Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/33/535bf7-59ac-45f1-bec5-41dd7f3ea7a4/1/RKqBMTnAax3PG_6DMrm4Aas-swI.mft
File:                     RKqBMTnAax3PG_6DMrm4Aas-swI.mft (raw, json)
Hash identifier:          6WHwQh3HQL5vla0QEmkqdpsHIJVXEyTrovb0a3Tahug=
Subject key identifier:   7F:67:0C:08:5F:51:19:47:B4:AD:75:C2:65:AE:89:8A:F0:05:CE:3B
Authority key identifier: 44:AA:81:31:39:C0:6B:1D:CF:1B:FE:83:32:B9:B8:01:AB:3E:B3:02
Certificate issuer:       /CN=44aa813139c06b1dcf1bfe8332b9b801ab3eb302
Certificate serial:       01962FAB68DFB862D1A7AE6AB8DCBC22F5FA
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/RKqBMTnAax3PG_6DMrm4Aas-swI.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/33/535bf7-59ac-45f1-bec5-41dd7f3ea7a4/1/RKqBMTnAax3PG_6DMrm4Aas-swI.mft
Manifest number:          0502
Signing time:             Sun 13 Apr 2025 15:01:24 +0000
Manifest this update:     Sun 13 Apr 2025 15:01:24 +0000
Manifest next update:     Mon 14 Apr 2025 15:01:24 +0000
Files and hashes:         1: RKqBMTnAax3PG_6DMrm4Aas-swI.crl (hash: 8sV8VmJvBzk2yGMK67a2aXDZeE8VkdFZxG6iYvqYCXo=)
                          2: dulLD0ENjA9tfgPr9DrSQJxWn5k.roa (hash: ecAhh1+SnR4Xv8G0G+2S5KTuId8TsIACx8G94ng9hIA=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2f:ab:68:df:b8:62:d1:a7:ae:6a:b8:dc:bc:22:f5:fa
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=44aa813139c06b1dcf1bfe8332b9b801ab3eb302
        Validity
            Not Before: Apr 13 15:01:24 2025 GMT
            Not After : Apr 14 15:01:24 2025 GMT
        Subject: CN=7f670c085f511947b4ad75c265ae898af005ce3b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:92:f8:b8:78:20:f0:42:05:0e:0a:c1:8a:07:69:
                    37:69:b9:13:b0:30:50:6a:6a:45:d5:73:e9:0d:4d:
                    4a:7d:df:0d:f4:2b:c1:29:85:51:92:9f:a6:d7:cb:
                    8e:44:ab:e9:92:af:5d:84:81:36:24:34:c5:54:96:
                    af:9f:0a:ef:3d:4e:ab:99:e0:2c:29:26:60:28:9d:
                    8b:bb:e0:dd:15:3e:5c:37:6f:f6:ca:a3:22:4d:ff:
                    de:89:49:f1:b5:bb:2d:8a:4d:81:71:0e:6d:b1:dc:
                    f7:5d:46:31:e4:5c:43:fb:ca:79:5b:e1:d1:76:90:
                    d9:b5:d5:2b:22:98:7f:7f:6a:cd:c6:ad:e4:df:2a:
                    15:69:15:51:bc:2c:5c:a6:83:e3:6e:41:28:bd:a5:
                    61:ad:5f:e4:ec:c5:d9:23:00:15:0f:df:c2:40:85:
                    0a:bd:db:c9:9f:03:e3:c5:f7:96:b2:99:dd:43:ca:
                    e7:d4:0f:90:9f:b8:94:5f:69:2c:b9:81:03:ad:7f:
                    92:ed:82:3d:ac:a0:b6:4c:43:46:c6:12:96:a7:b9:
                    ca:36:ca:f2:ab:1d:ef:3c:72:81:82:df:11:bb:9b:
                    ae:4d:e4:13:f4:e0:7f:d1:24:dd:d0:c3:f4:4d:18:
                    67:0d:04:f1:f4:dd:00:49:05:57:85:6a:76:03:51:
                    7b:a9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7F:67:0C:08:5F:51:19:47:B4:AD:75:C2:65:AE:89:8A:F0:05:CE:3B
            X509v3 Authority Key Identifier:
                keyid:44:AA:81:31:39:C0:6B:1D:CF:1B:FE:83:32:B9:B8:01:AB:3E:B3:02

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/RKqBMTnAax3PG_6DMrm4Aas-swI.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/33/535bf7-59ac-45f1-bec5-41dd7f3ea7a4/1/RKqBMTnAax3PG_6DMrm4Aas-swI.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/33/535bf7-59ac-45f1-bec5-41dd7f3ea7a4/1/RKqBMTnAax3PG_6DMrm4Aas-swI.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         14:3e:57:b0:47:b5:c8:3d:d4:5c:48:ae:1c:5a:f8:19:c8:64:
         67:dc:75:49:eb:d5:50:0d:16:a7:27:41:f2:1e:84:33:a0:16:
         7b:2f:53:3c:12:47:8e:dc:4c:15:d1:5e:9e:46:6f:ba:54:74:
         2c:40:66:8f:aa:bf:b0:b2:3e:98:60:f1:a9:d1:77:8b:da:06:
         83:2e:87:d8:8b:47:69:c4:4e:42:d2:4b:39:9c:a4:51:54:25:
         a4:e3:26:7b:8b:8f:72:5b:b0:c3:9e:3b:7e:94:1b:c2:e7:43:
         80:89:a3:31:bb:fe:cc:c0:3a:fb:16:2a:2d:d7:e5:5d:7f:74:
         38:f1:a2:50:3f:6e:7d:ae:a0:56:ea:17:29:ab:ac:b4:c0:34:
         7c:e1:17:ce:e1:bf:ce:a9:1e:78:7d:5b:97:04:1e:8a:70:fb:
         bc:60:ea:a4:de:79:29:58:cd:9f:71:61:cc:84:e5:60:03:0f:
         75:8a:7c:16:d8:dc:94:72:64:0f:dc:ed:ee:6d:06:65:ae:fc:
         cd:47:a1:65:dc:c4:fe:ed:6d:69:0b:80:89:ce:13:61:03:fa:
         84:bd:1c:d5:ce:da:bc:cf:82:07:db:7d:56:72:fe:b1:03:5b:
         8e:7c:83:26:58:d6:cc:4b:5d:c0:cc:f2:dd:ff:62:cc:ec:d5:
         00:9a:a2:01
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----