Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e9/3328da-aa4e-445b-9da9-d053745c2acc/1/T4lf8Omad8AX6KODKSy1xvgmESA.mft
File:                     T4lf8Omad8AX6KODKSy1xvgmESA.mft (raw, json)
Hash identifier:          5xNOuVfhYIErBh+skhV6CuHVmtH/6czUG0jgSum2F8w=
Subject key identifier:   38:E5:12:C2:2D:FD:81:FD:A1:08:0F:D7:00:98:FE:19:09:3F:02:D4
Authority key identifier: 4F:89:5F:F0:E9:9A:77:C0:17:E8:A3:83:29:2C:B5:C6:F8:26:11:20
Certificate issuer:       /CN=4f895ff0e99a77c017e8a383292cb5c6f8261120
Certificate serial:       01962F3D5CBDA8C2F89C6E23AF3795E7B9D5
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/T4lf8Omad8AX6KODKSy1xvgmESA.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/e9/3328da-aa4e-445b-9da9-d053745c2acc/1/T4lf8Omad8AX6KODKSy1xvgmESA.mft
Manifest number:          0A3E
Signing time:             Sun 13 Apr 2025 13:01:12 +0000
Manifest this update:     Sun 13 Apr 2025 13:01:12 +0000
Manifest next update:     Mon 14 Apr 2025 13:01:12 +0000
Files and hashes:         1: 6b2ERBxknPAevOnYxSvxzu95eG8.roa (hash: 3kiDbks8aSmKxwaOLs+GDp7zBcCi628ZZOq/BNMJfnI=)
                          2: NOOroZsnjsQfsZH4dRjzbuju0Hk.roa (hash: Zg6ieQb4LhmgSd9bfRqKPOaZLXbcVzG7102ETjzQ1ro=)
                          3: T4lf8Omad8AX6KODKSy1xvgmESA.crl (hash: OtdBZSKmltKcYW11eWbNvS4hQYmkeDRncbzILXoZkXU=)
                          4: auS9-c0NKZclAN6n9ZeMxPqllbY.roa (hash: jmic3pbI/PzbYEfrYr0mHzcn9EBC12zQGVngarCFUoA=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2f:3d:5c:bd:a8:c2:f8:9c:6e:23:af:37:95:e7:b9:d5
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4f895ff0e99a77c017e8a383292cb5c6f8261120
        Validity
            Not Before: Apr 13 13:01:12 2025 GMT
            Not After : Apr 14 13:01:12 2025 GMT
        Subject: CN=38e512c22dfd81fda1080fd70098fe19093f02d4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:95:a9:e6:63:3f:66:5d:8f:33:c4:a9:08:24:fb:
                    c7:28:6a:53:22:d1:38:6c:1d:0e:26:e5:25:b8:10:
                    42:6f:bf:9f:c0:23:8b:11:4c:55:d1:4c:51:4b:0d:
                    8a:56:9c:e9:54:4d:90:cd:e7:a8:61:e4:42:12:86:
                    3e:b3:eb:34:43:97:a3:27:3a:17:d1:42:7b:e8:a1:
                    9c:c8:8d:c0:b5:9d:8a:72:2c:34:22:76:1e:63:8c:
                    09:57:1a:75:0f:8c:4e:c5:21:75:a9:a2:af:9d:ba:
                    4f:fc:83:d3:b3:bd:21:3d:03:f5:0a:ef:4c:c2:b5:
                    d0:87:0f:33:2f:6d:6e:e0:b6:69:31:6b:4d:32:c2:
                    dd:9b:13:c6:c1:e9:80:fe:7a:d1:55:67:ce:4a:54:
                    ef:8b:21:e1:93:0b:7b:62:e8:d0:2d:2e:60:01:1b:
                    c4:e4:9f:d1:e0:2b:09:43:4a:6f:00:4c:da:71:ba:
                    3f:53:40:0c:21:de:82:63:93:6b:86:1d:f9:00:85:
                    c8:33:b4:89:ff:1f:2f:3a:ad:93:f2:e0:49:10:8a:
                    23:81:9b:74:58:57:c7:05:15:62:1f:05:71:7d:85:
                    da:76:29:f1:70:21:6b:d2:0b:dc:e7:d2:3d:31:ca:
                    b9:4c:6d:64:55:78:85:a6:b9:75:dc:47:53:27:22:
                    dd:ad
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                38:E5:12:C2:2D:FD:81:FD:A1:08:0F:D7:00:98:FE:19:09:3F:02:D4
            X509v3 Authority Key Identifier:
                keyid:4F:89:5F:F0:E9:9A:77:C0:17:E8:A3:83:29:2C:B5:C6:F8:26:11:20

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/T4lf8Omad8AX6KODKSy1xvgmESA.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e9/3328da-aa4e-445b-9da9-d053745c2acc/1/T4lf8Omad8AX6KODKSy1xvgmESA.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/e9/3328da-aa4e-445b-9da9-d053745c2acc/1/T4lf8Omad8AX6KODKSy1xvgmESA.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         8e:94:cb:9c:22:c8:e7:77:ee:35:6f:9d:3c:79:47:a3:09:af:
         f0:4f:28:62:f8:24:f8:dd:8f:d2:be:e2:1f:c3:06:84:6c:0f:
         ed:b1:10:ce:28:31:69:9b:2d:db:80:cf:5a:47:af:a7:48:f5:
         51:3f:e5:8f:a8:0c:59:96:6a:81:b0:18:27:c4:10:6d:80:1f:
         8e:0d:2c:3c:bf:bd:1f:40:e1:9e:06:29:e3:be:b6:9e:bd:bf:
         ed:3f:c1:34:22:9a:69:04:57:c5:ed:e8:e6:44:85:e1:54:77:
         f6:75:7b:13:19:70:9d:47:18:69:e7:50:8f:f3:e1:7b:b1:8c:
         28:f0:1f:f0:2c:32:cf:5e:ad:2d:f7:0d:b2:3d:53:c2:02:50:
         44:20:1b:36:d7:94:ff:91:36:5a:eb:94:d7:f7:ce:0c:78:16:
         00:93:e8:bf:a8:f2:e9:71:19:9d:2a:cc:b8:08:d9:cc:a0:e9:
         7b:08:9d:6a:ff:69:64:2d:87:0f:aa:51:de:2f:69:56:7b:ae:
         6b:74:07:89:12:59:2d:bf:6f:58:e2:2d:68:44:fc:6c:ed:e2:
         27:c0:a1:61:04:a5:8e:03:d6:88:b4:41:6e:ea:1a:79:2e:d2:
         be:ca:ae:be:39:8a:31:2d:53:eb:a3:88:65:ff:2d:ec:a4:e6:
         25:4f:23:87
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----