Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d1/4b82fe-ff73-4b58-a21a-00fd05d3cd1d/1/V3zTsjkfRybBqonV7T0ECCMlI1U.mft
File:                     V3zTsjkfRybBqonV7T0ECCMlI1U.mft (raw, json)
Hash identifier:          SZs+X/knaeXjI2LMyAY2owJ20yWZsC2y3l68qtsb1Ow=
Subject key identifier:   D4:79:CA:DB:F0:18:94:CB:67:CB:C1:8D:4C:D7:BA:76:49:F7:EE:86
Authority key identifier: 57:7C:D3:B2:39:1F:47:26:C1:AA:89:D5:ED:3D:04:08:23:25:23:55
Certificate issuer:       /CN=577cd3b2391f4726c1aa89d5ed3d040823252355
Certificate serial:       01962DF420B730C97313E72DA7F70B8BF2B2
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/V3zTsjkfRybBqonV7T0ECCMlI1U.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/d1/4b82fe-ff73-4b58-a21a-00fd05d3cd1d/1/V3zTsjkfRybBqonV7T0ECCMlI1U.mft
Manifest number:          5A
Signing time:             Sun 13 Apr 2025 07:01:35 +0000
Manifest this update:     Sun 13 Apr 2025 07:01:35 +0000
Manifest next update:     Mon 14 Apr 2025 07:01:35 +0000
Files and hashes:         1: IwKSwRXA9Ph0qRohZhJ0WEYVgOM.roa (hash: RFNUKmFIpsyvimoGalaE9V72k6NP7c6/ODYYIyEjkmE=)
                          2: V3zTsjkfRybBqonV7T0ECCMlI1U.crl (hash: Fyyk9lhyY1hxCLTeLM31CBOBdoXBkSvcYLVeUPyyrvA=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2d:f4:20:b7:30:c9:73:13:e7:2d:a7:f7:0b:8b:f2:b2
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=577cd3b2391f4726c1aa89d5ed3d040823252355
        Validity
            Not Before: Apr 13 07:01:35 2025 GMT
            Not After : Apr 14 07:01:35 2025 GMT
        Subject: CN=d479cadbf01894cb67cbc18d4cd7ba7649f7ee86
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:af:e6:a1:8c:46:83:2d:d8:80:d8:91:32:65:45:
                    05:27:9d:0d:a2:52:ff:c8:d4:f2:d6:3e:8d:69:f5:
                    87:ac:b3:15:f7:85:10:99:6e:b0:52:67:be:35:a6:
                    51:33:8c:10:3e:0b:6e:d1:70:00:e7:b4:eb:42:0a:
                    3f:48:05:dd:45:13:dc:96:d8:20:a5:41:df:8c:6b:
                    f4:a9:9b:90:62:e1:ff:55:bd:b6:c8:be:8f:49:68:
                    5e:13:43:9b:68:81:18:b4:2e:f2:fd:48:b8:7d:33:
                    fe:96:7e:5a:c3:d6:3d:5d:9e:6e:30:05:b3:9f:53:
                    9a:b5:4a:bc:89:40:b2:c3:7d:11:93:8a:52:b2:39:
                    16:56:e8:a5:10:0c:a0:c3:85:c3:d7:da:c3:ef:16:
                    20:6d:09:3e:8e:4d:d1:20:13:cb:d2:14:e2:87:6c:
                    5f:86:3d:b9:6e:35:c3:5a:c3:f4:16:bd:eb:c3:cf:
                    0f:d7:fa:8a:a2:7b:6d:e9:fe:ac:10:e9:4f:82:8e:
                    e9:40:d4:88:9b:38:13:d4:f3:1c:40:9b:1a:e1:65:
                    fb:4b:05:74:a7:d7:bd:6e:1b:0e:24:9e:bb:9d:87:
                    e9:28:e1:4a:d4:bb:77:9d:05:6a:20:d0:7f:e1:bf:
                    68:7b:22:fe:ca:77:5e:2a:09:74:9e:22:95:a9:b6:
                    cc:87
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D4:79:CA:DB:F0:18:94:CB:67:CB:C1:8D:4C:D7:BA:76:49:F7:EE:86
            X509v3 Authority Key Identifier:
                keyid:57:7C:D3:B2:39:1F:47:26:C1:AA:89:D5:ED:3D:04:08:23:25:23:55

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/V3zTsjkfRybBqonV7T0ECCMlI1U.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d1/4b82fe-ff73-4b58-a21a-00fd05d3cd1d/1/V3zTsjkfRybBqonV7T0ECCMlI1U.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/d1/4b82fe-ff73-4b58-a21a-00fd05d3cd1d/1/V3zTsjkfRybBqonV7T0ECCMlI1U.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         10:ab:1c:6b:9d:55:66:e6:6c:df:66:f3:e7:84:81:7e:9a:40:
         ef:25:92:ba:1a:e8:31:08:d2:e7:db:d6:4c:ba:e6:f0:8a:da:
         cd:36:cf:89:20:e5:87:5b:37:f2:5e:b7:8c:d7:43:bc:c7:7d:
         74:14:6c:98:4f:69:86:e6:bb:e9:ae:bf:f1:64:e4:aa:d9:db:
         d7:2a:47:8c:c8:0f:e6:06:04:3b:18:77:47:60:d0:8b:2d:61:
         46:61:d4:80:e2:14:d4:a5:69:05:99:f5:cd:3c:28:9e:33:23:
         a0:65:24:74:39:18:a6:5e:dc:21:f4:a4:36:4b:45:48:18:ae:
         62:46:63:a8:6e:c7:5a:58:1d:f1:fb:62:66:d9:ea:a2:c0:b2:
         96:a5:4d:9a:1e:f9:fa:08:d3:61:af:03:bd:7d:3c:ff:94:6c:
         ae:ed:c7:57:bd:9d:1f:cf:fd:6f:c5:74:2f:c6:6e:e3:0c:bd:
         61:4b:66:03:d8:7c:0d:e9:9c:f1:62:62:1e:b2:b4:65:00:95:
         fa:3a:2c:bc:da:56:40:f1:fa:de:21:c4:32:95:1b:0c:56:0c:
         47:bd:30:b1:e3:0a:1e:7a:45:6d:08:1d:79:db:ac:74:3f:14:
         7d:0e:73:c2:b3:ad:78:d9:91:ca:f0:32:60:78:9a:5c:c9:22:
         0c:a8:db:c9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----