Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a1/dcc2b4-9ded-4678-8398-ab79a3789f8f/1/cAoSMdHCenVORu8Q6SpzCuFdD1U.mft
File:                     cAoSMdHCenVORu8Q6SpzCuFdD1U.mft (raw, json)
Hash identifier:          6Sx4NqVFBpwN+oezXHJ9c6CMAg/3yKdJfeReOY5z6xQ=
Subject key identifier:   65:D4:50:C3:43:D5:D0:17:D8:AE:7E:54:1B:C3:78:4E:AC:16:A8:CB
Authority key identifier: 70:0A:12:31:D1:C2:7A:75:4E:46:EF:10:E9:2A:73:0A:E1:5D:0F:55
Certificate issuer:       /CN=700a1231d1c27a754e46ef10e92a730ae15d0f55
Certificate serial:       01962DF40DE52B99E00EF69A2C06D722F1F9
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/cAoSMdHCenVORu8Q6SpzCuFdD1U.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/a1/dcc2b4-9ded-4678-8398-ab79a3789f8f/1/cAoSMdHCenVORu8Q6SpzCuFdD1U.mft
Manifest number:          11F0
Signing time:             Sun 13 Apr 2025 07:01:31 +0000
Manifest this update:     Sun 13 Apr 2025 07:01:31 +0000
Manifest next update:     Mon 14 Apr 2025 07:01:31 +0000
Files and hashes:         1: 9NhpD2GhK7nhCkw4Ln2hgR-a9FI.roa (hash: +fqLpWLcEuKJBmzQK+NoGzgKFUXuG2sR0jOCjmaF7ws=)
                          2: CsTskpGu2067EbH05wfUIZUPjxk.roa (hash: CGKvFO8hPB5WwPOizq8WbZfwBPb68T3rzaJWX9q+khg=)
                          3: NMtf5g2h09CpLbmo1MKTK6aenWk.roa (hash: tfFi0QE+bzYcqYuU5pyH35ZlykRfgC3AccLaeKevVfo=)
                          4: Ui7tOCQMpzQZKjrz8TKsRSE40Q4.roa (hash: DHT0OqKz8zWpIsPzI8wSWAnHvpUIUXG4m7B7nool0IE=)
                          5: YcOS2Wm4uyMkkPXlfvg_yl6nKYE.roa (hash: khcCUHFHG89+gqzsvASfhdPwL9xGw6oHEE1dsfVjZXE=)
                          6: cAoSMdHCenVORu8Q6SpzCuFdD1U.crl (hash: kaD1FHGNu87BtyHyXn4CKc+W3N5SaCSew4J3ol/lVyQ=)
                          7: dH9xmN_c-ogf3lMo2xsIcwvlDWE.roa (hash: SFJ3H40oDJz+xjK+HZI55sajPf6JpJrE0sfXbpnpYH0=)
                          8: mmEVKc1EFKuheB4FKizBXFspVtg.roa (hash: /mO5uMHmI8PnkMInS/fvq5meo8U4FCe78Pgb4cEwmJA=)
                          9: qoKING8LOUliqm_EPi7hMcuvFCE.roa (hash: 2DIbzoBlPqvX6X6H+KZMj8Ugg/FShiQHvw+LRdtArgY=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2d:f4:0d:e5:2b:99:e0:0e:f6:9a:2c:06:d7:22:f1:f9
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=700a1231d1c27a754e46ef10e92a730ae15d0f55
        Validity
            Not Before: Apr 13 07:01:31 2025 GMT
            Not After : Apr 14 07:01:31 2025 GMT
        Subject: CN=65d450c343d5d017d8ae7e541bc3784eac16a8cb
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c3:ea:f6:c4:0b:68:35:2c:d7:31:13:a2:c2:8d:
                    45:7f:20:de:7b:2e:8f:33:5a:94:d2:ea:9d:14:0a:
                    cb:e3:ec:0b:4f:c5:da:19:db:61:6c:64:3a:21:49:
                    79:f2:b1:10:30:bd:a6:7c:2e:35:40:87:cb:bb:97:
                    42:a8:3b:36:98:ef:d4:aa:24:c5:14:95:3b:27:84:
                    d9:78:ef:13:97:67:3a:51:75:62:c9:d6:a6:56:8d:
                    6e:72:7a:77:4a:0b:6e:3f:46:07:bc:f5:69:96:1c:
                    71:5b:98:0e:b1:b5:3e:ef:6b:33:9b:91:20:34:57:
                    47:1f:29:61:e1:af:8d:05:ca:25:2f:2e:77:c0:ca:
                    51:4b:69:43:70:4c:7d:12:bb:4b:5b:a9:40:d1:7f:
                    25:4f:06:6f:4d:74:ed:fb:58:69:ce:50:37:20:14:
                    cf:05:79:9c:59:8e:ba:33:83:01:4e:48:c4:d3:bf:
                    c3:f6:95:eb:bd:9f:5b:7e:5c:1e:5c:95:2c:2f:e8:
                    c8:93:fe:c5:7e:23:e4:78:24:e9:82:49:83:91:5f:
                    91:bc:74:22:5b:2c:82:e9:b8:09:6e:8e:b4:67:9f:
                    a2:48:f3:98:d6:75:df:41:b4:f6:3b:c3:34:d4:65:
                    53:f8:80:80:9e:a3:ad:df:4e:8f:d6:ff:c3:b2:d7:
                    03:4f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                65:D4:50:C3:43:D5:D0:17:D8:AE:7E:54:1B:C3:78:4E:AC:16:A8:CB
            X509v3 Authority Key Identifier:
                keyid:70:0A:12:31:D1:C2:7A:75:4E:46:EF:10:E9:2A:73:0A:E1:5D:0F:55

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cAoSMdHCenVORu8Q6SpzCuFdD1U.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a1/dcc2b4-9ded-4678-8398-ab79a3789f8f/1/cAoSMdHCenVORu8Q6SpzCuFdD1U.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/a1/dcc2b4-9ded-4678-8398-ab79a3789f8f/1/cAoSMdHCenVORu8Q6SpzCuFdD1U.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         56:68:8e:3b:07:a6:ed:3c:2c:dc:bb:27:43:a9:53:c0:4e:dd:
         9c:c3:50:ad:a3:98:41:c2:c7:2f:20:ab:d0:52:f7:13:51:39:
         88:0e:28:53:86:10:c7:cb:39:3e:b0:90:0f:bd:ad:11:50:f9:
         c7:6e:fd:38:40:4c:aa:6c:0d:26:60:29:9f:64:af:f7:87:5e:
         d4:9a:58:03:37:d2:6a:f6:dc:ad:fc:aa:8c:a2:75:78:d8:41:
         6d:7c:c8:83:41:f4:2a:2c:91:1c:cf:7b:d8:20:ca:fd:9d:a9:
         1b:14:7d:84:19:cf:82:bc:10:a1:9c:b8:a3:63:11:04:a6:7f:
         21:ac:2b:0f:d4:74:be:5d:f3:48:dc:39:7c:c6:55:ce:10:b2:
         ff:f7:ce:5e:69:65:45:8d:2f:e4:5e:65:16:b5:c7:cb:e7:a1:
         0a:c7:ea:7a:34:af:04:06:eb:e9:84:3c:23:17:91:a0:cb:e4:
         76:19:8b:9c:2b:51:e2:6a:37:ae:0b:dc:5a:4e:e5:9e:59:c6:
         fb:c3:88:f3:32:74:10:28:4b:46:05:af:71:71:5d:bf:78:10:
         55:66:57:3e:7a:eb:0e:77:5c:73:56:82:b1:49:ec:79:98:f0:
         1a:64:5b:52:0c:4f:d6:f9:2c:24:11:d3:04:a1:cd:04:5f:c4:
         b8:1e:1d:b4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----