Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/52/e6fe09-c22d-45b7-a599-b941ba921b3f/1/AA0P7izVZpZcoI21UGY8sgtBI0M.mft
File:                     AA0P7izVZpZcoI21UGY8sgtBI0M.mft (raw, json)
Hash identifier:          GmATti5otr3gOBljwsK4OdAmzYWUxuP+NwqIArNGNek=
Subject key identifier:   CB:84:5D:6E:23:03:07:7A:1D:5F:40:11:BB:4D:7B:D8:F9:0E:BC:A4
Authority key identifier: 00:0D:0F:EE:2C:D5:66:96:5C:A0:8D:B5:50:66:3C:B2:0B:41:23:43
Certificate issuer:       /CN=000d0fee2cd566965ca08db550663cb20b412343
Certificate serial:       01962F74A862FD2CD4BA231F34429A345FA2
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/AA0P7izVZpZcoI21UGY8sgtBI0M.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/52/e6fe09-c22d-45b7-a599-b941ba921b3f/1/AA0P7izVZpZcoI21UGY8sgtBI0M.mft
Manifest number:          0AB5
Signing time:             Sun 13 Apr 2025 14:01:36 +0000
Manifest this update:     Sun 13 Apr 2025 14:01:36 +0000
Manifest next update:     Mon 14 Apr 2025 14:01:36 +0000
Files and hashes:         1: AA0P7izVZpZcoI21UGY8sgtBI0M.crl (hash: AjCB4ueTqRRX+wkBKjym6x7PdXZFFKR0/13aiglX4oQ=)
                          2: c2eVtCtVjsi6i3vPHgLATuNVfoM.roa (hash: tozwRqmwgoJZSoOdc4bKHZ1xB9xQYRcf64jJhmtl4S4=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2f:74:a8:62:fd:2c:d4:ba:23:1f:34:42:9a:34:5f:a2
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=000d0fee2cd566965ca08db550663cb20b412343
        Validity
            Not Before: Apr 13 14:01:36 2025 GMT
            Not After : Apr 14 14:01:36 2025 GMT
        Subject: CN=cb845d6e2303077a1d5f4011bb4d7bd8f90ebca4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:db:e7:9c:38:22:e9:57:42:85:7c:ca:86:ee:1a:
                    2b:77:ff:ca:4a:52:f2:20:43:72:cf:5f:78:c2:e9:
                    22:49:55:f1:46:d5:15:5a:01:0a:a9:e9:60:e5:a4:
                    b2:b3:c9:13:2a:94:9c:11:51:87:88:af:09:58:f4:
                    ae:03:bd:0c:38:ef:c1:00:cd:5a:cd:8b:1b:cb:4c:
                    96:30:d3:ba:f4:8d:f6:53:ee:11:e5:65:a8:f6:de:
                    31:54:40:c1:8d:9a:eb:34:dd:60:ea:8a:52:d9:e1:
                    39:69:fc:e7:16:15:d5:88:02:a5:43:8f:84:59:08:
                    de:b7:2c:2b:2a:f9:b0:ae:00:16:9e:b8:48:df:4b:
                    1a:9b:99:b9:b7:ed:0e:06:c7:fc:23:85:4d:00:5d:
                    7c:5b:51:96:fc:52:f8:f4:94:04:9a:fb:6d:97:50:
                    83:eb:9e:04:74:bf:ed:73:58:d2:1a:45:50:15:2a:
                    6a:5f:36:d2:bd:36:44:1c:2c:c6:e4:0d:27:f7:82:
                    05:91:93:99:cb:32:08:41:ec:30:c2:00:fa:ea:c5:
                    8d:2f:d1:c9:45:13:25:8d:42:f3:43:ca:27:e8:a7:
                    24:3b:5b:f8:01:7f:4b:18:d7:bb:11:9b:af:0f:b9:
                    af:97:33:15:bc:6f:d4:21:b7:a6:ac:bf:d9:db:69:
                    3b:3b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CB:84:5D:6E:23:03:07:7A:1D:5F:40:11:BB:4D:7B:D8:F9:0E:BC:A4
            X509v3 Authority Key Identifier:
                keyid:00:0D:0F:EE:2C:D5:66:96:5C:A0:8D:B5:50:66:3C:B2:0B:41:23:43

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/AA0P7izVZpZcoI21UGY8sgtBI0M.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/52/e6fe09-c22d-45b7-a599-b941ba921b3f/1/AA0P7izVZpZcoI21UGY8sgtBI0M.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/52/e6fe09-c22d-45b7-a599-b941ba921b3f/1/AA0P7izVZpZcoI21UGY8sgtBI0M.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         ab:e1:59:01:26:72:2b:63:5c:45:74:04:31:f7:67:48:c9:c7:
         76:7b:30:30:39:7c:34:6a:9a:2a:6a:e7:8e:42:ce:8c:5c:82:
         43:4d:90:60:0a:22:61:48:56:99:d4:44:b9:e5:d0:28:a0:e8:
         f9:42:79:31:24:01:8e:19:03:d5:98:e9:e5:73:a5:8e:41:15:
         f5:db:dd:78:fa:22:43:d2:dd:03:21:ba:e6:79:d8:03:47:64:
         eb:b8:f2:c0:37:4e:f1:67:b2:ef:bd:4d:68:9b:58:77:17:6b:
         2b:49:2a:5b:63:bf:7f:e4:7a:15:6e:a9:63:af:61:ab:7d:44:
         d3:16:b4:70:b2:1a:a2:34:c8:a6:cc:48:f4:35:29:4e:0a:71:
         e4:77:1f:a7:63:dd:14:6f:b6:4b:b5:3c:ad:56:6f:4a:94:2e:
         ca:c3:6e:2a:23:7a:69:2a:f3:2d:0c:44:ed:4a:5a:1e:b2:3f:
         02:4c:af:cf:df:74:97:e1:1d:a8:aa:00:d2:2c:91:18:4e:25:
         62:ac:1c:54:71:7c:fc:84:f6:db:de:13:9a:d4:14:05:d5:d9:
         9b:b4:25:b0:5a:37:a4:f6:2c:69:db:08:11:3b:50:63:be:4e:
         5e:c3:54:f1:16:b6:25:14:bb:c6:cd:4b:9b:b5:cb:f4:98:cb:
         dd:a9:9c:3f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----