Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5b/8d2e35-9fed-4fdf-9034-76ae812f076c/1/SlSCGpGx29xzvdo0vO1xBwZ5ZK0.mft
File:                     SlSCGpGx29xzvdo0vO1xBwZ5ZK0.mft (raw, json)
Hash identifier:          Fa+HKDfOxxpfn22hTO+q7dOIuhATdKHhKIZVRPd9zQ4=
Subject key identifier:   C6:73:C2:32:AF:C8:56:D1:A9:E9:3D:13:17:CB:10:8C:D9:AC:27:34
Authority key identifier: 4A:54:82:1A:91:B1:DB:DC:73:BD:DA:34:BC:ED:71:07:06:79:64:AD
Certificate issuer:       /CN=4a54821a91b1dbdc73bdda34bced7107067964ad
Certificate serial:       01962F06CC5F8B70E5625C9E45FCF3AE10F6
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/SlSCGpGx29xzvdo0vO1xBwZ5ZK0.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/5b/8d2e35-9fed-4fdf-9034-76ae812f076c/1/SlSCGpGx29xzvdo0vO1xBwZ5ZK0.mft
Manifest number:          0DE6
Signing time:             Sun 13 Apr 2025 12:01:36 +0000
Manifest this update:     Sun 13 Apr 2025 12:01:36 +0000
Manifest next update:     Mon 14 Apr 2025 12:01:36 +0000
Files and hashes:         1: JTPc5_QTZJxWgsLJFBAm1KUSpd0.roa (hash: ODeawNoXLkHerXTl+flqRC6XG80opVvKSVEN1ax5xro=)
                          2: SlSCGpGx29xzvdo0vO1xBwZ5ZK0.crl (hash: 36Nm6y3UOw6INbEUruPv4+E8/XSdscfHXn8dufHYHY0=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2f:06:cc:5f:8b:70:e5:62:5c:9e:45:fc:f3:ae:10:f6
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4a54821a91b1dbdc73bdda34bced7107067964ad
        Validity
            Not Before: Apr 13 12:01:36 2025 GMT
            Not After : Apr 14 12:01:36 2025 GMT
        Subject: CN=c673c232afc856d1a9e93d1317cb108cd9ac2734
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a5:c4:63:18:44:9b:e4:a8:d3:c0:25:98:b0:85:
                    d6:dc:e0:12:41:37:1a:f5:0d:c0:34:ad:d6:06:29:
                    62:48:3c:96:8a:88:d1:f0:54:23:a8:ee:88:fb:c5:
                    92:81:62:f5:63:c0:b3:d1:77:8b:ab:7a:c5:d0:e9:
                    17:9c:64:13:55:6d:b5:40:0c:00:55:80:39:e8:f6:
                    f6:59:02:f1:20:ce:52:7b:b0:03:b2:6c:15:f0:2d:
                    5c:5e:20:15:e9:49:b3:fb:74:5d:40:01:3b:21:c5:
                    bb:64:77:ba:44:3d:0d:15:75:c8:d4:74:15:a4:0d:
                    b2:39:22:e4:cd:5d:c4:98:74:6c:bc:7c:5e:24:c2:
                    37:97:27:3f:05:db:44:26:bd:1e:df:95:ad:6d:35:
                    5d:c9:e1:05:5c:ec:df:a9:54:60:8f:97:ee:e1:54:
                    62:e5:4c:71:01:a4:f7:cd:f7:a7:d0:7c:d0:79:8e:
                    05:f0:c9:f0:67:9c:2e:10:0a:2a:b7:5c:46:f3:90:
                    38:6a:4c:75:19:e2:c9:08:1c:a0:25:e5:57:65:a5:
                    25:90:f8:e3:87:11:71:bc:62:67:93:38:a2:c7:ef:
                    34:38:60:fb:f2:c0:6f:c0:71:6c:a0:1d:6a:a2:09:
                    7a:ab:7c:4a:eb:0a:1c:af:d0:e7:03:36:64:e6:35:
                    f9:b1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C6:73:C2:32:AF:C8:56:D1:A9:E9:3D:13:17:CB:10:8C:D9:AC:27:34
            X509v3 Authority Key Identifier:
                keyid:4A:54:82:1A:91:B1:DB:DC:73:BD:DA:34:BC:ED:71:07:06:79:64:AD

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/SlSCGpGx29xzvdo0vO1xBwZ5ZK0.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5b/8d2e35-9fed-4fdf-9034-76ae812f076c/1/SlSCGpGx29xzvdo0vO1xBwZ5ZK0.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/5b/8d2e35-9fed-4fdf-9034-76ae812f076c/1/SlSCGpGx29xzvdo0vO1xBwZ5ZK0.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         9a:08:67:3e:60:05:3a:e2:88:61:a8:a8:9b:72:f9:06:aa:0f:
         3d:ad:01:5a:39:44:2f:39:9a:00:d7:97:a6:e9:c6:f7:6a:78:
         67:f0:91:ca:41:3f:68:7a:a2:5a:a1:48:32:60:93:99:5e:b6:
         b3:64:d6:5c:2b:f8:6b:aa:a1:6d:ec:92:a8:15:96:7e:98:47:
         1a:bf:72:aa:bb:a8:5b:60:80:ae:fd:3a:d8:95:ec:97:50:98:
         b8:77:b4:bd:aa:cc:8a:c7:65:e5:3e:15:0e:8a:d4:47:a2:1a:
         82:15:45:3d:5d:89:96:8e:89:be:80:09:32:72:9e:57:47:e2:
         21:65:ec:82:7a:71:ed:f0:13:6b:69:d8:5f:98:55:d7:9e:42:
         41:22:8f:73:33:91:b8:15:2f:68:d1:c6:91:fb:08:28:c5:36:
         92:52:4a:70:f0:d5:57:8e:4a:70:12:f9:75:98:c2:12:2d:b0:
         20:85:f9:79:08:b0:53:e8:cd:80:c9:de:2c:3c:8c:57:7b:34:
         e5:fa:8f:70:bf:7d:be:26:b3:a8:21:d6:16:e9:44:87:be:51:
         60:75:49:6b:fd:1d:d1:6b:d2:de:84:17:ed:2f:43:bf:c9:30:
         e0:51:10:7a:1a:d7:dc:1a:9a:90:de:01:1c:e9:73:60:20:a9:
         16:08:a7:cf
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----