Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/13/a9a479-9e2f-4cb0-8ded-7781681077f7/1/ApHU3hMNpqrOIu2ZZQvhgkl-C88.mft
File:                     ApHU3hMNpqrOIu2ZZQvhgkl-C88.mft (raw, json)
Hash identifier:          DsKEk/kMJI5urBXOmOO6/gAFjaZucsdoygmyrtmOMOE=
Subject key identifier:   6C:54:72:94:A4:60:75:F1:D8:DE:D5:ED:34:EE:0A:FA:24:C0:E0:D1
Authority key identifier: 02:91:D4:DE:13:0D:A6:AA:CE:22:ED:99:65:0B:E1:82:49:7E:0B:CF
Certificate issuer:       /CN=0291d4de130da6aace22ed99650be182497e0bcf
Certificate serial:       01962E61726945A233EDCA911C530EE4F847
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/ApHU3hMNpqrOIu2ZZQvhgkl-C88.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/13/a9a479-9e2f-4cb0-8ded-7781681077f7/1/ApHU3hMNpqrOIu2ZZQvhgkl-C88.mft
Manifest number:          14E9
Signing time:             Sun 13 Apr 2025 09:01:00 +0000
Manifest this update:     Sun 13 Apr 2025 09:01:00 +0000
Manifest next update:     Mon 14 Apr 2025 09:01:00 +0000
Files and hashes:         1: ApHU3hMNpqrOIu2ZZQvhgkl-C88.crl (hash: g1wbUFKrF47UYsCDTI4VLR8hStF7Yn2QGR4ZNYNOqyU=)
                          2: Bbv2QAFPf4Szau3NTd0aayAiypc.roa (hash: cRocTgGmyLRnpI3qcdUdz3Vd6OE/CS3oghy6+UyVfVc=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2e:61:72:69:45:a2:33:ed:ca:91:1c:53:0e:e4:f8:47
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0291d4de130da6aace22ed99650be182497e0bcf
        Validity
            Not Before: Apr 13 09:01:00 2025 GMT
            Not After : Apr 14 09:01:00 2025 GMT
        Subject: CN=6c547294a46075f1d8ded5ed34ee0afa24c0e0d1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a3:a2:35:15:fb:c4:03:92:9e:6d:97:cb:65:2c:
                    3d:96:02:e8:34:c2:e0:b8:bb:db:78:2c:9a:2a:37:
                    9b:68:22:5c:81:05:b9:7b:b6:b8:c8:6d:62:a1:a0:
                    6c:4d:28:6f:a0:f3:1b:5b:0a:f3:46:f3:a1:69:17:
                    75:20:13:04:df:c2:49:65:0f:ac:a6:f5:dc:a5:8f:
                    6a:1e:6c:b5:cb:b5:b9:62:08:1d:0b:3d:2d:ce:0b:
                    9a:ab:22:80:82:79:d3:7f:da:a3:cb:55:60:32:37:
                    64:04:3d:06:d6:6e:ac:52:d6:22:38:19:19:f3:bc:
                    79:1a:47:43:ee:7d:a4:7f:8f:4a:a7:93:a7:17:3f:
                    53:6d:70:7a:1a:c3:56:f2:3e:7e:23:cf:44:19:3c:
                    a9:02:5d:9c:15:3c:20:65:ed:68:87:9d:d4:61:ca:
                    94:c7:65:d5:59:0e:9e:96:91:05:e4:d1:6a:65:43:
                    0e:15:2f:ca:ac:09:64:87:ad:19:39:84:ca:d1:98:
                    8b:f0:9d:c3:bf:fa:c1:7e:63:16:e8:d0:b2:c0:49:
                    67:7e:01:a5:98:2c:97:6d:9a:78:36:c6:a4:75:dd:
                    67:95:29:d4:68:72:6f:53:7b:70:45:61:4f:d5:d1:
                    70:94:01:ef:f6:b5:93:ba:c7:b3:f7:41:36:2a:76:
                    b4:c9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6C:54:72:94:A4:60:75:F1:D8:DE:D5:ED:34:EE:0A:FA:24:C0:E0:D1
            X509v3 Authority Key Identifier:
                keyid:02:91:D4:DE:13:0D:A6:AA:CE:22:ED:99:65:0B:E1:82:49:7E:0B:CF

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ApHU3hMNpqrOIu2ZZQvhgkl-C88.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/13/a9a479-9e2f-4cb0-8ded-7781681077f7/1/ApHU3hMNpqrOIu2ZZQvhgkl-C88.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/13/a9a479-9e2f-4cb0-8ded-7781681077f7/1/ApHU3hMNpqrOIu2ZZQvhgkl-C88.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         5a:f8:e6:be:45:ab:c7:50:d7:4c:30:92:33:fb:f7:91:7f:45:
         c2:c2:07:e3:c4:4f:6f:d0:df:a6:44:6f:e4:fe:9e:e2:5c:46:
         1e:b0:dd:99:95:7c:63:54:0c:c9:0e:a0:e6:c5:b2:75:b2:12:
         df:78:1f:d7:c4:e5:97:56:b6:d4:3f:7b:37:f0:c1:f5:df:aa:
         73:96:eb:00:00:70:0e:29:84:d1:ec:2b:bd:2b:29:21:e8:db:
         27:38:2e:ad:1c:97:35:58:b6:69:cc:86:81:d8:13:08:18:4c:
         e6:89:a5:dd:5a:ea:33:3e:f5:57:10:87:d5:4a:54:2b:a8:94:
         86:70:77:8a:ee:ea:f7:a9:87:01:4c:75:a0:98:87:b0:6b:d7:
         dd:e0:9f:e0:6e:00:f6:6d:3e:c6:08:89:a6:87:a5:64:7d:de:
         47:23:c8:54:cd:d0:7d:4f:ab:dc:ad:86:72:63:f4:53:4e:7e:
         0c:5c:3d:e3:3f:f7:f9:46:49:cb:c0:e4:04:cf:31:ab:e9:9a:
         53:2d:58:c7:59:ad:41:84:fe:52:e5:40:87:18:97:76:8f:0b:
         be:fa:96:b2:92:b4:61:f4:5b:8a:9b:71:33:a9:e7:af:13:0a:
         45:4e:cf:bd:be:fb:35:29:dd:73:14:34:76:e4:98:2b:c5:36:
         5a:cc:51:1c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----