Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e5/5efad6-c9a4-4838-bd67-73717c56b6f3/1/mi8HAdemPPPRk2lcOV0aH3gzXM8.mft
File:                     mi8HAdemPPPRk2lcOV0aH3gzXM8.mft (raw, json)
Hash identifier:          tmVztjuhYXfeVCR6NNj5ld/w8nAOa3HS7PzZR9XslKE=
Subject key identifier:   C1:DF:72:30:36:24:49:4F:C1:14:73:11:B5:2D:A5:89:30:79:68:03
Authority key identifier: 9A:2F:07:01:D7:A6:3C:F3:D1:93:69:5C:39:5D:1A:1F:78:33:5C:CF
Certificate issuer:       /CN=9a2f0701d7a63cf3d193695c395d1a1f78335ccf
Certificate serial:       01962F06ACF107DFEF70F6807ECD979AAFF7
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/mi8HAdemPPPRk2lcOV0aH3gzXM8.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/e5/5efad6-c9a4-4838-bd67-73717c56b6f3/1/mi8HAdemPPPRk2lcOV0aH3gzXM8.mft
Manifest number:          11D6
Signing time:             Sun 13 Apr 2025 12:01:28 +0000
Manifest this update:     Sun 13 Apr 2025 12:01:28 +0000
Manifest next update:     Mon 14 Apr 2025 12:01:28 +0000
Files and hashes:         1: GEL87EsMVhk3ZunlststnTM4YLA.roa (hash: H7b1xc1l2fw0pFwv7g5oKkpSKlsP+OyAptyBIDDM0uk=)
                          2: agw3OIrKwOyL1W_VnmVopnHAQeo.roa (hash: f+xBycRNQ1p+9ZUPOHzjnJANu2PPzQm41w3wdyO787g=)
                          3: mi8HAdemPPPRk2lcOV0aH3gzXM8.crl (hash: nWCTaqw/7t9sBAvrp1VFpcXnWAGlQvSxSyJdayVOnpU=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2f:06:ac:f1:07:df:ef:70:f6:80:7e:cd:97:9a:af:f7
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9a2f0701d7a63cf3d193695c395d1a1f78335ccf
        Validity
            Not Before: Apr 13 12:01:28 2025 GMT
            Not After : Apr 14 12:01:28 2025 GMT
        Subject: CN=c1df72303624494fc1147311b52da58930796803
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:93:59:48:ec:1c:13:ca:04:0f:a7:cb:65:65:5a:
                    81:f9:9c:8f:c3:80:77:44:16:08:f7:be:3d:2e:e1:
                    21:0b:74:23:00:ec:e8:fc:91:4d:5f:75:7f:a6:b6:
                    d0:5a:43:c7:1b:9b:b5:ff:2e:c9:de:1d:d2:1e:36:
                    ce:36:37:54:47:ae:73:af:1d:8c:30:a9:25:b2:5e:
                    12:cb:2f:e4:ac:9c:42:7f:76:09:cb:13:25:dd:ef:
                    a9:ee:8a:80:85:6e:d4:97:5a:70:ac:33:b8:79:91:
                    69:17:42:99:81:39:5b:7e:f7:4c:ce:f3:28:e8:ea:
                    3c:a6:c3:3f:5d:91:44:e3:9e:72:b8:16:df:1d:d3:
                    5d:88:8c:17:69:cc:0a:20:73:c8:91:b7:09:8a:64:
                    ce:f5:61:b2:85:cd:a5:81:d7:71:45:c7:41:48:98:
                    f2:fc:fb:b6:04:85:13:1f:b6:54:70:11:cf:01:bd:
                    14:a7:02:2a:db:dd:00:c8:35:80:33:07:51:bf:cc:
                    d3:db:1e:97:a0:34:2e:5a:2b:1c:dd:a6:7d:2b:aa:
                    f0:9f:99:e2:28:ee:9a:e0:8f:38:f3:e4:bf:cb:8c:
                    f4:9c:c8:05:6c:8b:3e:80:4a:33:76:b9:80:16:e0:
                    4c:57:08:e5:b8:4f:61:64:ae:84:29:34:d6:41:a4:
                    81:1f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C1:DF:72:30:36:24:49:4F:C1:14:73:11:B5:2D:A5:89:30:79:68:03
            X509v3 Authority Key Identifier:
                keyid:9A:2F:07:01:D7:A6:3C:F3:D1:93:69:5C:39:5D:1A:1F:78:33:5C:CF

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/mi8HAdemPPPRk2lcOV0aH3gzXM8.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e5/5efad6-c9a4-4838-bd67-73717c56b6f3/1/mi8HAdemPPPRk2lcOV0aH3gzXM8.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/e5/5efad6-c9a4-4838-bd67-73717c56b6f3/1/mi8HAdemPPPRk2lcOV0aH3gzXM8.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         62:e5:89:8a:af:c1:d4:69:6b:b9:24:f6:75:8f:d3:61:84:fb:
         01:bf:04:05:12:86:8b:49:ae:02:55:f2:5e:a9:e5:ff:20:f2:
         f1:5b:21:14:5a:f6:97:a1:b9:ff:1f:c7:62:1b:85:87:5c:68:
         6f:8b:94:66:a8:eb:f4:cc:e4:75:a6:c7:ba:c8:8d:6c:ec:31:
         c6:a6:4b:6f:c7:b5:f2:0e:ec:bb:08:6b:a4:bc:ac:27:9a:3e:
         01:61:f4:ae:7d:37:d3:c3:1a:6f:1c:b1:24:a6:32:1f:cd:ff:
         f6:21:7f:37:cf:89:42:1c:98:58:da:52:68:84:8a:21:7a:67:
         78:5b:53:54:60:56:20:d3:1d:5f:d0:e0:a2:70:5e:e6:d1:47:
         72:82:9c:e4:fe:ef:8d:fd:ab:78:e0:f9:15:45:e4:4a:09:96:
         9a:7f:37:f1:93:7d:00:99:e9:ed:36:93:43:8f:96:a4:07:be:
         1e:c7:b3:04:dd:50:b7:dc:f5:0c:8c:96:58:84:81:bb:15:53:
         7c:9c:aa:39:70:6d:79:fa:f9:7a:ec:79:38:e8:53:45:b8:18:
         79:a2:f7:8e:03:7e:57:9c:d9:17:01:92:09:26:94:11:f8:84:
         00:b2:d1:92:c0:1d:d2:4f:34:32:f4:a5:04:ed:0d:f2:28:48:
         2b:4b:c3:1a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----