Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/aa/1c718d-e7a0-40ac-a181-cbaa42a62727/1/0H3DXrzYjdDiqNs6WghlS8O-AmI.mft
File:                     0H3DXrzYjdDiqNs6WghlS8O-AmI.mft (raw, json)
Hash identifier:          My4pC40ss/vWp32t32XVk+uQD4jh3yD/kZCUbqcAS6g=
Subject key identifier:   9F:F0:BC:DB:A0:65:20:F9:7F:34:2D:75:F4:9D:EE:A0:E7:25:D0:78
Authority key identifier: D0:7D:C3:5E:BC:D8:8D:D0:E2:A8:DB:3A:5A:08:65:4B:C3:BE:02:62
Certificate issuer:       /CN=d07dc35ebcd88dd0e2a8db3a5a08654bc3be0262
Certificate serial:       01962E2B00ADF469CCD0748BC8AD2CC0A5C1
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/0H3DXrzYjdDiqNs6WghlS8O-AmI.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/aa/1c718d-e7a0-40ac-a181-cbaa42a62727/1/0H3DXrzYjdDiqNs6WghlS8O-AmI.mft
Manifest number:          14EA
Signing time:             Sun 13 Apr 2025 08:01:32 +0000
Manifest this update:     Sun 13 Apr 2025 08:01:32 +0000
Manifest next update:     Mon 14 Apr 2025 08:01:32 +0000
Files and hashes:         1: 0H3DXrzYjdDiqNs6WghlS8O-AmI.crl (hash: 9BvxuJThEFIWgS/k4V4k6UYzRLKO4XDsQdVcY7tQ974=)
                          2: UtfGmlfffX0cIYFRWQAmKmCxHBQ.roa (hash: eIoevFtzl4KgjvBzeT/oQJHdGPIhlQ4d3q4XFG6eYig=)
                          3: pkGGNBdhq4ZpQRqIZMsggNSolf0.roa (hash: y34zQyNQE6Dt9rgo+TKZCABmiXucQM6cXI6cZVCrI5E=)
                          4: qMKz0iOTV-AipsqG6OSykAqBmcw.roa (hash: evn2bcSDR90liMyPkIBPgdH2fICEje6rbDEpXsqQ5bo=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2e:2b:00:ad:f4:69:cc:d0:74:8b:c8:ad:2c:c0:a5:c1
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d07dc35ebcd88dd0e2a8db3a5a08654bc3be0262
        Validity
            Not Before: Apr 13 08:01:32 2025 GMT
            Not After : Apr 14 08:01:32 2025 GMT
        Subject: CN=9ff0bcdba06520f97f342d75f49deea0e725d078
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:be:3c:e2:9f:44:9c:4d:5c:9c:8b:cf:0f:36:50:
                    26:09:c9:d1:9f:31:a2:b5:f1:ef:00:8b:bb:fb:0a:
                    82:61:6e:06:d6:34:77:09:bb:a3:d6:a0:a4:8d:2c:
                    ce:82:8d:7f:7a:b9:e6:b4:e5:a9:4c:84:61:5c:58:
                    93:af:ee:2d:15:a4:97:87:77:2d:21:35:79:9d:2f:
                    fc:b3:cd:b3:48:f5:f5:4a:83:9a:96:1b:31:b9:47:
                    82:a1:0c:28:22:b6:14:f8:2d:ec:ed:41:16:f9:b5:
                    a9:6e:25:b8:78:f4:7e:d3:54:36:37:09:25:d3:c1:
                    cb:b5:74:1d:1c:10:28:d8:d6:6f:53:55:52:4b:d0:
                    d0:f0:6f:ea:7a:96:20:ab:c1:35:f3:69:1a:d1:f8:
                    a1:68:41:32:42:fa:37:d5:e9:16:ad:39:26:f9:fe:
                    ad:ed:24:0b:19:b0:45:9f:ff:12:bb:96:19:4c:37:
                    5e:62:a3:98:d3:52:ed:62:21:27:71:05:7f:f0:e1:
                    01:8a:38:b3:4f:c8:c5:3c:9f:ad:25:56:68:b9:f9:
                    48:d4:2c:21:54:2c:84:46:43:1b:82:38:bb:cc:79:
                    55:2b:8d:7e:95:43:94:fe:60:77:e3:f3:f5:be:3c:
                    e1:08:0a:73:67:9c:5c:78:b8:3c:f2:a8:8c:84:ea:
                    34:a3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9F:F0:BC:DB:A0:65:20:F9:7F:34:2D:75:F4:9D:EE:A0:E7:25:D0:78
            X509v3 Authority Key Identifier:
                keyid:D0:7D:C3:5E:BC:D8:8D:D0:E2:A8:DB:3A:5A:08:65:4B:C3:BE:02:62

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/0H3DXrzYjdDiqNs6WghlS8O-AmI.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/aa/1c718d-e7a0-40ac-a181-cbaa42a62727/1/0H3DXrzYjdDiqNs6WghlS8O-AmI.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/aa/1c718d-e7a0-40ac-a181-cbaa42a62727/1/0H3DXrzYjdDiqNs6WghlS8O-AmI.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         67:ee:2f:04:5e:51:62:98:17:15:aa:18:99:fa:30:90:c8:fd:
         1d:98:03:6b:01:50:4d:51:79:91:d7:58:65:71:ce:2e:ad:e7:
         35:67:3a:ec:36:ee:6f:d9:d8:64:0d:64:40:ad:18:54:06:7d:
         51:53:ee:f4:94:3c:d4:d4:52:92:18:75:4f:b8:b4:19:bd:b5:
         f4:b9:2a:93:1a:04:d5:72:3d:0d:b7:51:d6:8b:0d:31:7d:0f:
         f6:65:ce:e2:23:22:92:81:15:fc:97:e8:5e:82:67:e6:f8:0e:
         1c:81:9e:26:71:d0:3f:ef:cc:5e:eb:65:7f:c2:06:dc:83:f1:
         a7:56:6f:a5:92:9a:94:8d:88:69:84:36:58:15:a0:e7:fd:cd:
         72:23:ae:79:14:69:52:e1:af:d7:a9:9c:ff:a5:93:0d:c0:13:
         29:74:d4:50:43:31:38:1f:34:0b:58:0b:0e:13:7f:34:f8:08:
         18:1d:4c:20:9b:5b:32:45:66:8b:2b:fc:e6:b1:aa:d9:d1:a9:
         71:9f:62:22:8e:69:ed:10:13:0b:f5:64:10:24:e6:0e:32:aa:
         10:2a:2e:5f:06:8f:c9:28:6a:7b:3c:41:93:7e:71:4b:be:2a:
         fe:53:6d:d4:ff:35:37:f3:56:5e:d7:7c:e1:9b:b6:17:53:b5:
         63:95:42:fb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----