Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b1/979bdb-01a3-4d17-8746-fe44772d5ae1/1/8d15W-NuS1swnryOBOpzlBNccUw.mft
File:                     8d15W-NuS1swnryOBOpzlBNccUw.mft (raw, json)
Hash identifier:          04e3KOh6djQ+SENhytPsuIypD9SUu1YErPqx5e8CQQk=
Subject key identifier:   1A:76:10:70:E9:FA:B5:1E:8D:D3:A6:31:ED:AD:E2:C4:2A:AD:CD:A6
Authority key identifier: F1:DD:79:5B:E3:6E:4B:5B:30:9E:BC:8E:04:EA:73:94:13:5C:71:4C
Certificate issuer:       /CN=f1dd795be36e4b5b309ebc8e04ea7394135c714c
Certificate serial:       01962DF428EE90212BD50A78F10290422BA5
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/8d15W-NuS1swnryOBOpzlBNccUw.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/b1/979bdb-01a3-4d17-8746-fe44772d5ae1/1/8d15W-NuS1swnryOBOpzlBNccUw.mft
Manifest number:          14EB
Signing time:             Sun 13 Apr 2025 07:01:38 +0000
Manifest this update:     Sun 13 Apr 2025 07:01:38 +0000
Manifest next update:     Mon 14 Apr 2025 07:01:38 +0000
Files and hashes:         1: 4ghkRfOquB-e7Fok48kTrT0aVAU.roa (hash: 6SkfRPpDusU3pdgmnRmAtb8LYqLwuaj5aFdgg7X05Uw=)
                          2: 8d15W-NuS1swnryOBOpzlBNccUw.crl (hash: UJ/aR+cMzIwlVnUzfl7D/RfiVdBc3waueLY47RjFZlA=)
                          3: k86L2r6PyseZfyszmOgSsSpazQk.roa (hash: IsdULHTb1wucLEEG+EnermzxJ4zmYkO1E7qf8JXpI3M=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2d:f4:28:ee:90:21:2b:d5:0a:78:f1:02:90:42:2b:a5
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=f1dd795be36e4b5b309ebc8e04ea7394135c714c
        Validity
            Not Before: Apr 13 07:01:38 2025 GMT
            Not After : Apr 14 07:01:38 2025 GMT
        Subject: CN=1a761070e9fab51e8dd3a631edade2c42aadcda6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:94:c7:f9:b7:80:45:aa:41:83:35:22:75:b1:ea:
                    76:a2:f2:e5:a6:a2:38:f2:9d:d5:32:cd:3a:54:41:
                    5c:c9:7b:67:b0:10:59:b4:13:28:3a:93:e1:1e:ef:
                    d8:a1:91:9a:06:a8:3d:3e:03:e6:99:17:68:e1:fc:
                    d2:b5:d0:23:42:f0:00:74:6d:83:ca:ce:4a:ae:87:
                    6a:0c:83:4c:84:c8:5c:d1:e7:1a:40:f4:41:91:71:
                    a4:13:16:0f:09:11:b2:3f:a6:60:4a:03:53:9f:47:
                    98:bf:a1:fb:62:84:cb:32:02:0c:44:8f:0d:ba:9d:
                    16:70:f7:3b:bf:32:7d:39:db:d3:c1:d9:9f:94:22:
                    19:66:ea:98:86:a6:56:63:58:80:18:50:08:22:62:
                    7d:f9:6b:8c:9b:db:06:bd:5f:ea:82:6d:06:a4:85:
                    ab:3d:eb:ef:ea:fa:98:20:6f:62:64:f9:1e:6e:76:
                    11:d3:89:53:ec:31:8e:2d:54:ca:22:2b:01:66:a9:
                    61:49:ed:b4:54:db:8d:bb:6f:f8:e1:4f:4e:d6:b9:
                    8a:7d:12:a1:a5:20:3c:03:ab:c8:8a:11:44:c4:2b:
                    2c:61:82:91:54:2b:ce:07:7a:c5:b9:eb:1c:d2:2e:
                    11:31:b9:0a:a7:31:5f:4d:76:3f:d5:85:d8:1b:a5:
                    6f:e9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1A:76:10:70:E9:FA:B5:1E:8D:D3:A6:31:ED:AD:E2:C4:2A:AD:CD:A6
            X509v3 Authority Key Identifier:
                keyid:F1:DD:79:5B:E3:6E:4B:5B:30:9E:BC:8E:04:EA:73:94:13:5C:71:4C

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/8d15W-NuS1swnryOBOpzlBNccUw.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b1/979bdb-01a3-4d17-8746-fe44772d5ae1/1/8d15W-NuS1swnryOBOpzlBNccUw.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/b1/979bdb-01a3-4d17-8746-fe44772d5ae1/1/8d15W-NuS1swnryOBOpzlBNccUw.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         13:89:7b:59:5c:f2:50:6b:ba:04:97:af:9a:95:92:4d:ee:26:
         b6:83:6c:b4:5f:11:c0:d5:e7:9f:af:e3:e6:53:ea:95:55:4e:
         9a:72:e4:70:79:80:af:55:67:9e:13:32:89:62:85:d2:52:19:
         74:49:e3:9a:fc:3a:2a:4e:71:4d:5f:6e:03:78:b7:73:9c:61:
         5e:f5:f8:7a:4c:f6:f2:06:05:66:9d:5e:85:a9:ef:47:04:a4:
         e8:c8:00:e4:01:dc:b5:3f:95:a8:4e:bf:e1:ad:a7:5a:27:29:
         4e:bd:32:71:b3:af:c7:9f:73:9a:7e:f7:54:5c:2e:34:57:cf:
         e6:c5:c2:83:93:a9:a8:57:e0:75:6d:6a:90:98:dd:ab:cf:ec:
         6a:70:aa:79:c7:9e:5a:8f:d6:c6:1a:04:44:51:28:3e:7a:13:
         ae:4e:a9:27:84:0c:3c:8c:90:2f:07:07:ac:80:ce:89:2f:2c:
         3c:5f:a4:2b:68:af:36:ae:cc:23:17:6b:a1:f7:af:5b:e7:c9:
         a2:7a:2d:c4:e8:98:0e:bf:9d:5a:f5:0c:11:53:09:da:f2:09:
         2f:27:cb:39:f1:e4:b0:d9:d1:33:d1:6f:0d:9b:af:67:49:ba:
         17:78:82:d2:f0:4b:a9:a4:7a:43:05:41:94:d8:d1:a0:02:8e:
         aa:28:0b:b5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----