Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b1/7916cd-4d2f-4f52-aeac-f1e9bc41d92f/1/Mu1nAC3HMH6FY7bkk0zNVyOkTz4.mft
File:                     Mu1nAC3HMH6FY7bkk0zNVyOkTz4.mft (raw, json)
Hash identifier:          SZ6FTrmag0AAHw+9GsLhgcOPUQWCPGOwYf0KoSasCdU=
Subject key identifier:   B2:14:FA:82:5F:13:85:23:7C:A7:AF:CD:0C:07:04:CB:CD:27:F2:18
Authority key identifier: 32:ED:67:00:2D:C7:30:7E:85:63:B6:E4:93:4C:CD:57:23:A4:4F:3E
Certificate issuer:       /CN=32ed67002dc7307e8563b6e4934ccd5723a44f3e
Certificate serial:       01962E9932BED0CC4E9A89553B09E7978516
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/Mu1nAC3HMH6FY7bkk0zNVyOkTz4.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/b1/7916cd-4d2f-4f52-aeac-f1e9bc41d92f/1/Mu1nAC3HMH6FY7bkk0zNVyOkTz4.mft
Manifest number:          1125
Signing time:             Sun 13 Apr 2025 10:01:54 +0000
Manifest this update:     Sun 13 Apr 2025 10:01:54 +0000
Manifest next update:     Mon 14 Apr 2025 10:01:54 +0000
Files and hashes:         1: 1UnYoe8trzW_GgSpfZGfv_JmHSs.roa (hash: GL46oY9ft0jCbwWPIAjk8KgYcddvUrm4Q8zoPC/vajY=)
                          2: F7P27joXZG2fOKvUgJ2c9GRp2Fc.roa (hash: cui3T69juyxfuuKRDXOJBwPcUU7RywnAUmPOHsvMScE=)
                          3: LHjpAYfuBzZ_RF5-cYOqcdg5XWY.roa (hash: clT3oz7MTlFepMOgAgzqz4bDDX9luSGN1e4LPGs/Uas=)
                          4: Mu1nAC3HMH6FY7bkk0zNVyOkTz4.crl (hash: +YEfj7CtG7QWpa+xjGjFGHfH9ltJoIcWsGmWK6cgMN8=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2e:99:32:be:d0:cc:4e:9a:89:55:3b:09:e7:97:85:16
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=32ed67002dc7307e8563b6e4934ccd5723a44f3e
        Validity
            Not Before: Apr 13 10:01:54 2025 GMT
            Not After : Apr 14 10:01:54 2025 GMT
        Subject: CN=b214fa825f1385237ca7afcd0c0704cbcd27f218
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c9:95:68:5f:37:01:c8:a9:2c:a2:f2:63:4a:88:
                    1f:da:21:8e:04:ee:aa:49:6e:5d:86:ed:c9:6f:b9:
                    e2:c7:ee:28:88:51:e7:1e:85:58:4c:29:a1:2b:d3:
                    9d:f1:22:7a:99:da:20:f6:7c:53:bf:e7:a6:1b:cd:
                    72:f5:5c:29:cc:a0:99:af:cf:43:82:25:7e:db:59:
                    1f:bb:0e:15:4d:ed:65:1e:54:13:a3:d4:01:3a:b6:
                    00:ff:17:a3:46:86:de:5e:94:f2:66:5b:69:de:30:
                    c0:f1:8c:e7:f9:cc:e4:df:82:26:23:0a:3f:fa:e5:
                    6b:ea:6c:66:bd:8e:39:d9:e7:5d:99:51:05:a3:0e:
                    dd:12:80:6f:44:0c:d4:6b:e8:fd:f4:f8:f1:f7:cd:
                    8a:05:47:0f:9c:34:12:23:0c:f5:aa:cd:64:b9:4c:
                    c5:78:f3:25:25:18:1f:33:b2:76:16:49:a2:be:41:
                    16:b0:34:4a:a5:cb:ea:12:f4:bf:0e:3d:55:4b:14:
                    32:2e:9a:22:74:4f:e0:36:ad:9d:35:36:e5:50:29:
                    e5:99:f7:64:05:5f:3e:89:17:6f:2b:2a:63:e8:0f:
                    eb:19:4b:cb:c3:1e:55:94:72:9d:6d:5f:ab:4f:a9:
                    e1:6a:73:ce:e4:f9:c5:51:24:52:f4:8d:2a:6b:3f:
                    90:07
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B2:14:FA:82:5F:13:85:23:7C:A7:AF:CD:0C:07:04:CB:CD:27:F2:18
            X509v3 Authority Key Identifier:
                keyid:32:ED:67:00:2D:C7:30:7E:85:63:B6:E4:93:4C:CD:57:23:A4:4F:3E

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Mu1nAC3HMH6FY7bkk0zNVyOkTz4.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b1/7916cd-4d2f-4f52-aeac-f1e9bc41d92f/1/Mu1nAC3HMH6FY7bkk0zNVyOkTz4.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/b1/7916cd-4d2f-4f52-aeac-f1e9bc41d92f/1/Mu1nAC3HMH6FY7bkk0zNVyOkTz4.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         7e:9d:1f:ff:66:2f:5f:29:19:da:9a:22:59:11:df:94:f6:c8:
         1a:2c:b5:73:09:12:c7:90:d9:70:aa:0b:88:12:81:37:b6:7b:
         25:b0:b6:72:56:80:cf:b8:87:78:c3:22:07:20:2c:14:ba:94:
         90:2f:b8:5b:df:9b:2e:0a:0b:90:27:a0:99:93:6e:a0:ad:34:
         e5:d7:f0:15:4e:df:b0:b5:1e:e0:fa:6d:ef:7d:bd:3c:28:d4:
         48:44:e0:47:7c:16:aa:5b:dc:fc:de:61:26:88:55:39:11:bf:
         92:1c:91:a7:2e:3a:55:53:54:a8:8a:00:db:ac:11:79:34:bc:
         40:01:2e:d1:3c:f1:08:c9:ba:9a:b4:bd:9b:0d:f9:79:46:0e:
         cd:ff:d9:a7:1c:0a:15:70:24:28:2a:02:ba:0b:e1:9d:2c:a3:
         25:b3:49:81:99:93:9f:8e:79:39:8d:72:45:77:48:67:7e:98:
         7b:ad:50:32:e2:67:69:9c:50:75:7a:22:62:13:a7:83:f8:5c:
         a4:96:52:5c:dd:a4:5e:4b:15:46:7c:39:67:5a:7e:0b:73:fc:
         88:36:eb:15:8a:de:22:23:a7:a2:63:58:6a:79:11:b8:76:13:
         fa:b1:53:c5:38:95:70:70:4e:75:57:e3:73:9f:59:c1:80:00:
         cd:03:57:74
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----