Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/07/6a3f35-35b8-49e0-9f44-b818faecb717/1/1-k5AU1miExcI_AJDjUclaOLANHA.mft
File:                     1-k5AU1miExcI_AJDjUclaOLANHA.mft (raw, json)
Hash identifier:          K9MjSON8Y3aNrshfsP5iQ6fFUFxO5jHgNZ0jA5uusrc=
Subject key identifier:   F8:FB:C8:13:F5:85:EE:CE:C9:14:7B:69:47:17:16:FD:7B:89:A0:D1
Authority key identifier: FA:4E:40:53:59:A2:13:17:08:FC:02:43:8D:47:25:68:E2:C0:34:70
Certificate issuer:       /CN=fa4e405359a2131708fc02438d472568e2c03470
Certificate serial:       01962FAB0FBC5AB07DB789F05191D37A72F1
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/1-k5AU1miExcI_AJDjUclaOLANHA.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/07/6a3f35-35b8-49e0-9f44-b818faecb717/1/1-k5AU1miExcI_AJDjUclaOLANHA.mft
Manifest number:          0916
Signing time:             Sun 13 Apr 2025 15:01:01 +0000
Manifest this update:     Sun 13 Apr 2025 15:01:01 +0000
Manifest next update:     Mon 14 Apr 2025 15:01:01 +0000
Files and hashes:         1: 1-k5AU1miExcI_AJDjUclaOLANHA.crl (hash: 1VyT6YvyyHXXfxDh2lpbRsVBDM9kwlBNR0Q9DyrWQ14=)
                          2: NeBz797_B5ESEnGcmvd7nUsUi1U.roa (hash: JbBjirkyCazFybALAaB9Vxb1oZwyg2E4gTHpGuD81y4=)
                          3: bgZI8eq8qLB9cRKsLzzVy6IhfPw.roa (hash: n1uW0Jj8dPeSPuQyP7lT/OB/Y/KhKi4od2gGB+1AWD8=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2f:ab:0f:bc:5a:b0:7d:b7:89:f0:51:91:d3:7a:72:f1
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=fa4e405359a2131708fc02438d472568e2c03470
        Validity
            Not Before: Apr 13 15:01:01 2025 GMT
            Not After : Apr 14 15:01:01 2025 GMT
        Subject: CN=f8fbc813f585eecec9147b69471716fd7b89a0d1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:92:21:d1:7e:13:b5:0e:77:6c:9d:15:65:86:65:
                    50:6a:62:5f:98:88:0e:94:83:13:dc:ed:79:61:72:
                    d0:c2:42:c3:78:db:fa:e3:aa:ef:b7:07:b6:ea:06:
                    72:32:76:68:45:a6:cd:12:58:77:45:36:d2:de:18:
                    08:ca:49:27:5e:5a:2c:26:e4:ff:2f:2c:50:ba:07:
                    89:69:2b:10:2a:d1:97:fd:32:81:e2:9d:b9:aa:a4:
                    92:d7:99:74:8f:e6:3d:19:e9:8f:60:f4:24:b6:dc:
                    10:44:9d:f3:cf:bf:50:63:9b:c3:b8:52:8d:1e:47:
                    3e:e5:dd:35:7f:dc:b3:2e:12:93:fb:4b:a2:fa:1c:
                    37:27:49:f9:96:cd:44:10:2f:3e:f4:dc:14:f6:16:
                    a1:96:f2:94:18:be:78:42:e4:64:a7:28:33:3b:79:
                    b3:0d:07:37:df:9f:5e:a0:63:ed:6c:f9:53:d3:93:
                    ce:29:38:3a:54:38:72:ed:71:d4:00:92:da:1b:f7:
                    53:37:54:e7:c5:1f:15:4c:85:49:5d:14:06:29:21:
                    f0:92:5b:15:8d:7f:4a:b1:4a:a1:64:ad:d5:c5:3b:
                    63:34:af:b5:c7:7d:d5:13:b7:3d:70:e8:ae:8c:62:
                    1a:be:c7:eb:2b:d8:76:27:c9:cc:97:f6:5f:68:d0:
                    a8:f3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F8:FB:C8:13:F5:85:EE:CE:C9:14:7B:69:47:17:16:FD:7B:89:A0:D1
            X509v3 Authority Key Identifier:
                keyid:FA:4E:40:53:59:A2:13:17:08:FC:02:43:8D:47:25:68:E2:C0:34:70

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1-k5AU1miExcI_AJDjUclaOLANHA.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/07/6a3f35-35b8-49e0-9f44-b818faecb717/1/1-k5AU1miExcI_AJDjUclaOLANHA.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/07/6a3f35-35b8-49e0-9f44-b818faecb717/1/1-k5AU1miExcI_AJDjUclaOLANHA.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         30:d1:1d:62:79:e5:0a:65:65:d8:a7:36:14:b4:dc:1c:41:83:
         95:3b:a3:33:5a:91:c1:95:59:db:ce:96:1f:bd:3b:44:63:e5:
         35:0d:ae:ae:e3:f7:e2:5d:42:36:73:93:8f:65:92:85:08:0a:
         40:4c:95:13:81:b3:05:7c:c2:e2:ef:85:48:a3:aa:86:67:af:
         1c:6e:11:66:c8:1a:eb:0a:ed:d9:02:07:9f:68:47:2c:5f:60:
         f7:f0:c0:5d:e6:b3:bb:6d:47:bf:90:36:32:bd:44:cf:44:9e:
         32:0e:8a:ad:a9:ee:0e:2c:cf:12:f9:bb:dd:5b:21:d4:ab:d6:
         ac:e5:17:60:c7:92:9c:ec:8e:87:ac:85:2d:9e:97:65:85:fd:
         dd:31:f8:f7:16:a8:3a:58:64:19:b2:74:ac:40:1f:7b:21:5b:
         7b:5e:d1:60:93:91:1a:7c:28:40:51:ca:4f:e5:64:c7:1b:d1:
         2c:83:ef:d6:83:1c:69:7a:1d:bc:97:f5:00:b8:6e:dc:1d:c2:
         1b:30:42:69:98:6a:e7:17:d5:a2:ee:ca:79:91:d4:3d:c3:55:
         af:cf:e6:96:78:29:e5:ea:3a:5d:61:a3:4f:db:a5:2d:82:26:
         23:15:5d:74:22:c3:71:74:04:f5:88:15:b6:75:8c:ab:0f:1f:
         99:d6:42:10
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----