Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/25/6a8e5e-39b6-47e3-bbb0-b29f10cc0328/1/AcOKBqObILjaQACSN9dqzdKOcaU.mft
File:                     AcOKBqObILjaQACSN9dqzdKOcaU.mft (raw, json)
Hash identifier:          HDtisIz8V1Tw6sEg3Z2i1Lhp32NOy78qn3wiPoCskiA=
Subject key identifier:   ED:D4:0F:78:5E:49:1B:D2:0D:25:7A:3E:D1:1D:8B:14:D5:A0:52:7F
Authority key identifier: 01:C3:8A:06:A3:9B:20:B8:DA:40:00:92:37:D7:6A:CD:D2:8E:71:A5
Certificate issuer:       /CN=01c38a06a39b20b8da40009237d76acdd28e71a5
Certificate serial:       01962F3D7FBEF58D4B9AB0B78D1B2E48BDFF
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/AcOKBqObILjaQACSN9dqzdKOcaU.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/25/6a8e5e-39b6-47e3-bbb0-b29f10cc0328/1/AcOKBqObILjaQACSN9dqzdKOcaU.mft
Manifest number:          150D
Signing time:             Sun 13 Apr 2025 13:01:21 +0000
Manifest this update:     Sun 13 Apr 2025 13:01:21 +0000
Manifest next update:     Mon 14 Apr 2025 13:01:21 +0000
Files and hashes:         1: AcOKBqObILjaQACSN9dqzdKOcaU.crl (hash: nQZv5s+uyrgxRiVpfx2uEepwf45xAdjJZOrvDxVXAOk=)
                          2: v-JLVzUeQuUcO68Dar1EDxEbp-Q.roa (hash: NLn149L4DdRbaEbvCsRst5D4kAzWBmCeuY2VmKeK9O4=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2f:3d:7f:be:f5:8d:4b:9a:b0:b7:8d:1b:2e:48:bd:ff
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=01c38a06a39b20b8da40009237d76acdd28e71a5
        Validity
            Not Before: Apr 13 13:01:21 2025 GMT
            Not After : Apr 14 13:01:21 2025 GMT
        Subject: CN=edd40f785e491bd20d257a3ed11d8b14d5a0527f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:df:b1:04:d4:02:91:c5:6e:88:78:f0:20:2b:7b:
                    f9:ba:c1:14:e4:e7:98:c7:c5:37:e8:ea:cb:02:94:
                    1c:03:69:aa:f8:de:1e:8b:6c:0e:d8:77:13:e0:0e:
                    6e:80:e1:eb:2e:06:f8:6d:9b:d8:ee:26:12:05:cf:
                    9e:26:bf:0d:c6:5a:b6:28:7f:1a:97:14:06:27:a8:
                    d5:fa:72:13:51:4f:a4:98:0d:a0:4d:a3:d0:4f:48:
                    fa:2c:44:22:e9:54:e1:b5:20:7b:64:1b:aa:df:c3:
                    5d:82:be:ba:47:a2:a3:b1:73:f5:f4:2b:ba:a4:09:
                    a5:15:69:06:dc:61:bb:d0:40:16:92:e4:39:ae:72:
                    b4:fa:cb:ab:6a:ad:49:42:74:36:87:fb:e0:a4:54:
                    d7:e5:e3:f6:86:ca:ec:ee:e4:99:f4:e4:19:cd:bc:
                    9f:df:be:98:54:37:29:9f:f5:b5:6c:ea:01:5d:90:
                    36:41:80:57:b2:08:fb:00:75:7e:32:6e:35:64:8e:
                    02:61:d7:14:ba:e6:ec:b3:c3:69:b4:79:a0:f2:1d:
                    3e:65:3f:89:69:61:78:62:02:73:8f:8f:3a:72:59:
                    3a:79:64:c1:35:6e:ef:a8:62:29:89:6c:73:7b:22:
                    37:44:c8:8b:33:44:12:9e:3a:48:3f:1e:57:ca:c3:
                    86:37
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                ED:D4:0F:78:5E:49:1B:D2:0D:25:7A:3E:D1:1D:8B:14:D5:A0:52:7F
            X509v3 Authority Key Identifier:
                keyid:01:C3:8A:06:A3:9B:20:B8:DA:40:00:92:37:D7:6A:CD:D2:8E:71:A5

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/AcOKBqObILjaQACSN9dqzdKOcaU.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/25/6a8e5e-39b6-47e3-bbb0-b29f10cc0328/1/AcOKBqObILjaQACSN9dqzdKOcaU.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/25/6a8e5e-39b6-47e3-bbb0-b29f10cc0328/1/AcOKBqObILjaQACSN9dqzdKOcaU.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         4f:9e:f8:1c:4d:60:58:2f:03:51:28:5e:16:f0:ca:67:85:92:
         cd:53:bd:79:15:74:4d:a7:1a:04:24:2e:c0:82:51:21:79:d1:
         1f:b9:d1:82:54:9b:f1:f9:eb:74:72:33:53:68:b7:ae:f4:8f:
         90:a1:74:ee:2d:b5:b5:7f:7c:8d:a1:f2:f7:95:26:0e:7e:c3:
         05:92:3f:2c:75:b6:aa:35:4e:46:a2:eb:a7:58:63:f9:59:b3:
         f1:33:93:05:88:5e:61:e4:0f:54:22:c2:10:f3:66:ff:33:55:
         c2:25:f7:d4:d2:17:d4:fb:7f:0f:b8:2c:af:7e:5e:62:3e:ea:
         16:d6:cf:4d:33:8f:ca:39:7b:cc:ea:fa:ca:85:02:44:16:b8:
         59:30:4e:2d:82:0e:0f:fa:55:50:ca:1a:b3:f8:6e:0a:1c:2c:
         2d:24:45:9a:c0:00:80:25:dc:06:06:c2:b0:a6:34:63:85:e9:
         50:39:1c:b7:9d:a2:1b:80:a2:28:00:b9:b4:77:15:bb:5a:62:
         3e:e7:11:ef:6f:ef:fd:e7:76:54:92:45:d2:a4:52:dc:78:85:
         cf:a5:5a:f3:37:b9:fa:67:ba:6b:ac:60:f6:63:6e:c7:28:41:
         3c:a7:73:4d:b1:3a:03:62:f0:9c:13:c0:84:e6:19:f0:d2:e7:
         a1:10:50:98
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----