Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d0/1e04b8-1031-43f9-9667-8e6f878db5f4/1/71fC2dk6x8-bLxfKp4WbaYWzm50.mft
File:                     71fC2dk6x8-bLxfKp4WbaYWzm50.mft (raw, json)
Hash identifier:          wk/1u8+IUJGLEYVBqTtxwIcDa0jlr0MNaOImfg34ui4=
Subject key identifier:   BD:9A:86:FD:FD:E8:28:F7:52:48:BD:7C:85:3B:12:98:80:6C:00:0B
Authority key identifier: EF:57:C2:D9:D9:3A:C7:CF:9B:2F:17:CA:A7:85:9B:69:85:B3:9B:9D
Certificate issuer:       /CN=ef57c2d9d93ac7cf9b2f17caa7859b6985b39b9d
Certificate serial:       01962E98C253B0A4367E72777F3D7747D39B
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/71fC2dk6x8-bLxfKp4WbaYWzm50.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/d0/1e04b8-1031-43f9-9667-8e6f878db5f4/1/71fC2dk6x8-bLxfKp4WbaYWzm50.mft
Manifest number:          111A
Signing time:             Sun 13 Apr 2025 10:01:25 +0000
Manifest this update:     Sun 13 Apr 2025 10:01:25 +0000
Manifest next update:     Mon 14 Apr 2025 10:01:25 +0000
Files and hashes:         1: 544qbizQi-bIdkw3-dYqPJlzThI.roa (hash: +gEWQ7alsMrRoKZmorV8F7Ob4+H0fyVPG8B4nJMMSoA=)
                          2: 71fC2dk6x8-bLxfKp4WbaYWzm50.crl (hash: l5tg3kVdlwlULd8naBfyItkla9fuouYW+fCJYOO2rog=)
                          3: CFEprGG9zI2SPXEkfveiqcGkxys.roa (hash: zwoMXpp3WPmfn1e+WeBEAccAThpouC8C+SBbtldgA/c=)
                          4: RLjWAiBDW7OGzF_VcCkKg-SuzTE.roa (hash: DCBINTtLxKJQkC6BRMLb3TMqWlrNb5ZnwJro+/q+QhU=)
                          5: Xd2QaW60upMnqwQIBHXXIoPXPzs.roa (hash: +i6BQOs/QyU2pk+3pSoh+wtk4Cf+VFJXifr7WtqVoY4=)
                          6: ZWH5dik-57qT_VKYcibYh0fZMes.roa (hash: V4HyXcC7GD93JW+xBhzBdGWwVycZxFz98efL+J+3t6c=)
                          7: d3w3nqB5Kl-FSC0jSCG-gsD4dlY.roa (hash: 33QNQ+kF6mFEetO5Rno9ayPExXyzerB4sZWFH0Ulruk=)
                          8: kaXih0ftxLoxKevElyyNGY3Am90.roa (hash: VV+Kmbg3++xVZSuR6z9QplDGDyuGw9lzxK6+uDRXc2k=)
                          9: mMAwso5PyMiUkBDuP91mCU2ukBI.roa (hash: 8lAOzf9Ul80EHkivmkCJNmV8WShjC87n8hXocC2Jg4o=)
                          10: rL6AzulHQOLcRfhqRrPdMX43AzM.roa (hash: /p4sN3vL44k5lwQiWwAvoayVUuPAubPMAhf99ERn0+c=)
                          11: uqdpFYbEZmSQcI9e2QxzA21bJyU.roa (hash: wfLrEHcgt+ndgHwz1K4AVmoTfmzIEA6xcdAY4tC7VEA=)
                          12: xE9QBs_-I-okZvOErWXLkoKDqmk.roa (hash: PCh0aczn6Bj3Hiz+iIpjZK10Xg+FpiTDJMX+WibJh2o=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2e:98:c2:53:b0:a4:36:7e:72:77:7f:3d:77:47:d3:9b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=ef57c2d9d93ac7cf9b2f17caa7859b6985b39b9d
        Validity
            Not Before: Apr 13 10:01:25 2025 GMT
            Not After : Apr 14 10:01:25 2025 GMT
        Subject: CN=bd9a86fdfde828f75248bd7c853b1298806c000b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d9:5b:bf:33:34:00:0a:b8:bf:1c:a8:b0:37:82:
                    e6:f4:dd:9e:cd:40:81:a9:71:4c:59:f5:3f:12:07:
                    0b:fe:37:94:b0:1d:af:10:70:7b:e1:cf:c5:64:0d:
                    a2:54:ba:2e:40:81:26:90:be:76:54:1e:a8:49:51:
                    4a:e6:4a:b3:76:05:27:78:64:1f:c7:e9:7f:13:22:
                    91:7c:ea:1f:b1:c8:6d:73:5b:cd:9b:fe:de:52:19:
                    cc:fc:04:4d:08:8f:c6:fd:13:41:04:a6:1b:f1:1e:
                    cb:80:93:b7:ef:c8:8f:16:9b:e2:d2:da:a7:f6:b4:
                    75:5c:6c:94:f8:1d:7c:03:b4:8c:bb:f8:ad:01:ea:
                    d4:4f:58:f5:f1:20:44:14:b6:5a:e5:4d:4b:96:6a:
                    1a:2f:bc:9e:70:3c:1d:b3:58:58:ff:e4:6b:bd:75:
                    27:81:12:1f:61:ef:92:cb:aa:ff:bf:97:fe:fc:0c:
                    69:23:54:45:2e:48:d0:ae:54:3c:84:b2:51:cd:bd:
                    42:75:58:45:2b:50:0b:eb:9b:d0:ac:18:5a:55:dd:
                    23:4c:67:a0:e5:00:12:36:e8:6d:a7:e2:85:9d:7c:
                    06:09:da:e9:dd:57:fd:40:03:1d:fc:d5:47:30:7f:
                    e4:78:7a:b0:73:ee:be:3d:d8:d4:3e:0a:da:93:8a:
                    42:8d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BD:9A:86:FD:FD:E8:28:F7:52:48:BD:7C:85:3B:12:98:80:6C:00:0B
            X509v3 Authority Key Identifier:
                keyid:EF:57:C2:D9:D9:3A:C7:CF:9B:2F:17:CA:A7:85:9B:69:85:B3:9B:9D

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/71fC2dk6x8-bLxfKp4WbaYWzm50.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d0/1e04b8-1031-43f9-9667-8e6f878db5f4/1/71fC2dk6x8-bLxfKp4WbaYWzm50.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/d0/1e04b8-1031-43f9-9667-8e6f878db5f4/1/71fC2dk6x8-bLxfKp4WbaYWzm50.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         28:64:95:70:e6:34:88:3e:3f:cc:8b:02:d2:4f:e8:cf:71:79:
         d9:3e:1d:b0:de:56:75:9c:54:87:70:64:6a:bc:91:45:17:df:
         c7:54:4b:b3:df:8f:89:ae:86:44:c1:3f:bc:8f:97:82:29:48:
         5f:4d:4b:6b:67:e2:61:d2:f3:de:7d:15:2d:16:e7:12:44:81:
         53:a7:39:a1:98:64:dd:29:1b:69:3e:41:de:53:94:a9:00:a2:
         be:91:97:88:27:5a:44:b4:ad:73:2e:75:50:7d:d9:45:eb:8e:
         e9:9e:13:ec:5f:9c:6a:44:91:19:14:39:18:0d:9a:b7:0b:a4:
         4f:6e:94:58:45:ca:9f:1f:11:6c:a4:06:24:a3:34:44:34:e7:
         bc:68:ff:4a:2e:da:04:c9:3f:9d:35:0f:ec:1c:fb:28:47:a5:
         de:7a:91:c3:61:a1:20:87:a9:d0:99:4b:90:58:0c:b6:10:52:
         ed:bc:3b:26:d2:13:b8:0c:52:a0:55:67:2a:13:ce:21:23:cc:
         31:e0:1a:08:dc:b2:69:e2:f9:bd:09:57:c4:7b:f2:93:42:37:
         73:50:b7:b3:ee:09:a4:85:6d:3d:ab:c0:37:4c:78:69:3f:2d:
         73:f0:99:52:fb:84:5c:27:04:eb:f7:5e:9b:79:4a:6c:71:45:
         39:dd:52:1a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----