Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f4/5f83c4-640d-4ff3-9cf4-60627e115269/1/CAGEeJFIcaqw4cADbTYm661uIMw.mft
File:                     CAGEeJFIcaqw4cADbTYm661uIMw.mft (raw, json)
Hash identifier:          U7wu3z3pFEwKr/inaN6R0tR8XIp4/nz5Z1il1TjrExE=
Subject key identifier:   18:DA:FF:30:68:0E:50:1C:89:9B:1C:E3:E8:4D:B0:70:B1:C6:CF:43
Authority key identifier: 08:01:84:78:91:48:71:AA:B0:E1:C0:03:6D:36:26:EB:AD:6E:20:CC
Certificate issuer:       /CN=08018478914871aab0e1c0036d3626ebad6e20cc
Certificate serial:       01962F06C9DE1EDD501AEB98B56DD98510BC
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/CAGEeJFIcaqw4cADbTYm661uIMw.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/f4/5f83c4-640d-4ff3-9cf4-60627e115269/1/CAGEeJFIcaqw4cADbTYm661uIMw.mft
Manifest number:          1125
Signing time:             Sun 13 Apr 2025 12:01:36 +0000
Manifest this update:     Sun 13 Apr 2025 12:01:36 +0000
Manifest next update:     Mon 14 Apr 2025 12:01:36 +0000
Files and hashes:         1: 6EDyve1AwD6Dr7yLTuNbN-Xy4o4.roa (hash: Emdh1wPq8o8m6XW7TGUMCluD0dAa1SuqkmrugOmuj5g=)
                          2: B6w_Bpuc6_z55rNlhPmO1YuLCzo.roa (hash: gyaIKII6sdza0Xvl0rqRN4WgM4TU/WIjbt0SjsyjCnk=)
                          3: CAGEeJFIcaqw4cADbTYm661uIMw.crl (hash: 2lmf3DESgJHUNGGz/Ehm/anjG5s91ES9SGdAxQk3QF8=)
                          4: LbY04jClTnB29OPcKu4Bkiugyi0.roa (hash: hepXeBmznAcYftZ3FnIy8dUsak3JCi9NiUxbjUAx2gk=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2f:06:c9:de:1e:dd:50:1a:eb:98:b5:6d:d9:85:10:bc
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=08018478914871aab0e1c0036d3626ebad6e20cc
        Validity
            Not Before: Apr 13 12:01:36 2025 GMT
            Not After : Apr 14 12:01:36 2025 GMT
        Subject: CN=18daff30680e501c899b1ce3e84db070b1c6cf43
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c5:8a:33:ed:05:a0:5a:34:f0:fc:28:b7:60:d7:
                    1c:38:e4:84:d4:f0:c1:00:ac:32:93:da:b7:6d:d7:
                    a1:fb:61:12:ae:4b:77:f2:a5:f8:28:2f:0b:bc:04:
                    5b:0e:26:7a:ec:c6:4f:01:91:50:34:62:44:7c:d2:
                    4d:f5:8c:ea:30:11:80:3a:84:bb:52:d7:3e:44:e0:
                    4a:aa:b7:e5:86:08:f8:0c:e1:a8:25:1e:42:27:b8:
                    fe:1c:23:68:d6:a7:46:a7:55:ee:ea:a1:7b:08:6e:
                    7b:71:2a:18:d1:33:15:63:e3:a1:83:28:d8:b9:49:
                    99:92:46:d5:76:04:67:09:a1:53:3c:4f:63:0c:e3:
                    e0:be:c6:eb:d9:b4:c4:6b:5d:73:13:6d:7e:a5:ee:
                    54:62:63:2f:c5:9b:3f:98:0b:ed:75:0b:73:24:bb:
                    6d:24:59:ac:a1:e1:c8:76:85:d9:53:07:63:eb:09:
                    60:b2:9f:b6:29:c6:8e:c2:66:59:22:b3:51:bd:03:
                    e0:86:ea:92:c2:af:30:9b:f7:ad:e2:52:90:c6:72:
                    71:d1:f2:f8:eb:9c:0a:1a:71:11:08:55:a9:13:85:
                    b9:5a:07:00:91:16:84:40:8c:8e:d2:05:ca:47:74:
                    18:f0:12:d6:32:10:b5:e1:6c:ea:43:59:ea:b6:7d:
                    1d:27
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                18:DA:FF:30:68:0E:50:1C:89:9B:1C:E3:E8:4D:B0:70:B1:C6:CF:43
            X509v3 Authority Key Identifier:
                keyid:08:01:84:78:91:48:71:AA:B0:E1:C0:03:6D:36:26:EB:AD:6E:20:CC

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CAGEeJFIcaqw4cADbTYm661uIMw.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f4/5f83c4-640d-4ff3-9cf4-60627e115269/1/CAGEeJFIcaqw4cADbTYm661uIMw.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/f4/5f83c4-640d-4ff3-9cf4-60627e115269/1/CAGEeJFIcaqw4cADbTYm661uIMw.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         5d:31:7c:95:30:f8:5a:06:5a:09:4d:2e:a7:eb:1d:80:b4:2d:
         9c:c6:70:8d:af:fd:fb:f4:ba:14:84:b2:bd:1d:ae:25:db:f2:
         e4:ad:76:75:1c:fd:ea:2e:4c:de:c6:90:a3:33:d0:04:a6:37:
         4d:75:ae:31:5c:31:fb:f8:75:5a:dd:c4:8c:74:ac:f9:47:aa:
         7b:f5:01:24:67:36:62:80:dc:1b:63:6a:20:5f:3c:22:fd:57:
         2b:db:ae:c5:ea:de:4e:03:7c:ac:41:f4:ea:9c:32:4d:64:1c:
         df:14:7c:6b:20:52:e8:b2:c2:cd:28:24:78:4b:22:ae:65:7f:
         2d:5e:dc:ff:0a:0d:62:e6:2e:e7:0f:97:b6:9c:33:08:e2:a9:
         9d:0b:0a:c1:e0:d1:d3:ff:c1:ff:a3:18:10:ec:57:25:eb:48:
         5e:bc:25:61:dc:d5:0c:16:07:bb:8b:8e:ce:24:e9:1e:d2:b2:
         bf:2a:f7:74:fa:6b:16:6e:ae:3b:d8:97:7c:76:ea:cb:10:c5:
         59:69:8f:0e:c3:3b:2d:89:5f:76:b9:08:4e:05:63:31:e6:f3:
         57:1b:44:88:23:44:c6:14:94:8d:bf:cd:5b:6e:85:1b:53:3a:
         a3:35:34:9d:f4:86:18:0a:f6:7e:0f:23:f4:8e:0e:36:93:8a:
         59:66:ae:8c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----