Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/77/27294e-b9e7-4660-932d-21048a734a46/1/0aiWnX4yy_knZkstxDa5bnFJpis.mft
File:                     0aiWnX4yy_knZkstxDa5bnFJpis.mft (raw, json)
Hash identifier:          wCBDft4Hp/gEV4VzRReoIrW/v+k0vgPwCD6Gr7VPSYw=
Subject key identifier:   45:E2:67:C6:FC:09:A8:29:DF:04:53:4C:EC:73:69:E2:56:7E:D5:8C
Authority key identifier: D1:A8:96:9D:7E:32:CB:F9:27:66:4B:2D:C4:36:B9:6E:71:49:A6:2B
Certificate issuer:       /CN=d1a8969d7e32cbf927664b2dc436b96e7149a62b
Certificate serial:       01962F743DB1C0E8F98FF650EDF8D88BD879
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/0aiWnX4yy_knZkstxDa5bnFJpis.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/77/27294e-b9e7-4660-932d-21048a734a46/1/0aiWnX4yy_knZkstxDa5bnFJpis.mft
Manifest number:          0E21
Signing time:             Sun 13 Apr 2025 14:01:09 +0000
Manifest this update:     Sun 13 Apr 2025 14:01:09 +0000
Manifest next update:     Mon 14 Apr 2025 14:01:09 +0000
Files and hashes:         1: 0aiWnX4yy_knZkstxDa5bnFJpis.crl (hash: rrz4jLQ3FMTR7crgZlLG9NELHEC44oRaBi7cN7x59lY=)
                          2: p1fyn5poKGi3v6udklaZLK6DaPs.roa (hash: ksuBLRSUua1zFmd4JmcnhcAsP8MWyD8OR/dcK6d/pkM=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2f:74:3d:b1:c0:e8:f9:8f:f6:50:ed:f8:d8:8b:d8:79
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d1a8969d7e32cbf927664b2dc436b96e7149a62b
        Validity
            Not Before: Apr 13 14:01:09 2025 GMT
            Not After : Apr 14 14:01:09 2025 GMT
        Subject: CN=45e267c6fc09a829df04534cec7369e2567ed58c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c5:7a:76:38:90:c4:63:b1:7c:0a:c9:1a:62:8a:
                    a6:31:7e:c2:57:a8:53:49:8c:a9:43:ab:17:d7:d5:
                    9d:61:37:93:ae:a2:1d:a7:16:6b:56:c8:9b:f2:a2:
                    f2:77:d8:55:0e:9c:b9:a5:0f:1c:b9:a0:5b:b6:30:
                    00:4e:5f:0f:f8:ea:d9:db:7c:04:25:19:54:a1:59:
                    37:b9:36:47:cb:b8:d3:86:12:b3:18:7a:ef:f3:ed:
                    9e:7e:9f:2f:d8:ac:f2:07:f0:bb:e7:ac:d1:92:69:
                    05:87:9d:ea:e0:9c:1c:31:58:93:3c:df:f3:27:b4:
                    18:60:c6:77:71:f9:71:03:07:c5:52:14:50:47:a4:
                    31:75:b5:5c:ef:1d:6c:4c:77:9b:97:0b:4a:9d:c5:
                    19:8d:8e:81:3c:69:06:f9:68:ff:d5:e3:c6:9c:d2:
                    45:be:01:3d:d7:fd:3c:e8:a0:5e:70:5a:74:e9:17:
                    fe:22:da:cc:e6:65:32:32:10:fa:75:1f:0a:5b:96:
                    cd:df:d8:97:3b:b9:59:4d:06:42:c7:80:ed:76:f4:
                    2b:22:a5:71:8d:ad:90:a0:77:32:44:ae:1f:52:31:
                    e6:2f:2f:b1:8d:1c:01:6c:3f:d6:13:ef:77:82:db:
                    e3:10:22:d7:ff:ce:91:22:a0:f5:84:ed:51:e6:bd:
                    a2:b1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                45:E2:67:C6:FC:09:A8:29:DF:04:53:4C:EC:73:69:E2:56:7E:D5:8C
            X509v3 Authority Key Identifier:
                keyid:D1:A8:96:9D:7E:32:CB:F9:27:66:4B:2D:C4:36:B9:6E:71:49:A6:2B

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/0aiWnX4yy_knZkstxDa5bnFJpis.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/77/27294e-b9e7-4660-932d-21048a734a46/1/0aiWnX4yy_knZkstxDa5bnFJpis.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/77/27294e-b9e7-4660-932d-21048a734a46/1/0aiWnX4yy_knZkstxDa5bnFJpis.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         43:fa:fb:a6:42:64:39:cf:4e:43:1d:5c:42:99:d3:7c:56:69:
         6a:f2:c9:18:f3:5f:23:01:c3:cc:0a:ee:c2:02:5d:e0:58:6d:
         fe:81:6f:01:aa:26:38:c5:26:fb:e3:ff:99:e9:f2:4b:42:10:
         70:f3:04:e4:01:42:b8:0b:42:44:81:8f:a1:5e:0d:df:7c:79:
         82:95:59:c2:68:d7:2e:30:0e:a9:32:2e:12:d7:fd:61:bc:42:
         1a:72:45:ca:48:de:6b:78:22:bc:f1:c7:96:56:cb:17:66:ed:
         9c:91:c6:82:3d:3f:e4:1b:7c:92:a6:70:24:9e:4c:d5:f8:8f:
         f7:4b:8b:7e:b0:38:3e:1d:4a:d1:00:6b:60:19:49:4a:6d:b3:
         a2:9b:24:55:18:1b:99:cc:5d:e6:11:5a:77:e4:48:a6:01:49:
         d0:87:e4:9f:bd:30:54:a6:f6:3b:04:53:fc:e5:ef:14:48:5a:
         6c:7f:8d:82:ef:79:62:43:cd:92:94:75:d7:7d:19:ac:07:01:
         df:d3:1d:7b:a2:df:35:05:6c:f0:43:b0:c6:42:26:27:c3:f3:
         1f:75:3d:67:46:97:ba:b7:da:13:9f:67:5b:d0:04:44:45:e9:
         1d:92:31:7a:aa:80:3b:2f:b4:04:77:9b:bd:ee:f1:07:81:41:
         b1:e2:90:05
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----