Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/68/beb3a8-4b72-48ec-8e04-03cce3969f9c/1/aJQuPste6nkqdvray-wBqFaOl_Q.mft
File:                     aJQuPste6nkqdvray-wBqFaOl_Q.mft (raw, json)
Hash identifier:          79z9c+YsnVXDU91m3lJXpg2x4+KZmt0CEt3LtmlLeIw=
Subject key identifier:   6D:42:74:37:16:3E:10:99:0B:8A:2B:06:2D:BD:F3:ED:14:34:DC:4F
Authority key identifier: 68:94:2E:3E:CB:5E:EA:79:2A:76:FA:DA:CB:EC:01:A8:56:8E:97:F4
Certificate issuer:       /CN=68942e3ecb5eea792a76fadacbec01a8568e97f4
Certificate serial:       01962E2AEF299FBC1F33C61DC30A49BA0343
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/aJQuPste6nkqdvray-wBqFaOl_Q.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/68/beb3a8-4b72-48ec-8e04-03cce3969f9c/1/aJQuPste6nkqdvray-wBqFaOl_Q.mft
Manifest number:          14EA
Signing time:             Sun 13 Apr 2025 08:01:27 +0000
Manifest this update:     Sun 13 Apr 2025 08:01:27 +0000
Manifest next update:     Mon 14 Apr 2025 08:01:27 +0000
Files and hashes:         1: 2I7Ug_0TKUirYBKdCRFB3X-yPVM.roa (hash: OuAKBuCtiZrdtqQo3Ia+YQ9DdlyXDqDuhn9BW+I9wGc=)
                          2: aJQuPste6nkqdvray-wBqFaOl_Q.crl (hash: 76jzjUuJHDhjCNMorJrRaHWlUR+aJfqg8Gddu97SY+Q=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2e:2a:ef:29:9f:bc:1f:33:c6:1d:c3:0a:49:ba:03:43
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=68942e3ecb5eea792a76fadacbec01a8568e97f4
        Validity
            Not Before: Apr 13 08:01:27 2025 GMT
            Not After : Apr 14 08:01:27 2025 GMT
        Subject: CN=6d427437163e10990b8a2b062dbdf3ed1434dc4f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a6:ce:b5:5d:01:a2:b0:75:6d:46:df:d7:1d:2c:
                    50:0a:3d:84:5b:75:4e:fe:84:aa:34:cd:ab:22:fa:
                    98:f7:8e:8f:da:44:a2:61:e7:6d:a6:86:12:88:c2:
                    4a:d2:94:9e:2a:ac:c6:b7:60:c5:b8:da:c9:ab:3a:
                    82:da:76:ee:d5:ce:2d:ec:8f:09:82:cc:23:5f:b5:
                    c3:d9:2c:7f:f4:a5:32:2e:a8:03:a8:64:13:32:08:
                    5f:85:ca:75:f7:49:4f:45:51:85:d9:16:54:1b:83:
                    62:e2:67:99:6d:72:4f:c1:9f:ce:f2:07:ae:bc:78:
                    f4:8f:f6:33:fb:42:f6:7a:27:e0:a0:30:e7:84:3e:
                    28:07:34:ec:d8:7d:ee:bd:89:25:25:f2:eb:d5:34:
                    d8:fc:3a:04:da:3b:ab:a1:9f:ca:c8:88:23:b3:81:
                    ef:ea:94:02:b6:af:78:8e:bf:3e:f6:40:e3:ee:a1:
                    ad:e2:53:70:04:39:2f:ad:91:c7:67:11:00:6e:6f:
                    0d:04:99:a9:e2:0a:09:55:25:61:9f:46:5a:17:18:
                    7f:06:a4:7d:80:64:11:b3:dd:60:d2:32:86:24:32:
                    25:01:1b:9f:20:6b:43:2c:82:27:30:69:7f:51:dd:
                    28:30:08:be:2b:8f:8a:0c:11:83:60:be:69:52:d0:
                    6f:ef
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6D:42:74:37:16:3E:10:99:0B:8A:2B:06:2D:BD:F3:ED:14:34:DC:4F
            X509v3 Authority Key Identifier:
                keyid:68:94:2E:3E:CB:5E:EA:79:2A:76:FA:DA:CB:EC:01:A8:56:8E:97:F4

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/aJQuPste6nkqdvray-wBqFaOl_Q.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/68/beb3a8-4b72-48ec-8e04-03cce3969f9c/1/aJQuPste6nkqdvray-wBqFaOl_Q.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/68/beb3a8-4b72-48ec-8e04-03cce3969f9c/1/aJQuPste6nkqdvray-wBqFaOl_Q.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         62:0e:06:05:79:9d:0d:e2:db:32:9a:e1:6f:1e:13:69:25:c8:
         0a:9a:a6:fc:2a:03:e5:5e:d6:49:e4:b9:e6:79:40:94:bf:b2:
         1d:d6:9e:9b:84:8c:ec:52:d5:64:d4:3c:e6:24:60:62:c7:88:
         0d:c1:e4:eb:95:92:e4:67:78:fc:e7:b8:89:ae:19:c2:39:d0:
         27:29:30:93:69:9a:b0:22:7c:d3:6e:92:8d:0c:1a:2a:15:df:
         3f:34:c3:58:d7:3a:03:9f:30:4e:37:97:e0:9d:b5:98:63:76:
         a6:d2:8a:23:b7:96:58:74:df:c2:ef:56:23:15:6a:c1:2f:b4:
         1d:8d:33:d6:b2:75:4b:53:07:3d:d6:96:2d:76:63:67:93:8f:
         ee:db:b5:fd:a8:f7:39:f1:64:ba:c3:22:f5:1c:6c:c0:f8:2b:
         f6:1e:1a:89:85:d1:bc:02:95:71:07:c6:ec:12:15:30:15:d4:
         c6:54:90:ee:31:01:b3:59:b2:c2:b4:08:58:0c:6d:ef:07:d7:
         81:09:34:4c:53:3b:8f:9f:ab:d2:36:dd:23:a4:a8:e9:fa:e8:
         bc:dc:ca:45:b7:c2:15:c2:f6:55:64:44:86:d7:ed:15:57:eb:
         35:9c:71:0e:fa:bc:98:de:a2:12:c5:ae:d9:dc:af:90:30:d8:
         5c:03:9f:a1
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZYuKu8pn7wfM8YdwwpJugNDMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDY4OTQyZTNlY2I1ZWVhNzkyYTc2ZmFkYWNiZWMwMWE4NTY4
ZTk3ZjQwHhcNMjUwNDEzMDgwMTI3WhcNMjUwNDE0MDgwMTI3WjAzMTEwLwYDVQQD
Eyg2ZDQyNzQzNzE2M2UxMDk5MGI4YTJiMDYyZGJkZjNlZDE0MzRkYzRmMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAps61XQGisHVtRt/XHSxQCj2EW3VO
/oSqNM2rIvqY946P2kSiYedtpoYSiMJK0pSeKqzGt2DFuNrJqzqC2nbu1c4t7I8J
gswjX7XD2Sx/9KUyLqgDqGQTMghfhcp190lPRVGF2RZUG4Ni4meZbXJPwZ/O8geu
vHj0j/Yz+0L2eifgoDDnhD4oBzTs2H3uvYklJfLr1TTY/DoE2juroZ/KyIgjs4Hv
6pQCtq94jr8+9kDj7qGt4lNwBDkvrZHHZxEAbm8NBJmp4goJVSVhn0ZaFxh/BqR9
gGQRs91g0jKGJDIlARufIGtDLIInMGl/Ud0oMAi+K4+KDBGDYL5pUtBv7wIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFG1CdDcWPhCZC4orBi298+0UNNxPMB8GA1UdIwQY
MBaAFGiULj7LXup5Knb62svsAahWjpf0MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvYUpRdVBzdGU2bmtxZHZyYXktd0JxRmFPbF9RLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82OC9iZWIzYTgtNGI3Mi00OGVjLThlMDQt
MDNjY2UzOTY5ZjljLzEvYUpRdVBzdGU2bmtxZHZyYXktd0JxRmFPbF9RLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC82OC9iZWIzYTgtNGI3Mi00OGVjLThlMDQtMDNjY2UzOTY5Zjlj
LzEvYUpRdVBzdGU2bmtxZHZyYXktd0JxRmFPbF9RLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAYg4GBXmd
DeLbMprhbx4TaSXICpqm/CoD5V7WSeS55nlAlL+yHdaem4SM7FLVZNQ85iRgYseI
DcHk65WS5Gd4/Oe4ia4ZwjnQJykwk2masCJ8026SjQwaKhXfPzTDWNc6A58wTjeX
4J21mGN2ptKKI7eWWHTfwu9WIxVqwS+0HY0z1rJ1S1MHPdaWLXZjZ5OP7tu1/aj3
OfFkusMi9RxswPgr9h4aiYXRvAKVcQfG7BIVMBXUxlSQ7jEBs1mywrQIWAxt7wfX
gQk0TFM7j5+r0jbdI6So6frovNzKRbfCFcL2VWREhtftFVfrNZxxDvq8mN6iEsWu
2dyvkDDYXAOfoQ==
-----END CERTIFICATE-----