Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ee/ac8e6f-5f83-449b-8c9d-77c1048422d8/1/rGfJO4Il0Ew3YcE87-5fgyk1jiM.mft
File:                     rGfJO4Il0Ew3YcE87-5fgyk1jiM.mft (raw, json)
Hash identifier:          6w9x4sSx2K2m8a+dgBd6H6gomwSFdo6UXAtnowMON9g=
Subject key identifier:   1D:F1:53:79:81:4D:9B:17:DD:27:02:48:B0:FB:D9:DC:02:2E:1A:22
Authority key identifier: AC:67:C9:3B:82:25:D0:4C:37:61:C1:3C:EF:EE:5F:83:29:35:8E:23
Certificate issuer:       /CN=ac67c93b8225d04c3761c13cefee5f8329358e23
Certificate serial:       01962ECFEDD921B9D8345FBDF531761BCE34
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/rGfJO4Il0Ew3YcE87-5fgyk1jiM.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/ee/ac8e6f-5f83-449b-8c9d-77c1048422d8/1/rGfJO4Il0Ew3YcE87-5fgyk1jiM.mft
Manifest number:          14FD
Signing time:             Sun 13 Apr 2025 11:01:40 +0000
Manifest this update:     Sun 13 Apr 2025 11:01:40 +0000
Manifest next update:     Mon 14 Apr 2025 11:01:40 +0000
Files and hashes:         1: H6es8_RNukCcmpKSU4VhKyWzlXU.roa (hash: MWVORumqBLMSV+ezNkSFN1TihrvCnAOWBchr7+/zYAg=)
                          2: dBMJpVLGRQoTKZQpQqDPu3BVMTw.roa (hash: y7lqJ7uW4lmOcL9eEyRfqx2SbaFMyQX43zjAsjfpk98=)
                          3: q9V7Xus9JaAOVqWDDUO8V0frUJg.roa (hash: BOqisVRqsjZEstDgk3UUu1R2Uohg8LTPrkUF2hoHl7o=)
                          4: rGfJO4Il0Ew3YcE87-5fgyk1jiM.crl (hash: xrD+4Mnw/1Yj3ej5AQF0A1l0JgZVPFfvIMO0HI7Lvgc=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2e:cf:ed:d9:21:b9:d8:34:5f:bd:f5:31:76:1b:ce:34
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=ac67c93b8225d04c3761c13cefee5f8329358e23
        Validity
            Not Before: Apr 13 11:01:40 2025 GMT
            Not After : Apr 14 11:01:40 2025 GMT
        Subject: CN=1df15379814d9b17dd270248b0fbd9dc022e1a22
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a1:38:c4:69:a7:6d:9e:e4:2f:f8:00:b1:72:1e:
                    60:0d:aa:a2:71:45:67:b6:23:41:c8:3b:9f:d6:db:
                    ef:b2:56:4f:70:3b:c1:7b:c3:ab:9a:eb:9e:9c:d1:
                    0f:a2:01:61:bb:3e:53:50:1d:e1:68:54:57:42:f7:
                    18:72:41:ac:30:0d:60:3b:8a:de:e1:0b:0c:1d:28:
                    77:9a:c3:15:a0:ab:76:ee:e9:03:d1:11:1e:c9:d4:
                    dd:99:b7:9d:64:b9:59:e7:3f:f7:20:fa:b5:fa:6d:
                    d3:06:56:c5:c5:46:33:cc:63:3a:54:b5:92:d1:0f:
                    52:dc:fe:38:bb:4a:82:a4:95:02:46:d8:2c:2e:5b:
                    5e:8a:63:ab:21:82:7a:fc:8b:e3:6e:62:80:b9:b0:
                    e8:03:bd:66:a8:35:3e:96:d1:ca:45:7c:f4:94:02:
                    85:3a:97:1f:7f:35:ac:28:c0:cc:6d:d9:9c:aa:31:
                    4f:4e:ff:3d:e9:93:a9:5e:7a:2a:44:a3:f5:bf:cf:
                    af:33:1a:34:c4:d0:b3:d8:ca:1a:f5:0d:a4:18:7d:
                    d4:29:39:a7:01:ed:6d:21:b7:fd:94:8a:cb:3a:99:
                    07:81:ba:da:9c:59:ba:be:5d:e8:7f:07:12:f2:e0:
                    73:b8:51:60:55:91:87:36:bb:bd:83:e0:b7:58:6c:
                    56:1b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1D:F1:53:79:81:4D:9B:17:DD:27:02:48:B0:FB:D9:DC:02:2E:1A:22
            X509v3 Authority Key Identifier:
                keyid:AC:67:C9:3B:82:25:D0:4C:37:61:C1:3C:EF:EE:5F:83:29:35:8E:23

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/rGfJO4Il0Ew3YcE87-5fgyk1jiM.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ee/ac8e6f-5f83-449b-8c9d-77c1048422d8/1/rGfJO4Il0Ew3YcE87-5fgyk1jiM.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/ee/ac8e6f-5f83-449b-8c9d-77c1048422d8/1/rGfJO4Il0Ew3YcE87-5fgyk1jiM.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         92:9c:8c:5d:3e:d3:00:b8:5f:23:8f:62:da:d8:ab:e9:86:2c:
         c3:df:ea:e5:b5:17:8d:fe:94:99:ad:ee:70:03:39:c1:79:81:
         05:6d:3e:b8:6e:c8:d4:c6:08:39:18:5b:b6:4a:d0:16:a6:31:
         df:09:04:e1:83:7e:97:c3:1e:b9:8b:51:40:0a:37:8f:9b:84:
         2f:2a:42:8c:3b:8e:a9:94:98:0e:25:3d:76:0b:4c:5a:41:1b:
         a9:20:48:01:be:7c:8c:e9:5d:97:3d:b3:ef:82:75:e4:cf:45:
         5b:6b:a1:3a:87:7a:75:c9:8b:42:53:5f:43:03:09:88:53:ca:
         3f:9f:14:31:6a:76:b0:bb:c8:5e:e3:26:28:48:b2:22:17:a9:
         03:05:1e:db:c7:90:c4:4d:22:3f:33:7f:8a:38:1d:a8:63:ca:
         c3:58:fb:f9:fd:b6:bc:03:83:89:02:6b:2a:7d:70:13:54:e3:
         26:a7:82:07:f3:a1:3e:fc:b0:75:48:5c:2b:10:6f:b8:df:6e:
         a0:68:ad:fd:12:04:5e:87:95:ff:20:1b:fc:ed:20:4a:d9:cf:
         e8:21:4c:9a:a6:0f:22:a8:a8:ec:19:ee:77:2c:b1:5c:b6:44:
         06:a4:c7:9b:42:38:b2:0d:51:55:15:f0:9b:15:93:39:52:c8:
         62:3c:81:ee
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----