Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3a/89ff47-0b7b-4309-a8af-2cbd55f9a8ee/1/aaKML4THXo0DiGlDVRUt0rcx8kk.mft
File:                     aaKML4THXo0DiGlDVRUt0rcx8kk.mft (raw, json)
Hash identifier:          00+VIL8aNyf2sGrPWwo452jl2Cq3RdHQiFuVhYXIgSg=
Subject key identifier:   94:12:16:85:78:4F:F1:AF:04:DB:14:0D:BD:61:EF:C4:29:B8:BD:69
Authority key identifier: 69:A2:8C:2F:84:C7:5E:8D:03:88:69:43:55:15:2D:D2:B7:31:F2:49
Certificate issuer:       /CN=69a28c2f84c75e8d0388694355152dd2b731f249
Certificate serial:       01962DF40D2C4AC5C88CAC42281CA964261B
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/aaKML4THXo0DiGlDVRUt0rcx8kk.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/3a/89ff47-0b7b-4309-a8af-2cbd55f9a8ee/1/aaKML4THXo0DiGlDVRUt0rcx8kk.mft
Manifest number:          14EC
Signing time:             Sun 13 Apr 2025 07:01:30 +0000
Manifest this update:     Sun 13 Apr 2025 07:01:30 +0000
Manifest next update:     Mon 14 Apr 2025 07:01:30 +0000
Files and hashes:         1: WdYc6wSLVkfUe7irxf4uyXxEIsM.roa (hash: dpYwLA3RR3eH0lZ7/JtVVQoaXF1Y2bKy7GfyH86APlE=)
                          2: aaKML4THXo0DiGlDVRUt0rcx8kk.crl (hash: mt6lRJYy+5s61vKOFgTSCZ6cowBKstwHTAzBUrEwTkc=)
                          3: tUMiGCgmsKV0vxqojlEA4oJxpRM.roa (hash: UydNeJbpnz/tc0fGV+RmvBf+BwmLoVjaXgDPrRLbpVY=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2d:f4:0d:2c:4a:c5:c8:8c:ac:42:28:1c:a9:64:26:1b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=69a28c2f84c75e8d0388694355152dd2b731f249
        Validity
            Not Before: Apr 13 07:01:30 2025 GMT
            Not After : Apr 14 07:01:30 2025 GMT
        Subject: CN=94121685784ff1af04db140dbd61efc429b8bd69
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c1:cd:3c:9c:de:32:35:b8:fd:a7:97:65:31:6d:
                    b3:db:50:ab:2e:e4:51:1a:58:de:f9:a7:3d:d3:10:
                    c0:f9:52:27:09:95:99:cd:5c:5a:69:39:2c:10:f7:
                    22:51:a1:ac:de:2b:74:80:c0:f1:3d:79:a9:76:f8:
                    d1:29:78:c0:d4:b6:de:0f:96:c7:76:62:49:14:e8:
                    d0:0a:cf:93:3f:7d:4f:a1:1a:ec:9c:7e:b9:37:18:
                    9f:22:90:44:fd:38:b5:6f:97:c9:63:c9:d7:59:14:
                    df:6d:16:fc:fd:0d:49:6f:e3:8d:5a:aa:fe:6b:fe:
                    2e:72:73:a5:8a:c1:15:40:27:99:50:47:a5:32:9d:
                    1d:51:25:eb:db:c1:b2:5c:30:5b:bf:1d:01:d6:c3:
                    3b:ff:cf:7a:de:af:04:b9:7d:95:7a:ea:22:1b:18:
                    36:be:48:48:90:18:4c:f8:49:b8:1f:47:b4:24:eb:
                    fd:0d:d4:90:66:5e:82:48:3c:09:b8:5f:9b:fd:f2:
                    53:51:82:81:8f:24:d8:5b:a6:4c:46:24:d2:e1:b6:
                    7d:91:27:fd:f2:12:3f:47:e8:7e:48:06:7e:90:7e:
                    bd:58:1a:44:a8:15:df:75:2e:4b:07:77:0a:63:46:
                    9f:c2:03:88:99:e6:3e:8f:7b:ba:30:96:0a:ac:05:
                    26:d3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                94:12:16:85:78:4F:F1:AF:04:DB:14:0D:BD:61:EF:C4:29:B8:BD:69
            X509v3 Authority Key Identifier:
                keyid:69:A2:8C:2F:84:C7:5E:8D:03:88:69:43:55:15:2D:D2:B7:31:F2:49

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/aaKML4THXo0DiGlDVRUt0rcx8kk.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3a/89ff47-0b7b-4309-a8af-2cbd55f9a8ee/1/aaKML4THXo0DiGlDVRUt0rcx8kk.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/3a/89ff47-0b7b-4309-a8af-2cbd55f9a8ee/1/aaKML4THXo0DiGlDVRUt0rcx8kk.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         ed:19:28:c3:9c:dd:49:43:d8:91:70:ca:6c:57:2f:ef:ff:bd:
         00:d3:29:0c:61:78:af:62:54:b3:f5:66:b8:82:70:7e:a1:9c:
         43:d3:a4:2c:70:e7:b4:25:ee:29:d3:7b:13:32:e4:81:e6:49:
         cb:b8:c7:df:4d:05:fd:16:e0:8f:9a:b7:81:ea:dc:38:62:fd:
         11:2a:9d:2a:1b:98:61:5d:ea:d2:d2:d4:5a:ec:69:41:1b:a2:
         fa:64:f0:ae:b2:3f:81:2f:fc:71:60:8e:6b:67:ce:7b:a1:2d:
         76:c8:0f:6f:90:e9:53:69:e3:72:a8:f5:c1:f2:66:a6:75:b8:
         88:3e:77:db:18:0e:ab:4b:cb:87:86:df:b0:b3:be:9a:f0:25:
         14:24:18:37:90:b2:e9:e0:64:80:62:f7:7b:5c:48:63:76:ca:
         93:d3:f2:5c:79:cc:d3:0c:48:52:53:0a:0b:46:e6:86:27:6a:
         b3:bc:29:1e:f5:15:f3:2f:77:2a:a7:bb:58:8d:3b:2d:2e:25:
         2b:61:0d:e4:e7:fb:9d:57:63:05:f6:e6:fa:30:f9:7c:73:cd:
         7b:f4:29:9e:8b:f4:f6:c9:a8:31:42:4d:37:00:f9:91:f1:99:
         13:a9:1c:07:ae:1f:43:ad:64:76:5a:29:6e:ac:e1:cb:b1:21:
         4d:cf:2f:72
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----