Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1a/254ea2-974f-44b1-b239-5a377c8791f5/1/A1NuGmjpRLI0eQi4vf53QNjoqkM.mft
File:                     A1NuGmjpRLI0eQi4vf53QNjoqkM.mft (raw, json)
Hash identifier:          u+HNvh+KC0BCg3jWUPnWsQHuvvSZtALHJPwMc4udMBg=
Subject key identifier:   6C:A3:A0:FC:0C:77:1B:29:FA:44:9A:E4:23:FE:2B:2F:51:FF:81:AD
Authority key identifier: 03:53:6E:1A:68:E9:44:B2:34:79:08:B8:BD:FE:77:40:D8:E8:AA:43
Certificate issuer:       /CN=03536e1a68e944b2347908b8bdfe7740d8e8aa43
Certificate serial:       01962ECF6D0656B11FEB3ABC824A6D8967C3
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/A1NuGmjpRLI0eQi4vf53QNjoqkM.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/1a/254ea2-974f-44b1-b239-5a377c8791f5/1/A1NuGmjpRLI0eQi4vf53QNjoqkM.mft
Manifest number:          14EA
Signing time:             Sun 13 Apr 2025 11:01:07 +0000
Manifest this update:     Sun 13 Apr 2025 11:01:07 +0000
Manifest next update:     Mon 14 Apr 2025 11:01:07 +0000
Files and hashes:         1: 6IdqF_R3Y4Me0xt-XO3WDh6lBT0.roa (hash: nJO5IBDQ2MODS/Zojmv3q8UXuHQA1f7Z7pPIMcFUXg8=)
                          2: A1NuGmjpRLI0eQi4vf53QNjoqkM.crl (hash: CxBAUR5JkMPdH46GytRqpz9WiL9oIFxyHAlWJ6X+iOU=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2e:cf:6d:06:56:b1:1f:eb:3a:bc:82:4a:6d:89:67:c3
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=03536e1a68e944b2347908b8bdfe7740d8e8aa43
        Validity
            Not Before: Apr 13 11:01:07 2025 GMT
            Not After : Apr 14 11:01:07 2025 GMT
        Subject: CN=6ca3a0fc0c771b29fa449ae423fe2b2f51ff81ad
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a4:0b:e9:75:71:19:47:99:a9:b4:dc:7b:e8:d5:
                    49:0b:c2:41:70:ad:04:c9:6b:0f:b1:5a:5e:49:3f:
                    40:a9:d0:70:d2:47:1e:6d:30:87:e2:27:df:5a:20:
                    23:54:23:83:3a:65:f5:ed:1e:54:f4:dc:07:a2:e9:
                    14:03:30:fb:65:8c:b9:2f:83:f7:2d:06:07:cf:98:
                    77:26:f6:48:d4:9a:93:57:b4:4c:b4:c0:e0:20:ba:
                    70:da:41:e4:83:61:3a:31:c2:d0:05:f1:e1:3f:ba:
                    c2:de:4f:02:33:32:2d:d9:f1:33:7a:74:6a:93:15:
                    ea:5f:0a:25:33:c8:a8:9b:85:c4:56:d4:27:8a:0c:
                    6d:ea:c4:43:4a:da:07:4b:01:09:b5:44:31:39:f8:
                    77:33:57:68:16:f9:1b:c1:60:b0:1b:f1:6d:00:a6:
                    33:37:02:8e:ea:59:f8:5d:27:06:fe:04:4d:3e:bc:
                    db:ee:a1:14:5b:b2:1c:61:26:3a:78:1a:66:d7:ea:
                    e7:33:a5:a9:50:a4:15:3a:36:fe:eb:89:3d:41:a6:
                    e4:fe:33:fb:61:57:63:82:3c:00:94:e1:65:60:f0:
                    ea:ef:46:dc:74:82:89:25:a2:75:da:a4:fa:26:33:
                    29:ab:79:9a:77:cb:37:e0:4c:60:30:c6:e4:4f:da:
                    73:41
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6C:A3:A0:FC:0C:77:1B:29:FA:44:9A:E4:23:FE:2B:2F:51:FF:81:AD
            X509v3 Authority Key Identifier:
                keyid:03:53:6E:1A:68:E9:44:B2:34:79:08:B8:BD:FE:77:40:D8:E8:AA:43

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/A1NuGmjpRLI0eQi4vf53QNjoqkM.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1a/254ea2-974f-44b1-b239-5a377c8791f5/1/A1NuGmjpRLI0eQi4vf53QNjoqkM.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/1a/254ea2-974f-44b1-b239-5a377c8791f5/1/A1NuGmjpRLI0eQi4vf53QNjoqkM.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         dd:74:b5:24:89:e5:c1:55:95:50:3c:50:cc:06:25:36:a5:74:
         b6:6f:a4:2c:8d:25:cf:6d:21:fa:8b:61:23:50:d3:e0:7e:89:
         39:e2:f2:44:3f:e8:6d:12:36:aa:16:c9:96:56:21:89:71:e1:
         34:08:c9:8d:20:d2:4d:54:a9:8f:7d:e2:cc:5a:d6:b7:08:1f:
         61:0c:2e:0a:c4:59:50:24:9a:6a:a6:42:b6:1c:9d:02:9d:1f:
         f7:aa:0d:a5:24:b4:7c:b4:d8:7d:69:15:80:c9:ab:32:82:b4:
         8a:13:92:6a:a8:ee:32:37:de:06:f6:0d:a6:15:62:86:96:ba:
         aa:11:a2:ea:5b:74:62:56:fe:99:1c:52:20:7e:32:76:54:b5:
         94:3a:8f:0b:35:fd:2e:d4:b2:90:2e:1e:f2:f9:06:e8:ce:0e:
         55:8d:e9:62:4e:24:ca:c6:aa:f5:a7:ac:0f:96:bf:47:c7:b0:
         69:e3:38:14:d8:8a:36:e2:e6:54:70:7e:d5:ea:51:56:33:ab:
         e3:cc:d9:fb:f9:e8:4e:4d:e3:d2:4d:4e:95:54:fb:cb:d1:a5:
         58:0d:ef:0d:e8:3d:e8:da:a4:91:56:16:ac:0c:9a:70:9a:3c:
         53:86:9a:44:90:2b:40:65:3e:b5:1a:0e:54:fa:4b:d7:70:11:
         55:86:bc:9a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----