Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/03/5e9f90-a6b0-4fd8-b8dd-792802c43925/1/aPg-KjQUWtR-DMKzx5_GMSuuLHE.mft
File:                     aPg-KjQUWtR-DMKzx5_GMSuuLHE.mft (raw, json)
Hash identifier:          SAoAczqY1VFO7PSIb31++EELNgzc0s8IhPnc/W2BYMM=
Subject key identifier:   D2:86:51:6D:9D:A1:49:47:8E:62:E9:54:28:1E:13:91:28:B6:B3:02
Authority key identifier: 68:F8:3E:2A:34:14:5A:D4:7E:0C:C2:B3:C7:9F:C6:31:2B:AE:2C:71
Certificate issuer:       /CN=68f83e2a34145ad47e0cc2b3c79fc6312bae2c71
Certificate serial:       01962FAB1E75EA6342450D43DD8F4033DAFB
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/aPg-KjQUWtR-DMKzx5_GMSuuLHE.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/03/5e9f90-a6b0-4fd8-b8dd-792802c43925/1/aPg-KjQUWtR-DMKzx5_GMSuuLHE.mft
Manifest number:          03A8
Signing time:             Sun 13 Apr 2025 15:01:05 +0000
Manifest this update:     Sun 13 Apr 2025 15:01:05 +0000
Manifest next update:     Mon 14 Apr 2025 15:01:05 +0000
Files and hashes:         1: _JvLFko-VE6xKiGlbuB2muI8saM.roa (hash: HfNiYuKiOBxtsDuKseMg0vsItOa/ALnz5nrDh9CeinE=)
                          2: aPg-KjQUWtR-DMKzx5_GMSuuLHE.crl (hash: 4obEbntbxWkp2LtJahLaHVeN5z9K2lCTrlxS2lu9UO0=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2f:ab:1e:75:ea:63:42:45:0d:43:dd:8f:40:33:da:fb
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=68f83e2a34145ad47e0cc2b3c79fc6312bae2c71
        Validity
            Not Before: Apr 13 15:01:05 2025 GMT
            Not After : Apr 14 15:01:05 2025 GMT
        Subject: CN=d286516d9da149478e62e954281e139128b6b302
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b2:3b:ea:f8:c9:cf:c6:d8:b7:e9:c4:a2:cd:2e:
                    99:25:b3:75:bb:18:6b:00:22:1a:ee:4e:5d:de:65:
                    24:cc:ec:c7:5e:00:04:01:af:11:0e:6b:24:68:c9:
                    34:ca:f2:7c:d8:0c:ea:5b:d9:42:96:b6:16:a0:8f:
                    81:85:9f:4f:98:4d:2d:d2:d4:5c:4c:31:ec:c5:32:
                    7d:ea:69:6f:8c:e9:7e:b4:2b:46:16:91:91:87:76:
                    26:99:fa:98:0f:ba:38:ba:79:6e:f9:a0:be:e3:17:
                    8f:a7:f2:c3:0c:82:93:ab:7f:ec:be:94:1e:ab:7b:
                    8c:aa:f7:6f:d0:b0:68:8a:79:71:d1:0d:2c:ae:91:
                    b3:8c:43:d7:22:9e:68:95:f8:6e:14:4c:79:e5:01:
                    c5:4f:13:79:85:86:5e:e1:13:56:cd:ed:0a:96:7b:
                    6d:a3:a8:fb:85:92:47:47:d8:5d:f4:1e:ab:95:38:
                    2d:c5:e5:a4:8c:e8:81:ab:f1:12:32:47:e0:2d:5f:
                    7b:66:04:65:de:1a:3f:3c:23:38:ec:f9:56:b4:f8:
                    12:10:f8:e3:f0:29:fe:3e:fa:45:bc:3f:ab:4c:72:
                    10:73:83:3a:01:33:1b:11:63:02:2b:0c:b0:08:87:
                    e7:9a:85:80:2d:be:15:f6:93:c9:af:ed:7f:f0:87:
                    2d:eb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D2:86:51:6D:9D:A1:49:47:8E:62:E9:54:28:1E:13:91:28:B6:B3:02
            X509v3 Authority Key Identifier:
                keyid:68:F8:3E:2A:34:14:5A:D4:7E:0C:C2:B3:C7:9F:C6:31:2B:AE:2C:71

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/aPg-KjQUWtR-DMKzx5_GMSuuLHE.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/03/5e9f90-a6b0-4fd8-b8dd-792802c43925/1/aPg-KjQUWtR-DMKzx5_GMSuuLHE.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/03/5e9f90-a6b0-4fd8-b8dd-792802c43925/1/aPg-KjQUWtR-DMKzx5_GMSuuLHE.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         4e:7f:7f:25:23:58:90:15:8d:e4:77:22:de:f2:7c:3b:93:16:
         a5:5f:37:e9:33:c4:48:66:34:c4:a8:55:b3:12:79:20:a1:25:
         bf:c2:4a:d3:b8:39:92:6d:d6:76:62:fb:45:cf:36:57:c7:bd:
         03:59:e0:52:5a:92:90:59:5e:d1:e0:8c:ab:22:28:83:83:6b:
         a8:81:82:e4:61:75:0e:2a:ae:52:ab:08:8c:7e:e7:8a:f1:0f:
         27:9d:28:2c:df:18:24:90:17:23:76:ad:7e:39:88:cd:c1:c8:
         d6:50:16:6a:02:36:af:70:a8:7c:e7:9e:49:df:c1:ea:a7:d3:
         0a:43:d2:9e:ce:43:6c:13:37:10:71:57:53:ba:14:fe:5a:ef:
         fb:f7:b6:27:fe:db:d6:01:02:98:ef:a7:ce:fc:f7:93:f8:e4:
         60:35:43:a1:31:e4:eb:ad:d4:91:7b:53:d4:46:d1:fc:8b:5c:
         23:d0:37:fb:1d:30:b5:b4:25:61:f0:97:0b:02:ed:7a:c7:8f:
         1f:71:67:2a:8d:6b:53:18:a4:74:fe:c1:4e:b9:be:eb:51:6f:
         92:e0:07:79:04:83:9c:df:fa:9d:38:6b:45:05:21:ec:3a:20:
         5b:12:e0:86:d7:d3:e4:27:c8:1c:ba:d4:17:d8:62:34:a7:56:
         90:14:1b:97
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----