Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/72/e7e0d8-cf2b-4e15-af27-eea8af1434d9/1/aP4jOevgl_9pirMOW2PswhoqI6s.mft
File:                     aP4jOevgl_9pirMOW2PswhoqI6s.mft (raw, json)
Hash identifier:          XaUdKxs1Rixbu2Gs0U4IOKKKw2K1Tib602zu7eR3g+M=
Subject key identifier:   AC:C5:12:B4:47:EE:E9:49:8E:2E:8B:74:1F:28:6C:9F:E6:CD:AD:FF
Authority key identifier: 68:FE:23:39:EB:E0:97:FF:69:8A:B3:0E:5B:63:EC:C2:1A:2A:23:AB
Certificate issuer:       /CN=68fe2339ebe097ff698ab30e5b63ecc21a2a23ab
Certificate serial:       01962E9884DFA602506DC24D40E1D6FC9AC1
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/aP4jOevgl_9pirMOW2PswhoqI6s.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/72/e7e0d8-cf2b-4e15-af27-eea8af1434d9/1/aP4jOevgl_9pirMOW2PswhoqI6s.mft
Manifest number:          03B2
Signing time:             Sun 13 Apr 2025 10:01:09 +0000
Manifest this update:     Sun 13 Apr 2025 10:01:09 +0000
Manifest next update:     Mon 14 Apr 2025 10:01:09 +0000
Files and hashes:         1: 9V1tND3zl52dvTGUP5zkoYgjSzk.roa (hash: ZFwBT8PQBALn0UQygkKFbmysfnKpnWDyHSFsXkqI3os=)
                          2: aP4jOevgl_9pirMOW2PswhoqI6s.crl (hash: su+0bvMNgyC16UIDZw2/8RiSLGkVrisCqgIeHoxSGIU=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2e:98:84:df:a6:02:50:6d:c2:4d:40:e1:d6:fc:9a:c1
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=68fe2339ebe097ff698ab30e5b63ecc21a2a23ab
        Validity
            Not Before: Apr 13 10:01:09 2025 GMT
            Not After : Apr 14 10:01:09 2025 GMT
        Subject: CN=acc512b447eee9498e2e8b741f286c9fe6cdadff
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b7:ef:0d:2b:56:b5:fd:a7:49:23:ea:bd:20:1c:
                    c0:d0:ed:44:0d:ba:c4:ef:58:b6:e7:8f:01:7f:d8:
                    a8:5f:f8:06:7b:f1:bf:61:f6:09:9d:8c:4a:5c:b5:
                    45:78:48:3c:15:ba:d4:88:0f:74:26:7c:a5:70:69:
                    01:43:67:09:5d:17:a3:eb:4c:d8:42:58:2b:ba:fd:
                    b2:7a:95:4f:20:be:55:86:45:d1:96:56:15:cb:a4:
                    e3:c4:e5:a8:be:96:fa:df:92:bd:c5:0b:c6:58:ab:
                    53:26:f0:91:ed:c9:9c:e4:08:12:83:3a:aa:e1:c0:
                    bb:fd:62:d5:37:27:d4:9c:02:00:ca:53:71:92:0d:
                    b3:98:f9:24:5d:82:07:f7:63:ad:f8:3f:6f:2d:64:
                    dc:e9:85:b3:88:04:80:84:61:f9:92:b5:5d:21:9f:
                    54:a7:e0:95:93:8a:c8:45:af:0d:45:f7:13:3e:51:
                    2f:0c:6b:76:ea:eb:67:e8:4d:ca:53:d0:bb:26:45:
                    f1:e5:94:c6:6a:10:c0:de:88:4d:d0:87:79:00:28:
                    80:6a:f1:5e:fc:23:01:13:00:ad:d3:2e:f7:b0:de:
                    ed:15:72:bd:99:8a:a7:63:91:ae:e9:0d:85:bf:85:
                    a7:b9:6f:8e:72:90:34:a9:66:7e:4b:38:42:28:a4:
                    2c:9b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AC:C5:12:B4:47:EE:E9:49:8E:2E:8B:74:1F:28:6C:9F:E6:CD:AD:FF
            X509v3 Authority Key Identifier:
                keyid:68:FE:23:39:EB:E0:97:FF:69:8A:B3:0E:5B:63:EC:C2:1A:2A:23:AB

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/aP4jOevgl_9pirMOW2PswhoqI6s.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/72/e7e0d8-cf2b-4e15-af27-eea8af1434d9/1/aP4jOevgl_9pirMOW2PswhoqI6s.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/72/e7e0d8-cf2b-4e15-af27-eea8af1434d9/1/aP4jOevgl_9pirMOW2PswhoqI6s.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         25:d3:f5:4f:b5:33:0b:0c:36:39:74:5d:fe:46:57:e0:a0:c5:
         da:1f:68:f6:13:96:4b:fb:f3:fa:ab:b7:7e:24:4d:bd:b0:46:
         4a:4c:61:f1:4b:06:ef:c0:30:c0:0e:ad:4f:9b:12:f2:2c:74:
         6d:ad:67:22:b6:c1:ab:1c:af:35:13:73:dd:91:a2:dd:59:ca:
         eb:4c:62:53:54:8d:a2:26:69:14:60:43:77:df:ab:d0:ce:86:
         8a:3d:96:03:1f:c3:2b:d6:a0:b1:ff:d2:c4:b7:77:2a:71:1c:
         88:fe:08:2f:df:2a:97:a1:70:45:ab:4f:09:55:3e:53:cc:1a:
         47:2d:f1:b1:6c:bd:e6:6b:5f:8a:2b:63:8c:54:df:5c:81:6f:
         32:81:b0:ab:f9:51:44:b3:0a:91:f4:ca:40:10:a2:e7:97:b2:
         cc:62:ef:82:28:75:c2:01:dd:14:53:6b:74:7d:f6:d2:5f:8d:
         2a:df:d2:6d:14:42:97:b9:d5:87:c9:e8:75:5f:32:dd:fc:64:
         81:d6:8d:bc:e8:76:c8:6e:bd:53:68:84:ba:52:5d:bd:5f:43:
         51:35:f6:47:f2:45:8a:45:f4:0d:fd:b2:b4:60:81:f7:57:68:
         f7:24:6a:0c:e3:76:b1:0b:b1:44:ca:99:06:1b:8b:7d:fe:1b:
         b8:31:ce:11
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----