Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/63/67603a-f529-4b18-99fb-503b99d5ad68/1/alQ3DEupveK5g3a_j5QqlJJsFRk.mft
File:                     alQ3DEupveK5g3a_j5QqlJJsFRk.mft (raw, json)
Hash identifier:          FlUye1Eqz5V33tYo4QGsyFP5k03Z419pqOEOfpORDLA=
Subject key identifier:   26:2E:50:57:2A:70:F9:D4:CB:D4:A8:6F:13:93:79:48:BD:60:6E:3C
Authority key identifier: 6A:54:37:0C:4B:A9:BD:E2:B9:83:76:BF:8F:94:2A:94:92:6C:15:19
Certificate issuer:       /CN=6a54370c4ba9bde2b98376bf8f942a94926c1519
Certificate serial:       01962F3DB643D3405D727FEE71B3B534F34F
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/alQ3DEupveK5g3a_j5QqlJJsFRk.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/63/67603a-f529-4b18-99fb-503b99d5ad68/1/alQ3DEupveK5g3a_j5QqlJJsFRk.mft
Manifest number:          01DE
Signing time:             Sun 13 Apr 2025 13:01:35 +0000
Manifest this update:     Sun 13 Apr 2025 13:01:35 +0000
Manifest next update:     Mon 14 Apr 2025 13:01:35 +0000
Files and hashes:         1: alQ3DEupveK5g3a_j5QqlJJsFRk.crl (hash: z0509Qp7LOT94e1lSVE0AjodRMCG2jsJuSb8i7hPqgY=)
                          2: bFwnlPb3JkTM0-_fQyjycPLTOXg.roa (hash: T3+8uVMg57oldqwBxpb7FIVcJ3Kl6M0sjRANKp19Uzo=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2f:3d:b6:43:d3:40:5d:72:7f:ee:71:b3:b5:34:f3:4f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6a54370c4ba9bde2b98376bf8f942a94926c1519
        Validity
            Not Before: Apr 13 13:01:35 2025 GMT
            Not After : Apr 14 13:01:35 2025 GMT
        Subject: CN=262e50572a70f9d4cbd4a86f13937948bd606e3c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ad:88:33:16:d3:15:82:9a:66:e6:ef:db:6b:07:
                    09:0a:47:33:ea:a7:f6:b8:87:7a:6a:8e:1d:a9:d5:
                    78:a4:1c:ce:1f:df:56:cb:dd:88:12:f3:52:0a:ac:
                    39:0e:92:aa:b5:59:fe:7a:80:d4:0d:a7:20:5e:0a:
                    68:1c:f6:6a:8a:ac:ec:79:51:6d:9a:8a:27:af:cb:
                    81:65:27:90:4b:39:7d:08:59:68:2f:c4:4c:0c:ab:
                    f5:2a:73:86:a1:4f:ed:1e:62:a9:dc:7e:e2:9b:8e:
                    68:b7:c5:00:11:4f:a8:bf:3c:b3:85:50:41:b4:67:
                    f3:aa:d5:97:2d:28:76:13:38:6d:64:dd:a4:43:c0:
                    64:f4:4f:28:fc:d2:e6:0e:39:ec:cd:dc:a8:a4:80:
                    0f:ce:74:7e:39:57:76:a4:6b:ed:0c:5a:04:3b:dd:
                    6b:e3:8f:b6:5e:d0:37:95:78:53:7e:1b:08:ea:8a:
                    9a:f4:b3:34:84:39:a2:8a:ff:3d:33:53:9c:52:b6:
                    6d:04:71:63:1f:11:c7:0f:e9:ad:96:77:bb:2e:10:
                    66:c9:e0:12:c1:cb:2d:50:d5:f2:7e:59:da:d1:e4:
                    53:ba:ca:ab:84:d1:4a:c2:2a:04:31:14:13:55:ce:
                    51:34:53:ea:0e:9c:55:7a:f4:75:65:a8:30:d9:9f:
                    e6:3d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                26:2E:50:57:2A:70:F9:D4:CB:D4:A8:6F:13:93:79:48:BD:60:6E:3C
            X509v3 Authority Key Identifier:
                keyid:6A:54:37:0C:4B:A9:BD:E2:B9:83:76:BF:8F:94:2A:94:92:6C:15:19

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/alQ3DEupveK5g3a_j5QqlJJsFRk.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/63/67603a-f529-4b18-99fb-503b99d5ad68/1/alQ3DEupveK5g3a_j5QqlJJsFRk.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/63/67603a-f529-4b18-99fb-503b99d5ad68/1/alQ3DEupveK5g3a_j5QqlJJsFRk.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         58:2f:50:9b:64:07:c1:3e:13:ad:1f:47:35:ee:c2:82:1b:8e:
         26:9f:40:35:af:3c:a6:8f:28:91:9f:3f:5e:66:48:46:5c:bd:
         6c:43:ca:98:94:a9:ab:61:08:6d:5e:91:08:5d:85:ca:d0:c0:
         fa:0a:ff:d5:66:c6:2e:fd:56:bb:96:ba:c0:f9:dd:85:b5:86:
         3a:f5:7d:fd:08:e5:00:aa:87:d1:6b:3f:c2:99:fc:94:83:63:
         bf:32:e4:82:96:d9:bd:41:99:df:9d:89:75:90:12:b0:4d:bf:
         d5:ee:06:ff:d2:d4:38:e3:d3:0e:8a:e8:23:fa:54:8c:b0:bb:
         35:8f:62:93:ee:e2:01:f3:47:88:da:2c:07:ee:86:ba:8b:cc:
         a5:04:fb:f0:1e:14:20:64:82:53:eb:2c:9b:3b:47:b0:8e:9c:
         98:a7:da:8e:8f:f4:e9:1e:10:b4:06:ca:09:f8:6e:cc:c9:4d:
         0e:5a:a5:3d:03:f4:dc:ea:6e:bf:d1:45:c8:27:c1:4e:3d:6b:
         3f:34:3a:b4:b9:ff:a8:61:af:38:f4:1b:65:19:28:2c:cf:e3:
         42:42:52:8f:36:7b:e3:d5:21:7a:6b:05:1b:e4:42:5f:01:bb:
         84:45:d0:2a:99:db:da:a6:42:75:ea:38:9a:a1:c2:ab:9d:ee:
         8c:38:37:da
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----