Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e6/587792-bae9-4183-a4b1-ff5f1ad69266/1/s8UbDAY8_BaUP8mkfiyAWZD26q4.mft
File:                     s8UbDAY8_BaUP8mkfiyAWZD26q4.mft (raw, json)
Hash identifier:          mbnaJ9+wRWSit/frTsgX21Fl5EmHxF+E74u7cKLADbc=
Subject key identifier:   E3:CD:70:C2:04:BD:BF:31:E0:6A:B8:D4:90:FD:C6:4C:64:00:99:53
Authority key identifier: B3:C5:1B:0C:06:3C:FC:16:94:3F:C9:A4:7E:2C:80:59:90:F6:EA:AE
Certificate issuer:       /CN=b3c51b0c063cfc16943fc9a47e2c805990f6eaae
Certificate serial:       01962E9954A9E9B5858817390214BB5EEFB6
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/s8UbDAY8_BaUP8mkfiyAWZD26q4.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/e6/587792-bae9-4183-a4b1-ff5f1ad69266/1/s8UbDAY8_BaUP8mkfiyAWZD26q4.mft
Manifest number:          14F8
Signing time:             Sun 13 Apr 2025 10:02:02 +0000
Manifest this update:     Sun 13 Apr 2025 10:02:02 +0000
Manifest next update:     Mon 14 Apr 2025 10:02:02 +0000
Files and hashes:         1: 2mMFFVEf9RI7laeK707TbUw9w1o.roa (hash: lJtAZDZI6kWuia4ewbwmh2H0Ib7YOsmGLnMGMcXt0g8=)
                          2: BqnvofScUisQsUQed2MQ6B18GAQ.roa (hash: aF/iFUXhalT+tHSvHf/i2jdL4yddWHGSdcJZMfIy3uE=)
                          3: DV3PY9YU5zk2EaQYZkZq4p-ZUYM.roa (hash: iyl4yZuKkTsrQs+Y4JJy2vYNDSKm0/gIBzJQSKVyBGM=)
                          4: FeALzwmlHVBsdnrHTXpUuCdKMKk.roa (hash: LOwvL3odoyBFINMdFWH/VCQRIEFy3WTnNyeQKYYbRfU=)
                          5: H1-xrUolZhz6fzzg_UIN6T3DPWQ.roa (hash: qIZY0TolKgREye8GEvOpwQsSjnvpT07vwo6n55/XGY4=)
                          6: TyV9-G3EmDmxesG6kytX3N3gsKY.roa (hash: 5ZTWb+G4Smvs/SR1cTUZYD6dnJkngJRJoyw2KmVLYwM=)
                          7: UDyJk4Oy_-L1Te8H_oQucf6YjW4.roa (hash: RtdvCTTWOI7dE+z50k0BiFUEbUEH2UCgRme1pMQy/3s=)
                          8: WjZqJ0NhE5N_q8Z5fvWq8P2vTKU.roa (hash: yqIxBJiLiShm8irHVY2/sGIwoQoJ1y3znhIp9whAo54=)
                          9: dKsN1qGwEKIQpUTURYKT2umZW2w.roa (hash: tA8mIaQttFCg4VHXuxLgiMZWDalN45RLcJgG64coFpw=)
                          10: hmD_gbHlASML2ltcjVZUWmwvSYc.roa (hash: 7BK9fS2pKl/VxlRPtn0r5sqSpL1lbttsGsNK/TVCOlc=)
                          11: kskh1ZO_la7WXFGA4d2IKKXIwWc.roa (hash: PSi/1bSx17DcwOcX0aGn17oACEy8dwOziOStHczOl68=)
                          12: n4LrIW3mgA8G3axl4csgyTpsp8Q.roa (hash: LNegLtDN4y1dMd1RyuVmBjmyfpzTDjWVARTw/3voBLo=)
                          13: qfvkeVV0y4MYey-tvY_ef7wx-wY.roa (hash: vszu6nR/oFbgkiJpXSyUxF5kf03wjhbHFgMzPvnqwuM=)
                          14: s8UbDAY8_BaUP8mkfiyAWZD26q4.crl (hash: U+zM1pu8Gak2Ki277KPjHlcSU4ZAjUW0+Jin2w9kU+Q=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2e:99:54:a9:e9:b5:85:88:17:39:02:14:bb:5e:ef:b6
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b3c51b0c063cfc16943fc9a47e2c805990f6eaae
        Validity
            Not Before: Apr 13 10:02:02 2025 GMT
            Not After : Apr 14 10:02:02 2025 GMT
        Subject: CN=e3cd70c204bdbf31e06ab8d490fdc64c64009953
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e5:8c:10:40:c1:d3:d8:92:03:ca:91:af:4b:19:
                    4f:f4:93:57:95:01:ff:e8:f1:52:66:8e:0c:44:2e:
                    f7:bb:31:7b:b2:20:1c:c0:fd:fa:e1:f9:83:7c:28:
                    3f:c2:05:e4:46:ca:f9:33:87:c6:58:25:f8:65:36:
                    20:64:6d:25:c2:e5:08:08:65:ee:ef:57:49:79:dc:
                    15:88:4a:e2:4c:40:b4:da:73:a8:2e:a8:fc:c2:6c:
                    2e:4c:a6:e4:d6:5c:f2:aa:71:00:5e:01:17:a4:a4:
                    17:0c:fa:3f:10:65:ed:e5:95:b2:5b:c2:db:68:e6:
                    1b:00:7e:88:4d:1d:63:67:c7:62:16:d0:be:3b:6c:
                    f8:3c:05:51:80:72:39:7f:cc:03:b7:fd:cb:e1:3b:
                    14:aa:f3:18:7f:73:b4:cc:bd:7e:37:fc:ff:cf:d3:
                    a9:f4:b8:66:19:db:c9:96:60:b9:95:d0:4b:71:91:
                    ab:38:ce:13:f5:e2:a5:29:6f:d2:ed:d9:f0:50:a9:
                    9e:13:06:be:55:b3:6b:b3:0c:e4:fb:90:12:76:bc:
                    36:05:23:29:d2:3a:d6:a0:b9:53:73:4e:1e:65:4a:
                    d9:34:89:58:20:67:4e:a8:1b:ea:52:de:26:da:5e:
                    90:b0:d6:43:6e:cc:00:d4:7d:c0:82:92:c9:f2:54:
                    3d:85
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E3:CD:70:C2:04:BD:BF:31:E0:6A:B8:D4:90:FD:C6:4C:64:00:99:53
            X509v3 Authority Key Identifier:
                keyid:B3:C5:1B:0C:06:3C:FC:16:94:3F:C9:A4:7E:2C:80:59:90:F6:EA:AE

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/s8UbDAY8_BaUP8mkfiyAWZD26q4.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e6/587792-bae9-4183-a4b1-ff5f1ad69266/1/s8UbDAY8_BaUP8mkfiyAWZD26q4.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/e6/587792-bae9-4183-a4b1-ff5f1ad69266/1/s8UbDAY8_BaUP8mkfiyAWZD26q4.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         21:52:61:0c:d2:dd:65:91:f6:59:81:80:e9:b0:70:c9:16:e7:
         df:66:c4:1d:c5:33:41:c6:fd:12:54:d1:2b:ea:5d:6a:45:2e:
         2b:44:c9:97:61:1a:6c:0d:97:63:36:dd:b5:a0:4f:4b:84:0c:
         15:af:a7:b2:d4:9b:33:4a:cf:f9:48:5d:15:a6:ca:92:d4:e0:
         d2:5a:71:3e:57:0f:ee:29:93:01:53:cb:39:53:e6:07:52:a7:
         0f:b9:1d:79:9c:b3:07:7e:25:13:d6:75:6c:56:a4:0c:d0:9d:
         f5:9a:d5:3c:fa:17:f6:26:3e:5d:12:a7:a0:0a:5f:a6:05:04:
         96:f2:5e:8e:6b:37:09:17:c2:e0:e6:50:82:8d:92:40:41:27:
         b1:08:4f:9e:70:5c:fe:51:e8:2d:92:d0:bc:88:ef:cf:64:34:
         6a:c4:26:60:80:68:a0:6e:e1:2d:17:3f:f2:44:20:68:44:fd:
         0b:7d:4a:6a:e4:5e:fc:a1:a9:6d:d7:74:ce:31:28:ec:2a:57:
         cb:b8:68:a8:17:35:5d:cb:ab:0c:91:96:8d:d9:b9:eb:dc:71:
         62:f6:23:ed:7a:91:09:43:25:f6:13:6c:a8:1f:a0:78:d5:84:
         55:75:92:83:dd:32:06:71:8f:62:01:3a:16:5a:ea:dc:78:4c:
         16:12:2f:ab
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----