Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/27/4a5d71-e11d-4d32-b597-019ec9d9a758/1/aOlYF0Bglex8tceyhrETM0l7lFE.mft
File:                     aOlYF0Bglex8tceyhrETM0l7lFE.mft (raw, json)
Hash identifier:          s096NNf3S5VLiFGZoT7ZwsIXbxT/0fxuO9epJwafqOk=
Subject key identifier:   55:42:34:8E:02:7A:CD:A2:29:4C:AD:85:8C:1E:24:FF:FB:09:00:41
Authority key identifier: 68:E9:58:17:40:60:95:EC:7C:B5:C7:B2:86:B1:13:33:49:7B:94:51
Certificate issuer:       /CN=68e95817406095ec7cb5c7b286b11333497b9451
Certificate serial:       01962DF3E8A993618CFAD456715CC794FEED
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/aOlYF0Bglex8tceyhrETM0l7lFE.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/27/4a5d71-e11d-4d32-b597-019ec9d9a758/1/aOlYF0Bglex8tceyhrETM0l7lFE.mft
Manifest number:          06F5
Signing time:             Sun 13 Apr 2025 07:01:21 +0000
Manifest this update:     Sun 13 Apr 2025 07:01:21 +0000
Manifest next update:     Mon 14 Apr 2025 07:01:21 +0000
Files and hashes:         1: ExEAGmrTaGZYkgcoaaGfFiacDZM.roa (hash: vfQhBpcBjSjG95UQaSsBC3edgr1xXnN4hhJBHCKa+Vc=)
                          2: aOlYF0Bglex8tceyhrETM0l7lFE.crl (hash: 9PtThyypOfKhHAzcUkPgpxJE8yMC43Pg/aSSOot0y30=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2d:f3:e8:a9:93:61:8c:fa:d4:56:71:5c:c7:94:fe:ed
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=68e95817406095ec7cb5c7b286b11333497b9451
        Validity
            Not Before: Apr 13 07:01:21 2025 GMT
            Not After : Apr 14 07:01:21 2025 GMT
        Subject: CN=5542348e027acda2294cad858c1e24fffb090041
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cd:12:91:53:96:29:48:5c:53:50:44:19:23:4e:
                    b6:b0:13:5f:d7:9d:55:ac:7f:96:c8:be:f8:a1:bb:
                    87:3e:cf:69:23:36:19:c5:f9:c1:db:b3:7a:29:8c:
                    f0:37:0a:4f:e3:77:e4:75:e1:82:53:36:35:31:55:
                    dd:7b:4d:da:76:f3:ba:aa:55:45:d2:77:0b:31:43:
                    b8:7b:b3:56:7a:ba:63:0c:91:cb:00:a8:df:4f:41:
                    99:35:b8:e6:45:e3:4b:2c:a2:59:43:20:19:68:e4:
                    db:c8:f3:97:1c:24:74:a4:97:de:c5:44:16:66:72:
                    4e:55:57:1c:c7:dc:e8:b8:bc:2e:12:b1:7d:33:cd:
                    b7:7f:99:4e:9a:a5:c9:09:f8:f6:08:8a:21:47:b7:
                    df:fd:3e:2f:d6:85:72:8e:f5:df:33:1d:bd:10:85:
                    ae:05:3b:a3:f2:16:fd:a6:40:22:3f:4e:b5:96:fd:
                    4f:b0:1a:b7:b6:34:4b:35:e0:cf:4f:db:29:d3:ff:
                    76:a5:7a:ac:4b:80:ba:89:fa:8a:72:24:a1:be:56:
                    18:c0:a3:29:de:9a:cb:af:86:de:d9:9d:e5:51:b4:
                    4b:c7:a5:82:72:2e:85:b6:31:11:c9:ac:0a:e5:a8:
                    e1:d7:2c:90:fb:d9:ff:99:7a:47:34:98:23:61:ea:
                    9f:01
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                55:42:34:8E:02:7A:CD:A2:29:4C:AD:85:8C:1E:24:FF:FB:09:00:41
            X509v3 Authority Key Identifier:
                keyid:68:E9:58:17:40:60:95:EC:7C:B5:C7:B2:86:B1:13:33:49:7B:94:51

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/aOlYF0Bglex8tceyhrETM0l7lFE.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/27/4a5d71-e11d-4d32-b597-019ec9d9a758/1/aOlYF0Bglex8tceyhrETM0l7lFE.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/27/4a5d71-e11d-4d32-b597-019ec9d9a758/1/aOlYF0Bglex8tceyhrETM0l7lFE.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         9f:91:73:a4:62:70:6f:c9:16:88:4b:73:49:04:27:24:98:d0:
         1c:4a:de:01:9d:09:88:f1:23:0b:00:93:d2:3a:2f:50:35:32:
         b1:30:37:c3:2f:22:e5:c8:0b:c2:bf:91:5d:1d:56:b7:51:42:
         22:56:72:2c:6a:22:41:96:32:f0:d2:8b:07:d3:e5:88:1e:80:
         96:10:4b:5e:c3:d2:5f:4e:02:3d:78:b7:2d:d9:22:40:c0:bf:
         4e:19:16:4a:92:56:02:2d:14:39:0d:f2:ef:a8:91:61:f1:66:
         41:03:dc:24:db:08:01:4a:9c:d7:65:3e:71:e2:42:3e:e0:1e:
         d5:f7:00:d8:9c:55:a8:37:c9:b3:9c:a2:71:5f:a0:a3:ca:0b:
         ec:29:a3:09:e1:06:c9:15:7a:60:8d:a6:c3:92:83:79:00:29:
         f5:b5:a1:e2:5d:90:7a:45:d2:1e:06:b1:f8:17:da:ef:2f:1c:
         61:25:44:08:89:44:46:81:01:d2:e4:99:c5:de:b4:74:f2:d4:
         90:83:c2:a6:4f:2a:cb:55:bb:f6:5b:0a:ce:f2:1a:f3:db:10:
         a5:e6:1b:9b:1c:39:ce:14:ff:b8:3f:13:cd:3b:95:66:6f:b9:
         5f:1c:2f:58:63:93:68:54:72:a2:d0:b9:98:98:8d:c3:cf:75:
         4f:7e:a3:8b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----