Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d5/b7d875-b12c-4ed8-b80f-41487f4d4171/1/32GikiI62a68itgsKlZHX72XqDQ.mft
File:                     32GikiI62a68itgsKlZHX72XqDQ.mft (raw, json)
Hash identifier:          +c3FeQQOxlkIJASWxeXkWNfsQXVNAq+XwxacQjJuHeU=
Subject key identifier:   5F:74:AE:F7:6F:6B:9A:53:65:21:CF:7F:3B:EE:1D:56:20:45:41:54
Authority key identifier: DF:61:A2:92:22:3A:D9:AE:BC:8A:D8:2C:2A:56:47:5F:BD:97:A8:34
Certificate issuer:       /CN=df61a292223ad9aebc8ad82c2a56475fbd97a834
Certificate serial:       01962DF3BA56E4A9D68569310686BD723646
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/32GikiI62a68itgsKlZHX72XqDQ.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/d5/b7d875-b12c-4ed8-b80f-41487f4d4171/1/32GikiI62a68itgsKlZHX72XqDQ.mft
Manifest number:          0B98
Signing time:             Sun 13 Apr 2025 07:01:09 +0000
Manifest this update:     Sun 13 Apr 2025 07:01:09 +0000
Manifest next update:     Mon 14 Apr 2025 07:01:09 +0000
Files and hashes:         1: 32GikiI62a68itgsKlZHX72XqDQ.crl (hash: 5+j8pxUJ4+xKD/h5djuGu69eBUc8d+L0SJUoGSmbXUg=)
                          2: DmQguxgVyJ_d0tpi3KUPtRcdGUQ.roa (hash: OiuAWrEvvfbOYm4huTJvJrvDJABO3FsTpYDNXs6sb+s=)
                          3: aI06tjVZeZrIS1TA5LHHtgH2TfE.roa (hash: LKF1KEnQy5/5rD4HRU7tZBGEwLV0sJ0zLyAcVF0BY1c=)
                          4: gCOrJJaf7HO535LCuEoI7vxf65A.roa (hash: 7Nbxw9zLeIaRzeX3DJv4MIaTHvVYcSTc1CbOKxR59lQ=)
                          5: k6eyynVladw6I8I9j1dsAe95OA8.roa (hash: A0AAtMX//zpiq0We38ivcj7YmnJWOeaOBnQnV51DCG0=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2d:f3:ba:56:e4:a9:d6:85:69:31:06:86:bd:72:36:46
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=df61a292223ad9aebc8ad82c2a56475fbd97a834
        Validity
            Not Before: Apr 13 07:01:09 2025 GMT
            Not After : Apr 14 07:01:09 2025 GMT
        Subject: CN=5f74aef76f6b9a536521cf7f3bee1d5620454154
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a7:3a:8a:cf:0c:08:57:6c:74:d6:11:7a:36:eb:
                    5f:66:ed:6a:7d:bc:40:1e:57:25:e1:fd:5f:bb:74:
                    19:b7:05:3e:ab:b3:9c:0a:34:d4:86:13:cb:27:c3:
                    71:12:99:a4:66:fd:db:fe:0a:57:79:4f:21:2c:1c:
                    19:9e:64:8f:2c:3e:08:19:9e:a7:e3:ad:78:b6:e8:
                    73:f4:7b:e2:a5:17:03:12:30:9b:98:a2:c2:8b:ee:
                    b1:46:b1:e0:5f:38:af:3b:5e:e5:16:b9:a8:8f:61:
                    2c:59:3b:3c:4a:6b:c2:dc:f8:c4:be:dc:29:6f:91:
                    f9:81:9b:0b:ea:3a:fd:e8:a9:41:70:8a:d8:72:4b:
                    1e:2d:f4:37:aa:82:2b:5b:90:a2:3d:0d:62:e5:82:
                    2d:28:50:9a:e9:11:d6:f4:59:2a:c1:b1:3e:c0:1d:
                    5f:12:ee:a6:b8:20:7e:cb:2f:ae:f4:b7:f0:4f:ac:
                    a8:ba:3a:6d:0c:73:e3:9f:21:c9:0d:ae:64:c7:30:
                    33:b9:22:d3:e3:70:52:da:bf:3f:4d:fe:cc:5b:1b:
                    ab:eb:fb:cd:2a:61:a9:52:c2:41:20:fb:21:ec:ce:
                    db:de:21:c6:d3:93:60:21:77:47:ef:4d:66:dd:1c:
                    19:bb:39:c5:c9:b5:5f:ee:f5:14:53:79:d6:5d:6e:
                    2b:27
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5F:74:AE:F7:6F:6B:9A:53:65:21:CF:7F:3B:EE:1D:56:20:45:41:54
            X509v3 Authority Key Identifier:
                keyid:DF:61:A2:92:22:3A:D9:AE:BC:8A:D8:2C:2A:56:47:5F:BD:97:A8:34

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/32GikiI62a68itgsKlZHX72XqDQ.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d5/b7d875-b12c-4ed8-b80f-41487f4d4171/1/32GikiI62a68itgsKlZHX72XqDQ.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/d5/b7d875-b12c-4ed8-b80f-41487f4d4171/1/32GikiI62a68itgsKlZHX72XqDQ.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         1d:58:79:8d:30:25:01:c6:4f:74:f6:ef:4a:75:ea:60:72:6e:
         45:66:39:fe:7b:83:c3:b7:34:21:11:7b:31:53:5c:8a:69:e4:
         49:95:7b:ef:20:a1:5c:17:c9:ca:bd:d1:30:18:e8:71:26:1f:
         5d:69:84:9d:56:43:51:66:dc:57:dd:94:45:50:d3:3e:b4:bd:
         0f:57:3e:d4:b0:5a:19:25:3a:1f:7e:da:56:3a:30:ba:86:9d:
         ea:8d:b8:e2:38:5c:a8:d8:65:32:8a:dd:d0:dd:38:3f:f0:47:
         73:d4:36:e9:85:52:0c:5c:56:56:0c:e6:1b:61:fa:b4:26:99:
         3a:ab:2d:e2:49:ed:29:57:83:6d:b4:c2:c9:a5:8f:4e:b7:75:
         1a:fb:67:5f:f1:ec:10:fe:f5:77:b7:da:3a:39:70:ed:0a:e8:
         db:7f:9a:a7:9b:18:0e:ed:26:2f:6b:1b:cd:88:4c:48:d5:16:
         8d:b6:9e:14:70:ca:31:a3:ce:88:ba:f1:19:e9:60:0d:48:63:
         6d:91:35:9e:9e:4c:56:da:58:47:c1:cd:32:33:1b:c7:d9:37:
         c6:b1:05:3a:68:44:f3:66:8b:a8:c7:20:91:90:dd:cc:b4:f0:
         f7:3c:19:04:43:0f:ff:e5:9a:ba:f3:fd:01:22:43:03:6a:92:
         31:65:e2:68
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----