Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f2/cc6e99-6e5f-401b-912d-1095544c6c50/1/mc5WmhTC2zdy8jGHzmjmVB7ABI4.mft
File:                     mc5WmhTC2zdy8jGHzmjmVB7ABI4.mft (raw, json)
Hash identifier:          35SZNOySNaA9MZNA9fzVCs57uW9x6yhZXFdTNvevBvc=
Subject key identifier:   37:BA:AA:99:E9:9B:AA:45:B3:18:E1:25:F6:8F:81:49:57:2D:28:98
Authority key identifier: 99:CE:56:9A:14:C2:DB:37:72:F2:31:87:CE:68:E6:54:1E:C0:04:8E
Certificate issuer:       /CN=99ce569a14c2db3772f23187ce68e6541ec0048e
Certificate serial:       01962E2AF56AF687551BC01F1DD5D08C6F43
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/mc5WmhTC2zdy8jGHzmjmVB7ABI4.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/f2/cc6e99-6e5f-401b-912d-1095544c6c50/1/mc5WmhTC2zdy8jGHzmjmVB7ABI4.mft
Manifest number:          150A
Signing time:             Sun 13 Apr 2025 08:01:29 +0000
Manifest this update:     Sun 13 Apr 2025 08:01:29 +0000
Manifest next update:     Mon 14 Apr 2025 08:01:29 +0000
Files and hashes:         1: 7hlWKm8vTIF0LH1H2oS6Admh1TI.roa (hash: JGgMMA+OZIrWq67kkKcLVk/aNndkz3SnG1R5RYOVvj8=)
                          2: 8Okcs_WzeZSlRzql6-e5V5V7syA.roa (hash: Bgf74cz9Nwo/ctlxM9vVhY3z4DibfYQP6Uszu31EXc8=)
                          3: AJpw_2i3EoQNYD9kunMPYOdByi8.roa (hash: 2y+udfjFmNVer5C4pJzKndxIM53KHs0ELdljGNxXclM=)
                          4: FjCA5Ak9pc8iYQAo2kd8vxWMg2c.roa (hash: LWHCt8fi0ffLNOHRJ69hCW6DNWkN+nY4S8kMpRaQ7ss=)
                          5: Ik8Kqt-zKfrsdQjyrAjHXX-mlLc.roa (hash: Zg9C0+0W8n0QIjR6RRPkp/OJIpBk8iu2+syGMIoxQyg=)
                          6: P82-6fcmXy1vqdLrwWWqytTl0TM.roa (hash: z01aDruR3yMRSRzpiGY2CGLWYQwuEAMQJV+YU0LBGGA=)
                          7: RYdEtsOojE3SXyShhqAjMIQl9xQ.roa (hash: bxAZYk1bj8j4gGSsg9+CUkCHFq1GRl7baVopFxolE0s=)
                          8: WBeAt2UOvPgAdfpllYF8DBrXsx8.roa (hash: IGhLKO/rQTI4tOBHJDgWqI73xTyqxuZsgF0ztyC/dOc=)
                          9: bbmenZqkY_bNQyceoK-fLvwWxdc.roa (hash: 5/uuA7PsJ4CyNOajTBR0J1Bkylsmq9V39AJtX9hFgFU=)
                          10: dMlBq16YcIM7-JR7sVrQGjUo5Ts.roa (hash: i7NU7NT4PhY/w3tg6T+Z3qdRHBm2oFSaLm/74+Urx2g=)
                          11: f4e7IUwG3JkPasx3oPPOpKnw014.roa (hash: oT75cSQjF7ggxHOJOkz6Sxjs0hfilCF0H6NE1nJtUfo=)
                          12: mNguxrQSssFTgOvDx-TtVJcngJ0.roa (hash: p4yScE1NaP9LVRZLGH/RikX/bIEDOl76JK/45ns5C9Q=)
                          13: mc5WmhTC2zdy8jGHzmjmVB7ABI4.crl (hash: vfNku3ThMpnwb06DFYyMQEHeEkfFByQ9x1GOlm+WSlU=)
                          14: u_mqTybwgy-hqVDwwCNi1Bf-8tI.roa (hash: JZzfV1nFUUQsICoBUJ9//kJmxjSvH3d3D7ybB8QQr/Y=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2e:2a:f5:6a:f6:87:55:1b:c0:1f:1d:d5:d0:8c:6f:43
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=99ce569a14c2db3772f23187ce68e6541ec0048e
        Validity
            Not Before: Apr 13 08:01:29 2025 GMT
            Not After : Apr 14 08:01:29 2025 GMT
        Subject: CN=37baaa99e99baa45b318e125f68f8149572d2898
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9a:91:d2:f8:49:32:61:7f:14:3f:c5:a1:c5:98:
                    1f:b9:22:06:68:7d:a0:14:90:ac:e9:a5:2e:3d:99:
                    ce:f2:fa:ce:6e:21:ad:ee:24:9b:ae:b1:e0:d5:6c:
                    80:db:75:87:c5:b6:59:27:87:fc:e4:54:5a:34:f3:
                    4e:64:a4:e8:77:98:09:85:83:21:f3:8a:bb:5d:d6:
                    6e:93:f2:c2:9f:16:50:f0:49:97:f6:4b:22:e3:96:
                    d6:3e:50:db:e3:ef:47:dc:7b:25:28:fc:82:63:c4:
                    12:08:00:43:c7:d4:2d:44:ab:47:e1:43:19:17:58:
                    da:2f:a7:99:59:f7:ff:e0:a0:af:70:07:96:62:33:
                    dc:76:7d:2f:5f:00:c9:24:40:fd:89:a4:43:1f:90:
                    f9:11:76:86:f8:48:26:ce:5c:be:11:41:54:2f:8e:
                    cc:a4:39:75:cb:7e:90:17:de:1f:21:e1:66:cb:f9:
                    e6:92:a3:25:c8:be:c2:93:6b:4f:90:86:33:22:86:
                    d1:bb:9e:27:63:c5:dc:a3:c8:f9:0f:eb:86:9e:bf:
                    95:90:0a:ea:b1:83:c4:9a:48:40:5d:f9:10:23:e6:
                    cf:a8:6b:a5:f5:0c:d9:bc:13:2c:ae:7d:b7:a9:1b:
                    69:3d:4a:d6:3e:08:3b:02:d9:da:5f:68:af:74:35:
                    f8:61
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                37:BA:AA:99:E9:9B:AA:45:B3:18:E1:25:F6:8F:81:49:57:2D:28:98
            X509v3 Authority Key Identifier:
                keyid:99:CE:56:9A:14:C2:DB:37:72:F2:31:87:CE:68:E6:54:1E:C0:04:8E

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/mc5WmhTC2zdy8jGHzmjmVB7ABI4.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f2/cc6e99-6e5f-401b-912d-1095544c6c50/1/mc5WmhTC2zdy8jGHzmjmVB7ABI4.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/f2/cc6e99-6e5f-401b-912d-1095544c6c50/1/mc5WmhTC2zdy8jGHzmjmVB7ABI4.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         05:f3:7e:86:3b:ee:42:2c:e4:85:e3:30:f3:38:f3:62:d9:d9:
         9e:49:f2:c2:ec:9a:27:58:e8:56:ab:39:26:22:ac:b8:57:3a:
         9a:66:ff:33:5a:61:20:2a:62:a9:de:a3:ad:53:f1:b7:a2:99:
         d7:85:55:c2:cf:d1:d4:a2:b0:4f:53:d8:d5:19:49:99:c1:d8:
         85:58:c4:c6:e3:71:14:37:8d:3a:df:58:a7:61:16:61:53:88:
         ec:e5:07:b3:f0:88:df:f6:29:94:3f:2e:2b:aa:03:77:1f:7c:
         b8:f5:05:db:8b:ba:12:36:04:c1:07:4d:ed:e9:70:31:cf:c1:
         fd:82:ef:9f:e1:b6:66:b4:b8:28:c4:93:e5:b8:bf:ee:af:54:
         35:4d:ed:f3:ef:d9:f6:ed:a8:4e:3a:e6:bd:9e:ac:c4:1e:47:
         52:12:51:2f:cd:5f:9a:61:00:41:f3:22:00:e4:21:9f:03:eb:
         7c:95:49:8d:34:d7:6c:15:a5:b0:89:58:87:f6:92:7b:6f:62:
         79:24:a5:53:2f:6f:64:1f:ff:82:b3:4d:52:dc:71:d7:dc:8c:
         c8:92:2e:65:3d:6c:26:cc:62:12:19:d2:cd:b4:5a:9e:f9:3e:
         b2:c6:05:b0:24:60:18:40:ea:76:70:76:7d:ff:6a:0d:37:ba:
         7c:84:e1:f9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----