Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a6/7e6369-5adb-45cd-bd2f-3b8b0d1a59a9/1/r5OFA9cpMWJty40elGsq4Gpz0C4.mft
File:                     r5OFA9cpMWJty40elGsq4Gpz0C4.mft (raw, json)
Hash identifier:          Zloj4cG6Hg+dtHc2CZ6g5AXQxzjAzU7UCR0uH07xUok=
Subject key identifier:   70:ED:25:E1:7B:2B:A1:F7:1E:F0:18:E1:8E:46:20:01:3B:5A:06:B8
Authority key identifier: AF:93:85:03:D7:29:31:62:6D:CB:8D:1E:94:6B:2A:E0:6A:73:D0:2E
Certificate issuer:       /CN=af938503d72931626dcb8d1e946b2ae06a73d02e
Certificate serial:       01962E997CAD60FEA23C0727ECB219022FA7
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/r5OFA9cpMWJty40elGsq4Gpz0C4.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/a6/7e6369-5adb-45cd-bd2f-3b8b0d1a59a9/1/r5OFA9cpMWJty40elGsq4Gpz0C4.mft
Manifest number:          14EE
Signing time:             Sun 13 Apr 2025 10:02:12 +0000
Manifest this update:     Sun 13 Apr 2025 10:02:12 +0000
Manifest next update:     Mon 14 Apr 2025 10:02:12 +0000
Files and hashes:         1: 6OJY_cLGBp28NDNyp5KhfLaq0T4.roa (hash: Q7dSDBkkqsY0c5wjzpyUd8BOdypnvTRmRZWsgkhxLKs=)
                          2: lwWk6gYDfPgTiw1I1FH-cpoHm-4.roa (hash: yGaK09dhA4d1XHm7tuZO0sTpyctbGTSJ/ciNb0ty54Q=)
                          3: myG4Sawx0LfJTRmA5fYEdv4-s1g.roa (hash: YBdxt4BRgQWeWo/h8hkYVlVlmJP13HxJ2W8fQJqxi34=)
                          4: q3PjiJcA5Wmvu-x4hS5Ctn6vg7k.roa (hash: aR28mDR0AXgw+ne2p9IcwrnOZCQ+luqP2WRf/HY4Z7Q=)
                          5: r5OFA9cpMWJty40elGsq4Gpz0C4.crl (hash: jQZrPkA7vCP46KPh7XtmRgtILqKib1gQW9l7yULYJiI=)
                          6: vn8OwjKW13Vvv7-w646PZQwlT1g.roa (hash: SQoW5zSKhm7XP9vCmJ5BfcEIft5q/8KQA6dRhI8YlXQ=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2e:99:7c:ad:60:fe:a2:3c:07:27:ec:b2:19:02:2f:a7
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=af938503d72931626dcb8d1e946b2ae06a73d02e
        Validity
            Not Before: Apr 13 10:02:12 2025 GMT
            Not After : Apr 14 10:02:12 2025 GMT
        Subject: CN=70ed25e17b2ba1f71ef018e18e4620013b5a06b8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:dc:30:23:aa:4c:72:f3:42:eb:49:4f:34:45:4e:
                    84:b0:c0:4e:55:84:37:4c:2d:60:8a:14:70:bc:98:
                    37:23:2d:cb:ac:1d:71:37:7a:d6:d3:ff:02:1e:2c:
                    45:0b:e1:a8:c0:72:46:35:6a:df:8a:83:2a:62:0e:
                    ba:06:fe:46:03:ea:d7:81:14:82:91:72:aa:48:ce:
                    b9:2e:37:6d:d2:28:a2:1f:ea:30:95:d2:ca:7c:7d:
                    20:c0:79:b7:82:38:2c:dd:73:77:d4:2c:45:db:8c:
                    30:18:e0:a2:e8:a2:2a:73:f4:bd:b9:b8:ca:52:0e:
                    cc:94:7e:d3:19:15:47:65:cd:b7:61:b7:17:20:f8:
                    1c:c8:2c:05:1b:ec:40:3a:b5:a6:3c:53:ed:41:32:
                    ec:3f:6d:8d:a0:24:ac:99:4b:5d:4d:5b:05:30:05:
                    d8:b4:d5:f2:f6:5e:5c:b5:49:f1:7a:6b:93:8d:66:
                    2b:75:8c:df:9d:8d:69:f2:98:fc:10:2b:7e:cf:7a:
                    3c:c1:90:18:7e:96:9a:b6:96:d8:7f:cf:04:15:62:
                    aa:29:c7:26:9f:9b:ec:85:65:7c:df:da:1a:e3:4a:
                    df:f9:ea:47:92:dd:51:02:f2:75:40:6b:99:f6:42:
                    1a:08:3e:47:ee:09:7e:12:c5:a8:34:6f:52:c3:4d:
                    1d:5d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                70:ED:25:E1:7B:2B:A1:F7:1E:F0:18:E1:8E:46:20:01:3B:5A:06:B8
            X509v3 Authority Key Identifier:
                keyid:AF:93:85:03:D7:29:31:62:6D:CB:8D:1E:94:6B:2A:E0:6A:73:D0:2E

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/r5OFA9cpMWJty40elGsq4Gpz0C4.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a6/7e6369-5adb-45cd-bd2f-3b8b0d1a59a9/1/r5OFA9cpMWJty40elGsq4Gpz0C4.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/a6/7e6369-5adb-45cd-bd2f-3b8b0d1a59a9/1/r5OFA9cpMWJty40elGsq4Gpz0C4.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         34:93:88:51:34:d1:10:d3:7e:89:b2:69:79:c8:3a:b6:73:4f:
         61:93:7f:71:24:00:4a:5e:5b:71:23:f9:b0:0b:4d:b9:fa:31:
         b0:29:95:f1:05:ae:2b:9b:ff:c4:8b:51:7e:c1:15:5e:dc:df:
         da:0d:7b:db:86:a1:68:1d:8f:93:ea:9b:35:1f:ef:90:41:4f:
         c9:6a:77:2a:b5:cd:1c:f2:27:b0:eb:ae:31:62:21:85:c6:1a:
         f9:ec:43:cc:b3:56:71:5d:95:ee:53:40:d9:19:48:65:63:dc:
         70:4e:50:f0:86:65:8f:2a:ae:9e:90:25:56:63:ab:65:fc:02:
         7b:00:81:fa:c0:bd:46:d5:44:5f:06:e0:13:a7:37:cf:43:bd:
         cf:34:74:f6:36:56:3e:69:cf:4c:a3:66:c3:69:6e:1b:ca:d3:
         9e:11:ea:56:6e:eb:80:8d:45:c6:98:c8:03:79:b3:9d:00:91:
         5b:65:c8:2c:36:85:c6:0b:10:ac:2b:6c:6a:2a:6b:98:21:31:
         9e:f0:52:62:77:08:55:dc:23:93:b5:77:4c:77:c9:98:e3:03:
         c3:6d:7b:77:60:5c:dc:ff:f4:93:40:97:09:06:e8:89:58:a9:
         14:b7:a9:1a:03:54:2b:b0:cb:77:cf:e8:70:79:d2:b5:1c:db:
         e6:62:d7:83
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----