Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0d/ad9756-84d1-4ab9-96e1-14797eac522e/1/aNLCXQU0pAJ8aVViqM5PABzVOW8.mft
File:                     aNLCXQU0pAJ8aVViqM5PABzVOW8.mft (raw, json)
Hash identifier:          YdjFvSaX4QtlX0O2gfDH58C2aQVej3Q7VFQfeUNXtxk=
Subject key identifier:   2B:10:40:39:5C:AC:98:95:1D:09:DE:F6:6D:C0:3D:65:00:4D:C7:8C
Authority key identifier: 68:D2:C2:5D:05:34:A4:02:7C:69:55:62:A8:CE:4F:00:1C:D5:39:6F
Certificate issuer:       /CN=68d2c25d0534a4027c695562a8ce4f001cd5396f
Certificate serial:       01962E2AE57D414093EE1C7C5966D46EDDEF
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/aNLCXQU0pAJ8aVViqM5PABzVOW8.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/0d/ad9756-84d1-4ab9-96e1-14797eac522e/1/aNLCXQU0pAJ8aVViqM5PABzVOW8.mft
Manifest number:          113D
Signing time:             Sun 13 Apr 2025 08:01:25 +0000
Manifest this update:     Sun 13 Apr 2025 08:01:25 +0000
Manifest next update:     Mon 14 Apr 2025 08:01:25 +0000
Files and hashes:         1: SALrx8y5x39WJ8efwGiimpmg788.roa (hash: CtpmQiaYAVz0sehGOLMPmKtW82021GvqOFqhQ5ojIPI=)
                          2: aNLCXQU0pAJ8aVViqM5PABzVOW8.crl (hash: 3gDQ3LRVn9OvF3ctRk5lFgvsuuZXuSYGw8QUvYm44Fg=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2e:2a:e5:7d:41:40:93:ee:1c:7c:59:66:d4:6e:dd:ef
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=68d2c25d0534a4027c695562a8ce4f001cd5396f
        Validity
            Not Before: Apr 13 08:01:25 2025 GMT
            Not After : Apr 14 08:01:25 2025 GMT
        Subject: CN=2b1040395cac98951d09def66dc03d65004dc78c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c9:2f:83:d6:1e:fe:cc:59:a6:29:bd:f8:ab:98:
                    05:0e:a5:37:97:a3:85:19:55:d5:9f:70:02:ce:f7:
                    e6:2c:f2:21:0a:d3:9f:18:24:2f:29:aa:4e:00:20:
                    a4:b1:8c:0c:3a:59:96:ed:b5:87:15:9d:ea:c0:6c:
                    a4:28:cf:49:d0:b2:8d:80:7f:0c:af:3c:79:87:0c:
                    d9:c2:eb:84:93:ba:72:15:13:ea:ef:ad:81:03:e9:
                    aa:73:67:6f:13:77:e0:3b:7f:54:43:aa:89:98:44:
                    c9:50:72:06:ba:cd:44:ca:cf:3d:d2:c4:09:f3:09:
                    9e:30:df:ba:d8:a5:be:f3:8c:cd:9a:72:88:5a:8f:
                    bb:f7:63:c1:97:ed:99:6a:ab:68:67:8c:5a:11:63:
                    f4:3b:d2:aa:c3:af:27:13:91:18:91:e9:9c:4d:f8:
                    35:0f:6a:96:74:d5:47:33:43:23:d0:09:96:f7:c4:
                    1e:4e:8d:3a:a0:20:e8:b6:f9:26:de:76:3f:94:8c:
                    1f:cf:9c:74:c5:06:05:f8:2f:c0:9f:b7:f3:a9:9e:
                    a5:c4:7f:11:eb:9b:92:e1:9a:d2:9b:c6:7e:67:85:
                    c4:f0:a5:72:8a:79:47:95:07:2a:00:bd:dd:42:97:
                    57:b7:07:af:27:ce:d1:f4:22:c6:b6:12:0d:46:c9:
                    a7:09
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2B:10:40:39:5C:AC:98:95:1D:09:DE:F6:6D:C0:3D:65:00:4D:C7:8C
            X509v3 Authority Key Identifier:
                keyid:68:D2:C2:5D:05:34:A4:02:7C:69:55:62:A8:CE:4F:00:1C:D5:39:6F

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/aNLCXQU0pAJ8aVViqM5PABzVOW8.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0d/ad9756-84d1-4ab9-96e1-14797eac522e/1/aNLCXQU0pAJ8aVViqM5PABzVOW8.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/0d/ad9756-84d1-4ab9-96e1-14797eac522e/1/aNLCXQU0pAJ8aVViqM5PABzVOW8.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         20:3f:60:47:47:2b:03:25:0a:a3:bf:d2:5d:ed:cc:ec:c8:8f:
         f2:76:bc:6c:fb:62:f9:a8:bc:01:7b:78:2c:04:76:f0:e6:26:
         f8:4f:77:07:05:8f:a5:24:47:5e:99:3c:dc:43:77:c9:15:fd:
         a8:3d:12:80:58:b3:1f:1e:05:60:de:70:bd:33:f4:f2:b3:6e:
         42:3d:d9:1d:62:ad:41:28:d4:fa:94:ec:97:7a:2a:f3:a6:e4:
         c7:d2:b4:30:6f:5a:ca:6e:a7:7f:d2:15:3d:f9:9a:1b:aa:79:
         8d:26:31:27:c3:13:c2:bc:0a:1e:8f:db:f8:98:d7:9d:4e:94:
         39:55:f0:9a:33:72:d2:bb:08:cd:26:30:78:d3:0a:6b:a4:43:
         04:06:4c:5a:6f:31:d0:7c:fa:55:b0:42:9a:10:07:01:48:2a:
         f3:ee:03:26:be:00:5b:3e:c7:1a:c3:a3:d5:c9:06:f2:48:70:
         65:12:80:74:93:4c:c4:80:6e:3a:db:3b:a4:12:42:c3:c4:dd:
         c3:11:86:65:d5:25:5b:b9:77:5f:09:78:d1:70:75:3b:46:bf:
         73:ae:b2:c4:54:93:23:95:c9:36:b6:5d:a2:14:c9:eb:e9:f9:
         1a:d0:da:77:a7:52:87:e0:0b:fb:7e:81:42:6c:a2:07:db:40:
         88:54:cd:1e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----