Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/45/f3ba5e-898c-4fe9-bd88-3c3673d44905/1/BKSudHHI82IdUyVtdfEQt0iZeJg.mft
File:                     BKSudHHI82IdUyVtdfEQt0iZeJg.mft (raw, json)
Hash identifier:          IQFQ2YocjX8DFX7SIWvZbSJIxMfgUXgd8kXMyHZAPAI=
Subject key identifier:   10:21:BC:CF:26:92:F1:B2:E6:87:A7:E3:97:34:D9:8F:4F:69:53:FB
Authority key identifier: 04:A4:AE:74:71:C8:F3:62:1D:53:25:6D:75:F1:10:B7:48:99:78:98
Certificate issuer:       /CN=04a4ae7471c8f3621d53256d75f110b748997898
Certificate serial:       01962ECFB5541A2E081AEF6671F4D423573F
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/BKSudHHI82IdUyVtdfEQt0iZeJg.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/45/f3ba5e-898c-4fe9-bd88-3c3673d44905/1/BKSudHHI82IdUyVtdfEQt0iZeJg.mft
Manifest number:          14EA
Signing time:             Sun 13 Apr 2025 11:01:26 +0000
Manifest this update:     Sun 13 Apr 2025 11:01:26 +0000
Manifest next update:     Mon 14 Apr 2025 11:01:26 +0000
Files and hashes:         1: BKSudHHI82IdUyVtdfEQt0iZeJg.crl (hash: Da/7NQ28NglNLwYjqX7ScCov+k4mvtMDXBDUNe+IeZU=)
                          2: N70Yb5HDAX3BIJy8UjKLLCNEous.roa (hash: qShtm2mEB1c+KG+KsBd4fYZEqu1nYfeAzh76OdmZs60=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2e:cf:b5:54:1a:2e:08:1a:ef:66:71:f4:d4:23:57:3f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=04a4ae7471c8f3621d53256d75f110b748997898
        Validity
            Not Before: Apr 13 11:01:26 2025 GMT
            Not After : Apr 14 11:01:26 2025 GMT
        Subject: CN=1021bccf2692f1b2e687a7e39734d98f4f6953fb
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c0:06:28:98:e2:e6:0e:d1:ca:00:77:63:ee:bd:
                    06:16:44:eb:68:8f:6e:74:66:11:03:25:c6:3a:57:
                    41:18:f9:33:1f:4c:34:80:fb:22:7a:53:68:99:48:
                    11:ba:b5:19:6a:42:44:02:ef:5c:3d:ee:0b:de:21:
                    e3:1d:04:6e:29:91:94:6e:c4:6b:6f:ad:05:23:fc:
                    5d:e8:f3:71:1a:53:81:ff:20:6f:e4:e1:81:ee:c4:
                    e6:f7:ca:8f:34:ec:35:07:54:b9:80:7b:b0:7a:43:
                    12:f3:39:e9:d3:84:36:d9:c6:0d:ef:c8:83:3a:9a:
                    df:07:af:66:e8:e0:e4:2d:28:00:8a:a9:80:40:22:
                    7d:55:2e:37:5d:9f:34:73:47:6c:ee:d0:35:50:24:
                    b2:df:17:5c:f1:71:ec:f6:e9:83:38:c1:d4:f8:9b:
                    03:1e:37:54:4d:ce:7c:06:d1:b2:a2:b7:05:0b:39:
                    5e:c5:07:29:32:03:4b:98:1b:c5:bc:e7:eb:4b:59:
                    1f:30:48:bf:cb:b6:1f:9a:42:61:ed:d5:d6:d7:64:
                    7d:0a:03:a3:fe:cf:96:87:58:41:26:c6:27:8c:ce:
                    82:c2:8d:cd:57:94:ac:2e:e3:e7:83:95:9d:32:2f:
                    75:c4:ad:fc:60:e3:e6:b7:f6:50:07:22:04:a9:af:
                    b9:1f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                10:21:BC:CF:26:92:F1:B2:E6:87:A7:E3:97:34:D9:8F:4F:69:53:FB
            X509v3 Authority Key Identifier:
                keyid:04:A4:AE:74:71:C8:F3:62:1D:53:25:6D:75:F1:10:B7:48:99:78:98

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/BKSudHHI82IdUyVtdfEQt0iZeJg.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/45/f3ba5e-898c-4fe9-bd88-3c3673d44905/1/BKSudHHI82IdUyVtdfEQt0iZeJg.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/45/f3ba5e-898c-4fe9-bd88-3c3673d44905/1/BKSudHHI82IdUyVtdfEQt0iZeJg.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         0c:b3:b3:d3:2d:7a:08:4f:86:9c:74:59:5f:fb:10:56:4c:b8:
         68:2e:bf:03:a9:7b:fe:2e:95:4c:87:6a:eb:32:e2:86:74:67:
         16:0b:d2:52:ab:d6:50:1d:ad:3a:c1:2d:2a:5b:21:72:f7:70:
         c9:aa:21:3a:a7:18:d2:c3:87:ec:0c:c6:35:cb:c2:1b:eb:f7:
         99:a2:f2:8e:12:77:dd:35:58:bc:bb:9b:16:fe:95:95:62:b3:
         85:67:92:d6:ee:05:da:5b:0d:9a:17:67:62:fb:22:98:14:a3:
         3b:fc:bf:ef:4c:52:5d:9a:51:d8:a5:ed:1f:0f:67:61:70:3d:
         8b:73:2d:62:4d:c6:24:e9:2a:7b:62:27:9f:3b:9d:d4:5b:f4:
         63:e8:a1:54:00:07:3f:f1:4e:34:74:4d:32:9b:09:76:7d:a7:
         01:60:6f:2d:1d:d5:57:84:4e:4e:60:13:ae:1c:bd:9c:00:39:
         25:f7:03:d9:4f:8f:b7:36:ec:e9:40:75:0e:65:69:5e:80:96:
         b7:40:f8:ec:1e:91:9e:48:54:85:72:c1:7a:64:bd:65:ca:82:
         e8:b2:e5:d3:83:29:5d:39:da:23:85:46:29:ce:0e:f9:89:0e:
         48:54:6b:8a:c5:05:a6:0a:2b:fe:c2:f0:13:6c:de:0b:c9:84:
         71:fd:4d:40
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----