Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e1/945dbd-2fb7-4dd1-96a6-0585de4d4ee7/1/RABxct-fwtSi3bupNM68nwKG08o.mft
File:                     RABxct-fwtSi3bupNM68nwKG08o.mft (raw, json)
Hash identifier:          PUSaBpBrGRWkXF7GDGVdlLJSz+fKiSo2cGqffR4ovcQ=
Subject key identifier:   E7:4D:C3:C8:80:80:3B:AC:04:3A:13:29:28:A6:A2:16:D0:0A:F4:B7
Authority key identifier: 44:00:71:72:DF:9F:C2:D4:A2:DD:BB:A9:34:CE:BC:9F:02:86:D3:CA
Certificate issuer:       /CN=44007172df9fc2d4a2ddbba934cebc9f0286d3ca
Certificate serial:       01962DF39CB296F7440261104F90CCA16E6B
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/RABxct-fwtSi3bupNM68nwKG08o.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/e1/945dbd-2fb7-4dd1-96a6-0585de4d4ee7/1/RABxct-fwtSi3bupNM68nwKG08o.mft
Manifest number:          14EE
Signing time:             Sun 13 Apr 2025 07:01:02 +0000
Manifest this update:     Sun 13 Apr 2025 07:01:02 +0000
Manifest next update:     Mon 14 Apr 2025 07:01:02 +0000
Files and hashes:         1: 480p7BIjIK-B7q3fhqVH-c9jWtM.roa (hash: Oq3bjkZh6ACA9+Ey6L0eW4PFiYEb6oJn3R3aG4qJpMs=)
                          2: 7MVokHTUjOR_Ula_qOVzOSXNEdU.roa (hash: iVCuhBUobzj667bcusQ2j4zXO5PCfzjmGuh6mK8Lkeo=)
                          3: GYuIoE-jlXSckwk_qSK_aV7UB4Q.roa (hash: sORKouCrelcQgpTPPPbZDvGrSxjdHNUzrheoRMHaMrw=)
                          4: RABxct-fwtSi3bupNM68nwKG08o.crl (hash: eoNAsCAAeCG649l80XWR6HivDuKb2Xp5HfNmgWMDj80=)
                          5: aa2j5wVm0c-lQnZ_s16QHGRxbVU.roa (hash: 2qdz/uEuQTzsIMdeNOG9LQdnTQSy4fa2A5Rp2WG5LzI=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2d:f3:9c:b2:96:f7:44:02:61:10:4f:90:cc:a1:6e:6b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=44007172df9fc2d4a2ddbba934cebc9f0286d3ca
        Validity
            Not Before: Apr 13 07:01:02 2025 GMT
            Not After : Apr 14 07:01:02 2025 GMT
        Subject: CN=e74dc3c880803bac043a132928a6a216d00af4b7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a4:d0:2a:7a:6a:6b:2d:d0:62:96:e7:12:0e:81:
                    24:9f:95:a5:a4:43:56:1d:92:59:3f:e9:1b:f8:6d:
                    16:dd:12:d4:3f:f7:ee:b5:ed:b2:0b:59:f6:e0:cd:
                    c2:d0:80:56:56:2a:12:72:95:20:c1:c2:aa:5b:cf:
                    36:ae:d4:34:4d:1b:67:b1:7e:59:f8:47:aa:39:58:
                    3c:d6:22:d6:51:a9:45:73:c6:35:7d:b2:0b:18:c9:
                    37:bc:78:56:2b:39:a1:4d:53:cf:48:e7:fd:cc:97:
                    bb:8f:e8:1b:05:e1:45:d9:42:b3:6b:17:ea:ad:6d:
                    9f:f7:af:78:2c:49:4c:f9:b9:57:f8:9c:0f:4a:43:
                    45:b8:cd:89:5d:a9:92:84:2c:0a:15:fc:15:eb:f4:
                    29:0a:10:e7:71:8d:36:6e:08:fb:57:40:1e:65:96:
                    a9:a7:ef:26:db:01:d6:0a:b4:2b:64:58:9e:90:83:
                    7e:1c:e5:e7:a2:7c:37:9e:20:f2:2c:78:54:49:fb:
                    63:d2:83:45:35:9e:42:9b:b5:88:e7:e2:ff:6f:55:
                    0a:5d:0b:6e:f1:d5:70:49:a9:f9:7c:28:15:24:51:
                    48:a9:29:8e:fd:97:b5:91:64:bd:d1:2f:ab:f0:f8:
                    a3:b2:f5:c2:eb:08:1b:bf:cf:37:0f:cf:b5:0f:20:
                    7c:6b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E7:4D:C3:C8:80:80:3B:AC:04:3A:13:29:28:A6:A2:16:D0:0A:F4:B7
            X509v3 Authority Key Identifier:
                keyid:44:00:71:72:DF:9F:C2:D4:A2:DD:BB:A9:34:CE:BC:9F:02:86:D3:CA

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/RABxct-fwtSi3bupNM68nwKG08o.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e1/945dbd-2fb7-4dd1-96a6-0585de4d4ee7/1/RABxct-fwtSi3bupNM68nwKG08o.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/e1/945dbd-2fb7-4dd1-96a6-0585de4d4ee7/1/RABxct-fwtSi3bupNM68nwKG08o.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         04:02:df:b2:78:36:ea:a2:19:e9:2a:63:2a:d8:da:7a:0a:75:
         b3:85:5c:cb:15:db:a6:63:53:50:a3:ca:78:9d:78:69:48:06:
         b8:b8:2c:ee:56:19:e7:65:d8:13:63:d5:83:37:e2:ab:a5:17:
         73:ea:69:75:24:4a:5e:e3:d7:6a:1c:7b:29:78:11:2f:ad:a1:
         a8:6c:97:5c:73:fd:a6:20:7a:94:2a:5c:32:94:9c:0c:b6:4d:
         f6:6c:14:99:1e:c6:13:21:c2:43:38:7d:bd:b7:62:25:2f:ee:
         49:29:95:6c:e5:ef:10:61:a7:f5:c6:8c:3d:86:ea:53:8d:91:
         e0:d4:bb:85:7a:60:2b:56:60:a9:f8:8a:96:58:8e:7c:71:79:
         9b:ae:b2:e8:51:87:7c:f8:cc:5a:42:7d:d3:3e:36:d2:0b:b1:
         4e:b0:e7:f3:d1:1d:a4:25:ec:73:b5:77:18:2a:8f:f3:59:6a:
         0d:75:5e:9b:05:13:95:ff:86:ab:7c:ab:92:39:19:f0:72:2d:
         8c:0c:f0:a4:11:f1:a7:11:98:b4:01:2f:42:0e:05:7f:d4:a1:
         7c:e5:2a:8a:d8:a7:df:f5:61:de:0a:23:13:c4:8d:1d:56:c9:
         72:40:8e:6d:23:ca:3f:60:9c:08:d1:45:0b:d7:e7:f0:ea:01:
         65:97:eb:9c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----