Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/bc/4ab81e-45b8-41a5-aa5e-5646eedd99bf/1/mUt9MMHE9iQxgtPs09BTn0L6rP0.mft
File:                     mUt9MMHE9iQxgtPs09BTn0L6rP0.mft (raw, json)
Hash identifier:          RG2sQLfUkARCtFaOmn6JghWYHwaaTDNFeIiIuBIpjm8=
Subject key identifier:   DB:EA:33:EA:1D:10:13:92:C1:31:F4:A0:BB:65:FA:F4:87:46:15:6B
Authority key identifier: 99:4B:7D:30:C1:C4:F6:24:31:82:D3:EC:D3:D0:53:9F:42:FA:AC:FD
Certificate issuer:       /CN=994b7d30c1c4f6243182d3ecd3d0539f42faacfd
Certificate serial:       01962F3D39D71E7F62500815330BCAB0BD87
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/mUt9MMHE9iQxgtPs09BTn0L6rP0.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/bc/4ab81e-45b8-41a5-aa5e-5646eedd99bf/1/mUt9MMHE9iQxgtPs09BTn0L6rP0.mft
Manifest number:          14EC
Signing time:             Sun 13 Apr 2025 13:01:03 +0000
Manifest this update:     Sun 13 Apr 2025 13:01:03 +0000
Manifest next update:     Mon 14 Apr 2025 13:01:03 +0000
Files and hashes:         1: 11EUti3lnSrvcME_sLAUVVEJCyA.roa (hash: zosfyuqqMAp/geMMw6u9z8/OyVXxmv9rqLq+GU2ia9c=)
                          2: mUt9MMHE9iQxgtPs09BTn0L6rP0.crl (hash: 8ctwsKXNFMJ9lj6XWvNT4TnF+EBcpzClphNu5wt7wM0=)
                          3: pUNUzoKVem25Y_u6Wr9POh9WQoA.roa (hash: dUP9J5+eurE18pK8nZH6ohMEustwLaoHJPJpeZdkUDY=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2f:3d:39:d7:1e:7f:62:50:08:15:33:0b:ca:b0:bd:87
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=994b7d30c1c4f6243182d3ecd3d0539f42faacfd
        Validity
            Not Before: Apr 13 13:01:03 2025 GMT
            Not After : Apr 14 13:01:03 2025 GMT
        Subject: CN=dbea33ea1d101392c131f4a0bb65faf48746156b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:86:2f:fa:ab:fa:21:a3:1f:f3:d8:4a:94:3e:43:
                    d6:2c:d0:fa:64:2f:24:1d:8b:c1:2c:a8:16:d6:7c:
                    b4:bd:9a:95:b7:ef:b8:47:c7:e6:03:58:8c:2f:59:
                    29:b5:1e:5a:60:b4:3c:5f:79:66:52:77:dc:88:22:
                    b1:da:f2:8a:85:88:79:d7:97:c2:31:38:72:df:f5:
                    7b:b1:ad:8c:9b:57:f6:46:38:4c:3a:0a:6c:f1:d0:
                    b0:f7:02:ff:2d:b2:38:37:75:f7:21:42:75:31:0c:
                    91:7d:ab:c6:c0:61:7a:6d:55:31:b2:70:af:a5:17:
                    7e:bb:84:6c:7f:ce:30:09:5d:d4:e7:b3:a1:12:92:
                    01:bc:3b:56:7a:34:c4:d2:eb:ea:b7:3d:9e:9d:b2:
                    a8:d7:0c:9b:56:5a:fe:70:dd:99:fd:59:ae:e1:65:
                    4b:e4:b5:61:d2:34:3d:3a:5e:29:a0:05:66:c2:b4:
                    e3:f8:b2:04:cf:f0:7e:aa:fb:02:4a:70:d3:9a:f0:
                    cf:58:ed:c9:41:ba:0d:46:0c:05:8c:d9:5d:43:e1:
                    f9:be:a2:6e:5a:af:29:62:58:b9:ae:e0:f5:59:17:
                    3b:e3:b9:cb:64:c1:4b:fb:b1:fb:bd:ad:2a:e4:6d:
                    92:bc:4a:2b:ae:e2:15:27:ff:95:05:8e:db:d0:63:
                    63:57
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DB:EA:33:EA:1D:10:13:92:C1:31:F4:A0:BB:65:FA:F4:87:46:15:6B
            X509v3 Authority Key Identifier:
                keyid:99:4B:7D:30:C1:C4:F6:24:31:82:D3:EC:D3:D0:53:9F:42:FA:AC:FD

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/mUt9MMHE9iQxgtPs09BTn0L6rP0.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/bc/4ab81e-45b8-41a5-aa5e-5646eedd99bf/1/mUt9MMHE9iQxgtPs09BTn0L6rP0.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/bc/4ab81e-45b8-41a5-aa5e-5646eedd99bf/1/mUt9MMHE9iQxgtPs09BTn0L6rP0.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         68:8a:7b:09:25:93:dc:85:fc:8a:99:ca:f0:47:c7:59:c3:aa:
         72:c2:d1:4a:bd:c0:6a:a3:ab:33:df:1a:7d:92:bb:2c:b7:ab:
         bc:c4:8b:be:60:4e:f5:86:f6:90:90:de:cc:7a:14:43:7a:fa:
         93:53:9b:e9:5a:06:9b:87:ec:6c:64:bd:ec:e3:a8:b9:e9:46:
         96:5e:40:2d:77:48:25:cf:1a:72:97:fc:03:a7:ee:4a:21:b6:
         67:5a:81:40:2e:15:83:d1:1f:2f:4f:8c:ab:f3:2f:1a:99:57:
         45:d0:f9:09:07:45:e8:0c:5a:71:30:20:85:82:c9:75:82:bd:
         58:d8:84:fa:82:a3:ff:c3:bf:8f:6e:7c:71:c8:c6:f3:7a:d3:
         33:dd:94:42:5c:75:22:fa:b5:5c:b2:e9:6c:48:24:83:49:0e:
         ea:b6:39:de:dc:89:93:97:79:2f:9d:50:65:5a:7b:d1:07:4f:
         e2:32:62:a0:38:2a:8d:50:eb:5f:b6:71:6e:68:56:03:15:a9:
         b6:79:c5:2e:6c:12:f0:a2:51:fe:06:8b:c8:7a:84:0c:ea:c7:
         37:2b:84:ea:1e:70:57:da:66:40:66:15:bb:fd:9b:18:41:54:
         44:71:cd:3c:1d:4a:a0:9f:98:7a:04:71:91:ac:07:c2:ad:42:
         a7:ca:08:58
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----