Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/da/0251f2-a1bb-44fb-b908-48d5ff4ba255/1/miSyfZ899uFOvHnhRui-MnVL-AA.mft
File:                     miSyfZ899uFOvHnhRui-MnVL-AA.mft (raw, json)
Hash identifier:          j0ZZJ8iZfxcrL3m/svtl/IbQCMYvXtIKzv0VIp55dO8=
Subject key identifier:   8C:C8:7A:58:D3:FA:27:0C:3E:3D:D6:FA:2D:40:DD:7B:F5:50:2E:56
Authority key identifier: 9A:24:B2:7D:9F:3D:F6:E1:4E:BC:79:E1:46:E8:BE:32:75:4B:F8:00
Certificate issuer:       /CN=9a24b27d9f3df6e14ebc79e146e8be32754bf800
Certificate serial:       01962ECF6EE3EE2064CA1FCEA44D3BED1E0A
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/miSyfZ899uFOvHnhRui-MnVL-AA.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/da/0251f2-a1bb-44fb-b908-48d5ff4ba255/1/miSyfZ899uFOvHnhRui-MnVL-AA.mft
Manifest number:          0695
Signing time:             Sun 13 Apr 2025 11:01:08 +0000
Manifest this update:     Sun 13 Apr 2025 11:01:08 +0000
Manifest next update:     Mon 14 Apr 2025 11:01:08 +0000
Files and hashes:         1: _3sIjV0NzBRBUXOfv_g2UXCkao8.roa (hash: cQ3AbgfUz8fqilC4hhCtVaH0mIMtsn/x+ig6JhvdshA=)
                          2: gzFSDIvuo1g8SYBgsWmT7skIWNo.roa (hash: D7BWQwJQV9C+IDJ4nn09iuxJOEha5Pi+Tmqs9uYeqYg=)
                          3: miSyfZ899uFOvHnhRui-MnVL-AA.crl (hash: KKS6zJM2cCN35CT8pru4dLNUAZ8yUxOIaeSfCx5m55s=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2e:cf:6e:e3:ee:20:64:ca:1f:ce:a4:4d:3b:ed:1e:0a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9a24b27d9f3df6e14ebc79e146e8be32754bf800
        Validity
            Not Before: Apr 13 11:01:08 2025 GMT
            Not After : Apr 14 11:01:08 2025 GMT
        Subject: CN=8cc87a58d3fa270c3e3dd6fa2d40dd7bf5502e56
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d0:0a:5f:3f:b9:05:26:8f:35:93:d2:4a:df:cd:
                    9e:02:86:65:c6:cd:b4:90:fe:e9:96:73:9a:cc:e0:
                    6f:cc:35:8b:0c:e3:a7:9f:3c:3e:ae:51:1e:00:ce:
                    47:a4:d6:f8:de:d5:f3:e9:33:ba:55:85:17:e1:87:
                    6c:59:96:6f:f7:6c:3c:96:7e:fc:9c:13:37:17:bd:
                    13:40:b0:76:ae:7c:d5:b3:e9:88:09:02:c3:c5:e6:
                    6e:cb:c2:f3:33:2b:a9:1c:dc:06:7b:83:26:9c:90:
                    e7:9f:55:15:48:f8:ae:3c:42:38:20:30:8e:ca:53:
                    39:84:6f:9d:d2:eb:4d:b5:44:35:13:d6:f1:ba:75:
                    4d:98:c2:8a:80:4a:a8:42:a5:b1:9a:8e:5f:08:9a:
                    42:f0:1c:19:2e:d2:8e:ea:14:02:ee:95:4d:bf:76:
                    9a:56:1d:11:fc:70:66:3e:6f:db:e1:67:45:03:a8:
                    73:7b:8a:42:8b:59:32:d7:34:82:1f:65:a6:f7:fc:
                    c9:15:30:6d:ad:ac:3b:29:ad:ef:16:3f:84:7c:56:
                    18:23:ad:70:63:28:ed:da:97:dc:cb:db:45:3b:6b:
                    84:1f:7e:1a:e3:00:d2:3f:c5:cb:e7:4f:68:17:9f:
                    59:d4:41:c3:65:12:83:e5:43:b4:f3:70:fe:04:9a:
                    fe:25
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8C:C8:7A:58:D3:FA:27:0C:3E:3D:D6:FA:2D:40:DD:7B:F5:50:2E:56
            X509v3 Authority Key Identifier:
                keyid:9A:24:B2:7D:9F:3D:F6:E1:4E:BC:79:E1:46:E8:BE:32:75:4B:F8:00

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/miSyfZ899uFOvHnhRui-MnVL-AA.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/da/0251f2-a1bb-44fb-b908-48d5ff4ba255/1/miSyfZ899uFOvHnhRui-MnVL-AA.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/da/0251f2-a1bb-44fb-b908-48d5ff4ba255/1/miSyfZ899uFOvHnhRui-MnVL-AA.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         0e:bc:e0:8e:1e:e0:b5:14:54:54:82:de:80:a6:e6:94:f4:af:
         b0:a0:68:ed:0e:cb:b2:41:92:a9:02:4b:6b:b5:e5:e4:50:92:
         6a:2b:2d:fe:62:cf:4e:87:35:27:1f:6e:f0:67:73:fb:49:05:
         93:3f:0b:88:8b:74:0c:a2:79:ad:42:d5:cf:87:eb:20:5a:34:
         72:54:e2:f8:eb:5c:3c:a6:7e:cb:18:4d:3f:2a:fd:37:46:ed:
         85:0f:8d:b5:d8:d8:7e:df:3d:8f:43:93:a6:77:51:93:5a:08:
         e5:d1:d8:24:c3:c7:df:79:1c:03:e3:78:d8:18:11:7e:a0:39:
         fe:13:13:c5:68:e4:ab:62:c1:1d:ed:01:e7:a5:72:f7:fc:92:
         34:00:8a:58:62:1a:1b:59:bb:4c:38:84:14:7e:44:ef:9b:44:
         b0:84:6f:2e:45:ad:2c:ec:7e:c3:43:5f:de:a6:4d:9d:70:8a:
         27:5a:b0:6f:46:37:4c:20:65:00:26:50:e9:c8:bd:f6:47:ad:
         68:82:1e:5b:a3:b6:7d:e5:44:cf:72:2e:fa:76:33:5f:93:37:
         d3:5f:ba:c7:70:dc:25:46:d6:15:5f:bc:7d:9a:b8:8a:42:2e:
         91:38:02:ac:37:a6:da:e3:b0:f1:5e:1b:9e:01:04:9d:e1:2c:
         45:d5:4f:9b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----