Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fd/726bb4-5d87-402d-91ce-5712d95ae638/1/1DTxaGECh2xiFrzqKKXlAuwNe2s.mft
File:                     1DTxaGECh2xiFrzqKKXlAuwNe2s.mft (raw, json)
Hash identifier:          TBo5Fzu1Wkmas+cPui+N6JKJnWjKTm8TnCW8aufgIb8=
Subject key identifier:   B6:2D:27:2B:77:29:30:23:37:49:AF:9D:92:24:07:E7:4E:E2:6A:56
Authority key identifier: D4:34:F1:68:61:02:87:6C:62:16:BC:EA:28:A5:E5:02:EC:0D:7B:6B
Certificate issuer:       /CN=d434f1686102876c6216bcea28a5e502ec0d7b6b
Certificate serial:       01962F0721A37A4E95F5F9616FFCA8162D75
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/1DTxaGECh2xiFrzqKKXlAuwNe2s.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/fd/726bb4-5d87-402d-91ce-5712d95ae638/1/1DTxaGECh2xiFrzqKKXlAuwNe2s.mft
Manifest number:          153B
Signing time:             Sun 13 Apr 2025 12:01:58 +0000
Manifest this update:     Sun 13 Apr 2025 12:01:58 +0000
Manifest next update:     Mon 14 Apr 2025 12:01:58 +0000
Files and hashes:         1: 1DTxaGECh2xiFrzqKKXlAuwNe2s.crl (hash: QZ4Y5etKRgI7LpZyQqX/IofnK59sTym410Adyw1k0sY=)
                          2: 7Cj5773Ww2G0LSY1fnydQfxQCM8.roa (hash: aUx5ljL2u1JfwzPAWHUuxa8lyiqbBKjx2VkYnyoKl00=)
                          3: 7w_UXb_9EuacQXaOkUvAB9t3GPY.roa (hash: BdddFhDjZUrdf5plsycRSqL9pb4uMD9DIqhfXxLsESI=)
                          4: 9Du2tHlplI8cqKMhQkDQrma7ABw.roa (hash: tHZwo/QnwGrZt6X37EyHYtZuWfqyTSrPiMBPcRX5QtA=)
                          5: Asu0DH_A5v7HQJH6cJ--acq6gs4.roa (hash: p83oT8k8StFZXPPk4WZFA6xLSJnWFONbnXX8tMyuY+E=)
                          6: BPwP4_eaRC-ExEMmsEHbE_XcDyk.roa (hash: PuWly/aliHEqwaBp5Lw/IykpWGderMcstp3zqAZSzaU=)
                          7: HkpMpgcE2miG9qn79yi3XbK_pOE.roa (hash: 0Rr449PN12HQpu7nIek/UBDMZP0dQl1SRcWWzh64TnM=)
                          8: IGrjhR2mEpz--QrWuV2LHfrOnXk.roa (hash: 835H2uW4LC49ih8FdIhNTs9rfsrsmtuxoF4X6ACbJ+I=)
                          9: Loa4kWXHd_gyVar7KKfuCbOTQSI.roa (hash: V+IAftZbMV1uaMDIpq8IX4vqfn+FazLdtHW0Gi6raiE=)
                          10: OiUKYkPvCpqnOXZ9zOVHLonU2AY.roa (hash: Lhbego4QvDRSaxc+Seq5OHB8z3WLSv1waMp2zJgiuoA=)
                          11: PwHMe4i6pz51Ahrp1W-49Rgc_vo.roa (hash: DVJmDnhZvnviJ4n66jT0o+c4DIjAzAehQrpeXl6SGUU=)
                          12: R0cDHc3n2qmMEAUS6woEeV4DrUw.roa (hash: QJ/g2HXWAm89HNayhA1QKb5SEB9BRX6t6S4vbuLEEGQ=)
                          13: WfonxlLMZwy-HhCvndkmDlWeP1U.roa (hash: D2to2wlUfQBqZmE9EvBIj/W3y3+jGxVEf6JIb4l/qG8=)
                          14: dIkGudwt-RR6RWXajZoxz1vlHzU.roa (hash: OKPlohfOihRtk51p5gTQk9DKoBwl84PalakI/wclgFg=)
                          15: fQowbtBwRpKjCzhE3ojDTNtTyaM.roa (hash: 5hmuOcmFlB2Eh4C339cOr4B957mNZCHeN0L/cBjITLk=)
                          16: gL8L6RZ2XqjaOf7a7aVACmgbZKI.roa (hash: kLhGxAypt99j/jO34VpwpOJzvqgyVsGY/56bargYYM8=)
                          17: lGSh8HAGsvLzJWijuCn5mOFbAtA.roa (hash: g6Sdp9SO3zguPzUUGeNhkKmFB7oPgHI90W+QRmIj6bo=)
                          18: q5t8pCbXocy8z93aEyQcoKIUr7k.roa (hash: SLK2Vlk0BOq5d8DR4zM41FXSCnTp47baUcSuvvAqgGA=)
                          19: tGFTGSnJNIlzfxIoLgNLXj1nGhU.roa (hash: A9xa5ygiM/4HLJEJoVAkCni6Zz/wFAcDt38BJETCKSI=)
                          20: vx0LBPGo6U2A4w4ADzD_udSk_bE.roa (hash: 1BQsFPNT0rTtzolZzu4KuR7RQiaLrcqqi5uIXl00aQQ=)
                          21: w1-75ZX9HBx8AUrVwUOKynI5k3I.roa (hash: hPTOiyA3+YJ83FFkcYpaKb35ER44DCXiwk4q5wNRhf8=)
                          22: wapfnXLlA7DvDqRs4g9z4YLu3L0.roa (hash: Hxhpn18vB/H4YZziS5GXimeo8mFzlErLcl0bPjfu1Vc=)
                          23: z6n_jUG6I_xYjDJHeip0DRFjTRM.roa (hash: /Wm48sS3g9Z/4zp/4yyUdkHbex7iTx088gxRDh1F6/8=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2f:07:21:a3:7a:4e:95:f5:f9:61:6f:fc:a8:16:2d:75
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d434f1686102876c6216bcea28a5e502ec0d7b6b
        Validity
            Not Before: Apr 13 12:01:58 2025 GMT
            Not After : Apr 14 12:01:58 2025 GMT
        Subject: CN=b62d272b772930233749af9d922407e74ee26a56
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:83:a3:13:fc:dc:f6:62:7e:4f:11:3c:09:3d:ab:
                    15:ed:bf:af:e4:f7:c4:26:fc:11:e4:29:df:f8:7f:
                    5b:97:67:7a:48:1a:28:52:46:4f:fa:9d:84:65:14:
                    82:f1:7b:95:7d:45:57:63:77:bf:24:95:9b:37:24:
                    3c:54:52:bf:a4:09:b0:94:64:da:5e:97:18:99:85:
                    51:ab:a5:e0:d8:53:6a:9e:3a:3b:59:ed:77:c2:d0:
                    5b:b2:14:35:da:66:d2:ff:6a:77:0c:a0:fc:f6:98:
                    12:14:e2:b4:8e:69:61:56:dc:8b:fa:d0:a7:f1:0c:
                    9d:a8:0d:c1:6e:5a:56:e1:a5:00:39:e0:cb:6f:dd:
                    2d:e6:8d:6b:fb:f8:a1:75:13:a4:8c:53:7e:ac:a8:
                    1e:40:e5:0a:89:a7:88:f4:e3:6b:52:8f:0d:fc:3a:
                    cd:d9:32:cb:c0:fa:47:e4:91:75:80:6c:e4:b3:7e:
                    fc:f0:df:c8:65:55:bb:90:80:80:a2:07:c5:6e:47:
                    87:73:19:57:0e:1b:19:8b:ad:8f:1d:5b:d2:3e:fe:
                    a0:bc:e6:ab:fa:34:88:40:df:31:d0:a2:5f:d7:c0:
                    ec:e8:99:7a:ac:ce:9b:7d:bf:1e:c5:a2:fd:a7:d9:
                    d3:c0:a3:d0:a8:d7:16:0e:23:11:df:57:54:e0:b8:
                    ba:d3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B6:2D:27:2B:77:29:30:23:37:49:AF:9D:92:24:07:E7:4E:E2:6A:56
            X509v3 Authority Key Identifier:
                keyid:D4:34:F1:68:61:02:87:6C:62:16:BC:EA:28:A5:E5:02:EC:0D:7B:6B

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1DTxaGECh2xiFrzqKKXlAuwNe2s.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fd/726bb4-5d87-402d-91ce-5712d95ae638/1/1DTxaGECh2xiFrzqKKXlAuwNe2s.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/fd/726bb4-5d87-402d-91ce-5712d95ae638/1/1DTxaGECh2xiFrzqKKXlAuwNe2s.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         2f:b2:70:14:86:86:f2:cd:23:87:78:b2:94:70:61:1e:89:4f:
         96:d6:f2:de:6a:ce:b2:b0:d8:1c:72:cd:92:c1:2f:c4:1f:1f:
         2a:8c:3e:df:1f:ef:d9:d7:3b:c4:08:d0:98:54:83:ca:9a:d3:
         c9:f5:c6:3e:5b:14:04:55:c8:c6:43:fa:5e:5f:da:4f:4e:e2:
         67:d4:62:b3:b2:5a:b9:ae:94:be:cf:c4:d0:a5:7a:69:f6:ab:
         9b:b9:ab:98:29:ee:c2:3f:52:40:04:cc:da:7b:60:fd:b4:76:
         4c:2e:6c:b4:4d:62:52:8f:5b:c2:21:c7:13:1a:62:41:c0:c1:
         f8:e3:9b:d3:b5:e9:37:46:31:4f:ce:8f:a8:42:ad:ca:c9:3a:
         b4:af:1f:85:f1:cf:7a:b9:f7:b1:53:c7:2e:ae:39:f7:2f:84:
         a2:d5:62:87:c9:88:20:d7:b9:1a:bc:f3:6f:26:ef:1b:b4:5f:
         f9:48:d0:86:67:e0:fd:db:cc:91:d2:75:e5:08:03:f9:df:ec:
         63:08:49:d2:2a:f7:ea:d9:ee:4c:39:9e:23:99:64:8a:e0:3c:
         15:eb:64:b8:ff:84:15:64:5a:f5:8d:0a:ef:dd:e3:ca:31:9c:
         cc:d3:13:c9:fe:a2:be:68:60:0f:68:50:9a:dd:f8:38:9d:bb:
         55:a0:74:95
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----