Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d1/8cef6f-fe09-4ef6-8bf1-798ac4928ed6/1/tDpxymDXTkXSuXSKsQZlKf0BM34.mft
File:                     tDpxymDXTkXSuXSKsQZlKf0BM34.mft (raw, json)
Hash identifier:          8Yk4zeZfqlBi0bRzvRQKrVMO7HFVh1Fn0CRfxPMMBhI=
Subject key identifier:   F8:80:B3:27:9C:A0:7E:1A:ED:2D:A3:6C:69:B3:CE:6E:10:34:91:00
Authority key identifier: B4:3A:71:CA:60:D7:4E:45:D2:B9:74:8A:B1:06:65:29:FD:01:33:7E
Certificate issuer:       /CN=b43a71ca60d74e45d2b9748ab1066529fd01337e
Certificate serial:       01962E999C17B19E83ACC73736193A544982
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/tDpxymDXTkXSuXSKsQZlKf0BM34.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/d1/8cef6f-fe09-4ef6-8bf1-798ac4928ed6/1/tDpxymDXTkXSuXSKsQZlKf0BM34.mft
Manifest number:          14EA
Signing time:             Sun 13 Apr 2025 10:02:20 +0000
Manifest this update:     Sun 13 Apr 2025 10:02:20 +0000
Manifest next update:     Mon 14 Apr 2025 10:02:20 +0000
Files and hashes:         1: M5_-d1GdbRA2RUGO5npOtRSNEB8.roa (hash: DYZ2j8UdvivRy1b6Q4G0ZdvY6U48+tpNnHP/gql8rCo=)
                          2: tDpxymDXTkXSuXSKsQZlKf0BM34.crl (hash: ntdNOUBBG3OlfPZ8MFobneWRsjNoTK2RzbfUxoJIWf8=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2e:99:9c:17:b1:9e:83:ac:c7:37:36:19:3a:54:49:82
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b43a71ca60d74e45d2b9748ab1066529fd01337e
        Validity
            Not Before: Apr 13 10:02:20 2025 GMT
            Not After : Apr 14 10:02:20 2025 GMT
        Subject: CN=f880b3279ca07e1aed2da36c69b3ce6e10349100
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b3:3c:06:26:40:66:cb:72:34:2e:e1:e7:e1:48:
                    f3:24:83:ba:9f:2a:6c:e4:cf:f0:2d:49:ea:d6:09:
                    47:2a:bb:57:1d:ff:ca:3c:d0:28:56:8e:88:b1:a7:
                    80:d5:89:26:06:b6:ee:99:ae:b4:9a:ca:c8:b4:ce:
                    c1:63:07:8a:65:08:b4:f7:e1:bd:0b:bc:69:a9:83:
                    d6:95:bb:32:d2:7e:4f:60:68:17:9e:e5:5e:50:82:
                    24:34:cc:12:82:fc:3c:bb:54:98:5e:20:4c:5d:0e:
                    ce:43:bc:52:aa:7c:80:27:6c:a7:87:72:7e:14:a4:
                    43:64:2f:4c:72:e5:74:11:95:28:66:75:b3:5f:4f:
                    87:fa:82:59:62:c9:ba:83:d2:a6:4f:e7:84:51:dc:
                    c4:ce:28:d3:c9:54:a8:09:e1:c2:ed:76:48:b3:a9:
                    60:83:39:c3:80:cf:cd:6d:be:0b:f1:82:67:06:26:
                    e2:30:81:83:d1:92:8f:f5:6f:f5:ba:98:05:48:46:
                    6a:ca:bf:20:7c:1c:0a:f6:a9:fc:7e:b9:54:c4:94:
                    93:c8:25:ac:34:ce:30:0a:99:7d:60:96:c4:d3:95:
                    26:7c:74:1a:d8:2b:cd:c8:a1:5b:cc:cf:97:cb:33:
                    6a:c8:63:ff:0f:b9:68:e8:d9:10:ba:87:74:63:52:
                    97:e1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F8:80:B3:27:9C:A0:7E:1A:ED:2D:A3:6C:69:B3:CE:6E:10:34:91:00
            X509v3 Authority Key Identifier:
                keyid:B4:3A:71:CA:60:D7:4E:45:D2:B9:74:8A:B1:06:65:29:FD:01:33:7E

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/tDpxymDXTkXSuXSKsQZlKf0BM34.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d1/8cef6f-fe09-4ef6-8bf1-798ac4928ed6/1/tDpxymDXTkXSuXSKsQZlKf0BM34.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/d1/8cef6f-fe09-4ef6-8bf1-798ac4928ed6/1/tDpxymDXTkXSuXSKsQZlKf0BM34.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         77:8d:e3:90:18:ec:a6:76:69:b7:78:d3:f1:9d:24:71:83:55:
         54:fc:42:91:c1:43:5c:12:84:99:c6:de:1b:28:08:e2:2b:cc:
         28:77:38:ec:db:3f:e0:ca:dd:06:ff:ed:91:df:07:84:63:2b:
         b6:3d:58:f0:74:75:7d:e8:5a:22:fd:59:ab:52:b7:9b:a3:27:
         a6:e0:9e:fa:df:fe:76:e8:f4:41:a6:ec:9e:64:e6:4b:64:18:
         a9:ad:64:75:b2:87:1d:51:68:53:63:12:02:9b:d6:9a:b0:12:
         c7:2d:c4:c4:5f:62:d3:8b:c7:9d:42:6d:51:f0:cb:f1:e1:97:
         38:05:e7:50:f7:4f:bf:90:17:ba:a9:7d:11:63:3f:ff:71:43:
         62:21:30:17:11:fb:c2:d3:3f:17:43:7c:9c:6c:10:1b:14:45:
         31:1c:56:09:5c:78:00:24:b8:bd:d7:93:cf:15:fb:1d:bc:53:
         87:34:92:79:1f:e8:47:2c:3f:d8:be:79:0c:39:8c:7b:70:75:
         67:19:64:fd:b8:7c:0b:e3:66:39:65:87:56:7f:cf:43:c6:23:
         93:7b:05:cc:6c:76:b4:fe:f0:5f:02:b9:ad:05:08:34:67:a1:
         09:78:8f:0e:50:6e:d7:30:b0:56:16:fb:d8:a1:d0:8c:5b:36:
         48:64:33:04
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----