Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7f/ddc344-64c6-46c8-a25c-d4edc0eb3e0a/1/AJpjcoKz0KD8pKVU9pNvffQugWU.mft
File:                     AJpjcoKz0KD8pKVU9pNvffQugWU.mft (raw, json)
Hash identifier:          Tnc6cIEF7pVxhDRZDwm/3HC1CyM6sPREToVYO3myPDo=
Subject key identifier:   DE:9B:87:59:4F:02:00:8E:0A:FB:6A:D8:33:F8:AF:CC:FC:1C:04:C5
Authority key identifier: 00:9A:63:72:82:B3:D0:A0:FC:A4:A5:54:F6:93:6F:7D:F4:2E:81:65
Certificate issuer:       /CN=009a637282b3d0a0fca4a554f6936f7df42e8165
Certificate serial:       01962F3D7EBCD9C212CB9A8F3E0E49DC95FF
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/AJpjcoKz0KD8pKVU9pNvffQugWU.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/7f/ddc344-64c6-46c8-a25c-d4edc0eb3e0a/1/AJpjcoKz0KD8pKVU9pNvffQugWU.mft
Manifest number:          0AC4
Signing time:             Sun 13 Apr 2025 13:01:21 +0000
Manifest this update:     Sun 13 Apr 2025 13:01:21 +0000
Manifest next update:     Mon 14 Apr 2025 13:01:21 +0000
Files and hashes:         1: 2KtTnEqgfSqztCd7tujgpeMQKiY.roa (hash: PzcW2SmGhKzM/HWv9p7Gvr3dpPmkVhm+gAuqFa6OHHQ=)
                          2: AJpjcoKz0KD8pKVU9pNvffQugWU.crl (hash: HGl9AXB9Daq4Uk+FoiUa5CgZ7FwomptYfxJL79N83ug=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2f:3d:7e:bc:d9:c2:12:cb:9a:8f:3e:0e:49:dc:95:ff
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=009a637282b3d0a0fca4a554f6936f7df42e8165
        Validity
            Not Before: Apr 13 13:01:21 2025 GMT
            Not After : Apr 14 13:01:21 2025 GMT
        Subject: CN=de9b87594f02008e0afb6ad833f8afccfc1c04c5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b4:89:40:f6:38:16:97:58:88:55:c6:a9:a2:91:
                    43:66:1e:82:f4:2d:37:c9:c7:23:f1:7b:a5:c5:f1:
                    80:7c:49:00:38:63:3c:dc:00:05:a2:d8:3f:6d:da:
                    69:44:6a:53:5a:be:14:b7:1d:4c:02:8c:a6:d2:56:
                    82:70:cb:ce:53:4c:71:c0:c4:3d:34:ea:63:5c:c2:
                    30:be:31:52:16:49:ac:b1:b6:32:e6:3c:f2:6c:d0:
                    20:2c:b2:74:c3:b8:d9:83:e8:fa:29:d6:73:2e:df:
                    0a:df:dd:37:00:de:8c:a9:a8:31:5f:93:01:33:95:
                    91:03:98:c1:5a:6d:a2:af:47:a5:cf:26:98:b0:02:
                    d5:bb:f2:b0:86:30:b4:d9:21:d9:4b:b6:6b:33:6c:
                    91:d3:e1:d7:8c:79:42:0f:fe:58:13:5d:67:20:7b:
                    16:b4:55:c3:c7:ff:49:bf:ff:6b:52:c5:db:10:f0:
                    2a:72:4c:97:3a:9f:b4:bc:bf:a8:f5:9a:86:a5:32:
                    5f:d8:7d:d6:c4:1f:21:3f:c9:0d:b4:3c:5e:48:e4:
                    7b:54:dd:5c:76:80:fa:21:91:99:26:00:25:0f:7d:
                    87:1c:ac:10:79:a7:9f:21:50:4b:11:70:78:33:ee:
                    95:e4:0f:7b:93:f3:c4:e0:52:db:10:ab:02:06:3b:
                    b0:e9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DE:9B:87:59:4F:02:00:8E:0A:FB:6A:D8:33:F8:AF:CC:FC:1C:04:C5
            X509v3 Authority Key Identifier:
                keyid:00:9A:63:72:82:B3:D0:A0:FC:A4:A5:54:F6:93:6F:7D:F4:2E:81:65

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/AJpjcoKz0KD8pKVU9pNvffQugWU.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7f/ddc344-64c6-46c8-a25c-d4edc0eb3e0a/1/AJpjcoKz0KD8pKVU9pNvffQugWU.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/7f/ddc344-64c6-46c8-a25c-d4edc0eb3e0a/1/AJpjcoKz0KD8pKVU9pNvffQugWU.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         61:4c:62:e6:26:83:34:c7:75:2c:08:49:ef:10:b9:ab:7c:a2:
         f1:0e:1d:66:7a:3c:c6:5e:f8:5d:5d:3e:b4:b0:d1:e7:c7:47:
         a1:5e:98:ba:55:6c:9b:97:c6:5b:32:ee:62:ab:18:3a:bc:21:
         a2:c4:f8:61:cb:0a:eb:6b:7d:c6:6e:f6:62:fe:19:b1:fd:35:
         b5:65:93:27:5e:80:47:c7:dc:24:09:44:32:ab:d1:2e:36:0f:
         2a:7f:a9:b6:89:6f:f8:96:0e:64:25:f2:ac:43:48:04:5f:cf:
         da:ee:34:3e:98:56:63:3c:85:85:82:91:21:3a:81:75:6e:37:
         14:7f:b4:ae:69:2b:de:ba:8b:40:9d:18:98:a5:d3:52:74:24:
         ab:a8:0c:96:fd:aa:17:f8:52:45:a6:92:77:c0:ac:62:83:93:
         4c:43:70:23:78:e5:8f:88:55:52:58:ab:09:cb:fc:0c:3d:48:
         a5:da:68:a8:ac:59:21:5b:c6:d4:78:b3:f6:82:9f:df:be:c0:
         34:c9:d8:fc:f4:26:82:ff:2b:83:8e:d1:f5:e8:cf:5e:67:c9:
         53:52:d1:2d:54:88:ec:09:90:c1:7f:55:36:a6:17:c2:f8:d8:
         c4:e2:df:c0:8d:fc:ee:55:08:3a:e6:75:25:d8:26:a7:92:e4:
         84:2c:77:59
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZYvPX682cISy5qPPg5J3JX/MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDAwOWE2MzcyODJiM2QwYTBmY2E0YTU1NGY2OTM2ZjdkZjQy
ZTgxNjUwHhcNMjUwNDEzMTMwMTIxWhcNMjUwNDE0MTMwMTIxWjAzMTEwLwYDVQQD
EyhkZTliODc1OTRmMDIwMDhlMGFmYjZhZDgzM2Y4YWZjY2ZjMWMwNGM1MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtIlA9jgWl1iIVcapopFDZh6C9C03
yccj8XulxfGAfEkAOGM83AAFotg/bdppRGpTWr4Utx1MAoym0laCcMvOU0xxwMQ9
NOpjXMIwvjFSFkmssbYy5jzybNAgLLJ0w7jZg+j6KdZzLt8K3903AN6MqagxX5MB
M5WRA5jBWm2ir0elzyaYsALVu/KwhjC02SHZS7ZrM2yR0+HXjHlCD/5YE11nIHsW
tFXDx/9Jv/9rUsXbEPAqckyXOp+0vL+o9ZqGpTJf2H3WxB8hP8kNtDxeSOR7VN1c
doD6IZGZJgAlD32HHKwQeaefIVBLEXB4M+6V5A97k/PE4FLbEKsCBjuw6QIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFN6bh1lPAgCOCvtq2DP4r8z8HATFMB8GA1UdIwQY
MBaAFACaY3KCs9Cg/KSlVPaTb330LoFlMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvQUpwamNvS3owS0Q4cEtWVTlwTnZmZlF1Z1dVLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC83Zi9kZGMzNDQtNjRjNi00NmM4LWEyNWMt
ZDRlZGMwZWIzZTBhLzEvQUpwamNvS3owS0Q4cEtWVTlwTnZmZlF1Z1dVLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC83Zi9kZGMzNDQtNjRjNi00NmM4LWEyNWMtZDRlZGMwZWIzZTBh
LzEvQUpwamNvS3owS0Q4cEtWVTlwTnZmZlF1Z1dVLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAYUxi5iaD
NMd1LAhJ7xC5q3yi8Q4dZno8xl74XV0+tLDR58dHoV6YulVsm5fGWzLuYqsYOrwh
osT4YcsK62t9xm72Yv4Zsf01tWWTJ16AR8fcJAlEMqvRLjYPKn+ptolv+JYOZCXy
rENIBF/P2u40PphWYzyFhYKRITqBdW43FH+0rmkr3rqLQJ0YmKXTUnQkq6gMlv2q
F/hSRaaSd8CsYoOTTENwI3jlj4hVUlirCcv8DD1IpdpoqKxZIVvG1Hiz9oKf377A
NMnY/PQmgv8rg47R9ejPXmfJU1LRLVSI7AmQwX9VNqYXwvjYxOLfwI387lUIOuZ1
Jdgmp5LkhCx3WQ==
-----END CERTIFICATE-----