Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e7/a275fe-86f0-41e9-8263-69db6a8f58d7/1/0sgbHQKPKvYeqbQiZ5pfjekFcuc.mft
File:                     0sgbHQKPKvYeqbQiZ5pfjekFcuc.mft (raw, json)
Hash identifier:          /vksm9ZEKcb9QuAO70ioMuRySyjDXt41ze59WldGyS8=
Subject key identifier:   F2:1A:66:DE:F4:97:CE:F2:46:F6:2F:34:1F:DA:B7:4C:D4:27:16:7B
Authority key identifier: D2:C8:1B:1D:02:8F:2A:F6:1E:A9:B4:22:67:9A:5F:8D:E9:05:72:E7
Certificate issuer:       /CN=d2c81b1d028f2af61ea9b422679a5f8de90572e7
Certificate serial:       01962E988888F0CE74CF22F237B135AB2D50
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/0sgbHQKPKvYeqbQiZ5pfjekFcuc.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/e7/a275fe-86f0-41e9-8263-69db6a8f58d7/1/0sgbHQKPKvYeqbQiZ5pfjekFcuc.mft
Manifest number:          14E9
Signing time:             Sun 13 Apr 2025 10:01:10 +0000
Manifest this update:     Sun 13 Apr 2025 10:01:10 +0000
Manifest next update:     Mon 14 Apr 2025 10:01:10 +0000
Files and hashes:         1: 0sgbHQKPKvYeqbQiZ5pfjekFcuc.crl (hash: 56pfYrsUjBdl6goY8f01Pqv7ApGwRCRNCK/oErKKVUE=)
                          2: KzJRm4blhpQ22QWdKYNtwSo9hec.roa (hash: VvdDpNHANgnzHXSd6NFNAPGvygHgdOqLpMuWRNVTc78=)
                          3: baZe32PKXIeppnY8Yaja4T-a3tY.roa (hash: tWsZkF/TWyoJvpRhiK8XSrqOZGwxm+EMQruE+7kHGHw=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2e:98:88:88:f0:ce:74:cf:22:f2:37:b1:35:ab:2d:50
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d2c81b1d028f2af61ea9b422679a5f8de90572e7
        Validity
            Not Before: Apr 13 10:01:10 2025 GMT
            Not After : Apr 14 10:01:10 2025 GMT
        Subject: CN=f21a66def497cef246f62f341fdab74cd427167b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b6:49:29:86:89:c1:00:5b:85:cf:50:99:77:6b:
                    85:9c:63:e1:98:cc:96:d4:9c:cd:73:0e:3b:77:a2:
                    01:cd:3a:5c:98:02:22:73:5b:0a:55:94:18:0e:c0:
                    9e:86:5e:c6:71:d1:5f:c2:1f:78:65:dc:a7:f4:07:
                    70:79:54:3d:71:57:b2:4d:a9:ca:7c:cd:c9:81:21:
                    1f:a8:8e:03:3d:7c:cb:94:ce:0b:ba:f0:39:9d:69:
                    eb:bc:c5:9f:f9:fc:c5:3c:36:8f:c7:e2:c8:98:74:
                    9a:0e:c0:ac:10:ef:69:87:02:03:3a:e5:d8:bd:54:
                    11:d7:93:77:2e:5b:a8:83:f4:92:e3:97:5f:c5:34:
                    cf:14:66:e6:f7:d3:62:45:f4:ab:8a:9d:92:7f:5e:
                    b0:2b:a3:fd:23:55:b1:ee:d4:90:21:3f:d5:05:5c:
                    fa:64:69:6a:c0:dc:ff:15:a9:14:20:e8:35:10:ed:
                    bf:79:6c:cf:4f:f6:02:b4:21:de:af:b2:93:9f:0e:
                    fb:a9:47:27:9b:f7:32:ca:6b:a2:2c:e1:c8:ef:04:
                    e2:6b:f5:15:8e:ae:3c:e0:68:c6:da:6e:61:6e:cb:
                    b0:be:e0:15:eb:fe:4a:33:9a:93:22:a3:a8:45:76:
                    ea:6d:ce:e6:4f:25:61:fb:08:45:a4:ad:be:46:27:
                    2d:db
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F2:1A:66:DE:F4:97:CE:F2:46:F6:2F:34:1F:DA:B7:4C:D4:27:16:7B
            X509v3 Authority Key Identifier:
                keyid:D2:C8:1B:1D:02:8F:2A:F6:1E:A9:B4:22:67:9A:5F:8D:E9:05:72:E7

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/0sgbHQKPKvYeqbQiZ5pfjekFcuc.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e7/a275fe-86f0-41e9-8263-69db6a8f58d7/1/0sgbHQKPKvYeqbQiZ5pfjekFcuc.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/e7/a275fe-86f0-41e9-8263-69db6a8f58d7/1/0sgbHQKPKvYeqbQiZ5pfjekFcuc.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         60:5d:44:a9:33:b7:12:92:31:50:7c:3a:11:5a:df:4c:76:57:
         57:da:86:0e:f5:d6:c6:91:79:1f:58:d2:ea:72:e3:df:ff:64:
         fa:4c:6b:60:74:aa:c2:28:b4:15:ca:c8:c2:09:24:b8:cb:f0:
         fb:06:82:d0:a4:6d:80:2f:68:49:df:48:ec:b2:d5:38:76:13:
         68:9d:36:5e:b5:9d:5e:e0:95:ee:19:b4:9f:69:02:a6:1d:43:
         fc:89:25:84:c2:59:97:57:4d:da:61:a5:90:ea:c4:96:d2:07:
         ec:fd:4f:b1:27:13:f4:3b:8c:92:5c:0b:10:52:00:0a:09:d9:
         98:23:aa:c2:ce:d6:36:3c:aa:ac:49:37:74:9a:1c:39:3b:fd:
         27:80:c6:33:e0:de:0a:0c:35:7d:b5:fa:d8:2a:14:cb:6c:6a:
         cf:6f:ac:33:30:6b:70:94:6a:8e:59:a5:6c:70:98:97:d7:d3:
         09:5a:12:2e:5d:26:86:70:26:be:e3:08:5f:63:4e:58:9e:9e:
         4f:b8:e3:ec:5f:15:19:bb:41:25:56:c6:b3:ee:f2:62:88:65:
         2f:e5:5d:82:63:7d:54:b0:8c:26:f4:ef:7f:b4:e6:26:00:a7:
         75:d7:92:3b:0c:07:41:e2:97:40:b4:00:01:6b:c8:d7:10:9f:
         24:e3:b0:24
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----