Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a9/e17714-467b-4433-9b7d-a6b991f4faf8/1/Skcc1s5gq-3XR2KxAapeb0IH784.mft
File:                     Skcc1s5gq-3XR2KxAapeb0IH784.mft (raw, json)
Hash identifier:          PfXRhm7DrV38YXdVqLcKs58RfUz5SjhU8OGx5yqxZqI=
Subject key identifier:   DF:AE:C7:B7:AF:32:90:7B:7F:A2:8C:01:BF:09:F5:E3:75:E1:6A:D3
Authority key identifier: 4A:47:1C:D6:CE:60:AB:ED:D7:47:62:B1:01:AA:5E:6F:42:07:EF:CE
Certificate issuer:       /CN=4a471cd6ce60abedd74762b101aa5e6f4207efce
Certificate serial:       01962F3D5F5734E15D17B34FBA9438D3889D
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/Skcc1s5gq-3XR2KxAapeb0IH784.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/a9/e17714-467b-4433-9b7d-a6b991f4faf8/1/Skcc1s5gq-3XR2KxAapeb0IH784.mft
Manifest number:          0B44
Signing time:             Sun 13 Apr 2025 13:01:13 +0000
Manifest this update:     Sun 13 Apr 2025 13:01:13 +0000
Manifest next update:     Mon 14 Apr 2025 13:01:13 +0000
Files and hashes:         1: 8a7Shw-C7t8tDg8xa-1FGikOXPc.roa (hash: 4edDmS0LETRqSpGQGFtoKLhIM6xiHOAiP43PkbiFy4g=)
                          2: A9GxPF4ifZ6rbABmHPjtyPKjmzE.roa (hash: W77hd6FGDraLnDkaoT1pKx2we4vpUTM+eeqG9pbSJEo=)
                          3: DCQBlEbEwUGmnDibgcct5WXqQ9w.roa (hash: 2loNvmo8igx2IH1TUeYoiocdqVl5ys5Nj/gH2QT5uEs=)
                          4: Ec-3R5lSbUg4nkiWhBSyhOomcnQ.roa (hash: 62Xy6RK/IfEoVB5QCyI3LUCOJ3jLbPB31KKuSd8Y3RM=)
                          5: FvcaLEo9ePCgEvBVIK2eI87VCIQ.roa (hash: tEu/ql9ub4L5vy+BTuIysc1oUr/aYIo+MTuSlbcYBuk=)
                          6: GAnOR60hpofm0szlGWoPLIE5k9U.roa (hash: lr43p+6HKeY7jXAlLyQZ1kcGKOOPGZSL2OJ25R36SAo=)
                          7: IPFcr3SVsMO45CcvgFBNdZXFKXs.roa (hash: /7VeIgyIKlw9hTj1q7qRAKWUwYWQVMZL16M4EWKXr70=)
                          8: Rtf-eqgW1jg7kzfL0pg8e63I-5M.roa (hash: IMz1jRwRZYT/rMcvQ4nY+BdL0NQuZlG7iPglwgBzyqQ=)
                          9: Skcc1s5gq-3XR2KxAapeb0IH784.crl (hash: IKkp+wHcYsnC65J+lAxF0gI4QzsyVeBTtI8l03FQeh0=)
                          10: aqxiXCKg8wILOiiXb3CbjFknkz0.roa (hash: yaEb+yV9BvpFXZongqAOcwN1zzlRTWmLt/Rv8aKMq6E=)
                          11: cYGTSChE9gFQuUNQB0z3uVeo_M4.roa (hash: oMlb77CshXZ5OhhRrgeA3KmMtc/wbw1QuqBFiLFBoVI=)
                          12: fXIkEQH3meKCBAEQ5mXacq0TJ20.roa (hash: rnj1CDmi4d3j1os+cxi9WBUMoxTK5VvPgUCy380Y0oI=)
                          13: p25F4lxe6nXngKaRbux6XPZ5x1U.roa (hash: I4gYijlDBFf9xEaj+NrtUgL1crcekBLLnZdYciaAwRg=)
                          14: pa8fQ4jOrZ59vAyb7Lg7bj_QEgQ.roa (hash: Ep011ixCtG+lu/klHXgc5PQt2d4i1uDvMubTIvs6Oro=)
                          15: qGL-UUbfc2n5gMthqcDrY6oqiRI.roa (hash: fb04IIPduA2+NhPfcjizdhoAsQqWUl17Qoy+hMnSrwg=)
                          16: toUQ0_iu6duuq_aTFgLEWgwtLpw.roa (hash: kGnBtrL9aHFWQFQVLy+h7pb0Fwh4bSr9itiOACSqYyk=)
                          17: twRuprVXnPVVcyrSMrNa_0_uqhM.roa (hash: nog8tSBlkAVSJF5Qw+uLxzczszHatj2ld99hU2zis/0=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2f:3d:5f:57:34:e1:5d:17:b3:4f:ba:94:38:d3:88:9d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4a471cd6ce60abedd74762b101aa5e6f4207efce
        Validity
            Not Before: Apr 13 13:01:13 2025 GMT
            Not After : Apr 14 13:01:13 2025 GMT
        Subject: CN=dfaec7b7af32907b7fa28c01bf09f5e375e16ad3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bc:eb:29:aa:48:a7:01:09:e6:9e:3e:fe:6e:10:
                    79:cc:fc:42:f9:82:83:0d:bc:14:5c:c6:b3:e0:c6:
                    9a:ba:ca:d7:ca:b8:04:59:60:20:37:c0:70:7e:31:
                    79:1b:70:de:81:3a:e2:2d:7c:f0:2c:c2:e9:95:eb:
                    83:d1:2e:5e:63:24:e5:e4:5c:e8:27:80:cc:5f:f2:
                    bb:07:21:a8:fe:37:da:9e:27:07:d3:5c:d8:37:4a:
                    b3:e9:d7:68:57:d1:bd:7d:0a:59:b3:3f:bf:8c:d5:
                    15:2c:66:d7:9b:2f:61:ba:c8:a7:cd:63:6e:1b:29:
                    bd:d8:d2:e3:75:86:8a:5b:09:7c:61:22:c9:a7:b5:
                    78:6b:82:60:f0:1a:3d:71:09:b7:09:56:6d:71:86:
                    e6:5e:3c:dc:22:3b:8a:6d:5e:df:6a:fd:f5:06:72:
                    76:74:4f:67:c6:e4:31:8f:7a:42:66:49:f6:19:64:
                    7a:07:c9:fd:63:f5:27:92:07:5e:08:80:d3:ca:68:
                    e6:a9:bb:fd:96:0a:5a:85:fc:5e:10:3c:a1:fb:03:
                    55:07:d9:27:b1:34:11:b8:50:45:3e:c5:c4:37:b3:
                    23:9b:a0:2f:fd:0d:c7:cf:db:64:c0:f9:6e:fd:5d:
                    66:78:29:fe:98:1f:2a:76:e8:c7:52:aa:38:65:42:
                    02:3b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DF:AE:C7:B7:AF:32:90:7B:7F:A2:8C:01:BF:09:F5:E3:75:E1:6A:D3
            X509v3 Authority Key Identifier:
                keyid:4A:47:1C:D6:CE:60:AB:ED:D7:47:62:B1:01:AA:5E:6F:42:07:EF:CE

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Skcc1s5gq-3XR2KxAapeb0IH784.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a9/e17714-467b-4433-9b7d-a6b991f4faf8/1/Skcc1s5gq-3XR2KxAapeb0IH784.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/a9/e17714-467b-4433-9b7d-a6b991f4faf8/1/Skcc1s5gq-3XR2KxAapeb0IH784.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         55:37:58:c7:d8:da:14:fc:4c:a5:7b:5f:94:a3:2d:5e:eb:e8:
         d4:79:97:15:98:fc:c2:03:91:85:ac:73:3d:58:cb:cb:2d:76:
         fb:c1:11:95:42:8d:09:ff:32:9f:fc:f3:5f:d7:a4:d5:81:26:
         ca:11:23:3b:2b:e1:76:b8:6a:c2:89:65:4d:bc:b8:34:f9:f9:
         41:28:c9:d6:f8:06:80:42:72:4d:ae:25:78:4d:d6:d5:66:2a:
         23:7d:a7:1d:6b:c8:85:95:81:e5:b0:ef:2c:01:91:8b:ba:5f:
         57:27:f2:f4:ab:1f:49:44:2b:9c:a8:9b:35:52:3b:da:b4:ae:
         bb:b6:af:96:99:44:46:f5:f5:77:d6:f3:2a:16:84:cd:7c:3c:
         3d:b3:e3:1d:16:d8:6b:f0:51:29:4b:3b:63:c8:91:39:8f:0a:
         37:53:64:4a:f4:0a:9e:ea:d5:fe:e1:7f:e0:16:09:3b:6f:28:
         53:f5:2f:78:69:1d:bb:9f:cf:4b:bd:ba:a9:98:36:a0:43:64:
         88:75:8a:b8:e8:d8:a7:41:21:45:e2:f2:2e:73:a2:74:84:34:
         07:1d:6a:8a:95:79:f9:ae:b6:77:cf:45:22:dd:ce:90:da:0a:
         6a:d5:3b:3f:c7:f2:06:fa:7a:e9:39:40:b6:76:a5:cb:1f:c1:
         f7:54:7b:eb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----