Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/33/f433c3-132f-4d66-bd30-c62cf20a5ec9/1/CKNNqqiH2YpTSMOkYKIfyE4RpOY.mft
File:                     CKNNqqiH2YpTSMOkYKIfyE4RpOY.mft (raw, json)
Hash identifier:          ydaD0h0qGFrjkj1V1F+wC7W3Z+DOaHdSF+YGp3RBuJA=
Subject key identifier:   7A:F2:CC:3B:3E:C1:8B:B8:49:F1:E0:50:B4:DD:7B:21:25:84:4A:1D
Authority key identifier: 08:A3:4D:AA:A8:87:D9:8A:53:48:C3:A4:60:A2:1F:C8:4E:11:A4:E6
Certificate issuer:       /CN=08a34daaa887d98a5348c3a460a21fc84e11a4e6
Certificate serial:       01962F066C9BE8D502562F635EE33FAC97F1
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/CKNNqqiH2YpTSMOkYKIfyE4RpOY.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/33/f433c3-132f-4d66-bd30-c62cf20a5ec9/1/CKNNqqiH2YpTSMOkYKIfyE4RpOY.mft
Manifest number:          1151
Signing time:             Sun 13 Apr 2025 12:01:12 +0000
Manifest this update:     Sun 13 Apr 2025 12:01:12 +0000
Manifest next update:     Mon 14 Apr 2025 12:01:12 +0000
Files and hashes:         1: CKNNqqiH2YpTSMOkYKIfyE4RpOY.crl (hash: 9XjySHeRAKVVEGHfRgQLAQa2q7wfrhW/PuadZezn2Tg=)
                          2: DQ47vKDjcl-2XGhWvGpEltnbLx0.roa (hash: xO7ywYo6rKZE+1UGlrRMauCBtFM1TiMUXrJWYhc9zkg=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2f:06:6c:9b:e8:d5:02:56:2f:63:5e:e3:3f:ac:97:f1
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=08a34daaa887d98a5348c3a460a21fc84e11a4e6
        Validity
            Not Before: Apr 13 12:01:12 2025 GMT
            Not After : Apr 14 12:01:12 2025 GMT
        Subject: CN=7af2cc3b3ec18bb849f1e050b4dd7b2125844a1d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:dc:dd:28:1a:0f:dc:df:05:61:fe:73:be:87:d2:
                    7c:d1:4e:d7:b7:32:b5:84:fb:4e:f0:19:d7:1c:ad:
                    55:3c:33:b1:ed:ec:c6:4e:fe:99:25:8d:80:fe:aa:
                    3e:e6:19:6b:5b:2b:cf:3e:68:ab:9c:21:8a:99:73:
                    0c:f4:9d:f9:37:0a:c7:a4:da:71:8e:26:39:03:6b:
                    c9:fe:5d:cc:6d:ee:9a:9b:7b:c5:b3:bf:1f:00:d9:
                    f1:2a:31:11:e8:e4:64:35:ae:98:51:be:31:b4:c8:
                    08:88:9c:d0:f5:89:82:85:a3:1d:f1:af:a9:46:68:
                    1e:37:dd:6d:11:0e:1d:7f:87:4b:11:c9:7f:d3:08:
                    75:2d:7b:bb:e8:db:3c:58:cb:78:e0:ba:67:7e:6b:
                    a5:91:af:dc:34:6c:8e:e7:71:f4:3a:15:b0:1f:b3:
                    36:ab:52:93:ac:67:62:59:65:ff:fa:a4:40:e2:22:
                    fa:00:85:99:bd:f5:a2:c3:59:74:ef:dc:4b:83:5a:
                    71:51:3c:ee:46:cb:9f:c0:be:37:a2:d7:9a:b9:27:
                    c0:26:03:84:43:21:a8:aa:b1:1d:55:86:68:04:4e:
                    fc:60:42:fd:d6:64:15:cd:ea:c6:3c:e7:26:f3:bf:
                    bf:01:a5:1b:b6:83:6e:f3:86:97:cf:da:24:bd:a8:
                    11:13
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7A:F2:CC:3B:3E:C1:8B:B8:49:F1:E0:50:B4:DD:7B:21:25:84:4A:1D
            X509v3 Authority Key Identifier:
                keyid:08:A3:4D:AA:A8:87:D9:8A:53:48:C3:A4:60:A2:1F:C8:4E:11:A4:E6

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CKNNqqiH2YpTSMOkYKIfyE4RpOY.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/33/f433c3-132f-4d66-bd30-c62cf20a5ec9/1/CKNNqqiH2YpTSMOkYKIfyE4RpOY.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/33/f433c3-132f-4d66-bd30-c62cf20a5ec9/1/CKNNqqiH2YpTSMOkYKIfyE4RpOY.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         24:7e:fb:e0:0b:27:7c:6d:60:99:a5:9c:40:04:21:a2:ed:33:
         4e:9b:db:1f:4e:bb:74:88:ff:b3:7f:2f:85:79:ef:16:6d:33:
         6c:76:13:2b:a5:b0:62:39:12:a0:61:be:e8:da:c9:69:d0:7e:
         20:e6:b4:5f:ee:3b:1a:fe:52:1f:27:41:a6:3b:91:bb:4d:5a:
         d9:70:49:6f:e0:d4:56:01:d6:bd:7c:7e:a2:76:28:45:92:af:
         12:95:5d:99:68:5e:07:b7:b1:59:eb:f1:ea:01:c7:65:59:57:
         93:ad:bb:bf:8c:ac:3e:a2:43:06:c4:56:23:91:9d:65:fb:37:
         1b:d9:42:c5:a2:89:8a:e3:23:d1:70:68:86:0f:b4:27:f8:ca:
         44:9b:e6:87:c9:04:fe:c4:88:86:d9:cb:2c:9d:77:b3:d2:0e:
         89:3e:31:42:63:35:56:b6:69:d9:e3:ee:cf:87:c0:e3:b2:99:
         68:be:8d:f9:9b:15:22:aa:9d:60:f8:21:2e:ee:ca:dc:c5:bf:
         56:87:a3:24:78:55:9f:77:e1:10:4c:4b:8d:f4:1b:41:e9:24:
         5b:ec:95:cc:ce:f9:e3:8b:f3:a7:0a:ab:df:d4:24:24:da:4a:
         b0:0b:45:84:30:e0:ab:df:1c:99:4c:59:54:17:88:ac:6d:89:
         82:09:e6:aa
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----