Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/70/7ca3de-92c8-49fb-acae-9f1a5dbb41d6/1/AtboJz-QUawxy5V5LLUUANq3FKo.mft
File:                     AtboJz-QUawxy5V5LLUUANq3FKo.mft (raw, json)
Hash identifier:          uNgy6O3sUNjuxB+xLPaBQ8cFce06HDJbdAtFfH4Xd3I=
Subject key identifier:   06:59:75:B8:46:4B:26:81:2F:C6:99:C8:80:2D:E0:8C:DF:19:C9:F6
Authority key identifier: 02:D6:E8:27:3F:90:51:AC:31:CB:95:79:2C:B5:14:00:DA:B7:14:AA
Certificate issuer:       /CN=02d6e8273f9051ac31cb95792cb51400dab714aa
Certificate serial:       01962E620C177AC8B6737177621E9A36BDAE
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/AtboJz-QUawxy5V5LLUUANq3FKo.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/70/7ca3de-92c8-49fb-acae-9f1a5dbb41d6/1/AtboJz-QUawxy5V5LLUUANq3FKo.mft
Manifest number:          14E9
Signing time:             Sun 13 Apr 2025 09:01:39 +0000
Manifest this update:     Sun 13 Apr 2025 09:01:39 +0000
Manifest next update:     Mon 14 Apr 2025 09:01:39 +0000
Files and hashes:         1: 7BZ6n-mqQeS7WvxbzQcDTyMPPGA.roa (hash: A/dQyVGugZPPzzKbUernmnmEYkigB1EDFhlRwxZgoK0=)
                          2: AtboJz-QUawxy5V5LLUUANq3FKo.crl (hash: iCiEIENq7rKwtPan21gkaqP6ZLJg/oz0KnSowdsHCiE=)
                          3: TqDzXylobmv5YZZYBBs97jYKvU0.roa (hash: NHV6Fswg/e8zrywVYBxwjK/JaW1VOFVPHkfR6/mh8w8=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2e:62:0c:17:7a:c8:b6:73:71:77:62:1e:9a:36:bd:ae
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=02d6e8273f9051ac31cb95792cb51400dab714aa
        Validity
            Not Before: Apr 13 09:01:39 2025 GMT
            Not After : Apr 14 09:01:39 2025 GMT
        Subject: CN=065975b8464b26812fc699c8802de08cdf19c9f6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:97:84:96:ff:e6:67:dc:36:84:a7:79:d3:de:62:
                    4d:b4:ba:1a:f0:5d:83:53:45:c1:e0:79:4c:ac:7c:
                    29:27:d0:15:86:f4:4a:1d:4d:73:d1:19:f3:19:d6:
                    91:95:dc:d6:87:3e:fd:c3:73:6d:f9:d0:51:10:a7:
                    26:6e:a1:2f:ae:9c:7c:7d:81:5c:80:84:f6:68:a4:
                    18:cc:4b:62:88:4b:90:6a:ee:5d:6b:ae:0b:65:f7:
                    6c:81:85:60:a5:d4:6c:d2:e2:e6:e8:ed:96:a8:5c:
                    9c:07:17:ef:28:1d:d8:60:b5:f8:bc:ff:f2:2d:60:
                    6a:42:a3:fe:44:e9:31:98:ed:fa:05:56:0e:38:5a:
                    79:82:ea:24:ed:f9:94:9d:71:8f:51:64:6f:ea:15:
                    17:34:fe:1e:57:98:d8:b0:84:8a:29:a1:29:de:5d:
                    e4:ac:9e:bd:2f:81:ca:33:a6:cb:26:86:ef:b1:5f:
                    e4:19:8c:ce:90:c8:e3:22:09:f5:a5:7a:bb:29:bf:
                    f9:c9:cf:bb:99:30:61:66:78:76:47:e5:a3:f2:95:
                    0e:44:ff:b8:09:09:be:f3:bd:06:b3:63:97:5c:a8:
                    b5:47:43:ac:29:f8:32:d7:3f:c6:54:0d:c2:26:d0:
                    46:12:68:9e:d5:4b:13:d6:22:fd:79:af:2c:69:6c:
                    6c:2b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                06:59:75:B8:46:4B:26:81:2F:C6:99:C8:80:2D:E0:8C:DF:19:C9:F6
            X509v3 Authority Key Identifier:
                keyid:02:D6:E8:27:3F:90:51:AC:31:CB:95:79:2C:B5:14:00:DA:B7:14:AA

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/AtboJz-QUawxy5V5LLUUANq3FKo.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/70/7ca3de-92c8-49fb-acae-9f1a5dbb41d6/1/AtboJz-QUawxy5V5LLUUANq3FKo.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/70/7ca3de-92c8-49fb-acae-9f1a5dbb41d6/1/AtboJz-QUawxy5V5LLUUANq3FKo.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         74:30:d8:48:fc:f5:8d:77:a0:d9:c3:b3:b8:09:5f:f9:6a:1d:
         eb:18:bc:35:64:38:f5:4e:68:9b:d0:e1:82:0d:42:22:a0:10:
         d6:ad:51:98:73:17:f0:23:f4:40:77:35:a2:61:3c:49:3e:28:
         17:d1:0a:f8:b6:44:69:7c:92:ca:c8:4d:be:b3:b3:da:ee:fd:
         2c:c9:81:9d:1d:be:d6:01:02:1e:f9:17:0a:3d:4e:f7:66:db:
         f6:94:78:92:35:ec:48:60:85:e7:3f:8a:5c:c1:c3:c3:55:8d:
         89:03:aa:2f:6f:8f:92:db:0b:e7:7c:4e:b1:f3:f6:94:94:d0:
         d1:e4:10:74:b9:60:8b:47:23:8d:8a:8b:30:0e:9d:e9:85:8a:
         c2:3c:ff:5e:6b:05:4d:ca:4c:17:34:22:5c:2b:76:f7:b0:38:
         00:11:52:f0:5b:6d:22:6f:aa:62:3b:30:47:5a:a9:8d:2a:25:
         81:2b:86:bb:e5:ea:b2:3f:de:52:1b:ed:bb:58:32:35:5f:54:
         39:77:db:6c:72:52:87:be:a4:bd:30:b2:91:ae:16:36:d5:3e:
         11:a4:f4:a2:1b:c2:5d:fa:16:83:ba:92:64:56:b2:81:7e:4d:
         1b:6a:30:25:9e:8b:cd:5f:84:27:65:32:5b:aa:9e:36:91:d7:
         45:d7:7c:56
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----