Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c8/97bace-b2d5-4052-8f61-5f2dfed5d1a4/1/40Y8J4uE4t8ApHvC2AyNgP-puok.mft
File:                     40Y8J4uE4t8ApHvC2AyNgP-puok.mft (raw, json)
Hash identifier:          OwxdfDdH5jAoqPiyAvLHjQAeKi/UNUZPZk6sRs9xb3E=
Subject key identifier:   81:78:9F:88:9B:D7:28:5D:36:42:AF:F9:67:C6:4C:AD:EC:F5:F1:E5
Authority key identifier: E3:46:3C:27:8B:84:E2:DF:00:A4:7B:C2:D8:0C:8D:80:FF:A9:BA:89
Certificate issuer:       /CN=e3463c278b84e2df00a47bc2d80c8d80ffa9ba89
Certificate serial:       01962F06B694ACE7AB4BA1E1357A7B141E6A
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/40Y8J4uE4t8ApHvC2AyNgP-puok.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/c8/97bace-b2d5-4052-8f61-5f2dfed5d1a4/1/40Y8J4uE4t8ApHvC2AyNgP-puok.mft
Manifest number:          14E9
Signing time:             Sun 13 Apr 2025 12:01:31 +0000
Manifest this update:     Sun 13 Apr 2025 12:01:31 +0000
Manifest next update:     Mon 14 Apr 2025 12:01:31 +0000
Files and hashes:         1: 40Y8J4uE4t8ApHvC2AyNgP-puok.crl (hash: f/GLpEyI5lR3/MIhrXbsiJkylEcTdJ+0Wl7roiMLe7U=)
                          2: 4mphuMGYKre7KcVIZklqvnEwe9w.roa (hash: BDdrPj5npMilCe1H11h3z51bgzRRHnfwNgW8/PXQiwk=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2f:06:b6:94:ac:e7:ab:4b:a1:e1:35:7a:7b:14:1e:6a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e3463c278b84e2df00a47bc2d80c8d80ffa9ba89
        Validity
            Not Before: Apr 13 12:01:31 2025 GMT
            Not After : Apr 14 12:01:31 2025 GMT
        Subject: CN=81789f889bd7285d3642aff967c64cadecf5f1e5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:aa:aa:6b:60:ac:b4:c7:73:91:4d:04:c0:d1:b3:
                    00:16:8b:e5:98:30:d4:1c:d1:57:dc:10:9a:e5:20:
                    09:90:25:37:93:0b:f0:ee:d0:89:60:60:43:e9:80:
                    c3:30:19:4f:63:75:93:64:64:28:60:84:65:30:da:
                    3b:fa:d6:a5:8e:e8:78:9f:0e:d5:83:6e:c0:5b:1b:
                    c3:cd:e6:7f:d4:b6:7c:a1:6a:08:1e:b7:59:c0:22:
                    89:2a:33:a0:45:c0:3c:1b:f2:06:f5:ff:6a:55:49:
                    dd:2b:28:ba:11:93:7e:e3:74:78:52:68:1a:c7:9e:
                    29:b2:5b:87:a6:a3:42:27:ee:ee:40:79:99:1d:06:
                    9b:ca:4e:09:11:57:1b:93:65:63:a1:cc:f3:fc:a7:
                    c4:65:69:ff:e9:1e:66:54:0e:f2:c2:21:37:cc:15:
                    26:4b:57:61:cf:ed:d6:9d:d4:51:e0:0a:46:d8:8b:
                    f0:1d:0a:8f:a6:d3:2f:02:8e:7c:ce:0e:b4:7c:b1:
                    8b:f4:30:7d:43:bc:6b:b0:6b:1b:54:10:f2:48:19:
                    54:76:3d:38:19:92:83:0d:7f:8b:f0:01:3d:0e:1b:
                    95:20:fc:1c:d6:a4:fc:f9:35:36:56:28:f3:f2:51:
                    88:c1:d1:69:fe:42:cc:7e:4b:65:ef:72:40:c2:db:
                    f5:7f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                81:78:9F:88:9B:D7:28:5D:36:42:AF:F9:67:C6:4C:AD:EC:F5:F1:E5
            X509v3 Authority Key Identifier:
                keyid:E3:46:3C:27:8B:84:E2:DF:00:A4:7B:C2:D8:0C:8D:80:FF:A9:BA:89

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/40Y8J4uE4t8ApHvC2AyNgP-puok.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/97bace-b2d5-4052-8f61-5f2dfed5d1a4/1/40Y8J4uE4t8ApHvC2AyNgP-puok.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/97bace-b2d5-4052-8f61-5f2dfed5d1a4/1/40Y8J4uE4t8ApHvC2AyNgP-puok.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         85:38:1c:4c:f4:8b:4c:f4:92:49:b3:cc:41:6f:c3:51:48:0f:
         65:c1:18:52:24:70:31:d5:c4:77:86:f1:44:b4:52:3b:ca:f3:
         2a:54:ce:98:6e:a8:f4:48:9e:b4:35:59:1d:57:1c:3f:b8:9d:
         5b:e8:93:6d:19:1a:e2:be:61:5e:0c:e5:bb:26:02:77:f4:d8:
         5b:7a:26:9b:d9:08:e9:4d:4d:49:10:2b:ea:d9:f9:46:ab:22:
         f7:c9:77:15:a2:6a:bd:cc:12:f7:4a:bb:a3:95:2b:67:00:8b:
         21:54:2f:8f:15:36:0b:db:e9:fe:8e:75:80:d0:63:2e:00:64:
         d7:98:89:63:39:ee:59:ab:15:fc:12:9b:80:72:c7:ad:66:85:
         35:74:32:ed:d1:c8:63:cc:7a:a0:be:ab:d4:88:4a:f7:56:6d:
         a6:43:91:05:09:4e:2c:37:19:88:a1:c5:4b:2f:8a:2a:68:af:
         da:9d:32:26:27:47:ba:1c:b1:e8:33:a7:04:54:46:95:f3:a4:
         d5:d2:9b:7f:9b:b3:0c:ef:02:2d:39:d5:3b:45:b0:93:34:6c:
         64:3a:1f:45:2e:11:90:fc:41:38:0b:b7:cb:ca:c4:1b:55:6a:
         49:9f:cb:42:a1:ab:fa:c0:6b:a1:a0:f6:62:e2:14:40:87:0f:
         87:34:2d:29
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----