Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a1/0600f8-2958-4417-bb67-3c5e1744acdd/1/r1A-W4NfCoE4HRxMEjPTj7fd8j0.mft
File:                     r1A-W4NfCoE4HRxMEjPTj7fd8j0.mft (raw, json)
Hash identifier:          7JLJBpPda98nyYWzLHXtjFcvr691jyMMXKpM9tza49s=
Subject key identifier:   C6:6A:2F:FD:84:2F:D1:96:99:64:64:76:D7:69:CB:C1:7D:21:45:FD
Authority key identifier: AF:50:3E:5B:83:5F:0A:81:38:1D:1C:4C:12:33:D3:8F:B7:DD:F2:3D
Certificate issuer:       /CN=af503e5b835f0a81381d1c4c1233d38fb7ddf23d
Certificate serial:       01962F746ED78D5763740048230B3AF68264
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/r1A-W4NfCoE4HRxMEjPTj7fd8j0.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/a1/0600f8-2958-4417-bb67-3c5e1744acdd/1/r1A-W4NfCoE4HRxMEjPTj7fd8j0.mft
Manifest number:          14E9
Signing time:             Sun 13 Apr 2025 14:01:21 +0000
Manifest this update:     Sun 13 Apr 2025 14:01:21 +0000
Manifest next update:     Mon 14 Apr 2025 14:01:21 +0000
Files and hashes:         1: 4spQ6NxJCHQlIe40OSpahfCWkew.roa (hash: q8IYfG4TfaqBRLC5bxYFRKAEUKhB1rQ/o2LIt/ycHL4=)
                          2: f_yXJGNzegLxOLz8jRnmFe-XGpI.roa (hash: tOrW/MEZqwnfeildny0YITd6StrSUroZ/b9Bx2DHobc=)
                          3: r1A-W4NfCoE4HRxMEjPTj7fd8j0.crl (hash: /z8tilLgI2OskbDv2RX9pKcS44wEbCo4wqWTHKRIWOk=)
                          4: wfzndjh_1PyK6B8Rf4Qnrhzhf1I.roa (hash: conmJC0uHXltpd+fK7k2U4ghVYU0Xoj8HIet8R78GBA=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2f:74:6e:d7:8d:57:63:74:00:48:23:0b:3a:f6:82:64
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=af503e5b835f0a81381d1c4c1233d38fb7ddf23d
        Validity
            Not Before: Apr 13 14:01:21 2025 GMT
            Not After : Apr 14 14:01:21 2025 GMT
        Subject: CN=c66a2ffd842fd19699646476d769cbc17d2145fd
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bf:20:b8:cd:2a:0a:c8:06:55:8e:47:60:e7:f4:
                    9c:1c:17:f3:2f:2c:84:93:c4:88:83:e6:bb:bd:62:
                    5b:f3:2d:0d:93:a4:17:f1:09:08:88:1d:31:11:d0:
                    48:c9:9c:d4:64:38:14:8e:3d:f4:76:99:af:57:93:
                    64:0f:1f:a7:51:96:ef:e0:b3:56:01:9a:37:9f:00:
                    56:69:a1:6e:cb:51:16:7a:65:51:7f:dd:43:3d:97:
                    67:a5:2a:f4:2d:9c:f8:c1:12:9e:1f:d8:20:c3:5e:
                    af:9b:99:73:79:be:07:2d:fa:cb:0d:62:ae:59:58:
                    c4:2a:1f:0b:bf:63:be:8d:62:36:9d:25:8c:b4:ef:
                    14:f4:63:28:47:34:13:cc:32:86:a2:4b:92:03:3d:
                    f3:06:9d:02:f7:2f:69:2a:07:b2:73:e3:b6:cd:a5:
                    10:66:db:29:81:f1:4e:e6:c4:ee:43:d2:78:b7:8f:
                    fa:e5:75:fd:19:31:3d:69:26:e4:e9:fb:c1:f6:d5:
                    81:af:89:7a:e6:b9:ec:ca:21:85:b8:0c:81:35:0c:
                    b6:1d:0c:71:6f:db:10:c3:6e:81:59:25:90:37:55:
                    aa:5f:69:8e:34:f6:71:0f:ab:7e:07:58:84:b5:3b:
                    cb:71:44:23:9c:0e:4c:af:ac:c3:7f:6e:39:20:e0:
                    db:a3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C6:6A:2F:FD:84:2F:D1:96:99:64:64:76:D7:69:CB:C1:7D:21:45:FD
            X509v3 Authority Key Identifier:
                keyid:AF:50:3E:5B:83:5F:0A:81:38:1D:1C:4C:12:33:D3:8F:B7:DD:F2:3D

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/r1A-W4NfCoE4HRxMEjPTj7fd8j0.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a1/0600f8-2958-4417-bb67-3c5e1744acdd/1/r1A-W4NfCoE4HRxMEjPTj7fd8j0.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/a1/0600f8-2958-4417-bb67-3c5e1744acdd/1/r1A-W4NfCoE4HRxMEjPTj7fd8j0.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         50:57:7e:e5:1a:7f:24:a1:18:cd:78:df:4b:1c:e7:5b:f0:72:
         be:a8:c4:5e:ac:ad:6b:15:b0:71:47:e0:f1:f9:79:08:e5:fe:
         39:a8:cd:13:32:91:40:55:66:0b:e1:26:04:2e:a7:d2:38:58:
         00:fe:83:7e:7f:4b:42:d7:49:0e:d4:31:5b:8a:d1:d2:52:6e:
         a2:b6:76:36:af:2f:4e:66:72:69:72:8c:a6:41:71:26:e0:b8:
         fc:ee:6f:16:e6:06:a5:e2:d6:8f:75:73:01:18:9e:79:b2:fc:
         91:4c:fb:ee:b9:f8:2d:90:60:98:0c:53:b7:6d:00:40:31:ca:
         c3:cb:37:a5:a6:fb:15:d0:e8:81:7f:60:f7:2d:af:4f:f3:8a:
         46:78:55:f4:9f:35:15:a5:40:17:21:8d:a0:1b:20:64:18:c3:
         11:61:8f:11:41:ef:cf:35:77:bd:55:39:c3:5e:10:29:ec:26:
         7d:b9:ed:03:b4:f5:55:ba:79:e9:5f:c4:8b:60:42:90:99:75:
         ce:b6:45:61:e4:60:3c:fa:b9:42:37:67:2c:04:6b:ea:4a:4a:
         b5:a0:23:13:7a:4b:57:65:d8:bf:02:08:a2:c6:f2:d9:d5:c0:
         87:6a:5c:2d:f7:30:1f:a8:35:9c:31:4e:28:58:ba:65:a6:84:
         d4:98:12:19
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----