Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fb/c57727-9396-4bf8-b25d-6a1e0ec71da8/1/1mc4qNrawtDTrt25NPggBmufX-s.mft
File:                     1mc4qNrawtDTrt25NPggBmufX-s.mft (raw, json)
Hash identifier:          fMNXEiMQpQSg4J0hqUBWgvhm4qEx0fbvMXZy1HvJbew=
Subject key identifier:   72:55:2C:BA:69:16:C1:ED:66:B7:A1:77:1E:9F:4C:01:F3:4E:63:66
Authority key identifier: D6:67:38:A8:DA:DA:C2:D0:D3:AE:DD:B9:34:F8:20:06:6B:9F:5F:EB
Certificate issuer:       /CN=d66738a8dadac2d0d3aeddb934f820066b9f5feb
Certificate serial:       01962E9966AA078B71CC191600E287909DF6
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/1mc4qNrawtDTrt25NPggBmufX-s.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/fb/c57727-9396-4bf8-b25d-6a1e0ec71da8/1/1mc4qNrawtDTrt25NPggBmufX-s.mft
Manifest number:          14E9
Signing time:             Sun 13 Apr 2025 10:02:07 +0000
Manifest this update:     Sun 13 Apr 2025 10:02:07 +0000
Manifest next update:     Mon 14 Apr 2025 10:02:07 +0000
Files and hashes:         1: 1mc4qNrawtDTrt25NPggBmufX-s.crl (hash: AvSN4bywolbp5/Oex5lOXjNY1xLH+jLkb9haL6br+qw=)
                          2: OhDCqCKfAFaXsXhd0gKQoDKYCvI.roa (hash: QLijyVoBjHRCj6G7QWN6t5aH2KftVDSPxZ4yQhURnSM=)
                          3: _0BJhch6EjGRHYbfuaR-r1Oajuk.roa (hash: YOqktrKQD9dcsB+igvdHym7352z9aaizCT1tY2GjnK0=)
                          4: tiYFwAJDJd26p4Ey1IP7FxpONvg.roa (hash: jiqo6KPoLT8BsZ7lPEc/rIbVXD1zFAqeKQ1qUkmvE44=)
                          5: tnIQiCnzeKmPjZiRA44S-d9GuQY.roa (hash: /GBtHH9QN/HF6h4AUheNXJylb8jys3mkssfa6hcaaDw=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2e:99:66:aa:07:8b:71:cc:19:16:00:e2:87:90:9d:f6
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d66738a8dadac2d0d3aeddb934f820066b9f5feb
        Validity
            Not Before: Apr 13 10:02:07 2025 GMT
            Not After : Apr 14 10:02:07 2025 GMT
        Subject: CN=72552cba6916c1ed66b7a1771e9f4c01f34e6366
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:dc:18:8b:f3:1b:70:03:fd:14:11:d8:96:a0:aa:
                    61:e2:9b:32:9d:4d:b0:2a:3f:79:3e:2b:e8:8a:47:
                    17:30:68:7d:ce:02:9d:18:23:fc:04:8c:b3:47:bc:
                    a2:1f:3a:44:18:8f:86:c5:19:ea:b0:ac:4d:74:7a:
                    fe:69:6b:f2:63:e7:6b:b8:c6:2b:b5:81:29:c8:5e:
                    0f:41:ed:76:80:ce:cb:9d:30:11:f5:8b:60:cb:ec:
                    7e:3b:4e:37:af:e5:1c:02:6e:2b:f3:73:a6:2f:69:
                    46:99:71:37:11:d1:06:68:66:a0:78:4b:6c:6a:3e:
                    5d:13:39:7b:91:8e:b7:e0:74:36:e8:11:97:ce:89:
                    c1:16:92:13:21:af:fa:73:86:bd:fd:24:fd:fc:47:
                    83:fc:18:f9:57:a3:33:c2:9c:c5:e8:56:4c:e5:8d:
                    27:9f:a0:86:40:9e:14:72:f7:8a:7b:f6:24:0d:dd:
                    ac:17:b3:7d:98:da:fd:eb:d0:03:aa:31:97:a7:b6:
                    56:81:1b:b3:52:30:86:e7:42:dd:fc:f0:52:6b:d0:
                    e9:1f:39:f0:f6:59:4f:30:0d:9d:59:b8:66:09:98:
                    d3:c8:01:ab:2e:f2:6d:1a:bd:bb:1a:7e:b0:04:5c:
                    e4:61:b4:e5:c4:93:7b:5b:09:85:fa:68:6b:86:99:
                    e2:d3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                72:55:2C:BA:69:16:C1:ED:66:B7:A1:77:1E:9F:4C:01:F3:4E:63:66
            X509v3 Authority Key Identifier:
                keyid:D6:67:38:A8:DA:DA:C2:D0:D3:AE:DD:B9:34:F8:20:06:6B:9F:5F:EB

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1mc4qNrawtDTrt25NPggBmufX-s.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fb/c57727-9396-4bf8-b25d-6a1e0ec71da8/1/1mc4qNrawtDTrt25NPggBmufX-s.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/fb/c57727-9396-4bf8-b25d-6a1e0ec71da8/1/1mc4qNrawtDTrt25NPggBmufX-s.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         5d:23:bc:4e:c6:e8:17:53:ae:96:18:fb:d5:1e:7e:f8:e1:d2:
         f8:71:0b:3e:45:70:ee:d3:32:b4:fa:1f:6b:37:3a:58:df:37:
         f2:d6:87:1c:6b:33:42:08:43:f2:9c:74:c0:07:7f:48:c2:04:
         b6:5b:47:39:a5:41:da:95:87:c8:da:b6:40:8f:9d:f5:eb:40:
         ce:09:e0:7c:1c:87:74:d2:e4:8c:ae:97:75:7c:cb:df:7b:32:
         37:9e:59:60:9f:6d:47:eb:4c:57:89:58:d0:f1:fd:42:a8:44:
         93:94:87:33:9f:d2:f5:0b:93:ff:ce:ce:05:d6:f6:f1:67:5a:
         e8:09:2f:26:0a:ea:a5:8b:2f:8e:c6:36:b3:7b:44:32:3c:c2:
         03:04:ab:58:ae:7a:50:46:a7:ea:f7:c0:64:8c:70:5a:43:6f:
         d6:6a:bc:70:de:4f:2e:16:9f:ec:80:c1:fc:93:96:68:2b:22:
         95:68:78:35:5f:77:15:cc:79:bd:1e:b8:67:df:9d:2e:fa:da:
         ef:b2:4b:ab:3e:2d:2a:13:62:26:ad:93:6a:86:e9:e8:c7:aa:
         89:80:82:bd:c9:e1:7a:4b:1c:43:0e:33:84:a8:72:15:f0:ca:
         ca:79:5c:a8:82:a0:72:20:e4:48:9b:6a:7d:25:83:02:39:64:
         fb:92:64:ca
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----