Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6a/d0e2f4-b60a-40b2-92e9-90eace9e059e/1/AK-d2jB8tSU4XvkPUG0NV7udK_I.mft
File:                     AK-d2jB8tSU4XvkPUG0NV7udK_I.mft (raw, json)
Hash identifier:          6ZSa2jHGRWUlm2ni/Huk6qZ05TeigWpQJypppXFroAA=
Subject key identifier:   ED:27:35:B1:85:A0:B5:3D:77:A0:D9:8F:74:2B:D0:26:5D:E2:D7:CB
Authority key identifier: 00:AF:9D:DA:30:7C:B5:25:38:5E:F9:0F:50:6D:0D:57:BB:9D:2B:F2
Certificate issuer:       /CN=00af9dda307cb525385ef90f506d0d57bb9d2bf2
Certificate serial:       01962E98E19C1C2A9ED836FA075ACFE3A013
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/AK-d2jB8tSU4XvkPUG0NV7udK_I.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/6a/d0e2f4-b60a-40b2-92e9-90eace9e059e/1/AK-d2jB8tSU4XvkPUG0NV7udK_I.mft
Manifest number:          14EA
Signing time:             Sun 13 Apr 2025 10:01:33 +0000
Manifest this update:     Sun 13 Apr 2025 10:01:33 +0000
Manifest next update:     Mon 14 Apr 2025 10:01:33 +0000
Files and hashes:         1: 6bvZxxULuUAwxd6eAYmdH966b80.roa (hash: UhY3F2JnlJhsLB1FG3kdABwVVPcmvuwcVrV1nXeuwB0=)
                          2: AK-d2jB8tSU4XvkPUG0NV7udK_I.crl (hash: DVVCbjRtLJA3UR1wqr8Q1xBaABuNcesB1F4h6vI+JzA=)
                          3: hkmQH-83zbYgbeFajt_G5vLUDB4.roa (hash: gB0UcPN+esB++4aqp9cznO6G7WYynK4/0uUbdmlbv78=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2e:98:e1:9c:1c:2a:9e:d8:36:fa:07:5a:cf:e3:a0:13
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=00af9dda307cb525385ef90f506d0d57bb9d2bf2
        Validity
            Not Before: Apr 13 10:01:33 2025 GMT
            Not After : Apr 14 10:01:33 2025 GMT
        Subject: CN=ed2735b185a0b53d77a0d98f742bd0265de2d7cb
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ab:47:cd:39:a5:78:e6:87:bd:88:35:d1:ea:dd:
                    c0:18:2d:a6:c6:1d:04:82:a1:22:24:fb:63:c2:62:
                    f1:30:4a:4c:f1:e4:4b:6d:d2:b8:77:1a:46:0b:55:
                    48:db:d0:4f:2c:3e:90:5c:ad:91:7e:d3:86:ba:e2:
                    b4:65:91:b0:3f:f0:77:87:ca:41:14:56:2a:6a:3a:
                    6a:00:45:c2:80:6a:2a:78:69:a8:bb:73:05:c5:12:
                    53:41:d2:0c:26:ac:7c:f4:a9:be:f4:a5:6b:00:bc:
                    6e:91:f0:2e:a7:02:d5:89:21:47:98:96:ec:f9:e0:
                    47:27:31:da:4a:d6:73:2f:cd:ff:42:57:46:19:51:
                    a7:67:6e:43:9c:9c:90:af:4d:0b:7a:f7:48:12:dc:
                    4a:f4:a6:e2:3e:b2:e0:44:dd:a7:7e:4d:c6:70:f2:
                    e4:79:36:77:d3:17:fd:9c:fa:ea:86:80:96:5a:8b:
                    98:7a:21:63:ee:81:b0:45:6d:fd:ee:e5:69:ef:ec:
                    fa:4b:8e:30:83:17:ad:63:b0:4a:90:66:d6:29:4a:
                    6a:08:e0:1a:3f:6a:45:72:39:09:18:5a:fd:a9:cb:
                    7d:15:f0:52:d0:4b:c4:f0:30:a9:4c:51:28:a6:fa:
                    a9:dd:0f:e6:8c:73:66:b3:9e:68:37:aa:3f:1d:cc:
                    d0:6d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                ED:27:35:B1:85:A0:B5:3D:77:A0:D9:8F:74:2B:D0:26:5D:E2:D7:CB
            X509v3 Authority Key Identifier:
                keyid:00:AF:9D:DA:30:7C:B5:25:38:5E:F9:0F:50:6D:0D:57:BB:9D:2B:F2

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/AK-d2jB8tSU4XvkPUG0NV7udK_I.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6a/d0e2f4-b60a-40b2-92e9-90eace9e059e/1/AK-d2jB8tSU4XvkPUG0NV7udK_I.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/6a/d0e2f4-b60a-40b2-92e9-90eace9e059e/1/AK-d2jB8tSU4XvkPUG0NV7udK_I.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         b1:98:78:93:a2:3c:35:d5:0b:f4:c1:15:4a:40:c5:9a:64:a9:
         79:3b:44:e1:a5:7b:40:20:26:f1:b0:9a:45:e7:81:8a:61:69:
         69:34:59:a2:93:b3:cc:24:9c:b6:c6:79:88:7d:2c:ba:47:3b:
         fd:c5:b1:73:6d:c2:41:ad:4b:b1:67:a1:14:18:5e:f8:9f:7b:
         dd:e3:7d:d9:c0:c0:be:8b:3b:71:2a:58:c1:1a:29:39:e0:90:
         b3:d0:cc:fb:2a:85:54:bc:b7:f2:3a:e5:78:86:6f:41:f8:f5:
         14:59:c5:54:1b:ee:82:d6:42:b5:18:ef:db:7b:63:42:28:fc:
         6a:6a:d1:15:d8:4c:70:9a:3c:12:e7:9f:fa:48:35:fe:15:95:
         0f:65:e7:da:67:3a:bf:76:34:d2:72:ce:fb:8e:24:1d:15:26:
         f9:95:55:dc:e6:7d:72:92:44:5b:ea:50:0d:de:cb:ac:96:9e:
         38:95:95:af:07:0a:62:e8:14:8f:91:7c:40:4d:61:4e:84:62:
         3f:0a:75:85:2d:82:cc:61:38:9c:d8:43:be:43:64:33:60:95:
         f0:75:95:ec:0b:a8:e8:08:70:90:d3:1d:b0:39:70:de:2c:59:
         db:4a:74:31:3e:4d:d7:87:9b:96:90:5d:5d:6d:67:c2:6e:b9:
         08:20:ed:1e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----