Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/13/6de7a0-4073-4272-bf44-07a1d65548ba/1/dK68FUpWyDAly9hkGprDFctVHAY.mft
File:                     dK68FUpWyDAly9hkGprDFctVHAY.mft (raw, json)
Hash identifier:          WbpuyCgUXQnHbFxinmDK9pINQspA/yvHpaTy9Clc46Q=
Subject key identifier:   8A:62:60:C5:51:29:68:1F:04:FA:2F:99:FA:96:9A:D0:E9:6C:BA:BA
Authority key identifier: 74:AE:BC:15:4A:56:C8:30:25:CB:D8:64:1A:9A:C3:15:CB:55:1C:06
Certificate issuer:       /CN=74aebc154a56c83025cbd8641a9ac315cb551c06
Certificate serial:       01962F74793F16F45AFEEAE0DE73CA14AC9E
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/dK68FUpWyDAly9hkGprDFctVHAY.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/13/6de7a0-4073-4272-bf44-07a1d65548ba/1/dK68FUpWyDAly9hkGprDFctVHAY.mft
Manifest number:          14F1
Signing time:             Sun 13 Apr 2025 14:01:24 +0000
Manifest this update:     Sun 13 Apr 2025 14:01:24 +0000
Manifest next update:     Mon 14 Apr 2025 14:01:24 +0000
Files and hashes:         1: QSiu2o8yvX-7lTIYlrRdn3A1iGo.roa (hash: 7IpNvDtHzCXBqYppLIWhOXhyXloL9H2f5Plfi2MJpdo=)
                          2: R0_MeNcCGsgFbXPPMSbNiNB6onw.roa (hash: jCCdHzd1f1vyFj3zrZb6H/YnXBVmEiivGeOlhoHJWc0=)
                          3: dK68FUpWyDAly9hkGprDFctVHAY.crl (hash: yRFbT99t1YD/7HlfO4p8GoWSepPvWsoLPlQUmVxL3Bw=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2f:74:79:3f:16:f4:5a:fe:ea:e0:de:73:ca:14:ac:9e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=74aebc154a56c83025cbd8641a9ac315cb551c06
        Validity
            Not Before: Apr 13 14:01:24 2025 GMT
            Not After : Apr 14 14:01:24 2025 GMT
        Subject: CN=8a6260c55129681f04fa2f99fa969ad0e96cbaba
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:aa:be:3e:2d:0f:a2:7c:8c:10:9c:1c:7d:74:39:
                    2b:7d:b7:87:9d:07:2b:1d:53:75:47:1f:ab:d4:21:
                    cb:ff:17:c3:a2:93:15:9c:5e:29:b6:c9:a3:65:57:
                    9e:91:76:b6:29:4a:4b:ed:a0:99:b5:86:e0:e6:3f:
                    8c:d3:c4:e9:3c:ab:8b:40:41:d4:22:a1:a3:5e:76:
                    5d:5d:16:d7:b6:1e:f5:c0:52:1f:75:e6:e0:fd:5f:
                    61:2a:05:07:cb:9d:fb:b8:56:00:cd:72:85:01:f4:
                    7e:9f:97:94:43:38:e4:68:31:d5:0e:07:fd:03:73:
                    34:5f:02:ab:1e:1b:4a:70:42:1e:ab:45:87:ec:b6:
                    9e:9f:3c:41:6b:e5:1c:56:b8:32:e2:3e:ee:0a:fd:
                    38:11:ac:86:e1:7c:e1:9b:c9:1e:63:52:e8:17:50:
                    91:4d:56:90:4d:0c:de:46:02:da:14:76:8b:47:39:
                    28:68:73:e2:07:61:31:3e:4d:f3:27:64:54:58:fe:
                    a8:29:c3:00:16:b0:1e:f7:83:e0:d4:24:77:6f:7b:
                    a7:4f:47:40:db:72:74:0f:d5:d2:ca:76:fc:3e:4f:
                    a2:dc:08:6b:d3:fa:54:79:b0:63:2a:9b:fa:19:fc:
                    ef:66:5f:cb:c7:f8:2e:b5:7b:84:4a:70:47:b4:55:
                    d3:37
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8A:62:60:C5:51:29:68:1F:04:FA:2F:99:FA:96:9A:D0:E9:6C:BA:BA
            X509v3 Authority Key Identifier:
                keyid:74:AE:BC:15:4A:56:C8:30:25:CB:D8:64:1A:9A:C3:15:CB:55:1C:06

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/dK68FUpWyDAly9hkGprDFctVHAY.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/13/6de7a0-4073-4272-bf44-07a1d65548ba/1/dK68FUpWyDAly9hkGprDFctVHAY.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/13/6de7a0-4073-4272-bf44-07a1d65548ba/1/dK68FUpWyDAly9hkGprDFctVHAY.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         a1:dc:f1:dc:d6:7e:9a:22:ac:dd:dd:42:0e:5a:e5:d0:18:9b:
         69:c7:a4:16:72:e8:8e:f3:05:57:1d:78:60:d8:59:bc:e5:ea:
         4b:c0:6e:4f:c5:55:8d:1e:7a:15:49:d4:7e:fc:bc:3c:75:fe:
         20:f5:48:11:3b:6a:5e:e7:49:ea:24:b6:53:c0:68:d5:e3:55:
         50:f2:5f:2f:30:3d:dd:b3:21:a4:a5:44:87:bb:72:c8:f7:98:
         2b:61:f6:14:a7:98:c3:4c:8a:7e:74:9d:bc:d5:ce:c3:d0:87:
         81:29:75:0c:45:02:7d:64:85:de:35:6a:01:b7:12:56:67:ab:
         d5:56:cd:34:d3:e3:cd:54:49:0f:66:c8:45:fb:fe:9a:f9:e5:
         ac:71:b5:b2:8e:92:7a:4a:07:cf:26:4c:ad:3c:76:62:95:ea:
         54:5c:f6:ce:28:43:e3:0f:f8:23:e0:2e:7d:6c:77:ad:04:56:
         34:89:8e:75:ff:95:e6:b1:7c:07:33:4e:dc:f6:47:a9:cb:60:
         f0:81:b1:10:2c:b8:0d:35:9b:95:5f:25:41:2d:5b:36:da:e1:
         29:e4:e4:64:28:8c:db:a7:0e:36:c7:05:2d:8f:59:02:cd:60:
         1b:b8:00:90:44:fd:9b:f7:47:30:aa:95:44:63:2f:db:82:dd:
         c3:98:22:8a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----