Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/66/8dad1a-f2ce-4939-8b0f-2fc16d2c0016/1/o6_ki_2taeNcg9MTDTWJfM_F788.mft
File:                     o6_ki_2taeNcg9MTDTWJfM_F788.mft (raw, json)
Hash identifier:          R46DbxlcpTjKZT4gxO9ni3cFYu+EcZVc0kmLHY2WvQI=
Subject key identifier:   F2:B2:B3:B2:72:A8:05:B5:8D:2E:8F:EC:DE:E0:92:F6:AE:55:D4:60
Authority key identifier: A3:AF:E4:8B:FD:AD:69:E3:5C:83:D3:13:0D:35:89:7C:CF:C5:EF:CF
Certificate issuer:       /CN=a3afe48bfdad69e35c83d3130d35897ccfc5efcf
Certificate serial:       01962F071F5919AD839031511CEDDE644657
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/o6_ki_2taeNcg9MTDTWJfM_F788.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/66/8dad1a-f2ce-4939-8b0f-2fc16d2c0016/1/o6_ki_2taeNcg9MTDTWJfM_F788.mft
Manifest number:          14EB
Signing time:             Sun 13 Apr 2025 12:01:57 +0000
Manifest this update:     Sun 13 Apr 2025 12:01:57 +0000
Manifest next update:     Mon 14 Apr 2025 12:01:57 +0000
Files and hashes:         1: o6_ki_2taeNcg9MTDTWJfM_F788.crl (hash: mT89nj6n0vsdtHTxhRFcXcRK0ulEJzuE87g4INsG46k=)
                          2: yJJQVGNjQhmrsnJJE0kyWxcJ5BQ.roa (hash: CX3qQ5t9dhBSwuFe9dR68/qAqasgLIYBBJFzVhxytCY=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2f:07:1f:59:19:ad:83:90:31:51:1c:ed:de:64:46:57
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=a3afe48bfdad69e35c83d3130d35897ccfc5efcf
        Validity
            Not Before: Apr 13 12:01:57 2025 GMT
            Not After : Apr 14 12:01:57 2025 GMT
        Subject: CN=f2b2b3b272a805b58d2e8fecdee092f6ae55d460
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bc:e1:8b:e0:be:34:1d:ee:50:3a:0e:61:62:1a:
                    2f:f2:09:3b:59:27:4c:59:67:96:17:40:27:89:4c:
                    20:ed:c1:9d:f6:9c:06:5f:25:e5:28:ac:86:8f:ff:
                    e0:fe:0d:c6:27:72:4d:f1:c9:5c:00:f0:a5:e8:7a:
                    0a:80:59:fa:b7:33:25:6c:1f:5c:56:f4:d4:5a:9c:
                    f8:b6:a9:f7:2a:ce:39:31:5f:d7:f8:fa:74:75:ab:
                    a8:a9:14:58:00:cc:78:04:74:a4:5e:0d:90:dc:8c:
                    74:60:f5:ae:2d:40:f2:0f:16:12:1b:96:d2:90:ef:
                    1c:00:88:63:47:71:f8:1b:b1:e6:4b:8a:89:e7:17:
                    35:78:c2:2e:95:41:22:44:92:45:55:5a:54:e7:14:
                    34:f6:1b:38:22:da:99:b3:23:54:0a:be:42:17:d2:
                    d4:51:76:c1:94:93:bc:68:ee:71:23:e1:8f:28:8f:
                    4b:70:0d:e5:5b:1b:22:39:94:c9:e0:6d:94:b6:b5:
                    a3:f7:c0:92:e1:5f:7d:8e:8a:d0:ef:d9:85:eb:e2:
                    14:6a:41:6a:dc:e2:3c:49:de:1d:4e:37:f5:d8:bd:
                    f3:08:64:94:22:4b:08:a5:17:c2:c1:a8:8c:ef:31:
                    1c:78:60:9f:d8:ae:94:fd:6a:d3:14:b7:16:ed:07:
                    5d:67
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F2:B2:B3:B2:72:A8:05:B5:8D:2E:8F:EC:DE:E0:92:F6:AE:55:D4:60
            X509v3 Authority Key Identifier:
                keyid:A3:AF:E4:8B:FD:AD:69:E3:5C:83:D3:13:0D:35:89:7C:CF:C5:EF:CF

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/o6_ki_2taeNcg9MTDTWJfM_F788.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/66/8dad1a-f2ce-4939-8b0f-2fc16d2c0016/1/o6_ki_2taeNcg9MTDTWJfM_F788.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/66/8dad1a-f2ce-4939-8b0f-2fc16d2c0016/1/o6_ki_2taeNcg9MTDTWJfM_F788.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         5c:57:2d:f5:50:9c:a8:7b:24:0e:2c:19:c2:ea:8c:e2:f3:cb:
         84:3d:49:93:46:7a:d4:ad:af:38:1d:45:78:01:77:9b:a4:2f:
         17:6d:b2:53:65:bf:c1:51:37:92:ba:73:1d:6e:fa:23:ce:9c:
         2f:da:06:0d:ff:8a:72:7c:6b:0c:2a:1d:3a:43:79:20:fc:4d:
         5d:b4:1c:18:7e:13:fa:26:a8:ba:45:cb:df:b0:51:9e:47:0e:
         47:ad:50:30:69:78:ec:ca:9b:56:1a:59:ba:71:4d:d8:fd:ad:
         54:4e:f0:14:6c:c2:fd:88:4a:24:9a:72:84:f4:7a:56:16:9c:
         39:99:24:2d:5f:11:00:ad:5a:12:20:1b:a9:f7:02:8e:94:0c:
         ee:bc:da:6d:90:9e:17:e9:e4:b0:25:9a:be:fd:bc:fd:69:35:
         7c:b4:0d:e8:ad:63:e3:fc:9a:3d:ae:07:7d:12:aa:2d:07:d6:
         1e:4b:97:26:a3:67:f1:34:c2:d4:aa:3c:b0:79:68:68:70:ee:
         b2:be:43:c3:fb:05:b3:6d:0e:f6:8c:39:5e:10:2b:2b:1d:2a:
         53:6c:3d:9d:57:b4:4a:02:ca:36:62:4b:88:6c:35:47:c4:db:
         bf:dc:bc:4c:78:5b:42:00:9a:25:3b:c6:a0:81:fc:4d:a2:57:
         21:8d:0c:da
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----