Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fe/70f8bb-9a37-4f3e-a581-3ea8194fb446/1/dPEFnCc8UO3PPc7fxYABUuyR26I.mft
File:                     dPEFnCc8UO3PPc7fxYABUuyR26I.mft (raw, json)
Hash identifier:          Qy9kEKz0g5cMYVydRq/HiQTOKC2Z5jHP7rmoVcInMEg=
Subject key identifier:   BA:07:3E:A8:AA:22:81:62:F5:66:6B:90:1F:C5:CA:D5:86:65:46:FA
Authority key identifier: 74:F1:05:9C:27:3C:50:ED:CF:3D:CE:DF:C5:80:01:52:EC:91:DB:A2
Certificate issuer:       /CN=74f1059c273c50edcf3dcedfc5800152ec91dba2
Certificate serial:       01962DF40EB3C51202A6A9DC29ABE20FD597
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/dPEFnCc8UO3PPc7fxYABUuyR26I.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/fe/70f8bb-9a37-4f3e-a581-3ea8194fb446/1/dPEFnCc8UO3PPc7fxYABUuyR26I.mft
Manifest number:          14E8
Signing time:             Sun 13 Apr 2025 07:01:31 +0000
Manifest this update:     Sun 13 Apr 2025 07:01:31 +0000
Manifest next update:     Mon 14 Apr 2025 07:01:31 +0000
Files and hashes:         1: _2TO4dSOjfvwTixfDBf-WBuIl0o.roa (hash: RPjvUg/mlm5LB8eSfOAwiB9MoMFdNTXRZHFg7kwXImU=)
                          2: dPEFnCc8UO3PPc7fxYABUuyR26I.crl (hash: mHo1fdxAopFu/PA6keWgRd0Xs16FSCO7C0NnNbIS7og=)
                          3: f516EGaO9yNnpKCtINgDdW37z6Y.roa (hash: ED6BLlxCP1AdH6cMJc87FGQDnI7Gyi9C1L6MTbKzt54=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2d:f4:0e:b3:c5:12:02:a6:a9:dc:29:ab:e2:0f:d5:97
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=74f1059c273c50edcf3dcedfc5800152ec91dba2
        Validity
            Not Before: Apr 13 07:01:31 2025 GMT
            Not After : Apr 14 07:01:31 2025 GMT
        Subject: CN=ba073ea8aa228162f5666b901fc5cad5866546fa
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:98:2b:05:98:c3:00:41:84:d6:31:52:11:86:e1:
                    20:db:18:81:0f:5c:45:96:29:90:f9:72:db:3e:a8:
                    83:da:1c:3a:c7:1e:3c:e1:24:50:f4:7d:4f:f0:27:
                    e4:50:16:7e:9c:22:64:f0:63:c3:dd:87:b4:cc:57:
                    b0:ba:31:e9:f7:94:26:5f:cb:a3:f8:7d:e6:cc:c7:
                    4d:d7:f9:e1:1b:27:b4:a6:ca:32:73:40:57:ce:d6:
                    a8:cd:e5:18:6d:e9:9d:0a:e7:38:44:ca:23:28:78:
                    0f:ef:8d:05:81:92:1f:69:d8:37:b6:55:09:95:c2:
                    fd:fd:e9:77:77:a3:87:d7:67:16:e7:34:47:a2:6d:
                    3c:4c:d0:ce:f2:da:07:f3:5b:64:6c:f8:00:f3:d5:
                    e6:cc:a5:df:75:c0:8c:78:3c:89:0c:bd:b3:f2:30:
                    5d:82:f0:b3:61:11:8c:dd:97:71:ba:92:dc:13:dd:
                    74:20:45:15:fd:0c:e2:f9:63:4d:10:2f:4d:df:74:
                    09:4b:99:f4:4a:7b:2f:ed:e1:5a:48:e2:10:58:c0:
                    1c:c5:f8:9e:94:67:07:2b:dd:04:2f:50:17:2c:98:
                    b8:47:60:2c:8c:4f:9f:0f:34:23:2f:c9:0e:ba:2b:
                    b8:0c:be:37:26:5c:9a:05:fd:30:1f:5f:7f:13:64:
                    4f:5d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BA:07:3E:A8:AA:22:81:62:F5:66:6B:90:1F:C5:CA:D5:86:65:46:FA
            X509v3 Authority Key Identifier:
                keyid:74:F1:05:9C:27:3C:50:ED:CF:3D:CE:DF:C5:80:01:52:EC:91:DB:A2

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/dPEFnCc8UO3PPc7fxYABUuyR26I.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fe/70f8bb-9a37-4f3e-a581-3ea8194fb446/1/dPEFnCc8UO3PPc7fxYABUuyR26I.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/fe/70f8bb-9a37-4f3e-a581-3ea8194fb446/1/dPEFnCc8UO3PPc7fxYABUuyR26I.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         0c:0e:95:87:23:2d:0b:66:a9:66:4d:fc:3e:d5:03:f1:bb:87:
         83:a7:ce:be:74:81:e2:30:46:92:b3:57:a4:25:78:6e:1e:63:
         7d:ca:7e:bd:a1:2f:7d:62:80:ab:c5:74:b9:b9:43:5c:33:9c:
         db:a2:59:c5:b6:d8:ef:e5:f3:40:3a:d6:0a:c6:dd:60:13:7b:
         eb:f5:6d:fd:35:cc:32:67:fb:f9:0c:bc:a6:45:3f:5e:8f:7e:
         3b:ba:7e:1e:4a:33:30:e2:43:60:67:bd:22:38:65:7b:db:74:
         3b:2e:09:af:7e:cf:76:53:46:b2:70:fa:23:13:a6:18:e1:f7:
         7e:db:b3:8c:3e:71:3d:6b:20:c2:5b:a7:06:6c:0f:ad:7f:4f:
         9e:67:db:16:be:d9:6f:02:96:28:6a:02:a9:ea:f1:7c:56:07:
         c3:a4:87:e8:35:cc:5d:72:56:03:94:2c:71:f9:6b:9c:25:29:
         72:16:ac:00:41:59:b1:a1:9b:f4:4a:9d:54:86:17:ef:c4:81:
         41:d9:3a:c0:60:6f:57:de:cd:2d:41:eb:97:cb:14:22:49:ee:
         27:f3:61:c7:91:c2:f6:e6:f5:49:bd:14:75:5c:84:2f:cf:b1:
         6a:31:6e:39:46:19:ea:9c:2a:78:dd:0d:d7:32:57:35:99:eb:
         0c:c9:8a:c4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----