Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b6/690357-dfbe-4d86-afd6-9164e352a83c/1/4puawu9jG5LoL1ldc-R5LIFuxuY.mft
File:                     4puawu9jG5LoL1ldc-R5LIFuxuY.mft (raw, json)
Hash identifier:          eOhMfUF0daXzhavJdZndQWDlE4jZy2PJUDyYSERzMSM=
Subject key identifier:   C4:8F:AD:7B:68:50:84:0B:9F:8E:30:B9:81:85:96:3C:79:35:2C:E7
Authority key identifier: E2:9B:9A:C2:EF:63:1B:92:E8:2F:59:5D:73:E4:79:2C:81:6E:C6:E6
Certificate issuer:       /CN=e29b9ac2ef631b92e82f595d73e4792c816ec6e6
Certificate serial:       01962E991F9F28B5F5EF8E7AE22DF0F084DC
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/4puawu9jG5LoL1ldc-R5LIFuxuY.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/b6/690357-dfbe-4d86-afd6-9164e352a83c/1/4puawu9jG5LoL1ldc-R5LIFuxuY.mft
Manifest number:          0BD6
Signing time:             Sun 13 Apr 2025 10:01:49 +0000
Manifest this update:     Sun 13 Apr 2025 10:01:49 +0000
Manifest next update:     Mon 14 Apr 2025 10:01:49 +0000
Files and hashes:         1: 1-HS-GAtu0xO4tX9gMBajYvH0eDY.roa (hash: 3G/k4gvGo7QrrbEOeGgh3YtrGJPVGEtXQYdtVP2LwmY=)
                          2: 4puawu9jG5LoL1ldc-R5LIFuxuY.crl (hash: 9PVtFrpf4t33nXuW2ozJ+4ECnP5ocM59GpRTpTfFFNw=)
                          3: EBmgons8smLjSy_pC81B7nZjG3w.roa (hash: zpgv0UbTTPAH0iIRbzl1hsN1Wy449Ae/Kgm8XxlzuA4=)
                          4: X7I_6O60aP9OaBtbJevHcrghsuE.roa (hash: hR7L9FjeYMdP71zS9N34E835iFleUqKlYe8PrU5+gmY=)
                          5: yI5Nbp0-uf0q4zk47pCiYdnE9hQ.roa (hash: BKzz9xX/v8G21Kss5sh+1KuOPfvgIR81jj3LRU4Atjw=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2e:99:1f:9f:28:b5:f5:ef:8e:7a:e2:2d:f0:f0:84:dc
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e29b9ac2ef631b92e82f595d73e4792c816ec6e6
        Validity
            Not Before: Apr 13 10:01:49 2025 GMT
            Not After : Apr 14 10:01:49 2025 GMT
        Subject: CN=c48fad7b6850840b9f8e30b98185963c79352ce7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bc:01:78:a7:97:6c:25:a7:8d:59:06:4e:c6:9e:
                    ea:53:97:93:92:ff:da:48:f5:00:cb:ad:4e:56:cc:
                    75:0e:af:a3:83:ae:a2:e6:b6:9f:55:47:27:2e:c3:
                    2f:51:7f:9e:64:13:5f:dd:e5:28:d3:71:d0:76:1c:
                    95:6f:d1:41:34:65:ce:93:dc:59:29:2c:04:4f:a9:
                    02:17:68:b7:b1:ae:f5:87:42:b0:d4:84:5c:15:7d:
                    4a:db:3c:83:4b:b1:aa:bf:22:ca:b9:16:27:7c:a6:
                    d3:f5:a1:19:d2:df:28:42:fd:b3:91:43:06:31:40:
                    da:86:66:00:17:37:45:74:71:a4:41:55:be:c0:34:
                    99:ae:05:c4:d5:54:6a:57:00:5d:95:d7:bc:dd:23:
                    78:54:28:bb:f6:09:11:f0:31:0e:8e:5b:c4:cf:f7:
                    3b:5b:b2:51:b6:cb:4e:d7:f1:44:db:14:b3:4a:63:
                    ed:2b:7b:30:e2:41:15:40:e7:9b:38:56:d1:6f:38:
                    49:66:66:dc:62:86:01:dd:ab:11:2f:ea:7e:bf:61:
                    03:83:b5:da:ce:38:b1:2a:45:cb:a3:7f:ed:f6:39:
                    b3:a8:bd:12:c4:0f:02:5c:8c:cb:8c:a5:ec:5a:c0:
                    de:95:53:ca:01:66:56:58:bd:83:d3:bd:fa:7e:df:
                    0c:4b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C4:8F:AD:7B:68:50:84:0B:9F:8E:30:B9:81:85:96:3C:79:35:2C:E7
            X509v3 Authority Key Identifier:
                keyid:E2:9B:9A:C2:EF:63:1B:92:E8:2F:59:5D:73:E4:79:2C:81:6E:C6:E6

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/4puawu9jG5LoL1ldc-R5LIFuxuY.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b6/690357-dfbe-4d86-afd6-9164e352a83c/1/4puawu9jG5LoL1ldc-R5LIFuxuY.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/b6/690357-dfbe-4d86-afd6-9164e352a83c/1/4puawu9jG5LoL1ldc-R5LIFuxuY.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         33:e1:41:0b:8f:de:8b:2f:f0:f1:d4:73:e8:57:32:80:f3:20:
         a6:a5:9f:e0:9b:ae:2f:7f:9a:f2:ba:04:de:09:a4:64:7c:47:
         8f:cb:cf:ae:36:96:56:11:c3:aa:40:f2:f1:8d:27:c0:a8:b1:
         03:aa:eb:b8:d8:a3:9c:2d:a8:35:bd:ac:0b:db:5e:6b:7f:b0:
         1f:39:6f:db:22:6a:f2:e4:5f:e9:c8:4f:a7:f2:d0:4b:9d:0b:
         92:41:a7:3a:dd:70:cf:9c:2d:c0:85:c0:a9:f2:4f:4d:d8:06:
         0b:cb:52:c3:c5:10:10:0b:2c:06:09:cb:67:09:46:60:e7:47:
         ea:68:c8:3f:61:a1:54:ae:ce:1c:82:27:97:fe:d4:80:d0:df:
         97:36:18:51:f3:1f:a0:3d:21:06:b6:73:18:4b:c4:36:42:08:
         66:20:08:6d:f9:4a:ea:ae:90:0c:7f:bb:0d:99:06:8b:01:6d:
         cf:11:da:a8:91:b3:51:f2:3d:5f:70:91:9d:63:a5:d9:f2:fb:
         29:58:8f:93:04:fc:c7:46:77:6e:25:54:22:9f:91:ce:ad:1b:
         ae:52:58:89:51:06:65:0a:42:6c:c6:f4:00:25:ab:f0:6e:24:
         0e:fa:d6:75:b6:0b:c0:b4:d1:6a:9e:1e:70:3a:19:9e:34:19:
         a9:c2:f0:7e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----