Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e0/661dad-00c9-4f17-94d8-2bbd01f9e500/1/mm4UdEgoljS5hojuWlr0R9Qsuwc.mft
File:                     mm4UdEgoljS5hojuWlr0R9Qsuwc.mft (raw, json)
Hash identifier:          2Wn3c++CFIA5vYvA0cQBGx+CWPOwOc1uF9ENkVBL+5k=
Subject key identifier:   D6:C3:A8:06:3C:30:4C:C5:79:97:50:FB:6D:FE:BD:BE:CF:D4:B0:0B
Authority key identifier: 9A:6E:14:74:48:28:96:34:B9:86:88:EE:5A:5A:F4:47:D4:2C:BB:07
Certificate issuer:       /CN=9a6e147448289634b98688ee5a5af447d42cbb07
Certificate serial:       01962FAB7E01903B9D3E9F683EBF21D42426
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/mm4UdEgoljS5hojuWlr0R9Qsuwc.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/e0/661dad-00c9-4f17-94d8-2bbd01f9e500/1/mm4UdEgoljS5hojuWlr0R9Qsuwc.mft
Manifest number:          106C
Signing time:             Sun 13 Apr 2025 15:01:30 +0000
Manifest this update:     Sun 13 Apr 2025 15:01:30 +0000
Manifest next update:     Mon 14 Apr 2025 15:01:30 +0000
Files and hashes:         1: ONDqQfjr9_AJ9RydMAScKqXbPqA.roa (hash: tzIBuHIsI+gH6B58aDq25YyBMDZoGOkfi5bBeLvI+/k=)
                          2: mm4UdEgoljS5hojuWlr0R9Qsuwc.crl (hash: xLb3YZr4a2MHSJa4xBin8Vhv5SSJiEW0WAS4DJaY3/0=)
                          3: sGdpJ3MGc2JYHlPiUM-Ur_MYt80.roa (hash: Mg+YYDsRO2iqoqy0HjPvZxJm7jFKR4if92J93XJagMw=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2f:ab:7e:01:90:3b:9d:3e:9f:68:3e:bf:21:d4:24:26
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9a6e147448289634b98688ee5a5af447d42cbb07
        Validity
            Not Before: Apr 13 15:01:30 2025 GMT
            Not After : Apr 14 15:01:30 2025 GMT
        Subject: CN=d6c3a8063c304cc5799750fb6dfebdbecfd4b00b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a5:66:a9:9d:26:fe:3b:a6:ce:14:91:9b:de:94:
                    f1:4f:ca:f6:b4:f5:a1:be:94:d0:f5:72:00:e7:b0:
                    a3:ec:fa:98:d4:3e:bf:b9:ac:27:06:27:e5:b8:d3:
                    14:45:10:ff:ba:01:42:7d:20:32:2b:2b:c4:44:92:
                    fe:e7:95:cd:26:98:fe:63:30:c0:87:3d:cc:38:9a:
                    4c:71:10:37:eb:f2:ab:ff:14:eb:35:1b:61:17:36:
                    6a:7b:c5:ec:71:a1:6f:05:86:89:84:7b:e2:64:84:
                    99:64:ca:7c:1c:54:c7:5f:d1:a7:d9:6f:b9:6d:52:
                    3c:f9:3d:cb:7d:b7:05:ec:ef:64:b4:52:c3:60:87:
                    53:73:02:76:14:5f:a0:bb:2e:f6:88:69:ea:50:05:
                    fb:e3:9b:5a:ab:be:2d:61:b9:6a:72:08:09:aa:02:
                    ea:44:7d:f7:64:7d:ec:34:31:b5:24:90:bb:71:f4:
                    ca:37:53:f2:51:01:ee:11:43:5b:96:43:94:91:62:
                    24:c9:47:28:24:83:96:cb:7f:bc:ea:c0:eb:e5:a2:
                    b2:e1:89:49:ae:58:1b:11:c7:2d:f8:49:4a:79:96:
                    63:3b:36:5b:b7:0b:97:9b:79:ff:1b:cd:68:5a:32:
                    4a:d5:cc:0e:be:78:89:6e:9d:26:ff:3a:dc:f1:fe:
                    2e:43
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D6:C3:A8:06:3C:30:4C:C5:79:97:50:FB:6D:FE:BD:BE:CF:D4:B0:0B
            X509v3 Authority Key Identifier:
                keyid:9A:6E:14:74:48:28:96:34:B9:86:88:EE:5A:5A:F4:47:D4:2C:BB:07

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/mm4UdEgoljS5hojuWlr0R9Qsuwc.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e0/661dad-00c9-4f17-94d8-2bbd01f9e500/1/mm4UdEgoljS5hojuWlr0R9Qsuwc.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/e0/661dad-00c9-4f17-94d8-2bbd01f9e500/1/mm4UdEgoljS5hojuWlr0R9Qsuwc.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         72:52:8e:ce:38:96:33:09:dd:c2:55:7e:2e:ad:4d:50:70:7c:
         fb:db:78:ff:1f:85:70:3f:7a:74:04:64:23:cf:a3:db:f3:60:
         07:ee:3d:45:f9:7d:48:5e:35:7f:53:95:86:12:17:3b:9b:95:
         2e:c8:09:28:64:52:4e:26:fc:fe:76:61:2c:14:65:f4:ab:24:
         73:d1:a7:26:11:6d:5b:26:15:8f:0a:32:8f:07:3a:ff:2c:e7:
         07:bb:18:df:30:ea:1c:be:88:da:33:bd:c4:45:ba:5f:a0:09:
         92:f0:d4:04:c4:3d:75:ed:fe:59:e8:79:c6:dd:ec:9d:79:3c:
         d0:e2:2f:59:41:ea:0d:b5:de:19:3b:72:70:0b:db:ee:9f:8c:
         98:ce:76:aa:72:97:fc:65:4e:d7:1c:92:04:9b:ee:7e:56:33:
         41:dd:e2:5b:d2:40:4e:1f:05:28:5f:b8:ed:ec:3a:98:eb:8e:
         ee:7e:0e:5b:12:ee:b1:dc:a3:d7:c7:37:70:42:7a:9b:52:a3:
         b6:4b:2c:b2:79:bb:85:70:3f:78:a8:a6:a1:f2:c8:08:41:cd:
         26:e6:a3:ea:73:fc:50:b7:b0:d5:f3:21:2f:a9:73:3c:93:76:
         8a:df:a1:38:f0:07:1c:38:fc:08:14:28:b8:3f:24:56:3f:e5:
         91:a9:2f:12
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----