Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e2/3815e3-d3a8-4b3c-a4b2-cb344f1800ed/1/09Tg2mjBRGaJQZ0QNxGxkd7VZ_Q.mft
File:                     09Tg2mjBRGaJQZ0QNxGxkd7VZ_Q.mft (raw, json)
Hash identifier:          ltTtUoSprT+teuH5mKpNz/k/UvUznY36Mf1Ya8MfvJI=
Subject key identifier:   63:AE:6D:8B:F4:17:01:08:41:C4:84:4D:F3:1B:29:83:68:CE:C5:F9
Authority key identifier: D3:D4:E0:DA:68:C1:44:66:89:41:9D:10:37:11:B1:91:DE:D5:67:F4
Certificate issuer:       /CN=d3d4e0da68c1446689419d103711b191ded567f4
Certificate serial:       01962DF3ABE68962E350ADC16E816AEC97CE
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/09Tg2mjBRGaJQZ0QNxGxkd7VZ_Q.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/e2/3815e3-d3a8-4b3c-a4b2-cb344f1800ed/1/09Tg2mjBRGaJQZ0QNxGxkd7VZ_Q.mft
Manifest number:          05FA
Signing time:             Sun 13 Apr 2025 07:01:06 +0000
Manifest this update:     Sun 13 Apr 2025 07:01:06 +0000
Manifest next update:     Mon 14 Apr 2025 07:01:06 +0000
Files and hashes:         1: 09Tg2mjBRGaJQZ0QNxGxkd7VZ_Q.crl (hash: jrfaXXlOHiQxcxkCi+646NoOs/SzhW6y98jwvHHpODc=)
                          2: K7A7C17ACPryQjif4dPHFWCYnmw.roa (hash: yO751NJRBOSn6gMdo40XzsiJt+C4xy6LseVpnpZi3tM=)
                          3: nkm_AqdgrcdDszFPZGQsvTeQ99w.roa (hash: tWZj3SfE+CRbF9Ic1OICFS30cFtSOef9JMakRYCQj78=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2d:f3:ab:e6:89:62:e3:50:ad:c1:6e:81:6a:ec:97:ce
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d3d4e0da68c1446689419d103711b191ded567f4
        Validity
            Not Before: Apr 13 07:01:06 2025 GMT
            Not After : Apr 14 07:01:06 2025 GMT
        Subject: CN=63ae6d8bf417010841c4844df31b298368cec5f9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e0:f0:e1:bc:ed:ad:f5:f2:93:16:81:26:59:0d:
                    72:58:28:fd:6e:25:2c:2b:e1:82:a1:60:6e:cf:a7:
                    6f:89:d5:da:92:98:54:3c:51:62:16:f9:3a:a1:82:
                    06:1b:bf:14:ea:61:48:9c:e2:4e:c9:23:39:ef:cd:
                    8a:0d:09:91:a7:ae:e7:89:2a:1f:0f:ba:e5:1e:2e:
                    56:a6:06:8f:12:16:56:c0:1b:ec:ea:86:34:d4:67:
                    cb:86:04:35:e4:7e:b1:22:03:c4:0a:e5:c8:5d:10:
                    c8:3a:33:9d:ec:94:b3:6d:b8:bd:b0:ce:74:96:f6:
                    00:44:60:7e:a0:7a:b7:1c:cc:b6:f3:05:b7:eb:08:
                    ab:50:3f:f4:72:7d:87:06:f0:6f:8f:94:88:03:4a:
                    f1:fe:2f:cd:6d:ba:ad:0a:3d:bd:97:80:60:db:61:
                    e3:66:b1:36:b4:fb:08:a3:ed:fd:b8:10:a4:20:b7:
                    96:3c:aa:46:eb:75:3c:05:f9:b0:90:c2:17:78:a7:
                    5d:12:ad:27:c0:f2:3a:4e:a3:7f:f1:d1:81:db:0e:
                    50:09:82:cb:db:f4:fd:c9:2a:f9:5e:03:ae:70:fa:
                    65:95:0d:3b:94:ca:e7:65:d1:5e:bc:09:a5:e5:ad:
                    3e:9b:39:9d:d6:81:1a:12:af:c5:8e:69:06:8c:83:
                    b6:17
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                63:AE:6D:8B:F4:17:01:08:41:C4:84:4D:F3:1B:29:83:68:CE:C5:F9
            X509v3 Authority Key Identifier:
                keyid:D3:D4:E0:DA:68:C1:44:66:89:41:9D:10:37:11:B1:91:DE:D5:67:F4

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/09Tg2mjBRGaJQZ0QNxGxkd7VZ_Q.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e2/3815e3-d3a8-4b3c-a4b2-cb344f1800ed/1/09Tg2mjBRGaJQZ0QNxGxkd7VZ_Q.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/e2/3815e3-d3a8-4b3c-a4b2-cb344f1800ed/1/09Tg2mjBRGaJQZ0QNxGxkd7VZ_Q.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         a4:a7:4b:68:59:a0:b8:b2:36:74:db:e0:b8:1b:b6:75:44:69:
         d9:9c:27:b0:00:ac:af:c2:97:20:cf:ca:98:e4:02:95:4c:27:
         a7:66:c0:bd:be:60:89:95:7f:6a:ab:da:b3:74:f0:57:39:bb:
         fc:72:94:ff:32:19:f0:29:f9:d2:19:89:84:0d:cf:e6:c2:9a:
         25:2b:54:9a:36:25:3f:ad:09:54:01:b7:47:ec:31:79:54:ef:
         ce:c1:a3:ae:aa:c7:a3:58:50:aa:66:de:09:25:db:0e:a9:fb:
         e8:e6:00:6d:7b:7d:df:fe:81:61:a5:99:91:94:32:08:1e:fb:
         cc:b1:45:b2:60:eb:dc:05:ce:0a:e3:36:08:5e:74:04:dc:d7:
         dc:49:02:ab:27:c0:87:5f:fa:f5:5a:41:fe:93:a4:dd:e0:fb:
         ba:2c:48:f1:de:52:0b:b2:60:2e:bb:fc:b9:39:e1:23:f3:86:
         b6:31:83:5a:60:5f:b0:70:c4:94:9b:d9:e6:97:e4:1e:77:ea:
         61:b8:cc:9e:ed:4f:cc:f7:ea:5b:e9:87:fd:25:c9:18:82:d6:
         5f:03:80:95:4c:ab:ba:f7:6e:5c:ba:4b:38:a4:38:38:f4:e2:
         f5:5c:78:10:50:e0:3b:30:51:6f:40:51:22:93:b7:4b:ff:81:
         1e:06:cf:a8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----