Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/37/d3363e-4832-4d57-9da5-dbf76ed3939f/1/AQp9TGSu1LyYxrWwZP8Km4Lq2oI.mft
File:                     AQp9TGSu1LyYxrWwZP8Km4Lq2oI.mft (raw, json)
Hash identifier:          2pbrAm3WLrR+ELtxuM9kOI0ixFOnVj8NxD2rtZ8Uzag=
Subject key identifier:   E8:31:97:DA:B0:FA:FA:13:2D:3A:18:FE:4B:82:B9:0C:65:09:7A:E4
Authority key identifier: 01:0A:7D:4C:64:AE:D4:BC:98:C6:B5:B0:64:FF:0A:9B:82:EA:DA:82
Certificate issuer:       /CN=010a7d4c64aed4bc98c6b5b064ff0a9b82eada82
Certificate serial:       01962E61E17E195A8AAB92CEE9B6F33C4227
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/AQp9TGSu1LyYxrWwZP8Km4Lq2oI.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/37/d3363e-4832-4d57-9da5-dbf76ed3939f/1/AQp9TGSu1LyYxrWwZP8Km4Lq2oI.mft
Manifest number:          0A5F
Signing time:             Sun 13 Apr 2025 09:01:28 +0000
Manifest this update:     Sun 13 Apr 2025 09:01:28 +0000
Manifest next update:     Mon 14 Apr 2025 09:01:28 +0000
Files and hashes:         1: 9An93QZ5VcdXnM-SpuqFZ7HTYmU.roa (hash: FvzvcUzn3akzojaHHdMGtSYsI1uUN+lMDojMlOkLqXs=)
                          2: AQp9TGSu1LyYxrWwZP8Km4Lq2oI.crl (hash: l124hXoheh2pmUsJmf/8Yzvbd1Saemjt7Dbsxcjc3lE=)
                          3: RAD4tK02ktN0fOfQsDIg0oXzowM.roa (hash: zP2Pk53gLmd7JDeyZonVGODT/lrmnaflf5tGkA0jXzM=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2e:61:e1:7e:19:5a:8a:ab:92:ce:e9:b6:f3:3c:42:27
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=010a7d4c64aed4bc98c6b5b064ff0a9b82eada82
        Validity
            Not Before: Apr 13 09:01:28 2025 GMT
            Not After : Apr 14 09:01:28 2025 GMT
        Subject: CN=e83197dab0fafa132d3a18fe4b82b90c65097ae4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bf:2f:8c:01:77:67:eb:7f:3b:4a:df:7f:3b:f1:
                    75:ad:22:55:d4:52:4c:b4:8e:4d:16:0a:fb:b1:63:
                    71:f6:fa:9f:50:fb:d9:2f:65:1d:71:46:63:df:30:
                    ab:2d:40:3b:19:aa:f5:23:41:3f:80:56:af:26:2a:
                    89:2d:3e:56:ba:62:8d:5b:e3:8d:5f:29:13:c4:ac:
                    f7:09:38:2c:8d:5d:4d:55:60:3b:43:31:50:53:d4:
                    6c:14:e6:ff:94:eb:a9:a1:4a:01:45:aa:28:ab:a1:
                    b4:cc:73:4c:22:9c:38:c5:1d:3e:84:f6:90:7c:62:
                    e0:9d:e5:75:30:d8:be:d4:82:0b:9d:7c:cd:39:f9:
                    11:74:0e:cc:b4:e8:50:ab:f1:8c:0f:e7:e7:95:95:
                    ed:bf:bd:9b:d9:2f:77:5e:43:6d:b7:94:02:84:db:
                    32:e5:d1:b9:ef:0c:33:5e:6a:b9:fd:4a:b8:de:ff:
                    86:27:50:85:e3:bf:c5:6b:b8:ab:3c:13:35:77:c5:
                    0c:04:55:73:a4:5f:7d:3a:ae:d6:2c:08:13:eb:33:
                    60:d5:8d:3c:f1:d1:81:4c:65:49:17:fe:1c:3f:d6:
                    6e:49:1a:66:8c:0b:49:4e:4d:b3:e0:fb:b1:f7:fb:
                    e3:03:66:69:7e:a7:ad:68:1d:e5:53:52:41:46:ba:
                    3d:c1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E8:31:97:DA:B0:FA:FA:13:2D:3A:18:FE:4B:82:B9:0C:65:09:7A:E4
            X509v3 Authority Key Identifier:
                keyid:01:0A:7D:4C:64:AE:D4:BC:98:C6:B5:B0:64:FF:0A:9B:82:EA:DA:82

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/AQp9TGSu1LyYxrWwZP8Km4Lq2oI.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/37/d3363e-4832-4d57-9da5-dbf76ed3939f/1/AQp9TGSu1LyYxrWwZP8Km4Lq2oI.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/37/d3363e-4832-4d57-9da5-dbf76ed3939f/1/AQp9TGSu1LyYxrWwZP8Km4Lq2oI.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         9f:f7:36:da:03:c4:9e:a9:34:31:14:53:05:7d:1e:95:09:07:
         70:3c:8c:70:a4:35:87:b1:c6:8b:39:66:6d:89:84:05:41:8a:
         1f:4f:33:e2:83:f9:65:de:25:ca:22:d5:c1:66:b7:e4:d9:9c:
         39:cb:1d:0c:d8:d6:1b:75:7f:fa:f4:3e:31:9a:2b:5c:ba:ad:
         39:65:8a:23:56:72:c7:b8:ab:a0:00:84:91:20:4f:88:fb:01:
         16:b3:93:17:aa:0f:63:52:a5:e6:23:ad:15:73:20:e9:93:8d:
         8b:3e:69:9f:84:96:89:4c:8f:e3:48:5b:7e:7b:cf:7e:44:00:
         31:40:64:7c:9f:9e:89:56:56:95:39:f6:dd:dd:82:7e:3e:79:
         0a:a7:a5:d3:4b:87:ae:97:de:bf:01:16:c1:f5:45:31:39:38:
         67:e4:f2:c5:4a:2a:a2:1d:d1:68:e2:2e:cd:f9:21:e7:28:57:
         f4:1d:21:d1:bb:ea:d9:10:00:14:aa:80:17:21:01:cc:5a:89:
         42:c5:a3:c7:d0:73:21:11:e0:90:3f:dd:f9:5d:ab:62:fe:b4:
         f1:55:d4:0e:1a:5a:b1:81:7d:2c:88:3c:65:6a:6c:f0:bd:c8:
         a4:7b:79:24:8b:f9:cb:23:01:36:6d:11:f6:96:a6:16:15:a8:
         21:83:59:b4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----