Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/01/0aef2b-1e45-4ad5-a80c-86dee207f81e/1/pAaMZlXDM_xxKDLBE_Z_H9aIrsQ.mft
File:                     pAaMZlXDM_xxKDLBE_Z_H9aIrsQ.mft (raw, json)
Hash identifier:          oMDvBVvhCR4iQYgfFR9WRo8VHFaqcGOnGIPt//v9XOE=
Subject key identifier:   ED:D4:23:56:5C:3D:B5:30:96:D9:0B:6F:1F:50:00:24:81:01:7B:89
Authority key identifier: A4:06:8C:66:55:C3:33:FC:71:28:32:C1:13:F6:7F:1F:D6:88:AE:C4
Certificate issuer:       /CN=a4068c6655c333fc712832c113f67f1fd688aec4
Certificate serial:       01962E98DDE118DC5303239716D23A6D4721
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/pAaMZlXDM_xxKDLBE_Z_H9aIrsQ.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/01/0aef2b-1e45-4ad5-a80c-86dee207f81e/1/pAaMZlXDM_xxKDLBE_Z_H9aIrsQ.mft
Manifest number:          11E7
Signing time:             Sun 13 Apr 2025 10:01:32 +0000
Manifest this update:     Sun 13 Apr 2025 10:01:32 +0000
Manifest next update:     Mon 14 Apr 2025 10:01:32 +0000
Files and hashes:         1: pAaMZlXDM_xxKDLBE_Z_H9aIrsQ.crl (hash: Zq7mND0JjD4ewlSbl58HoWu1fwM9/p7IiLj1PjL6z78=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2e:98:dd:e1:18:dc:53:03:23:97:16:d2:3a:6d:47:21
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=a4068c6655c333fc712832c113f67f1fd688aec4
        Validity
            Not Before: Apr 13 10:01:32 2025 GMT
            Not After : Apr 14 10:01:32 2025 GMT
        Subject: CN=edd423565c3db53096d90b6f1f50002481017b89
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a3:fd:fb:0b:3b:24:8e:de:14:95:2a:41:fb:b0:
                    b5:c7:5b:8a:e8:ed:a9:a5:1e:77:fc:05:38:e2:f9:
                    c4:0a:17:7c:46:c8:fb:64:b7:e9:ec:c6:63:d2:8a:
                    49:f1:2c:c4:4b:ce:8d:b6:75:0f:ba:c2:ba:2d:46:
                    31:d3:70:52:b4:c0:30:14:5b:b9:fb:79:74:f0:98:
                    ad:45:c0:4c:e4:69:5e:03:93:6c:76:cf:9e:b4:10:
                    33:8d:92:e6:e1:8c:df:fb:cf:a2:d8:cf:1c:4d:1f:
                    c5:c5:b8:47:84:0e:89:2b:26:38:fd:15:cb:67:a5:
                    e9:88:e5:36:a3:0d:f9:2e:62:8a:fc:75:eb:fe:d6:
                    00:3f:6e:42:f9:a9:de:08:80:88:22:42:a4:ce:59:
                    84:99:1a:7a:31:da:2f:9e:4d:01:e8:7b:52:a3:4f:
                    fe:97:66:d4:dd:c4:25:f1:5b:31:5f:8a:e6:d0:09:
                    72:3a:33:4c:75:d1:b9:d2:f0:c5:87:bc:b7:aa:86:
                    f8:ee:bf:80:1c:d7:ff:78:6f:5b:ce:3c:0a:e1:fe:
                    f1:ce:33:cb:b8:b3:61:a2:08:68:ab:c2:56:67:3f:
                    97:5d:a4:50:66:51:e7:42:6a:c7:16:21:f7:5a:a2:
                    1b:f1:2b:fa:8b:da:b3:24:bf:96:24:f4:21:a8:4f:
                    95:0d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                ED:D4:23:56:5C:3D:B5:30:96:D9:0B:6F:1F:50:00:24:81:01:7B:89
            X509v3 Authority Key Identifier:
                keyid:A4:06:8C:66:55:C3:33:FC:71:28:32:C1:13:F6:7F:1F:D6:88:AE:C4

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/pAaMZlXDM_xxKDLBE_Z_H9aIrsQ.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/01/0aef2b-1e45-4ad5-a80c-86dee207f81e/1/pAaMZlXDM_xxKDLBE_Z_H9aIrsQ.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/01/0aef2b-1e45-4ad5-a80c-86dee207f81e/1/pAaMZlXDM_xxKDLBE_Z_H9aIrsQ.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         8a:c6:1d:56:df:b2:57:06:42:c6:9b:08:79:fd:ca:a0:f8:e6:
         c9:23:5d:63:5c:3b:c0:ef:71:b4:cb:df:67:89:11:dc:1e:b3:
         5f:ea:06:c8:7f:7e:9a:36:5e:cb:09:2f:80:dc:d0:4a:5a:89:
         e3:63:8c:fa:c8:b3:b6:e9:d4:9b:68:c5:30:ff:d8:f9:43:1f:
         63:a9:be:54:2a:fb:c5:89:42:8d:f9:ff:69:bf:30:a7:6d:79:
         55:89:c0:73:09:48:39:46:72:86:49:89:4a:8e:26:15:ad:e0:
         80:12:04:e0:b7:43:c1:4f:2e:a6:73:f3:54:a9:fa:9c:ac:d0:
         a4:b5:24:1c:a2:a9:6d:e7:28:64:53:32:66:1f:cb:cb:21:50:
         e8:39:b0:58:18:10:97:55:45:25:01:20:9b:59:60:56:b8:c6:
         d4:e5:11:5c:50:b2:8f:19:a2:f9:ec:ba:b2:e5:d0:55:5d:b7:
         78:1e:9f:90:06:e0:ff:f0:59:0f:27:60:74:05:70:1b:af:23:
         89:30:3e:8a:a9:0c:e9:17:7a:c8:4c:ab:5b:16:99:af:b8:26:
         24:c8:7d:5d:0c:cb:22:e0:cf:f4:ec:04:3e:48:38:d2:f5:d8:
         40:fc:4b:73:a0:a5:c6:67:79:aa:a3:7c:15:fc:49:a3:dc:9d:
         f7:b8:4b:de
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----