Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e4/28d600-a869-4ab1-9b2e-446019966a19/1/4FdMKHjWtTYTm4lfCMnG2xjhKps.mft
File:                     4FdMKHjWtTYTm4lfCMnG2xjhKps.mft (raw, json)
Hash identifier:          mLae0s4SknJESx7zsthj55RFkR3ntZgGap6fEjPDxVE=
Subject key identifier:   16:0F:6B:F8:AA:55:9D:A7:C8:EB:E5:45:03:3B:DC:E1:DC:BF:33:E9
Authority key identifier: E0:57:4C:28:78:D6:B5:36:13:9B:89:5F:08:C9:C6:DB:18:E1:2A:9B
Certificate issuer:       /CN=e0574c2878d6b536139b895f08c9c6db18e12a9b
Certificate serial:       01962ECFA8640F7104A14ED35BE25CE08239
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/4FdMKHjWtTYTm4lfCMnG2xjhKps.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/e4/28d600-a869-4ab1-9b2e-446019966a19/1/4FdMKHjWtTYTm4lfCMnG2xjhKps.mft
Manifest number:          14F1
Signing time:             Sun 13 Apr 2025 11:01:23 +0000
Manifest this update:     Sun 13 Apr 2025 11:01:23 +0000
Manifest next update:     Mon 14 Apr 2025 11:01:23 +0000
Files and hashes:         1: 4FdMKHjWtTYTm4lfCMnG2xjhKps.crl (hash: wjB5w009a6BhYLm5iunW//hFEfn2usIM0yI1arRLx5U=)
                          2: F5_lNgEgzfWoE5_Cqsta810GUD8.roa (hash: iFMsbMYL1gucfU8DYPuCeVZjMtj1pfRR/WALBk/WmbI=)
                          3: GPk2iBuHJkhE3vpf7v6PEKywv7w.roa (hash: GWqOVJmjwk1Pn1GbnWABjMV1e5ehhhP81Lyr4q/ji2E=)
                          4: LNUfeHuP7gnY_85aOJlr0qSJEMQ.roa (hash: YoOtP+EHXOmT+ABly+3o3H4KeOBEs5xmQuWc5ATMUTk=)
                          5: OflCzXga8ucfjVqp9uUhh7zK_qM.roa (hash: tJ4j/9WnUQafTpRcoYrdjgTWc0yGFpsicsnou7Bw3VU=)
                          6: SwP1NYlZc5jbDBXXeMNl1hjy1LA.roa (hash: DMSgzACIbB/JZuNfMaMP2kCv3jA/gmECBXJyT4DQzwk=)
                          7: W6KxeoLPp69-NZgXYljCkgfMzmI.roa (hash: WWTdkNcNGcm7BbXaoCx/steftEF6zzmySvzLX5r6lpM=)
                          8: aAP3usYXoFfJgmCfE8_VSaJGbTU.roa (hash: x6wsw/R7hONUKg46ARfXmJgysd6wAhjXDI0EDejXv3A=)
                          9: iOtyAgFkq9KjDryYtxSf-6c3wlc.roa (hash: Kj30r5ul8bTH9OFgdr0KBvhjQH9UprffsicG1Hxoghk=)
                          10: neNovPYO-axYs7BVt_2UaW47DHE.roa (hash: VFy1CggRIr9nSFzCxAMfyeQiCZ7oJT6RZEpYe7bsLMw=)
                          11: uGW4wsIIh4UfRdPgdZPrknwT0_s.roa (hash: DewiqU6mTjj3HeFVXlyQsAjNkoAtpsCRp10m8FffrLA=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2e:cf:a8:64:0f:71:04:a1:4e:d3:5b:e2:5c:e0:82:39
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e0574c2878d6b536139b895f08c9c6db18e12a9b
        Validity
            Not Before: Apr 13 11:01:23 2025 GMT
            Not After : Apr 14 11:01:23 2025 GMT
        Subject: CN=160f6bf8aa559da7c8ebe545033bdce1dcbf33e9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bf:c6:53:6d:40:cd:a5:82:2b:21:ba:ad:be:33:
                    a2:f7:98:dc:2c:18:2f:cb:39:d4:e6:04:66:55:5b:
                    8b:12:be:74:7c:b3:f1:54:0b:7d:53:91:c0:b4:1a:
                    69:c5:f4:18:63:9f:b7:18:3a:83:3e:94:6c:55:c7:
                    c9:51:a9:1d:4a:62:bf:8f:f7:f8:2b:6b:07:e1:93:
                    16:1e:92:e9:97:57:b3:b1:f9:26:b4:3d:70:18:b2:
                    ff:5c:7d:ce:7f:67:26:1d:a6:ff:6f:fc:0c:68:49:
                    2d:3f:c9:5f:49:17:96:04:28:3b:ae:06:ff:77:5b:
                    4b:03:71:cb:19:35:e3:b6:4d:82:67:d4:45:70:28:
                    b0:d9:9b:f8:59:b5:2d:bc:7c:b8:c2:d7:1d:36:dd:
                    b0:8a:1a:a8:b1:f9:0f:1c:bb:0b:fc:90:f3:d6:3a:
                    3b:e0:3c:37:77:66:51:d8:3e:07:9a:d7:e8:37:7c:
                    5a:e3:fd:3b:af:18:76:0e:e1:ad:00:5d:01:df:a0:
                    ed:fa:0e:34:44:3a:8e:25:a2:fa:eb:a2:f5:d3:42:
                    9f:66:58:42:bb:c6:e8:b4:5c:55:80:73:d3:a2:ab:
                    51:be:4a:c4:0e:a6:4e:1d:63:84:2e:59:06:ca:c8:
                    d5:2d:f0:8e:16:5f:3d:c7:72:c3:78:ee:90:35:b1:
                    37:dd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                16:0F:6B:F8:AA:55:9D:A7:C8:EB:E5:45:03:3B:DC:E1:DC:BF:33:E9
            X509v3 Authority Key Identifier:
                keyid:E0:57:4C:28:78:D6:B5:36:13:9B:89:5F:08:C9:C6:DB:18:E1:2A:9B

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/4FdMKHjWtTYTm4lfCMnG2xjhKps.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e4/28d600-a869-4ab1-9b2e-446019966a19/1/4FdMKHjWtTYTm4lfCMnG2xjhKps.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/e4/28d600-a869-4ab1-9b2e-446019966a19/1/4FdMKHjWtTYTm4lfCMnG2xjhKps.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         81:fd:4e:ab:69:f4:b0:6b:a2:6f:3b:de:8f:9f:a4:2b:63:78:
         57:70:6b:6e:1a:95:98:0a:76:65:6f:f5:ff:f2:c8:dd:6b:31:
         bb:87:a7:3d:d9:b6:2e:e1:0e:69:de:e0:2a:9a:cb:ca:de:03:
         bc:56:b7:53:00:60:29:3d:e3:61:96:6a:82:01:7e:bb:54:06:
         12:17:dd:6d:95:9c:08:75:ad:50:96:78:01:30:bf:12:c5:9a:
         a7:12:8d:23:5a:a3:31:82:81:07:13:df:40:74:7d:41:d8:0f:
         13:bc:2b:54:36:6e:4a:4c:dd:bb:f9:a1:2d:0d:a2:fb:ca:d8:
         3f:ea:02:63:52:c2:75:65:2b:6f:04:86:3c:c9:45:e5:b1:b7:
         13:1a:82:8e:6f:59:c9:be:3b:d1:5a:4c:27:06:83:ad:e0:d4:
         8d:0f:9f:8b:98:d3:86:61:12:3a:53:4b:93:ad:13:e0:3d:f6:
         32:ca:1d:a0:13:79:ac:59:08:ac:78:bc:95:01:d6:9a:ad:cf:
         f6:6b:63:ba:ae:71:c2:6b:bf:6f:2c:3d:01:66:c2:65:99:0a:
         67:c4:8e:2e:a2:70:e4:4d:5d:e6:3d:89:d7:81:06:0b:1f:fd:
         91:30:ca:a8:05:f8:d3:64:ed:af:b3:5f:24:c6:0c:e5:e3:25:
         5c:e8:60:2a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----