Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3a/5f4eb6-6026-4098-88d7-953c68506d5c/1/AtDoiIXvSLIMh7dv2F1C5us9cYM.mft
File:                     AtDoiIXvSLIMh7dv2F1C5us9cYM.mft (raw, json)
Hash identifier:          OZuEX30lJ0Rvn+zM6A8poMPgIPDhaW+dBzNuOaR8e30=
Subject key identifier:   1C:1A:8F:45:1C:96:00:61:12:1B:5D:57:48:88:EE:3F:19:4A:E6:5E
Authority key identifier: 02:D0:E8:88:85:EF:48:B2:0C:87:B7:6F:D8:5D:42:E6:EB:3D:71:83
Certificate issuer:       /CN=02d0e88885ef48b20c87b76fd85d42e6eb3d7183
Certificate serial:       01962F06EDF750B34A3F00BB2383A9744E68
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/AtDoiIXvSLIMh7dv2F1C5us9cYM.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/3a/5f4eb6-6026-4098-88d7-953c68506d5c/1/AtDoiIXvSLIMh7dv2F1C5us9cYM.mft
Manifest number:          1206
Signing time:             Sun 13 Apr 2025 12:01:45 +0000
Manifest this update:     Sun 13 Apr 2025 12:01:45 +0000
Manifest next update:     Mon 14 Apr 2025 12:01:45 +0000
Files and hashes:         1: AtDoiIXvSLIMh7dv2F1C5us9cYM.crl (hash: Rzr62bPf7Rs2xkcVocEtj89hAJonB05O1efjvG10j1c=)
                          2: o2P4F8wGwS7Hu_Z9DavQWwnt9SU.roa (hash: vp0AJWW08FmlyogXHIG/NX7ZAqoKcGLBFnnNS6LdgqQ=)
                          3: w0akvhdXeVYTuAlZb0ebhYIQ-fc.roa (hash: wDr5pC8ALwDb+JSgX5rgKPXkUmbOaUgv+fsaXxbR3wA=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2f:06:ed:f7:50:b3:4a:3f:00:bb:23:83:a9:74:4e:68
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=02d0e88885ef48b20c87b76fd85d42e6eb3d7183
        Validity
            Not Before: Apr 13 12:01:45 2025 GMT
            Not After : Apr 14 12:01:45 2025 GMT
        Subject: CN=1c1a8f451c960061121b5d574888ee3f194ae65e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b6:f3:27:8b:19:7a:a9:da:97:1d:f1:ad:fc:81:
                    60:f3:43:9c:44:c0:8d:00:97:cc:1a:22:39:1e:5e:
                    84:5f:e3:16:7e:31:dd:55:11:e6:b0:69:ef:85:07:
                    6b:1b:26:2b:63:a1:f9:03:11:2d:0b:d7:28:d1:17:
                    f9:bd:b2:dd:19:66:2b:ac:d9:ff:3e:4a:0a:72:46:
                    30:19:1a:eb:f0:20:3b:27:8d:68:76:70:d5:f0:40:
                    2c:56:e1:1e:ac:7c:2f:d1:93:81:cf:1c:37:ea:7a:
                    bd:0f:11:80:c3:49:fc:da:00:49:01:51:fe:a6:5d:
                    3c:32:b3:34:df:36:dd:40:fa:aa:62:94:93:41:a7:
                    0c:5c:4d:a5:1c:46:8e:8c:c0:6e:1a:b5:f3:08:47:
                    2d:bd:7c:2e:ef:98:c6:31:de:79:24:7e:65:8a:b6:
                    fb:8a:ac:38:8a:62:31:19:cc:25:21:ff:3f:d7:ec:
                    b7:67:0c:21:ab:ec:52:f0:9e:9f:33:29:66:46:40:
                    fb:54:ec:0e:15:34:d3:64:15:e1:ba:37:f8:71:8d:
                    35:8f:29:d9:5a:c4:45:5e:ae:87:bc:40:74:2e:12:
                    19:84:cb:41:e4:02:fe:53:41:6d:9c:4a:55:84:5b:
                    ed:6c:33:e3:bb:d9:ec:0c:8c:28:e5:9e:03:71:04:
                    3d:77
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1C:1A:8F:45:1C:96:00:61:12:1B:5D:57:48:88:EE:3F:19:4A:E6:5E
            X509v3 Authority Key Identifier:
                keyid:02:D0:E8:88:85:EF:48:B2:0C:87:B7:6F:D8:5D:42:E6:EB:3D:71:83

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/AtDoiIXvSLIMh7dv2F1C5us9cYM.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3a/5f4eb6-6026-4098-88d7-953c68506d5c/1/AtDoiIXvSLIMh7dv2F1C5us9cYM.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/3a/5f4eb6-6026-4098-88d7-953c68506d5c/1/AtDoiIXvSLIMh7dv2F1C5us9cYM.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         63:26:b3:d1:c4:00:7e:6e:c8:d2:cc:3a:cb:5d:be:70:73:7f:
         d4:c8:25:7c:09:d9:a0:6f:a5:c7:9c:12:04:00:ec:48:a0:8b:
         cc:95:9f:38:99:cb:ec:10:45:15:14:2e:de:44:51:9f:7f:dc:
         8a:15:2e:b9:a6:a2:f7:dd:6e:80:f1:27:5e:14:10:ca:20:19:
         e4:43:02:97:1b:2e:86:52:96:30:08:7f:09:55:6c:61:0a:7d:
         00:6b:1d:3c:e0:81:15:fb:60:e1:35:ad:2d:87:55:b3:49:0b:
         f4:5a:b2:45:5d:5d:93:1d:11:d2:39:6f:8b:e4:ff:f3:b2:2b:
         2b:0f:a4:5a:e7:fe:e8:54:dc:c9:b8:ab:e8:91:b9:ec:2a:bd:
         82:15:6a:87:33:46:27:dc:17:75:30:f0:37:8c:4e:28:0a:1e:
         ea:b8:74:0c:2b:9a:c6:a8:34:35:45:94:67:4c:33:ee:d3:9b:
         fa:51:b2:af:ed:47:93:e3:b9:bc:26:e4:ed:34:32:32:90:e3:
         e2:a5:bf:1f:7b:e9:e6:40:06:47:8a:be:64:36:ff:62:0b:5a:
         f3:f3:54:1e:ea:82:de:dc:dc:6d:88:d5:fb:67:b5:dd:3a:47:
         53:54:d0:f6:03:73:d5:f7:5a:46:69:3e:ec:47:9b:3a:05:b4:
         71:ab:52:1f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----