Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0d/e42ecf-78ff-4b58-8760-826d05ccfe25/1/aG0YQEk-7jRfjAKtiqfw8PQbpFA.mft
File:                     aG0YQEk-7jRfjAKtiqfw8PQbpFA.mft (raw, json)
Hash identifier:          ba6ZZXvo8/cT+uY7yTNY98rxnxvjmgK1VuWYjKFmn0c=
Subject key identifier:   AF:A4:74:94:F4:AC:36:ED:69:29:7A:09:A3:B7:C7:D8:1F:93:11:5B
Authority key identifier: 68:6D:18:40:49:3E:EE:34:5F:8C:02:AD:8A:A7:F0:F0:F4:1B:A4:50
Certificate issuer:       /CN=686d1840493eee345f8c02ad8aa7f0f0f41ba450
Certificate serial:       01962E61AA4B1220456ED10B4A49BE957266
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/aG0YQEk-7jRfjAKtiqfw8PQbpFA.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/0d/e42ecf-78ff-4b58-8760-826d05ccfe25/1/aG0YQEk-7jRfjAKtiqfw8PQbpFA.mft
Manifest number:          14EC
Signing time:             Sun 13 Apr 2025 09:01:14 +0000
Manifest this update:     Sun 13 Apr 2025 09:01:14 +0000
Manifest next update:     Mon 14 Apr 2025 09:01:14 +0000
Files and hashes:         1: Hpq861GqA5RqLih08GH13MdllW0.roa (hash: 6UGmd69y3tVELywuvYudCcD/UUgHO86OmDHx4Pt/TNE=)
                          2: aG0YQEk-7jRfjAKtiqfw8PQbpFA.crl (hash: IvxRMYeLU9QzjPjjVwdH8WBMskyv6Nba+CjPM/y7rYE=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2e:61:aa:4b:12:20:45:6e:d1:0b:4a:49:be:95:72:66
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=686d1840493eee345f8c02ad8aa7f0f0f41ba450
        Validity
            Not Before: Apr 13 09:01:14 2025 GMT
            Not After : Apr 14 09:01:14 2025 GMT
        Subject: CN=afa47494f4ac36ed69297a09a3b7c7d81f93115b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d5:17:c0:c9:8f:00:f7:30:de:39:cc:3a:e9:1a:
                    03:32:9f:f7:cc:e3:7f:44:9b:3c:f8:47:fc:5d:fb:
                    5f:8f:94:87:70:9e:30:fb:d6:94:62:a4:9a:6b:14:
                    57:7f:79:59:b4:e1:88:d6:90:fc:ed:46:f4:59:1c:
                    3f:75:84:42:8f:68:f1:f1:6e:57:40:7a:41:89:0d:
                    d1:8c:b6:8c:77:cf:6f:f7:ef:e4:73:84:9c:44:ca:
                    1d:8c:98:80:3b:f3:1e:e2:ca:97:21:48:32:4f:c9:
                    62:e1:da:68:6a:36:95:1b:08:1e:b3:37:c8:dd:84:
                    7f:c3:f5:a3:73:5f:48:b8:30:3c:ae:6a:58:9b:98:
                    98:32:62:77:c0:cc:7e:bd:cd:f6:93:60:3e:0b:f4:
                    c1:3b:47:42:d7:4f:48:ce:f8:a2:93:0f:7b:10:38:
                    f7:99:03:51:e6:f6:c3:eb:80:d5:74:b2:0d:75:a4:
                    25:d9:27:55:51:d8:23:74:c7:09:f2:e0:cd:5d:b6:
                    31:e4:84:b9:98:e7:58:11:ca:20:fe:5b:b0:49:4b:
                    09:2b:f3:18:60:48:f3:f7:d8:d3:36:66:b9:5f:60:
                    94:75:cc:a6:de:3f:ed:b0:cd:9f:ea:45:a3:fe:7f:
                    e7:b0:20:ee:45:b8:fa:f5:25:ca:a0:82:05:65:3d:
                    43:33
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AF:A4:74:94:F4:AC:36:ED:69:29:7A:09:A3:B7:C7:D8:1F:93:11:5B
            X509v3 Authority Key Identifier:
                keyid:68:6D:18:40:49:3E:EE:34:5F:8C:02:AD:8A:A7:F0:F0:F4:1B:A4:50

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/aG0YQEk-7jRfjAKtiqfw8PQbpFA.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0d/e42ecf-78ff-4b58-8760-826d05ccfe25/1/aG0YQEk-7jRfjAKtiqfw8PQbpFA.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/0d/e42ecf-78ff-4b58-8760-826d05ccfe25/1/aG0YQEk-7jRfjAKtiqfw8PQbpFA.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         06:86:38:c2:14:04:20:38:0a:62:f9:7f:94:90:94:1a:cd:98:
         5d:39:af:d7:c8:45:ad:3a:a2:53:d6:c5:ce:63:fd:cc:12:df:
         73:21:51:76:05:80:c3:84:0d:9b:f7:23:8d:fe:7d:d9:2e:5a:
         66:0b:19:f8:25:65:a3:24:b1:93:b5:67:4d:a9:be:26:59:c3:
         18:96:4d:07:c0:71:5a:61:fe:4f:c7:4e:57:8a:7d:0f:05:5a:
         5a:46:fa:fd:53:b6:8d:9d:83:aa:65:d9:15:80:ac:c8:6c:96:
         60:0b:9d:56:38:ad:35:ad:d2:b1:33:f4:bc:c3:e3:69:bb:9d:
         7a:10:86:03:3c:39:6e:ba:42:f3:fb:60:27:c5:f1:19:ed:6d:
         2d:b5:11:ff:66:ed:ac:a0:3c:8e:36:b2:94:90:aa:4b:a4:8f:
         33:92:44:39:d7:e4:31:ce:21:b8:3e:e4:e8:5f:9e:4e:7b:04:
         92:7a:44:e7:be:6c:9f:b0:5d:6f:4e:6d:14:48:34:c2:cb:d3:
         11:58:1a:96:cd:44:72:2b:96:d5:09:af:b5:32:b7:1f:dd:eb:
         f4:a0:bf:bb:66:d6:3c:fe:0c:da:78:f7:16:60:b5:b2:76:2d:
         5c:af:76:a4:72:b8:f8:f5:3f:b9:d2:e3:7c:0f:fa:5f:6b:72:
         68:d0:cc:cd
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZYuYapLEiBFbtELSkm+lXJmMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDY4NmQxODQwNDkzZWVlMzQ1ZjhjMDJhZDhhYTdmMGYwZjQx
YmE0NTAwHhcNMjUwNDEzMDkwMTE0WhcNMjUwNDE0MDkwMTE0WjAzMTEwLwYDVQQD
EyhhZmE0NzQ5NGY0YWMzNmVkNjkyOTdhMDlhM2I3YzdkODFmOTMxMTViMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA1RfAyY8A9zDeOcw66RoDMp/3zON/
RJs8+Ef8Xftfj5SHcJ4w+9aUYqSaaxRXf3lZtOGI1pD87Ub0WRw/dYRCj2jx8W5X
QHpBiQ3RjLaMd89v9+/kc4ScRModjJiAO/Me4sqXIUgyT8li4dpoajaVGwgeszfI
3YR/w/Wjc19IuDA8rmpYm5iYMmJ3wMx+vc32k2A+C/TBO0dC109Izviikw97EDj3
mQNR5vbD64DVdLINdaQl2SdVUdgjdMcJ8uDNXbYx5IS5mOdYEcog/luwSUsJK/MY
YEjz99jTNma5X2CUdcym3j/tsM2f6kWj/n/nsCDuRbj69SXKoIIFZT1DMwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFK+kdJT0rDbtaSl6CaO3x9gfkxFbMB8GA1UdIwQY
MBaAFGhtGEBJPu40X4wCrYqn8PD0G6RQMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvYUcwWVFFay03alJmakFLdGlxZnc4UFFicEZBLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wZC9lNDJlY2YtNzhmZi00YjU4LTg3NjAt
ODI2ZDA1Y2NmZTI1LzEvYUcwWVFFay03alJmakFLdGlxZnc4UFFicEZBLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8wZC9lNDJlY2YtNzhmZi00YjU4LTg3NjAtODI2ZDA1Y2NmZTI1
LzEvYUcwWVFFay03alJmakFLdGlxZnc4UFFicEZBLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEABoY4whQE
IDgKYvl/lJCUGs2YXTmv18hFrTqiU9bFzmP9zBLfcyFRdgWAw4QNm/cjjf592S5a
ZgsZ+CVloySxk7VnTam+JlnDGJZNB8BxWmH+T8dOV4p9DwVaWkb6/VO2jZ2DqmXZ
FYCsyGyWYAudVjitNa3SsTP0vMPjabudehCGAzw5brpC8/tgJ8XxGe1tLbUR/2bt
rKA8jjaylJCqS6SPM5JEOdfkMc4huD7k6F+eTnsEknpE575sn7Bdb05tFEg0wsvT
EVgals1EciuW1QmvtTK3H93r9KC/u2bWPP4M2nj3FmC1snYtXK92pHK4+PU/udLj
fA/6X2tyaNDMzQ==
-----END CERTIFICATE-----