Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/31/652da9-afc4-4e20-82fc-b07d8416ae4a/1/AOT2p3Not87P5nIgtDZXax4Aiuw.mft
File:                     AOT2p3Not87P5nIgtDZXax4Aiuw.mft (raw, json)
Hash identifier:          XyazbHxQQpP1AuFDRTwA60YcUG7yBwOHjgZ7K5piNQE=
Subject key identifier:   AD:03:DD:37:53:46:0B:1F:76:B6:C9:10:A9:62:7E:C5:2A:9B:E3:44
Authority key identifier: 00:E4:F6:A7:73:68:B7:CE:CF:E6:72:20:B4:36:57:6B:1E:00:8A:EC
Certificate issuer:       /CN=00e4f6a77368b7cecfe67220b436576b1e008aec
Certificate serial:       01962E61CF4B3B1EC3780AFA4EEFA81D5A3E
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/AOT2p3Not87P5nIgtDZXax4Aiuw.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/31/652da9-afc4-4e20-82fc-b07d8416ae4a/1/AOT2p3Not87P5nIgtDZXax4Aiuw.mft
Manifest number:          15CB
Signing time:             Sun 13 Apr 2025 09:01:24 +0000
Manifest this update:     Sun 13 Apr 2025 09:01:24 +0000
Manifest next update:     Mon 14 Apr 2025 09:01:24 +0000
Files and hashes:         1: AOT2p3Not87P5nIgtDZXax4Aiuw.crl (hash: OqzkH4YBJrPQwmVYv2GE2m49UoaptR/rsirihxKOuZw=)
                          2: OrOiINgdZXqLRIKoqM95TkMk-gA.roa (hash: 7nW5z7M/V107qb1CuI/43ok0uSb9cbAiI51o6T16dZI=)
                          3: Svvhgo8X1drpMq_QokkBFa4W80w.roa (hash: eEM6GVW64ZPHTJr6mZ27nOJM8iax+cOishqtH69OQFE=)
                          4: USyW0O_6fcBP2bF0PoHV0RL6-Y8.roa (hash: rYcvR45gztdgTjrFLAUTrj+3T6dDm1wWFyZUivL/lkQ=)
                          5: UqESFWwPTzjbApEAfUlqEqe0RQE.roa (hash: s8ahaYu2umakIkOHunLEsrzEdAIsc7vrgdaPFAJX/B0=)
                          6: VkkvGMtenz96Ubj3KDzXyym1LzY.roa (hash: E/GDo41oktFV73vvuiDk3fNXk8LkaX2ghEwTcizgkaw=)
                          7: gJB500hvuGtG2Q6H0mYRT6R7iRA.roa (hash: AaQCd3dVcwGCJEZ+coN7h9lSehhP1/Fj/1SQ4NHKgcc=)
                          8: ixxzr0nDJC4AjQqKMOvhCRZIBS4.roa (hash: vRjMINEnN58WR68J2uy0IhPriH+22u9mcJzheawrNoA=)
                          9: kLCDMTUTRbJeJajr_KP2p663xqk.roa (hash: Cd9LBaXNUzFq1myVM5COYVtjKiIjTzwaQ7rIDyhpbzE=)
                          10: mS1g5aNaOIe32m5_FgfjTc6VbP4.roa (hash: DRqrjZnRKpeQWBmj82tLSsN99MhvkwnNbbxykbvBnVg=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2e:61:cf:4b:3b:1e:c3:78:0a:fa:4e:ef:a8:1d:5a:3e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=00e4f6a77368b7cecfe67220b436576b1e008aec
        Validity
            Not Before: Apr 13 09:01:24 2025 GMT
            Not After : Apr 14 09:01:24 2025 GMT
        Subject: CN=ad03dd3753460b1f76b6c910a9627ec52a9be344
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ad:be:3f:1b:6e:34:c7:5a:ce:2d:7f:c1:22:a5:
                    81:9f:33:e2:4e:fb:ed:15:b9:a3:fd:bc:99:4b:92:
                    c9:43:ef:8d:a0:db:e6:d3:38:ec:36:e5:62:84:ab:
                    b9:17:22:66:47:45:63:b2:b4:03:94:e8:bb:4d:a4:
                    ad:f7:29:ef:b2:34:e6:c4:f9:fa:cd:84:f6:6b:e5:
                    45:6e:93:1a:a1:70:51:4b:15:6e:a6:6b:ba:27:c3:
                    ca:45:6a:bb:93:91:c6:a6:5a:48:d9:e1:69:11:ed:
                    6c:16:cb:9a:44:d5:cc:15:4a:34:e5:79:23:df:72:
                    8c:83:7e:b2:ba:fc:0c:47:be:36:9e:3d:07:1b:e0:
                    ab:dd:c2:50:d5:fd:46:b2:89:a4:1e:ea:01:ae:1a:
                    93:af:bf:1d:2d:dd:87:3e:93:0a:83:1b:9b:89:99:
                    ee:a2:e6:fd:45:b2:29:12:ac:f7:a9:9e:fb:89:9b:
                    20:ec:14:89:72:13:8d:4b:11:24:96:25:46:db:9d:
                    8e:d2:eb:cc:e3:52:bb:79:7a:f3:ba:db:91:1e:03:
                    5b:7d:01:dc:7a:6d:b3:50:9e:58:b6:d6:6f:f8:7e:
                    48:7d:b7:d6:47:fc:e9:e3:33:32:6d:a4:10:e3:94:
                    1b:2c:c7:9b:3c:2d:54:f5:cf:36:59:93:c1:50:c6:
                    36:87
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AD:03:DD:37:53:46:0B:1F:76:B6:C9:10:A9:62:7E:C5:2A:9B:E3:44
            X509v3 Authority Key Identifier:
                keyid:00:E4:F6:A7:73:68:B7:CE:CF:E6:72:20:B4:36:57:6B:1E:00:8A:EC

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/AOT2p3Not87P5nIgtDZXax4Aiuw.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/31/652da9-afc4-4e20-82fc-b07d8416ae4a/1/AOT2p3Not87P5nIgtDZXax4Aiuw.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/31/652da9-afc4-4e20-82fc-b07d8416ae4a/1/AOT2p3Not87P5nIgtDZXax4Aiuw.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         69:0b:d9:6e:93:65:f8:b8:b9:47:5c:75:94:48:24:c1:d1:bd:
         26:30:53:ca:b1:9c:04:b4:75:a9:b0:fb:74:e7:39:a9:9b:b7:
         21:f3:ed:d0:18:98:6c:88:bc:27:e1:49:17:7a:43:92:d3:28:
         73:61:58:c7:31:91:fc:d7:3a:5d:54:66:98:e0:0c:fe:f5:22:
         70:3a:4b:51:ff:8b:cb:5e:b5:62:94:7d:60:c6:bc:ab:a2:37:
         ef:aa:90:78:03:59:8a:64:d4:73:42:3e:97:62:70:f3:68:23:
         95:4a:ee:63:95:03:71:b6:9e:31:4d:58:24:b7:4e:35:a6:58:
         57:84:0c:78:40:1b:fc:5e:5a:a3:1c:24:6f:81:55:1a:ac:05:
         09:a4:77:60:e9:1c:81:bc:40:e2:eb:e1:60:4d:25:24:9f:e2:
         2d:7c:f3:d3:9a:43:c2:db:26:c1:86:54:36:2a:e3:de:1a:ed:
         f5:2e:3c:b0:9a:af:77:54:16:91:3c:c2:ba:12:6d:4f:94:bf:
         6b:e2:b9:a4:b9:35:11:06:21:bd:59:36:39:26:7c:b6:26:7c:
         3a:ce:f3:2f:d8:74:1b:0d:67:f5:59:34:d5:2c:69:d4:06:a7:
         eb:d0:ea:84:e0:88:98:30:00:e3:fd:94:74:43:bd:cb:a0:8d:
         7a:e5:79:c1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----