Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/26/e2991a-db0f-4c3f-bc08-1b3e3595101b/1/AlqBIsJH0--70vaoFKX2h0VBiN8.mft
File:                     AlqBIsJH0--70vaoFKX2h0VBiN8.mft (raw, json)
Hash identifier:          mncdahq5sU+9/haX4VzYtBr1rP0khPfht3ReoBe5UJM=
Subject key identifier:   33:2F:4C:62:9A:35:39:C2:C4:B3:68:53:5C:73:06:AE:2F:6E:15:17
Authority key identifier: 02:5A:81:22:C2:47:D3:EF:BB:D2:F6:A8:14:A5:F6:87:45:41:88:DF
Certificate issuer:       /CN=025a8122c247d3efbbd2f6a814a5f687454188df
Certificate serial:       01962DF4488DFA74D717091686E9822887F2
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/AlqBIsJH0--70vaoFKX2h0VBiN8.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/26/e2991a-db0f-4c3f-bc08-1b3e3595101b/1/AlqBIsJH0--70vaoFKX2h0VBiN8.mft
Manifest number:          14EA
Signing time:             Sun 13 Apr 2025 07:01:46 +0000
Manifest this update:     Sun 13 Apr 2025 07:01:46 +0000
Manifest next update:     Mon 14 Apr 2025 07:01:46 +0000
Files and hashes:         1: 8b2Sz4cL93cXk3-Io7s2vbwBznU.roa (hash: OdYsHSgXYM8f8BmJb0rgKjd3SquS1uJD7loVl2Lg/xI=)
                          2: AlqBIsJH0--70vaoFKX2h0VBiN8.crl (hash: Tad8291zDZIEyIr1WfMUUX+dHsKKMYafOmkXbM533G0=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2d:f4:48:8d:fa:74:d7:17:09:16:86:e9:82:28:87:f2
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=025a8122c247d3efbbd2f6a814a5f687454188df
        Validity
            Not Before: Apr 13 07:01:46 2025 GMT
            Not After : Apr 14 07:01:46 2025 GMT
        Subject: CN=332f4c629a3539c2c4b368535c7306ae2f6e1517
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b7:a5:8b:6d:2c:3a:9e:f3:05:da:c4:fe:dd:f9:
                    85:22:f4:eb:40:7d:45:14:6f:2c:f1:57:f7:2f:bf:
                    11:d0:78:a8:63:24:cd:83:5f:c9:af:d5:37:bc:58:
                    ed:d6:3a:8c:bd:ba:c8:1a:30:4e:e0:a3:fa:0b:fe:
                    77:ba:e5:98:22:9a:e7:a9:3a:cf:8a:a7:4f:5f:07:
                    e5:bd:36:a4:c6:2c:a1:52:ba:18:7f:9c:8b:07:27:
                    ba:2c:5b:be:4a:59:a8:3d:e1:ff:cd:19:f5:12:30:
                    c9:a0:72:99:c1:fb:6a:6b:84:97:27:f2:79:fe:ca:
                    1d:1b:cf:57:98:5e:f2:d3:fc:ab:70:61:23:95:41:
                    91:fc:43:fc:46:2a:2e:b8:12:49:d2:6a:98:46:04:
                    78:88:a2:a2:6c:ff:95:fb:9b:e8:58:24:a7:c4:07:
                    cd:13:e5:0c:a8:09:69:7d:cb:fe:2e:29:7d:46:c0:
                    8c:b8:3b:13:c6:e7:65:a5:de:cb:00:c3:4e:be:40:
                    5b:7b:c3:06:1f:c9:0d:1c:dd:25:67:b2:44:b0:43:
                    9d:ed:56:e3:09:95:6c:e7:e3:0e:64:51:33:f2:c8:
                    e4:4c:0e:6e:26:66:cc:b5:68:cf:c1:95:23:11:45:
                    50:a9:53:99:a8:bb:2a:08:d9:ee:b3:c2:76:d9:5a:
                    f1:59
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                33:2F:4C:62:9A:35:39:C2:C4:B3:68:53:5C:73:06:AE:2F:6E:15:17
            X509v3 Authority Key Identifier:
                keyid:02:5A:81:22:C2:47:D3:EF:BB:D2:F6:A8:14:A5:F6:87:45:41:88:DF

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/AlqBIsJH0--70vaoFKX2h0VBiN8.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/26/e2991a-db0f-4c3f-bc08-1b3e3595101b/1/AlqBIsJH0--70vaoFKX2h0VBiN8.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/26/e2991a-db0f-4c3f-bc08-1b3e3595101b/1/AlqBIsJH0--70vaoFKX2h0VBiN8.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         46:ed:9b:5a:cf:a7:52:3e:a4:b0:d6:6c:32:2b:99:61:21:e1:
         d9:1d:31:f9:bd:53:2c:eb:9b:0c:02:61:ff:0a:d5:1c:d2:c1:
         6a:da:11:40:db:66:0d:33:c8:2d:f1:21:5e:9c:39:3f:72:a6:
         c3:12:8f:fb:e7:de:5e:7a:d5:6c:a1:98:5a:2b:f2:1c:f0:e4:
         93:c6:9e:a1:03:c8:f4:b3:e7:5c:8e:e1:8a:1a:a0:db:07:53:
         6d:99:4e:89:b0:8e:44:d3:77:a1:53:86:89:47:3d:15:34:d6:
         be:de:3a:17:2d:ff:65:a9:24:51:a6:f1:2d:e4:29:79:67:59:
         08:0e:f9:d0:25:99:b7:e4:65:51:95:c1:2c:66:de:4e:58:b3:
         34:3c:88:8e:c0:2d:6c:6e:2c:1c:d0:be:44:f7:cf:23:a0:76:
         e4:6e:78:5b:f7:57:5b:98:b5:9c:5a:68:26:b0:c5:af:bb:d6:
         c9:83:65:b1:72:b3:f9:73:7c:ce:36:99:1f:7e:8e:97:6a:a6:
         eb:84:1a:a9:e8:c7:34:b5:f3:3b:5c:e4:57:e8:f2:c8:17:f4:
         7d:04:b4:5d:b6:24:46:ac:23:6c:92:e9:f1:57:18:96:4c:13:
         04:c5:d7:5e:34:b6:3f:31:51:09:2c:02:f2:27:2c:31:59:c8:
         f4:ac:9f:b8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----