d9:33:f0:b6:f3:02:ab:
         bd:bc:40:f8:e8:4d:60:a6:fd:95:35:5e:88:74:4e:ba:6e:f5:
         17:72:26:6b:fd:b5:f9:64:d4:8b:1c:e3:4d:03:04:bf:ea:9a:
         22:db:89:6d:dc:a8:25:ed:de:3c:61:f0:f3:e4:7b:c0:96:eb:
         c2:7f:ab:b0:95:d2:67:39:b1:e9:23:03:9e:b7:10:ea:92:b6:
         53:c9:b1:97:7b:bb:06:65:39:3a:61:c5:d5:c6:11:21:42:13:
         42:a3:2a:f7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----