Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ac/1bcb2d-f58b-4e44-b133-dfcbdf3b1058/1/odAxU3OwmwYapZ8SnVkuq_ezqu8.mft
File:                     odAxU3OwmwYapZ8SnVkuq_ezqu8.mft (raw, json)
Hash identifier:          xOc9xcu6ugYY7g+aLog5mhFzutod0NVe3vDdO16bf0g=
Subject key identifier:   CF:EA:44:CA:8A:88:8D:89:E2:D1:DD:99:8C:C1:42:CC:9A:08:E4:92
Authority key identifier: A1:D0:31:53:73:B0:9B:06:1A:A5:9F:12:9D:59:2E:AB:F7:B3:AA:EF
Certificate issuer:       /CN=a1d0315373b09b061aa59f129d592eabf7b3aaef
Certificate serial:       01962F74B3D70519F93E78377D0A69203240
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/odAxU3OwmwYapZ8SnVkuq_ezqu8.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/ac/1bcb2d-f58b-4e44-b133-dfcbdf3b1058/1/odAxU3OwmwYapZ8SnVkuq_ezqu8.mft
Manifest number:          14FB
Signing time:             Sun 13 Apr 2025 14:01:39 +0000
Manifest this update:     Sun 13 Apr 2025 14:01:39 +0000
Manifest next update:     Mon 14 Apr 2025 14:01:39 +0000
Files and hashes:         1: H4Im8Swj1FSuJyYqN8JPK7UpVDU.roa (hash: jQUdvjp+XMu9RhMc9HBGBO2BWt37hObPuG6tYSQQ2Vc=)
                          2: NqcS3iBK8U8flvef0Nqw2TVfi60.roa (hash: j8yFbIlyMimvTa7T3CseeI21D35WgrPORHectZm7+m8=)
                          3: RoGTylsAvJ0kfUqQmOGMGPl4lMw.roa (hash: M6AyczLNwaE/pwZJ9qp9kSzxL5JgaMLnNyyEPKCm858=)
                          4: odAxU3OwmwYapZ8SnVkuq_ezqu8.crl (hash: lAP2CcoQyait0GKYDJyCuR5T/xFW1MC4AWCgBoitG2E=)
                          5: vzGcID_N34zQFrVI3nMugUoVewA.roa (hash: s5waq9wx34dg2rh+ta7n4AjQKU2ote6EQ3de9ofeRpo=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2f:74:b3:d7:05:19:f9:3e:78:37:7d:0a:69:20:32:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=a1d0315373b09b061aa59f129d592eabf7b3aaef
        Validity
            Not Before: Apr 13 14:01:39 2025 GMT
            Not After : Apr 14 14:01:39 2025 GMT
        Subject: CN=cfea44ca8a888d89e2d1dd998cc142cc9a08e492
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a8:25:f9:5d:6a:3d:92:23:24:c3:8b:4b:48:91:
                    28:30:05:52:24:bd:fd:71:ab:ea:5a:02:34:e8:de:
                    89:cb:bd:83:d0:c5:89:45:d9:99:b0:c6:f8:16:2a:
                    15:9f:4e:f6:3b:55:d8:84:52:c6:f8:67:11:80:df:
                    2b:19:e0:56:ea:03:ce:0c:ca:6e:b6:76:57:e5:b7:
                    90:37:9a:ee:20:c8:e3:3c:af:74:8d:4f:84:0f:e2:
                    6e:74:65:4b:bb:19:83:14:6e:ba:4b:3d:4d:12:52:
                    a8:c3:dc:35:64:a6:c6:38:f9:d9:f2:5f:cb:6a:a1:
                    b1:7c:32:5b:8b:29:d7:c5:14:7d:b1:36:4d:ab:38:
                    98:6b:93:2c:3d:b4:9e:34:0e:e2:51:e4:bc:69:cc:
                    34:ba:2f:cc:07:4f:a5:ac:16:f5:a9:93:a4:dd:f2:
                    f5:74:e0:ec:24:bb:40:23:1c:95:c4:65:f7:4a:9a:
                    09:ff:43:a4:0d:bc:2b:d9:6c:ec:d0:ed:6b:ee:33:
                    21:35:0c:54:e7:0b:0c:f6:30:a7:95:ab:b9:14:22:
                    cb:82:ac:a8:ee:4a:05:37:e6:c0:08:29:7d:78:11:
                    88:bb:02:b8:1b:c8:e7:98:9f:12:cf:6b:1b:dd:fc:
                    59:15:02:63:e3:e8:55:e8:95:7f:3c:a0:73:e5:d3:
                    14:15
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CF:EA:44:CA:8A:88:8D:89:E2:D1:DD:99:8C:C1:42:CC:9A:08:E4:92
            X509v3 Authority Key Identifier:
                keyid:A1:D0:31:53:73:B0:9B:06:1A:A5:9F:12:9D:59:2E:AB:F7:B3:AA:EF

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/odAxU3OwmwYapZ8SnVkuq_ezqu8.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ac/1bcb2d-f58b-4e44-b133-dfcbdf3b1058/1/odAxU3OwmwYapZ8SnVkuq_ezqu8.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/ac/1bcb2d-f58b-4e44-b133-dfcbdf3b1058/1/odAxU3OwmwYapZ8SnVkuq_ezqu8.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         54:18:37:f1:fc:89:73:c0:1f:d8:a5:17:6d:24:c7:66:bd:be:
         76:4f:c9:0a:13:5d:96:ed:5c:45:66:5d:53:b2:72:92:a8:b0:
         78:fa:20:fa:f5:86:df:da:38:65:7e:1c:9e:87:4a:12:f3:5d:
         70:a0:1c:65:89:e1:6d:b7:87:55:ef:0f:98:9b:ea:72:d5:08:
         45:c5:87:d3:14:60:dc:5f:bf:63:dd:27:97:f5:2c:f5:39:00:
         11:7a:b2:38:60:8e:89:64:d1:b0:de:70:81:1b:4a:ae:ba:3b:
         c7:3b:a2:f6:75:21:c7:0e:24:e4:e0:7d:14:b6:06:24:e1:72:
         cc:a6:db:c9:e4:18:90:be:26:42:9c:92:39:16:94:76:68:e4:
         c5:7a:4f:14:b3:7c:f9:c1:06:d2:40:76:fa:2d:06:9b:fb:f5:
         ce:13:ff:93:7b:10:fa:00:3a:23:5b:43:cc:1a:d1:9e:c7:64:
         d4:a1:e0:bf:11:cf:50:9b:84:a5:5b:0b:13:3e:b1:7f:de:fb:
         7d:8b:f3:3f:b1:e7:1b:e7:ad:8c:e4:9c:a1:d0:f3:62:18:2c:
         f9:dc:55:85:09:e3:75:f0:a7:c0:55:c2:e7:4d:04:49:11:22:
         c6:b4:ff:4e:9b:ac:85:b0:bd:1e:50:4f:47:81:77:aa:a2:b1:
         90:31:a7:f2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----