Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b6/1b4708-eef9-49de-b887-f32069ec4ee5/1/V8H-gINkZ0mBatP6ZAmDRfth6fU.mft
File:                     V8H-gINkZ0mBatP6ZAmDRfth6fU.mft (raw, json)
Hash identifier:          kSO6RE6eNiTT8Eq3MggiuRVnvNGEYbfyN6cc8LVPYw4=
Subject key identifier:   01:1B:AA:BF:9A:91:78:8F:CA:B2:52:A8:C9:1E:3D:1F:24:B7:92:F1
Authority key identifier: 57:C1:FE:80:83:64:67:49:81:6A:D3:FA:64:09:83:45:FB:61:E9:F5
Certificate issuer:       /CN=57c1fe8083646749816ad3fa64098345fb61e9f5
Certificate serial:       01962F06B21F91B0975E9CD6360C4A7F9894
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/V8H-gINkZ0mBatP6ZAmDRfth6fU.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/b6/1b4708-eef9-49de-b887-f32069ec4ee5/1/V8H-gINkZ0mBatP6ZAmDRfth6fU.mft
Manifest number:          14EC
Signing time:             Sun 13 Apr 2025 12:01:30 +0000
Manifest this update:     Sun 13 Apr 2025 12:01:30 +0000
Manifest next update:     Mon 14 Apr 2025 12:01:30 +0000
Files and hashes:         1: DtG9QHgbh6DEslt8mTDXVaxdqQ4.roa (hash: FeW6iqctyQqjdDbIjMhTvYTHZA4p9G/jqf5MmgvmOo4=)
                          2: V8H-gINkZ0mBatP6ZAmDRfth6fU.crl (hash: rDclK2L88gdUgG3dJjNlAhAXCJkTQmUMFoewQTeD/bo=)
                          3: VtwjP8CmtTeLWVW9N6o-K_qnKwA.roa (hash: HsIDoGOSVnTIqa9qpiTR9Xg//0nmdy2yaZaBVdQZxQc=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2f:06:b2:1f:91:b0:97:5e:9c:d6:36:0c:4a:7f:98:94
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=57c1fe8083646749816ad3fa64098345fb61e9f5
        Validity
            Not Before: Apr 13 12:01:30 2025 GMT
            Not After : Apr 14 12:01:30 2025 GMT
        Subject: CN=011baabf9a91788fcab252a8c91e3d1f24b792f1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:db:a0:f3:53:2b:84:bf:d7:8a:1b:11:f8:f0:b8:
                    be:ca:75:83:6f:19:5a:79:46:46:25:6a:9e:97:c4:
                    90:5f:4a:28:54:c1:e2:b7:6f:cd:5e:49:ef:96:a3:
                    53:7a:47:7c:21:e2:0f:c7:85:b7:36:6e:9c:14:0b:
                    fc:f5:63:48:c1:ec:87:90:e2:bc:75:dd:8f:7d:fa:
                    06:07:78:2f:33:0d:88:e8:ae:6e:15:26:49:ba:4b:
                    77:d2:93:73:9c:56:c4:69:67:36:2c:d0:64:0a:a6:
                    47:f6:02:2f:52:16:a4:22:e8:69:e0:bc:9d:d3:bd:
                    31:a8:df:84:6d:62:46:4f:d3:ad:b6:9e:3f:74:0c:
                    e1:0a:83:06:40:d4:0a:fc:e3:00:c3:9d:49:74:cf:
                    5f:e0:2a:dc:09:f0:a1:fc:a3:c3:38:2e:77:b3:ef:
                    b9:9e:c2:94:9e:31:80:45:58:21:88:ac:0a:ee:95:
                    e1:59:68:6f:64:a8:9d:78:f6:4f:a2:65:87:99:dc:
                    80:fd:e4:81:e3:cc:0a:d0:0b:10:80:5c:ca:9d:bd:
                    c4:61:a7:79:6a:e3:d4:d4:50:b5:26:d7:07:7a:af:
                    a0:22:22:89:98:60:1f:d9:2d:d9:47:9b:ab:1d:15:
                    3f:8e:98:14:c1:e5:6a:27:75:80:c9:2c:1f:f8:1d:
                    a2:9b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                01:1B:AA:BF:9A:91:78:8F:CA:B2:52:A8:C9:1E:3D:1F:24:B7:92:F1
            X509v3 Authority Key Identifier:
                keyid:57:C1:FE:80:83:64:67:49:81:6A:D3:FA:64:09:83:45:FB:61:E9:F5

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/V8H-gINkZ0mBatP6ZAmDRfth6fU.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b6/1b4708-eef9-49de-b887-f32069ec4ee5/1/V8H-gINkZ0mBatP6ZAmDRfth6fU.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/b6/1b4708-eef9-49de-b887-f32069ec4ee5/1/V8H-gINkZ0mBatP6ZAmDRfth6fU.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         1a:72:2d:54:ee:a6:a6:14:cb:01:51:51:3c:15:49:57:65:66:
         a0:cf:62:e3:3b:81:f1:8d:e8:b9:00:44:03:3b:bd:8b:f5:c0:
         aa:7a:21:44:47:41:9e:39:63:b8:6b:35:20:33:ac:e1:be:b1:
         d6:be:36:b3:1f:eb:0f:55:fa:7f:31:e1:0c:89:01:e5:cf:e3:
         e1:0a:ad:b0:52:3e:15:46:74:95:8e:6a:9e:1c:73:9a:b9:e3:
         16:79:f1:d5:ea:64:40:95:3a:b8:7b:d2:46:71:ae:38:11:e0:
         da:08:a7:34:f8:fb:91:1a:a5:82:7d:e0:41:6b:ba:e5:7d:a1:
         04:7d:42:30:5f:ae:80:40:7e:ff:ea:74:9d:fe:bd:22:2b:de:
         40:51:7e:32:76:7c:94:be:cb:3e:6f:23:30:d6:d3:c1:a9:42:
         51:75:fe:c0:b6:45:2d:1a:77:f1:14:19:4b:b8:f2:ba:8c:89:
         45:14:80:01:ff:ee:97:f2:51:95:37:69:34:dc:88:c5:ba:b0:
         ab:65:41:99:40:ae:94:96:8e:5e:f6:30:06:ba:0c:c4:09:bf:
         c9:de:3a:ff:6c:47:00:92:10:02:01:2e:8d:71:93:68:88:b0:
         56:66:b4:90:7c:0b:10:ff:6f:f6:49:e0:2a:3e:c3:f2:d0:80:
         ae:b1:f9:07
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----