Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c0/e45e30-e7d8-4fb8-90ad-f71038e967a4/1/tIUv-6fVfFqK-7bqW-r33-wMFFo.mft
File:                     tIUv-6fVfFqK-7bqW-r33-wMFFo.mft (raw, json)
Hash identifier:          YNdXmKFhyYoUoMNZXBRBAiUTBn3BWmFNCx0zuSYbIHo=
Subject key identifier:   A9:B2:62:E5:D4:42:1D:A3:BC:6F:5F:1F:19:DF:28:1F:39:8B:3B:79
Authority key identifier: B4:85:2F:FB:A7:D5:7C:5A:8A:FB:B6:EA:5B:EA:F7:DF:EC:0C:14:5A
Certificate issuer:       /CN=b4852ffba7d57c5a8afbb6ea5beaf7dfec0c145a
Certificate serial:       01962FAB596E2826D7D6F9721E5D09F87FED
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/tIUv-6fVfFqK-7bqW-r33-wMFFo.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/c0/e45e30-e7d8-4fb8-90ad-f71038e967a4/1/tIUv-6fVfFqK-7bqW-r33-wMFFo.mft
Manifest number:          14F6
Signing time:             Sun 13 Apr 2025 15:01:20 +0000
Manifest this update:     Sun 13 Apr 2025 15:01:20 +0000
Manifest next update:     Mon 14 Apr 2025 15:01:20 +0000
Files and hashes:         1: 2zBG6wv0zKBe2XlbGkfLL9rOdtY.roa (hash: lxNpEB+wfb/SASGgTTjYX3zTxUdrCP8FyxAXU//G0JE=)
                          2: 60ZaPiBpi8SxBTjOjQUT9FiEU2Q.roa (hash: +EenJI8/Zu0itO/r18F94M+NWWU8CW03dUIDwunEbUc=)
                          3: 7Q9gLwoSUvmWbh9pchcvFCnXBMI.roa (hash: OqWyCVxCH/ByBizomU3lyw35etS/Okp+27Pxn29bVl8=)
                          4: EU2O-Gd0BV713EAdFoGJuGMnLgQ.roa (hash: DIGhFlsty46rXCRlbLUopCZPIy0Ap7bO0kln0jsUUZQ=)
                          5: O3sXFCWDkxRLQArJVgciZYJOH2k.roa (hash: wEiLpu8rEygqvBvHCRoBqicZ9xgf2J+eV7J8nj+KxjA=)
                          6: ZjHl0XpQM8CCJz6Om67G0wOmvS4.roa (hash: xCetPcOL8RFsZEGexQBgMW05eQfuM1TVnSNp6oyXZtQ=)
                          7: d8mFLNhZassFfsIT0V6Pg-FoNgA.roa (hash: G1lxk+WJgE19vtZBUhgAhwauP4CikNyKzPmcQ0hwXlc=)
                          8: hpi8FGXUqFwvyzbspUBbXSR-u5E.roa (hash: D+oqZ2gXKRa2ovM6yrY+DCG9y6qbKxbt+6ZJu7cuVlg=)
                          9: qttpBVUzvg-H-ScovtnzHfhab98.roa (hash: Z/Qik4bEzsKJTfqfp1D8dTDPNezW76BTvrr8ud6rEd8=)
                          10: tIUv-6fVfFqK-7bqW-r33-wMFFo.crl (hash: YbYDeIInV1qVFhoVXApEmhWGU3ZwBcUd7w9BTr+J2Ac=)
                          11: vqcl3DQ1E1K3lnM1bs8fqqNI4EQ.roa (hash: S9QBaWkrI9BQviKt66y8uBb8+Y6dNwU4YKfcgaHW4SE=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2f:ab:59:6e:28:26:d7:d6:f9:72:1e:5d:09:f8:7f:ed
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b4852ffba7d57c5a8afbb6ea5beaf7dfec0c145a
        Validity
            Not Before: Apr 13 15:01:20 2025 GMT
            Not After : Apr 14 15:01:20 2025 GMT
        Subject: CN=a9b262e5d4421da3bc6f5f1f19df281f398b3b79
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9c:d7:bf:e7:06:28:6f:19:3a:d2:49:33:58:0f:
                    7f:11:07:a7:1a:af:bc:36:29:b6:de:df:75:1b:4b:
                    98:57:0e:67:22:6c:9b:7f:aa:4b:cf:a9:7a:1e:21:
                    51:ad:bc:f4:a0:17:a2:98:ef:03:9d:95:73:e0:eb:
                    16:47:21:48:82:e4:da:7a:91:c7:54:47:86:54:c1:
                    45:37:95:2e:2c:21:22:44:fc:84:de:79:32:e0:f4:
                    af:2b:ff:ae:2f:14:af:27:a1:62:5d:b6:86:fb:e0:
                    8b:c3:72:b6:b8:2e:ec:53:65:ea:fd:b3:84:5f:f3:
                    f0:34:a1:76:13:89:f1:50:6f:9e:22:9d:01:a7:e9:
                    0f:ca:c7:01:0f:76:7c:5c:ba:bd:df:fe:6a:48:a5:
                    fc:98:f9:b5:01:27:88:3e:e3:42:96:95:88:5b:a2:
                    48:2e:f6:29:db:b5:42:41:fb:c0:27:c2:c3:24:c7:
                    d4:31:53:22:98:07:31:7c:c2:39:6d:5d:c3:d7:81:
                    6d:46:6a:99:ac:26:63:50:7c:cb:03:ff:73:01:d4:
                    b0:97:dc:4a:e3:2e:f5:18:df:61:a7:f1:09:09:7b:
                    44:5e:52:08:72:75:78:6c:b3:9e:f6:ce:ba:3e:41:
                    fc:4e:67:4b:b2:27:9a:07:e1:80:6a:14:92:66:e4:
                    00:3f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A9:B2:62:E5:D4:42:1D:A3:BC:6F:5F:1F:19:DF:28:1F:39:8B:3B:79
            X509v3 Authority Key Identifier:
                keyid:B4:85:2F:FB:A7:D5:7C:5A:8A:FB:B6:EA:5B:EA:F7:DF:EC:0C:14:5A

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/tIUv-6fVfFqK-7bqW-r33-wMFFo.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c0/e45e30-e7d8-4fb8-90ad-f71038e967a4/1/tIUv-6fVfFqK-7bqW-r33-wMFFo.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/c0/e45e30-e7d8-4fb8-90ad-f71038e967a4/1/tIUv-6fVfFqK-7bqW-r33-wMFFo.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         4e:11:84:4e:f3:35:0a:7c:10:f2:38:92:35:f5:e0:02:2d:b1:
         97:96:63:29:2c:9f:e4:35:48:78:3b:9a:46:ae:de:95:ae:59:
         35:67:57:b6:9e:ef:70:ac:60:fa:79:2f:f4:3d:e9:fd:b5:7f:
         b5:d2:26:2c:f3:c0:32:6a:09:53:e0:83:fb:49:f5:7b:1c:eb:
         b9:14:a7:ed:4d:05:88:2b:12:58:bc:7f:93:2d:c1:d1:56:53:
         57:3c:7d:af:2b:bc:cf:22:49:20:e7:ac:94:df:98:de:4e:4e:
         cf:77:b8:7b:80:fa:f3:a2:1e:18:51:8e:73:29:c3:b1:ae:18:
         12:22:4b:b2:12:36:9f:02:ab:a2:e4:e0:e3:33:a4:42:37:73:
         b2:f9:d4:72:6f:a3:d4:75:21:1d:c4:a4:77:c6:c3:f5:fa:76:
         b5:cf:2b:1a:34:03:d8:55:22:82:e1:0a:95:b6:bd:be:93:83:
         c7:d7:be:bd:b0:42:7c:90:cc:7c:5c:8a:8c:2e:44:63:b8:f9:
         fd:dd:62:41:7c:8e:c5:1c:cf:f6:d6:af:3b:96:7a:7c:55:ac:
         a7:2b:b6:78:cb:57:41:b3:3d:cc:39:fc:86:96:30:3f:be:59:
         be:e6:f7:c2:09:47:d2:59:9e:0c:8b:ab:bb:c2:b7:03:93:88:
         9e:98:7d:cd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----