Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a7/9151c0-3326-4801-9363-c7d19930d66d/1/tOgroXFdaurlsBAnJf_gyDRzXX0.mft
File:                     tOgroXFdaurlsBAnJf_gyDRzXX0.mft (raw, json)
Hash identifier:          MfG0oRBr90b84QIKtbSEpInrLLB+pLOJA1bt/gQevFw=
Subject key identifier:   C0:BD:08:92:8E:38:A8:A1:3A:A1:8B:3F:9A:2F:1B:6B:A6:58:49:7F
Authority key identifier: B4:E8:2B:A1:71:5D:6A:EA:E5:B0:10:27:25:FF:E0:C8:34:73:5D:7D
Certificate issuer:       /CN=b4e82ba1715d6aeae5b0102725ffe0c834735d7d
Certificate serial:       01962E2ADB0742308BFD16A5C93A355148A5
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/tOgroXFdaurlsBAnJf_gyDRzXX0.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/a7/9151c0-3326-4801-9363-c7d19930d66d/1/tOgroXFdaurlsBAnJf_gyDRzXX0.mft
Manifest number:          0CD8
Signing time:             Sun 13 Apr 2025 08:01:22 +0000
Manifest this update:     Sun 13 Apr 2025 08:01:22 +0000
Manifest next update:     Mon 14 Apr 2025 08:01:22 +0000
Files and hashes:         1: 69jsCPkwXK1lmTxeQTyCID9PpjA.roa (hash: h/Q47E5oO3l5JxeekNZr7l4rqZH5SyA0969VUEHNB8w=)
                          2: 9MVV1yAh59mTgEP_W258bMa49_o.roa (hash: iCN3glju44EdxjBrGRw+NZhFmqg56yUA7pS6/PNweyY=)
                          3: AjV2rlIwTElr058YXLjGHHrdXf0.roa (hash: LTFD7RWDdMyUwIhuINghYkedTIuVGScYQK467Diulf0=)
                          4: Dgr2wvOQnRz5hgawqSG0QB7Wpf8.roa (hash: qz1bNfdEE/9TcJfQDqdc+8FtR45UoCnUkyfUGSABkmQ=)
                          5: ObtlGayrPGhbC0NJB3cANhdfN9g.roa (hash: IXODRFBoDBQAcQ/y7+mqgK85yVkykmHrcIsLk/+rl+k=)
                          6: RzTS_aVg4A3thhT1xHxtMXq_vOI.roa (hash: zu1mzofX6iUkewhCXeSVvIWnMGeLEK4TikiEna45T0w=)
                          7: VifVBKjqmDhUgid5BLElJTuQJo4.roa (hash: WI5+mxqhucetVt6cCUvKQ5QuoJnG/kLcpHeXlC1Yb5Y=)
                          8: agCunAIMbiFUpVXyoVcRfE7xh3E.roa (hash: 12EZuxX19r69+S96SCYBCKtQN4XtGc150mYeWjkdyLo=)
                          9: lKCL8VeF7spgo1KPqTl3MnMrJFU.roa (hash: G5kvKqbW+q0BKre+iGyFYRJgxgTgTCaLSiQqwrZLbuM=)
                          10: tOgroXFdaurlsBAnJf_gyDRzXX0.crl (hash: xYtsiOXDEf6n2r/lloVR3K/QH4D+RRDWm4S2AxRaPj4=)
                          11: wZZIVhI5EfN-k3jGubu94P9ytuo.roa (hash: fmC0r46A5+YZYWIPTFs/O2YKObhY3jYAxJEcyLgw5E8=)
                          12: yX3EF5wX9eXnrzIP9r_Bcz7W9Jw.roa (hash: /9zJEvjaN9ESiBxyrI/Lintckz9va2+vfCnzkJq6r6k=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2e:2a:db:07:42:30:8b:fd:16:a5:c9:3a:35:51:48:a5
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b4e82ba1715d6aeae5b0102725ffe0c834735d7d
        Validity
            Not Before: Apr 13 08:01:22 2025 GMT
            Not After : Apr 14 08:01:22 2025 GMT
        Subject: CN=c0bd08928e38a8a13aa18b3f9a2f1b6ba658497f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bc:4d:93:26:aa:ee:c9:38:41:df:f3:93:71:3c:
                    40:d5:5e:39:1d:a0:64:26:56:9b:89:f9:46:c7:c1:
                    c9:b2:ef:4c:74:72:b3:42:be:29:05:b5:0d:84:6b:
                    8d:28:e2:8a:6e:37:9b:d5:79:b8:b2:a1:10:86:00:
                    ed:e4:b2:b1:65:b9:60:25:e9:9c:53:66:49:ef:eb:
                    cb:d8:34:27:e8:aa:55:ca:6e:30:b8:8a:77:32:41:
                    2f:fb:72:56:f2:9b:05:30:f3:08:06:4c:d8:c7:2e:
                    af:f6:86:0f:5f:51:b1:52:7b:74:aa:86:e6:34:a9:
                    c3:de:9f:b3:3d:71:19:d3:97:f5:b3:2b:f0:b4:6b:
                    f8:03:69:40:83:8b:e0:30:ef:51:06:37:69:4f:54:
                    46:67:56:71:43:a3:76:b6:ca:92:0a:a3:e1:06:7b:
                    fe:03:f1:0d:ca:67:74:e6:60:d5:bb:10:6f:14:e9:
                    5e:4e:a4:4b:4e:2e:37:bb:4b:e2:8a:d2:e3:e9:b2:
                    8d:26:00:40:45:3f:07:d8:71:d1:9c:fb:43:96:be:
                    49:88:72:c7:9e:c1:fe:62:29:3b:a1:9b:45:d6:c2:
                    8c:02:b3:83:bb:15:f7:4b:28:ce:8c:e1:66:b6:b6:
                    a5:26:5d:ad:c2:0d:ff:dc:26:52:19:35:9b:7a:44:
                    99:83
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C0:BD:08:92:8E:38:A8:A1:3A:A1:8B:3F:9A:2F:1B:6B:A6:58:49:7F
            X509v3 Authority Key Identifier:
                keyid:B4:E8:2B:A1:71:5D:6A:EA:E5:B0:10:27:25:FF:E0:C8:34:73:5D:7D

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/tOgroXFdaurlsBAnJf_gyDRzXX0.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a7/9151c0-3326-4801-9363-c7d19930d66d/1/tOgroXFdaurlsBAnJf_gyDRzXX0.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/a7/9151c0-3326-4801-9363-c7d19930d66d/1/tOgroXFdaurlsBAnJf_gyDRzXX0.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         67:b5:67:53:57:7d:44:28:80:90:9c:8b:48:2e:7a:d9:fa:7e:
         14:b1:78:a5:33:a9:99:39:b2:f2:00:63:ed:ab:7a:03:df:7a:
         05:58:94:1b:88:6b:75:29:17:ee:2c:36:d8:d5:b5:42:9a:d5:
         30:9d:04:2f:10:f8:ed:df:9d:9c:4d:61:aa:03:7b:86:2d:f9:
         f0:19:f9:ac:0a:cf:55:2a:b5:a3:d6:0e:75:50:8b:51:ca:0a:
         be:13:a6:a1:bd:06:08:54:bb:85:8c:1d:ab:62:f2:15:7f:b5:
         0b:1a:76:0b:06:33:a2:70:23:10:ae:43:07:c4:6f:8b:f9:b2:
         08:79:d5:b6:f9:3e:05:03:04:b8:b3:48:9a:2c:61:1c:c4:79:
         88:92:1d:13:8c:6c:99:83:34:9a:51:d6:fc:b6:b4:d8:91:24:
         aa:9f:93:81:8e:0f:13:8c:07:c7:b4:36:66:97:90:f5:7a:92:
         dc:7b:a1:ef:16:80:7b:e1:30:e0:37:b2:5d:28:aa:af:18:71:
         9b:23:b0:42:f5:eb:f8:0c:9a:80:12:56:3c:ab:53:dd:d6:d0:
         00:fa:34:47:ec:3f:74:e8:97:ba:68:37:7b:e1:7f:af:25:bc:
         b4:04:73:06:03:6e:be:0c:be:91:c8:94:cc:fb:1a:11:67:8b:
         ea:0c:27:c6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----