Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c3/aa6629-d149-4197-a315-d21071ef735b/1/1-j0LwRsp2kStVzBMP4VohwoBnCQ.mft
File:                     1-j0LwRsp2kStVzBMP4VohwoBnCQ.mft (raw, json)
Hash identifier:          4SF995q4ptLjl1NUMXfkH96QnfjxhUpxlHOVEEu+EYA=
Subject key identifier:   48:6C:F3:BE:49:D4:83:02:53:27:97:EF:B6:F6:0E:72:A7:98:AC:2F
Authority key identifier: FA:3D:0B:C1:1B:29:DA:44:AD:57:30:4C:3F:85:68:87:0A:01:9C:24
Certificate issuer:       /CN=fa3d0bc11b29da44ad57304c3f8568870a019c24
Certificate serial:       01962F37ABC6DBB5DC06D2126A7785C16988
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/1-j0LwRsp2kStVzBMP4VohwoBnCQ.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/c3/aa6629-d149-4197-a315-d21071ef735b/1/1-j0LwRsp2kStVzBMP4VohwoBnCQ.mft
Manifest number:          1512
Signing time:             Sun 13 Apr 2025 12:54:59 +0000
Manifest this update:     Sun 13 Apr 2025 12:54:59 +0000
Manifest next update:     Mon 14 Apr 2025 12:54:59 +0000
Files and hashes:         1: 1-j0LwRsp2kStVzBMP4VohwoBnCQ.crl (hash: 0DwlgVYy/mnYGphLPpXVPBNw8gUDykYuInR9qL7QfnM=)
                          2: BLXtsOUKyjdzK6aUOnCi71Mjrfo.roa (hash: 5RpGYLrJit43EcAURB9h1zI7H1uWOJSb9Qx7yrRnckQ=)
                          3: II7yHBEdnUHMS4NEG3cJmmouTG0.roa (hash: 1A2ldI4N+lxuF/IwKKhIwjgsIHcFt59vvrcV1uOWMII=)
                          4: gpzNMZcwo35-oTXOI3kYk3hJ2t8.roa (hash: ngODPWQb3vvd7XrB/GBFFEdeU0LiXPVPYCwgvVTHlW8=)
                          5: hrGvSdLkJyoD3ZMtvao-M__6pbs.roa (hash: 6UHWZ2yt7HBCXCOPrR1TZg8AMD6PQq6q04hXZuTRNOc=)
                          6: nx9moqlHgSMsf9HgtOFQ0KmEqlE.roa (hash: WzE9rCGNMfQ+mIxm9E1YIp9r6V0lkGRucRNG6aY0mCs=)
                          7: rIf0kB8Rc3IRATRBayI1xPvP3QA.roa (hash: Rx69uj0bTYsl5V2DHt7vMOyICCeb975OsfQSSz+LlmM=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2f:37:ab:c6:db:b5:dc:06:d2:12:6a:77:85:c1:69:88
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=fa3d0bc11b29da44ad57304c3f8568870a019c24
        Validity
            Not Before: Apr 13 12:54:59 2025 GMT
            Not After : Apr 14 12:54:59 2025 GMT
        Subject: CN=486cf3be49d48302532797efb6f60e72a798ac2f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9f:87:09:9c:ee:2f:08:ff:11:b5:b1:60:ab:fe:
                    ab:d4:df:9a:b2:d5:d4:00:ba:d9:6e:ec:67:75:ca:
                    19:de:1c:6a:8a:cf:aa:18:85:1f:8e:fa:d9:93:8a:
                    b7:0e:57:e2:62:fa:18:1e:f3:4c:3a:ad:78:c1:7f:
                    c4:f9:14:97:76:1b:16:e6:19:04:8b:ff:06:ab:f8:
                    1d:9a:6b:5d:b4:f7:dc:2b:ab:3f:13:4f:c0:5c:af:
                    48:b9:86:4c:a1:ac:d9:9b:21:8c:93:2b:56:c6:89:
                    4b:fc:00:28:c2:06:9e:57:03:cb:dd:ff:73:fe:a3:
                    b1:d4:61:3f:b6:e7:7b:9b:5f:1e:a1:5a:37:64:f0:
                    75:cf:9c:36:d1:17:d1:4a:bc:3b:af:77:6c:3e:89:
                    33:b7:c3:4d:39:f0:44:6b:86:68:0b:91:90:87:7c:
                    2e:94:04:70:b2:7a:d4:b3:69:23:8f:8d:e1:5f:2f:
                    e6:bb:43:91:e6:3c:11:b6:c7:27:3f:5b:77:be:25:
                    72:fb:37:28:6f:37:2b:4e:04:e1:60:41:ba:00:b8:
                    fe:22:e9:56:f3:a3:11:85:1e:7f:00:6a:53:95:4b:
                    d2:37:6f:20:c9:93:cb:8b:9f:ce:58:bd:92:b3:53:
                    b5:ca:06:43:ff:53:00:56:c0:0c:f0:80:98:2c:9a:
                    ec:25
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                48:6C:F3:BE:49:D4:83:02:53:27:97:EF:B6:F6:0E:72:A7:98:AC:2F
            X509v3 Authority Key Identifier:
                keyid:FA:3D:0B:C1:1B:29:DA:44:AD:57:30:4C:3F:85:68:87:0A:01:9C:24

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1-j0LwRsp2kStVzBMP4VohwoBnCQ.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c3/aa6629-d149-4197-a315-d21071ef735b/1/1-j0LwRsp2kStVzBMP4VohwoBnCQ.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/c3/aa6629-d149-4197-a315-d21071ef735b/1/1-j0LwRsp2kStVzBMP4VohwoBnCQ.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         05:a9:3e:f7:8f:c4:b5:03:1e:cd:54:ae:c6:fc:d3:28:c7:8a:
         10:e5:c3:7f:ac:6a:b5:d8:16:c0:f5:bc:0a:59:6d:87:6f:36:
         ca:ff:73:74:cb:31:f8:cc:64:98:16:5f:e1:7f:70:b1:b7:6f:
         7d:44:4c:95:db:2a:62:c4:f6:92:75:5c:d5:0f:3e:77:29:ea:
         a7:a6:96:f7:52:c4:06:c7:91:ce:07:37:a6:e5:34:1c:7f:87:
         17:25:a9:40:b3:bc:8e:e5:a8:e9:05:af:8c:8e:cd:5d:95:1a:
         dd:bb:f3:8e:09:44:55:9d:6a:9b:30:79:94:1e:c7:14:4e:4d:
         86:e8:ba:0e:54:45:fb:0c:73:8a:c2:0c:e1:62:b6:75:f1:a8:
         cf:2b:e7:07:0d:75:2d:3d:52:5d:00:ed:39:7a:81:b9:24:29:
         30:09:15:7a:5b:11:74:2b:ba:ec:10:fe:b8:5e:09:e7:e1:32:
         d6:72:d4:a5:bb:0a:81:05:b5:84:da:7e:c2:91:9d:d2:09:b8:
         6a:5a:c0:61:95:6c:f2:39:15:a3:e8:5b:b7:5b:62:d1:78:d2:
         78:8e:b7:31:d3:db:b4:74:1a:e3:c8:9d:b0:08:ad:f2:43:a7:
         07:a8:9e:75:a9:9c:33:4d:28:d8:82:6e:d3:0a:d6:36:9b:5e:
         98:df:3d:a5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----