Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/41/ec0453-7e8f-41b1-85d1-1cb1a8f80238/1/aWxnhn4OICJI5_Xjy9V0vRoy_j8.mft
File:                     aWxnhn4OICJI5_Xjy9V0vRoy_j8.mft (raw, json)
Hash identifier:          kiIUaJn0kx4+PhsfpHwhZffXppMu3wWk+VlPu/hhGeQ=
Subject key identifier:   B9:75:9F:9D:9A:97:53:B1:01:CE:24:F6:73:2B:29:02:5E:0F:0F:3E
Authority key identifier: 69:6C:67:86:7E:0E:20:22:48:E7:F5:E3:CB:D5:74:BD:1A:32:FE:3F
Certificate issuer:       /CN=696c67867e0e202248e7f5e3cbd574bd1a32fe3f
Certificate serial:       01962F06D9AF5CFB221AB9CF514BFA98A2AB
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/aWxnhn4OICJI5_Xjy9V0vRoy_j8.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/41/ec0453-7e8f-41b1-85d1-1cb1a8f80238/1/aWxnhn4OICJI5_Xjy9V0vRoy_j8.mft
Manifest number:          0648
Signing time:             Sun 13 Apr 2025 12:01:40 +0000
Manifest this update:     Sun 13 Apr 2025 12:01:40 +0000
Manifest next update:     Mon 14 Apr 2025 12:01:40 +0000
Files and hashes:         1: 2ThSREv_WIoD2G2ZXnXTglHuGxQ.roa (hash: s1DwOtOnPcZDQ1RwreTVQg44ZJzwzwNbU2JFNCOH/jY=)
                          2: aWxnhn4OICJI5_Xjy9V0vRoy_j8.crl (hash: N6A7wl7AfUDAO6FS5U2BvzvYeOhTSMN7RHf4B6sxqYY=)
                          3: umZiORkStDdX-o9DnnT4OvBeIOE.roa (hash: Le853vZPtOeUlzPmDkRLXQM7/w7zBId+Eilqr9YxNG0=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2f:06:d9:af:5c:fb:22:1a:b9:cf:51:4b:fa:98:a2:ab
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=696c67867e0e202248e7f5e3cbd574bd1a32fe3f
        Validity
            Not Before: Apr 13 12:01:40 2025 GMT
            Not After : Apr 14 12:01:40 2025 GMT
        Subject: CN=b9759f9d9a9753b101ce24f6732b29025e0f0f3e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a7:ce:10:e4:0c:b7:fb:e8:5d:0d:70:75:c8:8d:
                    6b:d4:20:1a:31:f3:0a:98:8a:f1:d4:26:ec:99:e0:
                    4a:9f:a6:d3:8c:70:eb:5f:fd:4d:8c:22:92:24:6d:
                    d6:1d:94:30:f1:dd:a9:48:d0:ac:e7:69:ee:76:e9:
                    9d:6b:f1:dd:76:f6:65:3d:d8:64:f9:81:7f:36:9e:
                    32:f4:3c:92:3f:2b:ee:d3:55:bc:1e:69:8e:16:40:
                    61:a7:69:4b:e6:a5:c7:f9:4f:f6:55:ed:15:fa:16:
                    5a:5b:7c:f8:06:4e:37:a7:9a:55:ab:9e:8a:c5:d4:
                    90:df:bb:f1:9e:cb:d1:e8:22:ba:af:98:d3:25:df:
                    e9:ab:58:fe:35:ef:83:a2:1e:cb:04:eb:87:24:04:
                    9e:4c:cb:43:90:c7:7b:2f:a5:e4:91:6f:75:67:18:
                    d5:11:e2:f5:64:5a:79:cd:c2:6d:1b:ab:6c:ea:f8:
                    3a:16:2f:c1:aa:c4:6f:6b:8a:cd:d5:8e:b5:fe:67:
                    ce:d3:ba:4c:48:b5:00:fd:90:9e:67:f1:a0:74:78:
                    5e:c1:92:79:89:27:b3:3b:12:2d:a4:d8:d9:3e:b5:
                    07:ff:49:03:b8:17:cd:b4:0b:42:42:30:77:36:23:
                    df:4f:a1:69:10:24:2d:03:88:2e:3f:4a:6a:53:72:
                    d9:ed
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B9:75:9F:9D:9A:97:53:B1:01:CE:24:F6:73:2B:29:02:5E:0F:0F:3E
            X509v3 Authority Key Identifier:
                keyid:69:6C:67:86:7E:0E:20:22:48:E7:F5:E3:CB:D5:74:BD:1A:32:FE:3F

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/aWxnhn4OICJI5_Xjy9V0vRoy_j8.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/41/ec0453-7e8f-41b1-85d1-1cb1a8f80238/1/aWxnhn4OICJI5_Xjy9V0vRoy_j8.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/41/ec0453-7e8f-41b1-85d1-1cb1a8f80238/1/aWxnhn4OICJI5_Xjy9V0vRoy_j8.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         0f:00:b4:ee:3c:2a:f7:55:24:5e:7f:41:ac:9c:8c:88:cf:bc:
         ed:9c:51:d0:9a:f5:6c:5c:16:02:86:13:62:48:87:e7:bf:03:
         1c:be:bd:a4:4d:6a:0b:aa:54:5e:e1:67:dd:81:a9:5c:46:d8:
         f4:05:a5:89:e6:25:cc:92:c5:f7:0c:ac:e8:64:71:9b:d7:58:
         35:4f:d2:e4:07:d9:8e:79:1d:95:72:b3:fe:a1:43:21:02:0e:
         75:d9:e8:ee:5a:0b:d1:fd:9a:76:cd:6a:d8:34:77:69:c2:f6:
         6c:3f:7d:53:f2:f1:c3:70:77:b1:45:c5:c6:0e:64:09:3a:6a:
         a8:7c:0e:c8:cc:75:17:9a:a1:9b:32:ad:10:a9:5f:e7:86:fb:
         cc:4d:9b:76:2f:d2:c2:90:a3:cc:9d:69:68:ff:f7:30:c7:03:
         3d:37:7e:71:d4:8f:02:4d:58:04:7d:b5:0c:15:93:80:04:26:
         77:68:a6:76:38:22:47:4c:e2:a7:9c:48:7d:98:11:e0:bd:47:
         a3:df:2d:75:57:47:6c:03:19:e9:05:6c:11:40:38:bd:44:ef:
         46:27:00:2b:52:94:30:ef:bb:76:7c:4a:22:e7:4e:09:ab:2e:
         7e:b6:33:53:0d:5a:f5:84:8f:a6:af:62:88:7a:a3:bf:3d:53:
         fa:0d:c9:b3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----