Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f7/6cb72d-45a7-4490-9c59-93ead35a12ca/1/R40kiY0c9S0j-VYdxqwPE2Pmx2A.mft
File:                     R40kiY0c9S0j-VYdxqwPE2Pmx2A.mft (raw, json)
Hash identifier:          MCxc1+kY0afDct4sVWyqkXH6AaGOyGIAIbE0w4thKr0=
Subject key identifier:   38:FA:C2:23:6C:19:D6:D3:C8:F8:56:EE:24:73:BD:75:EC:BA:33:A6
Authority key identifier: 47:8D:24:89:8D:1C:F5:2D:23:F9:56:1D:C6:AC:0F:13:63:E6:C7:60
Certificate issuer:       /CN=478d24898d1cf52d23f9561dc6ac0f1363e6c760
Certificate serial:       01962DF410D659F2025F009E19D2F11608D6
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/R40kiY0c9S0j-VYdxqwPE2Pmx2A.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/f7/6cb72d-45a7-4490-9c59-93ead35a12ca/1/R40kiY0c9S0j-VYdxqwPE2Pmx2A.mft
Manifest number:          14EB
Signing time:             Sun 13 Apr 2025 07:01:31 +0000
Manifest this update:     Sun 13 Apr 2025 07:01:31 +0000
Manifest next update:     Mon 14 Apr 2025 07:01:31 +0000
Files and hashes:         1: 3SOTukwSWrR1Nu1I7c8QHUHDj5Q.roa (hash: 4YWkgAQs57y3jWp09RgMoPwSBLEZe+2Hmh3qEftE0D8=)
                          2: R40kiY0c9S0j-VYdxqwPE2Pmx2A.crl (hash: /7nwDbRnqNoEDz7fvs40/yjF5ILt7J4wA/P/5PjBJmQ=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2d:f4:10:d6:59:f2:02:5f:00:9e:19:d2:f1:16:08:d6
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=478d24898d1cf52d23f9561dc6ac0f1363e6c760
        Validity
            Not Before: Apr 13 07:01:31 2025 GMT
            Not After : Apr 14 07:01:31 2025 GMT
        Subject: CN=38fac2236c19d6d3c8f856ee2473bd75ecba33a6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:87:44:98:5d:6a:93:a0:6d:e4:c2:cf:73:bf:83:
                    21:64:d3:d3:fe:a1:7e:31:cb:9e:4c:35:63:27:62:
                    f8:64:62:f6:01:ec:79:74:32:4b:a0:ca:9d:61:3b:
                    63:4c:c1:cd:57:81:96:0c:55:d1:bd:d9:ba:b2:63:
                    bf:f6:e3:8e:01:b2:be:4b:10:35:14:2b:d2:6d:51:
                    c3:6d:4e:cf:d9:de:05:d8:1d:e1:8e:53:f9:2e:23:
                    d7:a7:fd:03:67:d2:f3:4b:6e:cc:52:64:65:01:17:
                    68:07:b8:f2:7f:67:60:72:e5:0e:77:4a:38:64:95:
                    28:b0:54:4d:02:79:64:d5:8d:d6:60:e5:2d:1a:e2:
                    3c:a0:b8:7f:76:34:e9:aa:99:6a:0b:7d:76:39:6b:
                    b1:f7:97:e3:44:4b:83:0e:03:60:cb:c7:eb:99:b4:
                    42:de:4d:33:8d:51:8b:79:ea:e9:17:16:ad:65:01:
                    43:b7:a1:2b:70:47:cd:35:14:f1:0f:6c:52:57:b9:
                    b4:d1:51:93:f6:b8:69:ac:fc:04:88:5d:ab:38:c3:
                    c8:ff:38:7e:fb:15:f5:c5:1b:b9:31:fc:e0:99:8e:
                    8c:c8:54:bb:bb:a9:23:88:08:f4:46:ff:70:9c:00:
                    18:ed:4e:64:8d:44:ed:0f:2b:7b:29:3b:f6:96:a4:
                    dd:73
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                38:FA:C2:23:6C:19:D6:D3:C8:F8:56:EE:24:73:BD:75:EC:BA:33:A6
            X509v3 Authority Key Identifier:
                keyid:47:8D:24:89:8D:1C:F5:2D:23:F9:56:1D:C6:AC:0F:13:63:E6:C7:60

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/R40kiY0c9S0j-VYdxqwPE2Pmx2A.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f7/6cb72d-45a7-4490-9c59-93ead35a12ca/1/R40kiY0c9S0j-VYdxqwPE2Pmx2A.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/f7/6cb72d-45a7-4490-9c59-93ead35a12ca/1/R40kiY0c9S0j-VYdxqwPE2Pmx2A.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         4e:65:0c:0f:84:86:73:0d:66:a8:14:74:5d:15:3e:32:db:f1:
         de:08:1c:6c:d2:6f:16:28:0b:6b:75:9a:07:b2:b4:c5:75:47:
         b6:60:a8:55:49:c3:fb:a2:0e:57:dc:b1:38:26:14:ca:c8:df:
         74:94:f0:85:6f:4e:5c:0e:55:41:f6:82:a1:cb:db:fc:ee:62:
         55:eb:09:21:e7:c7:50:9c:78:00:b2:62:86:8b:49:22:c5:29:
         6f:26:fd:9d:ec:2e:28:2b:9f:fc:8a:f0:c2:18:28:15:d0:ac:
         34:91:80:39:5e:56:0e:89:fd:5b:dc:bd:80:80:06:c1:5a:9d:
         01:57:0d:c8:43:09:df:95:3a:e5:52:cf:44:de:c2:61:dd:ad:
         e8:69:30:ba:52:ab:bc:cf:43:93:b3:b8:c4:f3:32:e7:40:cf:
         63:f6:a2:ff:8a:01:08:f2:3e:a9:3a:87:5f:82:37:5c:8c:93:
         82:56:68:ab:58:35:5e:7a:26:3b:b4:84:13:e0:ae:7d:4e:fc:
         89:80:f2:24:9f:41:44:c8:63:e1:d3:2a:7a:8d:88:e6:7a:e0:
         44:a0:f7:be:79:08:1f:aa:b6:ad:3b:54:04:c9:1c:1c:4b:19:
         0f:08:39:33:f1:71:dd:64:cb:e4:4a:de:68:1f:0d:38:18:2a:
         83:bb:ea:d0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----