Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d7/0df28d-924d-4b4e-94b8-824ffc6942f4/1/1onLcYkcbZS9nm8U8W5-N8LHKL8.mft
File:                     1onLcYkcbZS9nm8U8W5-N8LHKL8.mft (raw, json)
Hash identifier:          XCMapboIm7syi+nRhmCUMITKcJcy2OWLUcwGuJcbhWk=
Subject key identifier:   FB:72:B8:E3:6B:FF:1E:50:44:AC:8E:44:EC:FF:2E:D1:E8:CB:EC:35
Authority key identifier: D6:89:CB:71:89:1C:6D:94:BD:9E:6F:14:F1:6E:7E:37:C2:C7:28:BF
Certificate issuer:       /CN=d689cb71891c6d94bd9e6f14f16e7e37c2c728bf
Certificate serial:       01962ECFB8CC160432C7629DAE3813B6A6B3
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/1onLcYkcbZS9nm8U8W5-N8LHKL8.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/d7/0df28d-924d-4b4e-94b8-824ffc6942f4/1/1onLcYkcbZS9nm8U8W5-N8LHKL8.mft
Manifest number:          029F
Signing time:             Sun 13 Apr 2025 11:01:27 +0000
Manifest this update:     Sun 13 Apr 2025 11:01:27 +0000
Manifest next update:     Mon 14 Apr 2025 11:01:27 +0000
Files and hashes:         1: 1onLcYkcbZS9nm8U8W5-N8LHKL8.crl (hash: smHVQi8jFdBWsnr1DMquum9OWgXFjt+47FkWzJHx3YA=)
                          2: kSER2798uaT4ZEQ3_Ywav1IgXDo.roa (hash: o89fQ/v3jr3XzrvC5mfE9JQZHOaC2hUzybiixeh55JI=)
                          3: yZlOT6r0_6wmgpAAvcSq6qfpXoA.roa (hash: CFuI4jvHDVJgJ7TNYXPE3aUuvYsSM/+AObIDbJtCPww=)
                          4: zl7tT8dRR7O1ZujdC0-GhGjBJAU.roa (hash: dZhp70Fm8wBLybFYAH8VTvH36PqVNE1zgwuzpEitFwQ=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2e:cf:b8:cc:16:04:32:c7:62:9d:ae:38:13:b6:a6:b3
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d689cb71891c6d94bd9e6f14f16e7e37c2c728bf
        Validity
            Not Before: Apr 13 11:01:27 2025 GMT
            Not After : Apr 14 11:01:27 2025 GMT
        Subject: CN=fb72b8e36bff1e5044ac8e44ecff2ed1e8cbec35
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ab:10:fc:ff:bc:bd:47:75:87:a5:ab:4e:26:31:
                    6a:0a:eb:f2:55:74:0c:e6:09:1e:41:b9:85:f4:c8:
                    19:2d:0d:33:da:72:96:5f:98:cb:8a:eb:f4:74:61:
                    e5:95:05:c5:33:c8:db:f5:7c:94:60:4e:bd:4f:17:
                    1a:4c:74:17:16:0a:fe:52:ad:7b:b5:94:ba:0c:8d:
                    22:9a:1d:fc:05:5c:5b:35:47:45:99:66:cc:e0:d6:
                    36:07:6c:60:f8:4d:ae:88:e7:55:8b:87:8b:9d:30:
                    99:6d:91:90:db:1f:ef:79:99:3b:a3:c2:27:31:91:
                    ca:1d:3e:19:54:a9:de:4a:ea:ce:52:b6:14:de:49:
                    ee:2f:8a:73:3b:cc:96:2a:c7:ab:bb:67:58:32:73:
                    89:68:43:71:b0:41:ed:ec:2b:6d:ee:96:b8:9f:76:
                    5b:b7:61:bf:16:ec:f3:4b:93:89:24:fe:c1:ad:85:
                    18:a2:bf:d9:4e:87:a7:78:cf:e5:37:3d:3f:0a:18:
                    3b:b8:59:ff:e8:e3:25:90:57:2c:ea:ba:37:3a:bc:
                    f4:2b:4c:7b:8e:51:00:bb:f5:0e:5b:61:a7:b9:0c:
                    70:47:30:87:ce:9d:0b:3d:79:19:8e:85:ba:44:6c:
                    1c:1a:d4:33:c5:a9:52:1b:68:d5:a2:a6:aa:11:7d:
                    d3:a7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FB:72:B8:E3:6B:FF:1E:50:44:AC:8E:44:EC:FF:2E:D1:E8:CB:EC:35
            X509v3 Authority Key Identifier:
                keyid:D6:89:CB:71:89:1C:6D:94:BD:9E:6F:14:F1:6E:7E:37:C2:C7:28:BF

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1onLcYkcbZS9nm8U8W5-N8LHKL8.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d7/0df28d-924d-4b4e-94b8-824ffc6942f4/1/1onLcYkcbZS9nm8U8W5-N8LHKL8.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/d7/0df28d-924d-4b4e-94b8-824ffc6942f4/1/1onLcYkcbZS9nm8U8W5-N8LHKL8.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         33:d0:5f:cd:01:5b:59:27:11:7b:98:f1:6d:9b:d5:3a:ef:00:
         83:42:db:57:09:8a:7a:87:d9:38:03:ec:0f:db:57:9c:6b:c9:
         46:b7:e3:89:4e:20:43:2c:6e:08:1e:54:eb:a3:ad:90:02:e0:
         32:8a:1d:1d:9e:49:6f:94:0b:d1:5a:b5:31:b8:88:ca:e3:af:
         98:77:5f:53:5c:a2:b2:82:f5:49:c6:6a:71:78:5f:ec:35:48:
         37:f6:bd:7b:2c:ca:1c:c0:b3:1e:fe:68:a9:77:1d:7e:4f:e5:
         dc:01:c0:cf:bb:09:3a:74:fd:9c:45:9e:70:6f:b0:51:31:c8:
         85:f1:c2:78:2e:bd:58:33:79:f4:57:3b:41:40:63:2a:7d:d8:
         51:35:0d:bf:21:be:f0:8a:f9:30:c5:3d:df:a3:ef:e9:93:4a:
         01:48:a1:4e:c5:fe:00:8c:2c:8c:7c:ac:ac:c0:ed:68:2d:d1:
         9a:31:e9:0a:1e:5a:31:d1:77:c4:62:f4:cc:6a:c0:21:38:f1:
         1d:e6:02:bd:17:a4:bc:38:f3:cf:96:0e:68:c9:28:f0:ad:af:
         4d:c9:aa:d8:b4:02:1b:78:f1:5b:b0:70:86:16:90:d8:04:b8:
         9c:a0:a6:c1:df:e3:72:3d:32:f5:5e:e5:a9:60:4f:41:b3:dc:
         fc:f1:bc:ca
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----