Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/38/90f942-6511-4054-94be-4d2c4da721d4/1/AyTbHc8MJCnhIVFq4nkvwyU_07o.mft
File:                     AyTbHc8MJCnhIVFq4nkvwyU_07o.mft (raw, json)
Hash identifier:          4pZ7JDboJlJX1LI6Hjpl9m8b1b0g9G2Y+XC52cAj5JA=
Subject key identifier:   6A:FB:3F:DC:10:79:09:B1:7E:74:2E:6C:44:23:52:D7:06:C2:54:82
Authority key identifier: 03:24:DB:1D:CF:0C:24:29:E1:21:51:6A:E2:79:2F:C3:25:3F:D3:BA
Certificate issuer:       /CN=0324db1dcf0c2429e121516ae2792fc3253fd3ba
Certificate serial:       01962E2B1AC5C751B4314CFF9497AD099CAD
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/AyTbHc8MJCnhIVFq4nkvwyU_07o.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/38/90f942-6511-4054-94be-4d2c4da721d4/1/AyTbHc8MJCnhIVFq4nkvwyU_07o.mft
Manifest number:          05BF
Signing time:             Sun 13 Apr 2025 08:01:38 +0000
Manifest this update:     Sun 13 Apr 2025 08:01:38 +0000
Manifest next update:     Mon 14 Apr 2025 08:01:38 +0000
Files and hashes:         1: 8SJ_LBREWOMigQGrbOSpoED6efU.roa (hash: 62y0nmOlXA0+Z/ArGW7+jXU+JPJ93QdKSCA9WPq34/4=)
                          2: AyTbHc8MJCnhIVFq4nkvwyU_07o.crl (hash: M0feAc2hpo0NFeU2qxV1WWGEeV8Q0JAV7jZOvzW9v8I=)
                          3: U0IdBWYUAnp0C9MJKk4Ai4LhTpg.roa (hash: VJHg2FjO1KvYj0CDyJtHwAwOQG4SNpGAsdsq9czAkJA=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2e:2b:1a:c5:c7:51:b4:31:4c:ff:94:97:ad:09:9c:ad
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0324db1dcf0c2429e121516ae2792fc3253fd3ba
        Validity
            Not Before: Apr 13 08:01:38 2025 GMT
            Not After : Apr 14 08:01:38 2025 GMT
        Subject: CN=6afb3fdc107909b17e742e6c442352d706c25482
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:93:3b:4c:d4:d8:d1:0a:6d:38:a3:5d:28:e3:a1:
                    30:44:1a:91:27:0e:38:68:00:5d:66:a4:d8:89:b2:
                    93:c6:57:cf:62:15:54:7d:77:c0:5d:7a:62:be:03:
                    fb:89:45:ef:6e:78:5b:4a:64:cc:c3:0a:bf:8d:63:
                    b7:93:90:95:1a:a9:2d:d7:a0:d9:91:83:33:e8:45:
                    e5:bc:c4:50:98:18:83:7f:bf:10:16:97:7b:14:20:
                    fd:da:93:3c:ab:6b:ad:9f:cc:f3:cf:c8:88:1a:f3:
                    09:65:3f:8f:3c:aa:1d:b7:2e:04:78:2c:7f:bd:e5:
                    48:ba:76:b3:0b:cd:07:28:b5:5e:01:af:a6:00:31:
                    29:53:3a:9e:89:47:9a:dc:48:bd:24:62:5f:c8:18:
                    0a:6d:a1:50:b3:84:ac:70:b2:6a:31:6c:50:57:cd:
                    16:bb:bb:cf:b0:42:57:c8:88:ac:ec:71:02:f9:60:
                    72:d6:4a:7c:86:09:dc:e6:f0:3d:3a:b8:6a:5a:e0:
                    88:7f:47:03:67:a1:2c:f2:23:7c:67:88:20:6d:20:
                    15:fa:ab:8e:17:ef:33:ac:2f:35:7a:35:d6:9d:19:
                    88:1a:7f:16:ad:df:03:63:b9:20:6a:ac:7d:cb:6c:
                    8c:fa:b4:78:93:85:c7:a9:bc:af:76:2a:d7:fc:13:
                    a5:6d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6A:FB:3F:DC:10:79:09:B1:7E:74:2E:6C:44:23:52:D7:06:C2:54:82
            X509v3 Authority Key Identifier:
                keyid:03:24:DB:1D:CF:0C:24:29:E1:21:51:6A:E2:79:2F:C3:25:3F:D3:BA

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/AyTbHc8MJCnhIVFq4nkvwyU_07o.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/38/90f942-6511-4054-94be-4d2c4da721d4/1/AyTbHc8MJCnhIVFq4nkvwyU_07o.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/38/90f942-6511-4054-94be-4d2c4da721d4/1/AyTbHc8MJCnhIVFq4nkvwyU_07o.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         40:c0:ed:da:3a:61:b7:8c:10:e9:16:62:f4:f8:60:56:5f:b3:
         7e:43:84:38:b1:d7:07:fa:7a:16:7b:a6:fd:f2:7a:86:f6:dd:
         8f:78:de:2c:70:18:42:50:84:e7:14:45:d6:21:77:89:f9:02:
         b6:58:b5:78:f5:c1:e6:d3:3d:a2:04:d3:cc:c9:d5:32:33:72:
         50:dd:90:77:c8:ec:c0:59:c9:09:37:8b:2a:d4:2c:4f:0c:28:
         32:cb:b9:e3:b6:ed:83:23:c1:1f:0b:7e:24:8a:48:01:85:f9:
         71:9d:71:7c:fa:03:04:b8:72:93:3f:16:74:96:26:1e:16:05:
         ed:e2:a8:b2:09:5e:59:46:c8:2e:86:69:c0:88:09:8a:44:fe:
         d3:38:73:12:92:0b:d9:9a:e5:68:89:fb:e9:0c:11:29:bd:6a:
         49:a2:59:a6:f9:af:3c:63:c4:80:31:a4:b9:43:48:60:d8:69:
         03:b8:cf:b9:b8:c5:c0:b6:98:66:e6:78:1c:2b:90:17:23:13:
         ed:80:2e:66:8f:5a:ce:da:43:f0:50:d9:46:5d:d5:99:78:e3:
         a5:45:d7:b6:20:72:bf:c9:36:bc:7b:dd:3a:08:4a:d8:98:b0:
         e6:1c:52:c0:02:c6:58:fc:1b:4e:1b:e1:a2:2e:10:b8:5d:71:
         55:f3:42:b9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----