Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0b/be3e00-3c96-4cde-b81a-14c6b954d976/1/aDsz3HIYs_6IPElQUTTLOaZk_Sg.mft
File:                     aDsz3HIYs_6IPElQUTTLOaZk_Sg.mft (raw, json)
Hash identifier:          tGMZSJci6E2UfZXfh3FdPZ2rwO9ht1RZAO53yoikucs=
Subject key identifier:   14:01:C6:56:FB:8C:56:9B:1C:23:48:77:23:C3:FB:06:90:CF:D4:2B
Authority key identifier: 68:3B:33:DC:72:18:B3:FE:88:3C:49:50:51:34:CB:39:A6:64:FD:28
Certificate issuer:       /CN=683b33dc7218b3fe883c49505134cb39a664fd28
Certificate serial:       01962E61E000E6FBC8D42D60DEDE55C43DDA
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/aDsz3HIYs_6IPElQUTTLOaZk_Sg.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/0b/be3e00-3c96-4cde-b81a-14c6b954d976/1/aDsz3HIYs_6IPElQUTTLOaZk_Sg.mft
Manifest number:          0953
Signing time:             Sun 13 Apr 2025 09:01:28 +0000
Manifest this update:     Sun 13 Apr 2025 09:01:28 +0000
Manifest next update:     Mon 14 Apr 2025 09:01:28 +0000
Files and hashes:         1: PecnHh8YFMYIBEgD1PQBC-sYFMY.roa (hash: G67Iyj0Q7isunYlJO9b465cfL0xQGyEo+TS/2SlDQcA=)
                          2: aDsz3HIYs_6IPElQUTTLOaZk_Sg.crl (hash: WP/uGJNMQWOoMsscwobpUuo/MHxyhCcp3FNxEM8dGro=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2e:61:e0:00:e6:fb:c8:d4:2d:60:de:de:55:c4:3d:da
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=683b33dc7218b3fe883c49505134cb39a664fd28
        Validity
            Not Before: Apr 13 09:01:28 2025 GMT
            Not After : Apr 14 09:01:28 2025 GMT
        Subject: CN=1401c656fb8c569b1c23487723c3fb0690cfd42b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:dc:4b:c4:a5:e5:58:ae:cc:28:57:de:f6:1c:28:
                    96:9d:27:3a:e2:80:1c:63:4e:cc:c2:ae:bb:bb:4d:
                    d3:3e:03:04:d5:19:f0:48:c5:cd:b0:70:8b:94:0c:
                    46:b2:11:a2:7c:57:76:3d:b3:36:66:ce:ee:d7:70:
                    32:f8:7d:10:35:5f:67:0a:fd:34:fb:e2:6c:a5:f7:
                    f4:e7:40:6c:d1:54:f7:cc:10:45:46:f1:31:96:fd:
                    83:33:88:15:15:36:1c:d5:60:0a:a5:1b:f4:89:b9:
                    92:cf:f4:8d:61:e2:e6:bf:18:8f:0e:1f:34:47:82:
                    d3:30:ec:b8:05:39:b1:fc:ad:88:05:7d:e5:57:d6:
                    1e:84:f2:cc:6d:24:67:2d:aa:ee:39:a9:cf:69:52:
                    c5:ac:99:1d:81:71:27:53:27:dc:e2:64:86:e5:ea:
                    47:c4:d7:c6:80:30:44:89:00:12:d5:43:81:0d:41:
                    a5:0c:9a:31:de:86:31:79:c8:fa:d8:07:90:41:84:
                    3b:e7:79:6f:ad:d8:c0:90:12:da:49:b9:9f:7e:15:
                    5d:08:53:6d:9a:63:ff:d4:e3:45:d2:73:84:fc:2e:
                    24:ad:41:05:30:15:87:b7:9f:f1:d2:2c:3c:e2:7d:
                    e3:bf:de:dc:0b:7a:22:ad:98:38:eb:20:a2:02:25:
                    62:eb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                14:01:C6:56:FB:8C:56:9B:1C:23:48:77:23:C3:FB:06:90:CF:D4:2B
            X509v3 Authority Key Identifier:
                keyid:68:3B:33:DC:72:18:B3:FE:88:3C:49:50:51:34:CB:39:A6:64:FD:28

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/aDsz3HIYs_6IPElQUTTLOaZk_Sg.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0b/be3e00-3c96-4cde-b81a-14c6b954d976/1/aDsz3HIYs_6IPElQUTTLOaZk_Sg.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/0b/be3e00-3c96-4cde-b81a-14c6b954d976/1/aDsz3HIYs_6IPElQUTTLOaZk_Sg.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         0a:dc:28:73:e6:5c:cc:34:8d:c7:13:1e:75:74:82:41:b1:1e:
         8b:3c:41:58:23:eb:59:86:f5:20:af:b6:ab:ef:a2:d8:68:97:
         cd:2b:ed:79:91:20:24:1e:3d:e6:7c:96:97:63:fb:f7:e0:39:
         70:37:39:65:4c:bf:02:1d:97:bb:5b:ad:9b:0e:6e:f7:89:8f:
         ae:35:5b:01:ed:a0:e8:f0:c0:91:bf:e8:8f:63:54:55:68:1c:
         9c:7d:8e:0f:c5:17:e0:5d:1f:2c:84:b2:f0:70:8b:31:ee:7e:
         8a:47:af:0a:70:2f:69:75:80:95:2e:1b:a6:70:dc:d7:06:77:
         71:41:13:7e:24:e6:6c:d7:30:f5:ac:5d:04:6e:54:3f:da:b7:
         9c:20:5d:e8:93:a1:3a:a1:61:3b:11:92:8b:5f:8e:17:55:e6:
         fe:f5:e7:1b:c9:ae:d8:25:0c:3b:3c:23:14:22:0d:8d:21:cf:
         44:ff:8a:cb:bb:15:49:0e:4b:f8:94:37:04:ec:89:16:40:47:
         06:da:d4:28:e0:19:a9:3e:a1:68:fb:b7:a0:e6:1f:82:63:27:
         1e:99:d3:00:41:1e:9a:2a:03:66:c1:a2:cb:87:96:d9:58:fe:
         fc:a1:81:4f:47:0d:79:07:67:89:9e:92:d7:bb:29:36:ef:67:
         cc:cd:d5:3b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----