Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/69/7a0151-ce20-48e6-9053-333a384d417d/1/A4Toj7eaN3bLBYPitnoL7G38aLg.mft
File:                     A4Toj7eaN3bLBYPitnoL7G38aLg.mft (raw, json)
Hash identifier:          qhF0+dNyrprU5BG2jU0/8bfW0rARFQQjegHyIPERFew=
Subject key identifier:   1F:9C:A6:45:8F:E1:B9:BF:BB:45:73:53:00:DB:8A:52:0F:A1:60:D3
Authority key identifier: 03:84:E8:8F:B7:9A:37:76:CB:05:83:E2:B6:7A:0B:EC:6D:FC:68:B8
Certificate issuer:       /CN=0384e88fb79a3776cb0583e2b67a0bec6dfc68b8
Certificate serial:       01962E990237BDA4A6693BE25BE5FBA83349
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/A4Toj7eaN3bLBYPitnoL7G38aLg.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/69/7a0151-ce20-48e6-9053-333a384d417d/1/A4Toj7eaN3bLBYPitnoL7G38aLg.mft
Manifest number:          0B7F
Signing time:             Sun 13 Apr 2025 10:01:41 +0000
Manifest this update:     Sun 13 Apr 2025 10:01:41 +0000
Manifest next update:     Mon 14 Apr 2025 10:01:41 +0000
Files and hashes:         1: A4Toj7eaN3bLBYPitnoL7G38aLg.crl (hash: 2xc++O0vSOb0SzZbV5oqjRGLL/eqTcTZcuHYQqHteuE=)
                          2: znDGyTFXHxgds03YiKxu855yeHM.roa (hash: PokYry9XBN7Hw+cBZPUeLE2rCoMZAI1GoWKG5QQBoBg=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2e:99:02:37:bd:a4:a6:69:3b:e2:5b:e5:fb:a8:33:49
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0384e88fb79a3776cb0583e2b67a0bec6dfc68b8
        Validity
            Not Before: Apr 13 10:01:41 2025 GMT
            Not After : Apr 14 10:01:41 2025 GMT
        Subject: CN=1f9ca6458fe1b9bfbb45735300db8a520fa160d3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ad:94:75:60:2d:c5:ac:75:e6:50:5d:6e:1b:27:
                    fb:af:f7:4a:dc:9e:94:1b:bb:7b:ed:cd:5b:76:f9:
                    9d:e5:ff:39:b4:11:06:83:16:c3:70:13:b4:9b:1f:
                    f1:4d:cf:09:00:e6:87:4b:c7:74:77:42:98:68:0b:
                    38:49:4b:4b:11:d2:c2:09:31:65:68:55:a8:cc:48:
                    91:f3:6a:25:83:f8:91:bd:db:e9:98:29:e4:17:37:
                    91:a6:66:5c:11:73:39:90:04:95:0c:0a:40:77:19:
                    37:57:b6:ad:27:27:6e:8f:2c:f7:6c:a5:5b:df:2e:
                    f0:20:e3:a9:b5:bb:0f:bd:4b:ca:3c:d5:b2:91:93:
                    9e:43:3a:9c:c3:00:74:1e:55:38:b6:f1:87:f3:b1:
                    80:17:c3:b5:2d:08:aa:5c:0b:91:fc:f3:23:9a:9a:
                    82:38:b3:30:22:b0:e6:59:ec:16:17:79:e9:7f:53:
                    3e:71:55:22:36:87:d1:00:13:6f:6f:a9:94:d6:7f:
                    4e:5c:4a:18:9f:0f:cd:da:f7:f3:15:d8:5b:fd:8e:
                    fc:f5:aa:c0:5e:91:6a:26:51:15:70:a6:07:d0:bf:
                    a2:7a:00:5e:e8:aa:39:15:5d:64:f5:a2:b1:3f:3a:
                    88:b1:89:52:44:c9:bf:84:8d:a1:3c:c5:4e:33:a8:
                    0a:99
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1F:9C:A6:45:8F:E1:B9:BF:BB:45:73:53:00:DB:8A:52:0F:A1:60:D3
            X509v3 Authority Key Identifier:
                keyid:03:84:E8:8F:B7:9A:37:76:CB:05:83:E2:B6:7A:0B:EC:6D:FC:68:B8

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/A4Toj7eaN3bLBYPitnoL7G38aLg.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/69/7a0151-ce20-48e6-9053-333a384d417d/1/A4Toj7eaN3bLBYPitnoL7G38aLg.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/69/7a0151-ce20-48e6-9053-333a384d417d/1/A4Toj7eaN3bLBYPitnoL7G38aLg.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         53:b7:11:f1:f4:95:9e:2a:28:a0:a1:c3:41:89:41:dd:b3:27:
         b7:d7:64:9f:84:01:cc:e6:7f:0d:1f:ba:99:f5:46:a9:cd:65:
         12:3d:b5:67:80:f8:bf:76:38:9e:8e:f5:52:75:f9:ad:35:b6:
         7a:7d:96:aa:0b:9a:7a:b7:d6:d2:fe:f2:0d:f2:7c:4d:34:e8:
         7e:d9:3b:d1:6d:23:48:77:0e:b4:f2:71:92:c2:82:0c:fe:99:
         c4:85:2c:b7:96:fd:06:41:48:33:1f:41:5e:4f:db:a2:7a:86:
         a0:47:52:55:97:b2:4f:d3:de:34:0a:f9:e2:1f:81:4c:1d:b3:
         b5:3d:29:7e:ce:9b:21:06:02:66:b6:4e:23:04:03:fb:25:43:
         a7:b7:c9:de:0d:27:56:82:fd:04:d1:74:d9:a8:4f:74:35:61:
         5d:f7:55:34:1d:8b:bb:1a:84:d7:6b:79:e2:af:66:74:51:f8:
         64:df:a1:6f:b5:1e:88:86:48:c7:7f:fd:59:11:cc:c0:19:8d:
         00:c9:f1:3c:7f:58:f5:06:3f:d2:e3:01:65:6f:32:2c:91:42:
         1e:69:72:f4:31:20:62:17:cf:64:e2:24:88:d2:83:75:13:25:
         9a:ac:5c:8a:b2:b9:00:7e:c2:bc:28:fb:e0:9c:7c:cf:01:58:
         71:80:e0:94
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----