Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/60/f853f8-2071-49de-b6a0-497bedd71eb9/1/ruCNkzby5s0WXrcwKX_m0gyDw5o.mft
File:                     ruCNkzby5s0WXrcwKX_m0gyDw5o.mft (raw, json)
Hash identifier:          LdBFUfejKujgQuVTg+8pEinw2AeroUeTVHXKl8kiut0=
Subject key identifier:   74:EF:93:71:6D:13:D9:D6:B6:C0:C5:12:FB:47:5B:EF:3D:73:23:D4
Authority key identifier: AE:E0:8D:93:36:F2:E6:CD:16:5E:B7:30:29:7F:E6:D2:0C:83:C3:9A
Certificate issuer:       /CN=aee08d9336f2e6cd165eb730297fe6d20c83c39a
Certificate serial:       01962F745B0E413C8E9643339420DB888EE3
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/ruCNkzby5s0WXrcwKX_m0gyDw5o.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/60/f853f8-2071-49de-b6a0-497bedd71eb9/1/ruCNkzby5s0WXrcwKX_m0gyDw5o.mft
Manifest number:          1235
Signing time:             Sun 13 Apr 2025 14:01:16 +0000
Manifest this update:     Sun 13 Apr 2025 14:01:16 +0000
Manifest next update:     Mon 14 Apr 2025 14:01:16 +0000
Files and hashes:         1: BS_uFjltIa2QdarHmlrjr-N1lfU.roa (hash: In6YLEFgpwciZfoYuJdlvQqiCYVNTfn1vSODPqF0a14=)
                          2: KyGy1yiZWdO5Baarc34FhluuX6o.roa (hash: PluDSAEvqHUwzzXaYjhHiEYtCeH5Nq3YEFQLeyKhxg0=)
                          3: MTuQql9Rh88BHIoSEfi0N5xULhQ.roa (hash: c4KaJbDb+YQM6dcx+R5wyGu53GnRsEWM+y0F8Wui/6Q=)
                          4: aPIQbORfDqMdRus3FUsayPmmxSc.roa (hash: Bjwo2XfxvG4dmeK0piMxmJc9w9b8pe3Sc6uuX95IjTw=)
                          5: aTlzb3K-mNhSWkbEKv29Xc3ITT0.roa (hash: Y8Xw4D+ihA3z60B6zW48nfEFoOcri17+Bm+/jPd3INc=)
                          6: kL_2gvtUAFUX3-zbMD5AfdbkkFc.roa (hash: i5sBmgPlAzgh1HcdG7lTgrd/mdbOcJciFVKfQ5U2fAw=)
                          7: ruCNkzby5s0WXrcwKX_m0gyDw5o.crl (hash: e+yU7Kw484pTtN8dp4YOWshqzfZg9GaTzIvbvrhcIhY=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2f:74:5b:0e:41:3c:8e:96:43:33:94:20:db:88:8e:e3
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=aee08d9336f2e6cd165eb730297fe6d20c83c39a
        Validity
            Not Before: Apr 13 14:01:16 2025 GMT
            Not After : Apr 14 14:01:16 2025 GMT
        Subject: CN=74ef93716d13d9d6b6c0c512fb475bef3d7323d4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c5:ee:bb:60:93:dc:d9:5c:89:14:ed:34:61:19:
                    d5:94:e4:31:a9:76:25:e3:e9:c9:76:2f:8f:b2:8f:
                    8d:d9:e4:41:d8:6f:78:cb:d4:31:51:61:cd:0d:ca:
                    eb:33:71:be:70:cf:47:97:e6:24:87:ba:61:20:71:
                    b2:bf:71:45:b7:e9:15:61:6a:ce:4e:c7:fb:71:a2:
                    8b:98:f7:8a:b7:13:1b:5f:dd:d6:e7:46:b1:ae:5f:
                    18:07:60:d0:ed:23:bc:b7:b0:46:c7:68:9c:d5:b6:
                    77:13:b6:7b:bb:22:6c:4a:9f:29:40:ad:fd:b8:fb:
                    c1:d8:8b:91:4d:68:e3:b8:55:a2:17:e2:ce:14:e0:
                    95:68:90:09:53:5c:0e:28:a3:a8:ec:e9:fd:83:78:
                    e6:dc:61:cb:89:b9:73:a4:65:17:35:bf:2a:cb:27:
                    98:f6:fa:f5:10:d8:9e:35:34:5a:38:54:13:8a:cc:
                    d0:66:4b:96:35:b1:44:43:11:fb:2e:45:1d:d7:68:
                    b2:29:0b:33:31:dd:9c:c4:ef:80:ef:3d:46:96:a4:
                    10:d6:77:56:c2:b7:2b:67:8d:53:6b:1b:2d:f8:b6:
                    77:9f:77:dc:2d:50:41:9b:40:7a:8a:b3:de:d6:6b:
                    1e:3c:ce:1e:c7:53:df:d6:78:41:2c:51:c0:62:5c:
                    f8:f1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                74:EF:93:71:6D:13:D9:D6:B6:C0:C5:12:FB:47:5B:EF:3D:73:23:D4
            X509v3 Authority Key Identifier:
                keyid:AE:E0:8D:93:36:F2:E6:CD:16:5E:B7:30:29:7F:E6:D2:0C:83:C3:9A

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ruCNkzby5s0WXrcwKX_m0gyDw5o.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/60/f853f8-2071-49de-b6a0-497bedd71eb9/1/ruCNkzby5s0WXrcwKX_m0gyDw5o.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/60/f853f8-2071-49de-b6a0-497bedd71eb9/1/ruCNkzby5s0WXrcwKX_m0gyDw5o.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         4f:6a:34:cb:7e:f1:eb:ce:ea:c0:40:0a:25:a9:95:de:42:9b:
         74:6d:76:3c:d4:98:42:69:7a:a9:d7:fc:a2:be:a7:9e:1e:41:
         b8:91:e6:32:5b:7c:f6:fa:b5:db:f6:72:d4:cc:5a:2c:b1:6f:
         a2:05:8e:23:83:84:52:74:4e:a0:c4:3b:5c:a0:81:fd:cc:92:
         52:41:48:4f:b4:81:69:0b:1b:88:1e:ae:c5:96:db:5f:4a:96:
         d1:4e:c5:27:b0:35:e1:61:cc:36:ea:2d:1c:0e:28:4d:06:a9:
         0f:1a:77:8f:ae:0d:a5:28:55:6c:3a:91:26:23:ed:71:1b:7c:
         c9:2b:16:d4:5b:cc:58:8d:31:d4:c9:d3:4a:e7:23:92:a4:c2:
         db:04:14:30:f3:12:9f:37:b5:98:99:c6:5c:71:21:fe:d8:fd:
         b7:54:61:a0:15:aa:e9:0e:d5:8c:dd:90:62:fc:7a:19:a4:dd:
         19:82:fc:bc:07:1f:bf:5b:38:bb:71:ae:58:87:c0:bd:76:67:
         d2:35:ce:16:e0:6f:84:ee:c4:c5:99:72:32:ce:05:0c:b6:85:
         da:06:61:c5:14:6e:ce:88:b8:fa:64:e2:71:0c:86:fd:a9:c2:
         6a:f5:05:4d:40:d3:9a:7d:31:44:2e:52:bc:95:50:88:78:91:
         02:9e:1b:8c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----