Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/62/4737c9-e263-44e7-8fed-57c955c9c85d/1/AGsGtdD_EADhDEJ27qCICvIJ16I.mft
File:                     AGsGtdD_EADhDEJ27qCICvIJ16I.mft (raw, json)
Hash identifier:          gMCVgKw1LcWnYtQCVERL466muvDjsH5pgFEJfRFSe2E=
Subject key identifier:   9F:F7:81:34:1C:66:E3:32:DC:39:50:BD:AC:C7:6C:04:BF:B0:2A:D4
Authority key identifier: 00:6B:06:B5:D0:FF:10:00:E1:0C:42:76:EE:A0:88:0A:F2:09:D7:A2
Certificate issuer:       /CN=006b06b5d0ff1000e10c4276eea0880af209d7a2
Certificate serial:       01962DF3BCA71847C4DDB58E14200CC493EB
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/AGsGtdD_EADhDEJ27qCICvIJ16I.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/62/4737c9-e263-44e7-8fed-57c955c9c85d/1/AGsGtdD_EADhDEJ27qCICvIJ16I.mft
Manifest number:          081C
Signing time:             Sun 13 Apr 2025 07:01:10 +0000
Manifest this update:     Sun 13 Apr 2025 07:01:10 +0000
Manifest next update:     Mon 14 Apr 2025 07:01:10 +0000
Files and hashes:         1: AGsGtdD_EADhDEJ27qCICvIJ16I.crl (hash: McCBiY86OLXGbdrvX5QJ/zGiFPtPDsBQobGcAQm1xi0=)
                          2: KWN7lbu9UX4daUEdNDAK3ZMrFAk.roa (hash: WqU1UFiFL55OvehHLohuI3Znyc7Zm1Aa844JXIgkQ7A=)
                          3: RuH2k0iAjasiUyAH22AdPFV5Ae0.roa (hash: +Reg0vgoBRw6w4QQfuC6Wd/elCxMYo7/ChLckPoqJlc=)
                          4: wC6GvOL96y7ng1OaBtu0ACc0Uv8.roa (hash: Pb/46jJY/4NqGVEPi/tZl2cVHTdO0P2kZSbGSJnkcFU=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2d:f3:bc:a7:18:47:c4:dd:b5:8e:14:20:0c:c4:93:eb
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=006b06b5d0ff1000e10c4276eea0880af209d7a2
        Validity
            Not Before: Apr 13 07:01:10 2025 GMT
            Not After : Apr 14 07:01:10 2025 GMT
        Subject: CN=9ff781341c66e332dc3950bdacc76c04bfb02ad4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d3:7f:0f:a8:96:1f:0a:95:56:99:93:46:54:ec:
                    13:c7:3e:df:80:5a:03:99:0e:9f:f8:75:6d:0b:c1:
                    f2:33:ce:80:f1:e9:a4:a4:52:a1:17:38:f3:9b:8e:
                    f8:39:94:a4:b0:7a:8f:36:c4:33:4a:24:30:19:5f:
                    b3:61:99:e9:e8:33:78:cf:7d:56:c4:f4:d5:62:dd:
                    9a:6b:1a:56:67:ba:bf:92:d5:08:dc:c5:1a:60:ad:
                    61:c8:b2:5f:81:68:f5:c3:91:86:d9:4b:68:dd:9d:
                    ad:a1:4f:5a:50:d4:92:a1:02:61:d5:d7:a5:a4:7c:
                    4b:d2:67:33:59:e8:43:d3:1e:b1:2f:de:0e:29:c0:
                    2e:05:c6:da:a2:9f:1b:a4:58:2c:92:a0:62:ac:d1:
                    87:36:46:fd:92:5b:4c:6d:45:5d:2c:40:78:18:74:
                    7b:07:b8:38:43:78:e5:7e:e7:9c:9d:02:63:2f:eb:
                    dd:ad:7b:f3:ca:53:bc:56:59:bd:1b:76:82:53:5e:
                    1b:78:34:0b:b6:21:08:0a:f7:c3:3a:53:12:a1:3b:
                    fd:fa:39:46:b6:db:b7:2c:55:ab:fc:82:b7:b8:a0:
                    73:de:b7:75:fb:8f:f3:77:58:6d:04:9a:7f:f5:e2:
                    e1:0d:8c:e6:6b:e7:e7:08:66:65:32:e0:1d:6f:80:
                    67:45
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9F:F7:81:34:1C:66:E3:32:DC:39:50:BD:AC:C7:6C:04:BF:B0:2A:D4
            X509v3 Authority Key Identifier:
                keyid:00:6B:06:B5:D0:FF:10:00:E1:0C:42:76:EE:A0:88:0A:F2:09:D7:A2

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/AGsGtdD_EADhDEJ27qCICvIJ16I.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/62/4737c9-e263-44e7-8fed-57c955c9c85d/1/AGsGtdD_EADhDEJ27qCICvIJ16I.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/62/4737c9-e263-44e7-8fed-57c955c9c85d/1/AGsGtdD_EADhDEJ27qCICvIJ16I.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         7f:a8:e7:79:1e:a8:14:21:50:fa:9a:7a:9a:84:52:c8:be:20:
         31:50:59:7f:bb:5b:0e:8b:4c:2d:b4:36:c3:ef:96:c2:3c:a4:
         f2:58:89:6f:74:52:57:c3:36:bd:ca:3b:be:ce:45:79:1d:77:
         97:b0:dc:9e:ca:df:48:9a:54:63:e7:c4:1d:52:f3:e0:ee:fd:
         a5:be:35:f8:65:dc:96:db:bd:2a:01:21:42:98:73:94:af:c7:
         4f:b7:23:cb:7b:8e:44:72:f6:fb:43:76:a1:7c:59:a2:e9:04:
         42:d7:5a:ce:6b:0b:3d:09:60:81:65:b1:07:39:32:23:08:d9:
         95:e2:53:a6:6f:c3:7a:45:ce:0c:55:34:cf:42:cf:a1:b8:a8:
         3d:9c:3f:3d:db:d1:d7:2b:9f:02:f4:36:ab:7b:83:44:58:2a:
         04:da:5b:cb:ee:c9:92:20:1c:51:5d:59:53:5f:4e:67:53:b9:
         0f:c4:9b:0c:72:3a:ec:d5:ac:b8:fc:1d:4b:df:fd:a6:2f:aa:
         b6:e7:a5:3d:7b:6d:bb:34:31:b1:a2:4e:f5:8a:35:7f:a3:a6:
         68:21:53:fd:3e:72:61:45:ff:93:22:d5:6b:34:a7:8a:6b:82:
         54:c3:50:ca:b2:eb:d5:ec:89:43:d2:02:d5:32:a2:a4:3c:dc:
         b6:7e:7a:0d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----