Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c8/98dffa-810b-49b5-addd-061fc1aeb158/1/b4Wk1WQoOn_d9jRWl9a8M3OjIkY.mft
File:                     b4Wk1WQoOn_d9jRWl9a8M3OjIkY.mft (raw, json)
Hash identifier:          uWeP/Bd+yepagsMIEdu6JnVbWpRn2QJ68MpCjlBwG5k=
Subject key identifier:   DC:08:CE:4E:C4:D6:7C:BD:44:96:57:64:75:5E:78:55:07:13:10:7D
Authority key identifier: 6F:85:A4:D5:64:28:3A:7F:DD:F6:34:56:97:D6:BC:33:73:A3:22:46
Certificate issuer:       /CN=6f85a4d564283a7fddf6345697d6bc3373a32246
Certificate serial:       01962F06FDB2D667874ABF5B1258EAA12CF9
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/b4Wk1WQoOn_d9jRWl9a8M3OjIkY.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/c8/98dffa-810b-49b5-addd-061fc1aeb158/1/b4Wk1WQoOn_d9jRWl9a8M3OjIkY.mft
Manifest number:          14EC
Signing time:             Sun 13 Apr 2025 12:01:49 +0000
Manifest this update:     Sun 13 Apr 2025 12:01:49 +0000
Manifest next update:     Mon 14 Apr 2025 12:01:49 +0000
Files and hashes:         1: b4Wk1WQoOn_d9jRWl9a8M3OjIkY.crl (hash: EdWc1xXGs3Z1UIkrDM5xrgPcIZy9nFakPkByXZe/VKI=)
                          2: hnLpwyr61Y9rfW-orNijGQDSlok.roa (hash: JEbPbaPqAJUCWgWRtGXMytB73uHDdZ/eD28RxoLxK4I=)
                          3: qsQCT6UNZXlqsu2v2DLFUykH7sk.roa (hash: GXnPWBj7LIlynkpTHAuJodlLFiW6fUYPHh7FYEk3i3A=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2f:06:fd:b2:d6:67:87:4a:bf:5b:12:58:ea:a1:2c:f9
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6f85a4d564283a7fddf6345697d6bc3373a32246
        Validity
            Not Before: Apr 13 12:01:49 2025 GMT
            Not After : Apr 14 12:01:49 2025 GMT
        Subject: CN=dc08ce4ec4d67cbd44965764755e78550713107d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c7:f9:4c:cd:cb:80:a2:3f:4b:cb:3d:80:7b:da:
                    7d:ce:f4:89:a9:1b:4e:6e:8d:81:1f:d1:3f:f1:a3:
                    4c:75:89:11:1a:a2:cf:cb:77:2c:38:ff:a6:e2:75:
                    81:82:32:a1:ab:26:c3:e7:cd:46:69:3f:20:26:fc:
                    18:bd:59:ef:65:48:74:07:08:3d:0f:92:78:47:55:
                    8e:60:77:d6:50:ef:f6:64:28:40:2a:5c:d7:2c:0d:
                    21:3c:dd:49:98:84:87:40:7b:c8:f0:df:d7:da:80:
                    a5:89:95:58:41:3a:92:60:79:24:b6:63:3f:58:51:
                    ae:a9:c9:02:93:95:3f:c5:09:46:32:6d:b3:7d:89:
                    72:eb:55:b1:82:59:23:d5:86:b0:7a:40:86:66:21:
                    db:15:dc:54:3d:68:90:3e:6e:6a:16:18:63:f0:cc:
                    3d:dd:8f:fc:82:16:54:4b:a0:38:c4:24:b8:f3:61:
                    8e:9f:9a:68:99:6d:06:e9:81:b2:b0:7c:6f:4d:92:
                    a7:11:5b:17:32:be:15:08:4f:ea:30:b0:49:eb:81:
                    09:22:c6:ab:ca:bb:ce:24:4c:38:24:86:66:78:2e:
                    01:06:ff:cb:c0:29:82:87:80:71:51:19:74:c2:d5:
                    48:83:2b:af:74:ca:ec:ca:90:1e:67:71:18:92:fa:
                    7b:73
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DC:08:CE:4E:C4:D6:7C:BD:44:96:57:64:75:5E:78:55:07:13:10:7D
            X509v3 Authority Key Identifier:
                keyid:6F:85:A4:D5:64:28:3A:7F:DD:F6:34:56:97:D6:BC:33:73:A3:22:46

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/b4Wk1WQoOn_d9jRWl9a8M3OjIkY.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/98dffa-810b-49b5-addd-061fc1aeb158/1/b4Wk1WQoOn_d9jRWl9a8M3OjIkY.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/98dffa-810b-49b5-addd-061fc1aeb158/1/b4Wk1WQoOn_d9jRWl9a8M3OjIkY.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         b7:e0:10:7b:50:15:ce:50:9d:9b:cb:9c:b1:d8:9c:65:d3:0c:
         68:cb:7a:bc:95:d4:ad:02:b0:f5:bd:70:bb:71:d2:92:59:0e:
         d2:17:33:09:3b:1b:13:96:96:45:11:09:31:28:96:89:a5:ad:
         10:cd:16:c1:5d:cd:de:6d:9c:42:26:59:aa:79:e4:dc:cf:e8:
         4d:7e:c1:35:43:2a:19:10:9a:6f:f1:f3:c3:a7:b5:3a:95:39:
         02:0e:1b:9f:13:98:42:00:6b:1a:a5:4c:7f:9f:99:c7:a4:52:
         f2:b6:ec:10:ec:5b:1d:03:01:5b:07:78:5e:6d:be:59:6f:d2:
         ee:4f:f4:fa:52:63:bd:01:95:35:f5:b2:0f:b6:d4:a7:02:c7:
         cf:67:ac:b5:19:ca:28:5a:eb:75:83:bd:0f:3d:1f:b1:2e:90:
         0b:d7:ea:f6:67:ee:a2:71:c7:fe:3f:b0:27:50:55:f8:92:29:
         26:00:bb:cc:1e:78:9b:0d:f6:77:57:d5:a5:9c:fd:6e:3e:ad:
         b8:b5:3b:77:18:1e:ef:22:c2:44:42:c0:ed:80:96:19:55:a6:
         b8:c8:ca:df:53:75:13:83:ce:31:89:f1:aa:a6:4e:ff:4f:e3:
         aa:54:d1:c6:18:4f:f1:3e:86:4c:60:ea:74:a8:05:db:f7:fd:
         80:4a:a4:21
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----