Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/69/311f57-6404-446a-9f08-11b92906406d/1/A1KD5iNe2yXotUdJtihfXj74U3E.mft
File:                     A1KD5iNe2yXotUdJtihfXj74U3E.mft (raw, json)
Hash identifier:          hCRiVKn5Eh094HJ/Bj7VbLr4f+XeuQf4U8bpvGJXiKw=
Subject key identifier:   2C:17:7D:0C:73:0B:E0:42:FE:81:B5:E8:0F:4B:CC:CC:D0:DA:3B:72
Authority key identifier: 03:52:83:E6:23:5E:DB:25:E8:B5:47:49:B6:28:5F:5E:3E:F8:53:71
Certificate issuer:       /CN=035283e6235edb25e8b54749b6285f5e3ef85371
Certificate serial:       01962FAB89FFB634675561505326EAED6CF8
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/A1KD5iNe2yXotUdJtihfXj74U3E.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/69/311f57-6404-446a-9f08-11b92906406d/1/A1KD5iNe2yXotUdJtihfXj74U3E.mft
Manifest number:          38
Signing time:             Sun 13 Apr 2025 15:01:33 +0000
Manifest this update:     Sun 13 Apr 2025 15:01:33 +0000
Manifest next update:     Mon 14 Apr 2025 15:01:33 +0000
Files and hashes:         1: A1KD5iNe2yXotUdJtihfXj74U3E.crl (hash: JxiWk2XiC579mRq7pjfa/Wp2CnOumE7LnGERzaKXRc4=)
                          2: z96_ZJgr9Ouwu3H857DM3qPVUxI.roa (hash: XUjlH+TkzMgkjT2OPVskc/V8eVbqCCBWMoR0ix6MWrI=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2f:ab:89:ff:b6:34:67:55:61:50:53:26:ea:ed:6c:f8
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=035283e6235edb25e8b54749b6285f5e3ef85371
        Validity
            Not Before: Apr 13 15:01:33 2025 GMT
            Not After : Apr 14 15:01:33 2025 GMT
        Subject: CN=2c177d0c730be042fe81b5e80f4bccccd0da3b72
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b4:99:50:62:4c:5b:e3:a4:23:e4:4f:9f:94:2b:
                    94:2b:ff:9d:98:2d:1d:59:93:77:1c:be:50:1e:67:
                    88:69:c4:93:6f:6f:f0:15:c8:1e:58:bd:12:d7:b2:
                    85:72:e1:88:0d:3c:32:c3:38:0f:b1:5a:70:f8:f6:
                    d1:37:a3:51:13:6c:bf:81:0f:c0:e1:35:7b:a8:5e:
                    34:57:36:41:ac:0d:e1:5f:17:02:20:b1:18:dc:9e:
                    0e:bb:90:64:94:cf:76:80:e3:5d:12:2f:85:7f:91:
                    9c:41:f5:d0:36:c5:e5:03:d9:1d:eb:c8:95:51:8d:
                    bd:0b:56:85:88:f3:aa:22:ab:4a:23:71:07:81:a8:
                    d4:86:6b:73:3a:2c:7f:6e:79:8b:0e:1a:23:e6:86:
                    32:a4:98:e4:d4:0c:2e:ff:08:b7:2a:a2:d1:f7:1f:
                    49:b1:1c:29:4e:27:5e:07:8f:aa:e2:39:6f:55:6d:
                    4d:cc:c3:08:05:c2:ea:a3:77:5e:a0:d3:cf:a0:6d:
                    8f:fd:8f:33:44:05:35:e6:a1:e4:6c:5b:94:44:96:
                    06:e3:31:86:eb:26:2f:82:60:9c:9c:29:f7:10:6a:
                    90:56:f8:db:3b:08:1e:77:cc:cf:5d:26:11:55:d2:
                    a3:6f:af:c4:2f:ff:d5:e4:b8:3e:61:61:2b:06:eb:
                    15:d5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2C:17:7D:0C:73:0B:E0:42:FE:81:B5:E8:0F:4B:CC:CC:D0:DA:3B:72
            X509v3 Authority Key Identifier:
                keyid:03:52:83:E6:23:5E:DB:25:E8:B5:47:49:B6:28:5F:5E:3E:F8:53:71

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/A1KD5iNe2yXotUdJtihfXj74U3E.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/69/311f57-6404-446a-9f08-11b92906406d/1/A1KD5iNe2yXotUdJtihfXj74U3E.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/69/311f57-6404-446a-9f08-11b92906406d/1/A1KD5iNe2yXotUdJtihfXj74U3E.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         39:1e:78:df:4d:17:53:33:d0:3d:5b:a8:9d:3d:c6:ae:f7:7c:
         62:5c:1e:02:cb:a8:bc:d0:c9:25:62:1a:e6:01:0c:a3:df:5e:
         6e:51:73:4c:a0:ae:78:35:6e:dd:a0:01:ff:6f:82:ef:9f:7c:
         1f:fd:5b:6c:25:be:c6:85:c5:89:4c:7e:21:1e:c5:d9:6d:f0:
         be:aa:ae:e9:aa:15:b9:6f:e9:4d:93:fe:a5:3b:26:48:7e:04:
         87:80:0f:49:f7:19:67:89:36:00:63:60:6d:87:36:ab:02:00:
         7f:58:88:15:12:e8:c0:b4:59:9c:12:e4:af:61:ae:eb:e9:7b:
         98:34:ae:8d:49:03:f2:e9:31:ec:ea:cf:d7:c3:78:e3:52:77:
         a1:b7:e5:6e:53:79:ac:ac:4a:5d:84:88:67:bd:97:4d:7b:5b:
         15:27:80:69:2a:98:b5:7e:48:4f:03:27:07:c3:9f:f5:e8:a8:
         41:01:16:1e:e7:c9:1c:87:e3:e7:94:f4:bf:d3:dc:a6:92:7e:
         70:47:06:87:78:d1:a0:59:58:90:1c:9a:3d:e6:ca:04:a8:3f:
         95:15:ed:a8:a0:13:94:a8:78:cd:a1:c2:2e:f1:e8:60:df:25:
         95:41:f6:a1:ba:40:d1:27:37:9e:48:b6:aa:7d:d4:f0:8f:a3:
         5a:0c:70:17
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----