Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0e/79ac03-dc6a-40c0-82cb-8f10d5b96fd4/1/AYJcep4nAba6NnDQjSoQqeoV0-M.mft
File:                     AYJcep4nAba6NnDQjSoQqeoV0-M.mft (raw, json)
Hash identifier:          iboCFO6wyoMmTNqnAAvy82jDwJCjnajVWPKKEma7+CU=
Subject key identifier:   BF:22:40:9D:C1:30:D0:4B:52:8A:18:39:F8:48:5E:5A:DC:29:37:6E
Authority key identifier: 01:82:5C:7A:9E:27:01:B6:BA:36:70:D0:8D:2A:10:A9:EA:15:D3:E3
Certificate issuer:       /CN=01825c7a9e2701b6ba3670d08d2a10a9ea15d3e3
Certificate serial:       01962F074542208540B142C56B7A2CAE71F4
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/AYJcep4nAba6NnDQjSoQqeoV0-M.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/0e/79ac03-dc6a-40c0-82cb-8f10d5b96fd4/1/AYJcep4nAba6NnDQjSoQqeoV0-M.mft
Manifest number:          0631
Signing time:             Sun 13 Apr 2025 12:02:07 +0000
Manifest this update:     Sun 13 Apr 2025 12:02:07 +0000
Manifest next update:     Mon 14 Apr 2025 12:02:07 +0000
Files and hashes:         1: AYJcep4nAba6NnDQjSoQqeoV0-M.crl (hash: WXfQWDsUfdZWf2BX7E0AiH48InX7j8TF/9IVVnCqtTA=)
                          2: BFnGMJbw_FyqQDvzEvSvzgyfC8c.roa (hash: Z0qcTwZhrvNxXQZpuNqxicC23C3Fi6C39Y2LCY//Cvo=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2f:07:45:42:20:85:40:b1:42:c5:6b:7a:2c:ae:71:f4
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=01825c7a9e2701b6ba3670d08d2a10a9ea15d3e3
        Validity
            Not Before: Apr 13 12:02:07 2025 GMT
            Not After : Apr 14 12:02:07 2025 GMT
        Subject: CN=bf22409dc130d04b528a1839f8485e5adc29376e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:dc:55:f9:93:7d:13:f6:58:0c:b1:e0:c1:f9:ff:
                    5c:52:65:10:70:ff:41:f8:dd:f7:6c:89:83:89:5e:
                    c8:aa:f5:d7:f1:d2:98:d7:d3:a9:fc:b7:87:00:1c:
                    28:91:3e:da:c6:1c:15:9e:30:76:4b:13:73:8b:cf:
                    ac:da:9e:18:e3:a0:09:41:a7:dd:63:b5:90:4a:df:
                    24:1c:ce:98:47:d2:b1:5b:79:db:b1:87:e5:83:52:
                    71:48:b1:62:67:68:0d:c8:fc:56:9d:bd:ac:32:b4:
                    e4:55:64:c9:e6:e1:3b:c0:e6:10:0c:bd:0a:e9:a4:
                    38:01:e0:14:fd:6e:52:d6:d5:ee:af:ed:41:37:bb:
                    1d:16:5b:50:9f:4b:3b:57:4b:07:0e:8d:6f:5b:ef:
                    36:da:b2:c9:1e:c2:94:17:ec:02:ce:3c:8e:1e:56:
                    e8:7a:8d:9e:37:23:e9:dc:5f:4b:1e:35:00:13:f3:
                    7a:7d:fe:87:a1:37:95:40:23:d0:b9:57:b3:a1:55:
                    83:1c:ae:0b:f9:b5:8e:4e:81:d5:2a:f2:25:ee:60:
                    95:2f:9a:a8:3f:4f:9b:2d:72:18:01:e9:08:61:60:
                    53:99:da:26:c6:98:61:03:f6:8c:9c:a5:ac:56:a3:
                    a6:16:26:4e:f9:f0:fe:11:e8:cb:b3:a7:41:d7:3e:
                    d7:8b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BF:22:40:9D:C1:30:D0:4B:52:8A:18:39:F8:48:5E:5A:DC:29:37:6E
            X509v3 Authority Key Identifier:
                keyid:01:82:5C:7A:9E:27:01:B6:BA:36:70:D0:8D:2A:10:A9:EA:15:D3:E3

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/AYJcep4nAba6NnDQjSoQqeoV0-M.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0e/79ac03-dc6a-40c0-82cb-8f10d5b96fd4/1/AYJcep4nAba6NnDQjSoQqeoV0-M.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/0e/79ac03-dc6a-40c0-82cb-8f10d5b96fd4/1/AYJcep4nAba6NnDQjSoQqeoV0-M.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         49:21:09:e7:7f:be:6f:81:d8:c0:5f:9c:2e:61:37:66:0e:3a:
         6e:b3:25:0d:91:b4:e0:92:8c:a0:59:3b:12:a7:91:cc:af:bf:
         bb:4a:fc:59:cc:99:e3:59:3e:71:d6:bb:39:73:a0:48:16:2a:
         a0:91:02:36:d9:99:66:2e:45:66:e5:81:7d:9b:2c:0e:1a:e9:
         76:30:a8:cc:c9:57:c3:48:3d:18:4d:f6:d6:fb:60:b1:ab:ec:
         c5:37:7a:26:4e:7e:01:69:b1:14:59:e9:33:1c:76:82:04:27:
         fb:44:2a:b5:a1:78:97:41:1d:b2:57:47:31:b1:dd:67:a7:b4:
         16:ce:7e:cf:17:79:c2:ab:8e:8f:d3:1e:8e:cc:51:0c:2a:7a:
         9e:0b:ea:70:f8:58:3e:25:5e:ec:f9:60:da:36:56:fc:0c:37:
         ee:9f:d9:e6:22:06:10:e8:98:7c:50:ed:d5:43:b4:2c:ac:d6:
         30:9d:52:66:bc:b0:96:d6:b6:6c:de:3c:29:cf:52:10:f9:fd:
         85:d0:51:7c:34:39:0b:63:da:f4:86:30:b0:dd:30:33:ce:b4:
         e7:f4:98:c5:21:d7:10:40:94:a2:32:7c:6f:e8:50:a0:d4:3e:
         a6:20:8c:78:21:09:01:77:65:7e:4a:f1:3f:d2:1e:c3:46:3f:
         2d:33:7f:44
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----