Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/81/207167-d551-41ba-86a8-2f50ea27213c/1/aAONTKy9QZGZUus3CcFlM4OJAOM.mft
File:                     aAONTKy9QZGZUus3CcFlM4OJAOM.mft (raw, json)
Hash identifier:          ouHat5IAAhNmNFN+GU0Wjx0tk7WpYMTQ0Vky4ZlPFwA=
Subject key identifier:   F1:60:24:E3:8C:47:56:4C:94:E1:41:E6:A2:77:9E:D5:E0:6C:D7:8B
Authority key identifier: 68:03:8D:4C:AC:BD:41:91:99:52:EB:37:09:C1:65:33:83:89:00:E3
Certificate issuer:       /CN=68038d4cacbd41919952eb3709c16533838900e3
Certificate serial:       01962E61DA225B196F85BDA1F2D02245777A
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/aAONTKy9QZGZUus3CcFlM4OJAOM.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/81/207167-d551-41ba-86a8-2f50ea27213c/1/aAONTKy9QZGZUus3CcFlM4OJAOM.mft
Manifest number:          14ED
Signing time:             Sun 13 Apr 2025 09:01:26 +0000
Manifest this update:     Sun 13 Apr 2025 09:01:26 +0000
Manifest next update:     Mon 14 Apr 2025 09:01:26 +0000
Files and hashes:         1: K7Q4iSU5tGlQaFLDbZ74ga5u7QI.roa (hash: 4IoPifHHzLWAa9SoaMyYdsFHlPVY27b7G1cPfRmMmFw=)
                          2: aAONTKy9QZGZUus3CcFlM4OJAOM.crl (hash: l9hTA5yDokD7mi7e+JxVzIYqcl84LEWAC//rSeL2U0Q=)
                          3: lZ9mN5xTttKw5Lu3kt5TBdxoI_c.roa (hash: oCvvxX98yWLH3kfCtYuDTFzL1eqlVEqmDIMPTij8zho=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2e:61:da:22:5b:19:6f:85:bd:a1:f2:d0:22:45:77:7a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=68038d4cacbd41919952eb3709c16533838900e3
        Validity
            Not Before: Apr 13 09:01:26 2025 GMT
            Not After : Apr 14 09:01:26 2025 GMT
        Subject: CN=f16024e38c47564c94e141e6a2779ed5e06cd78b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:86:87:5d:80:b0:ef:1f:05:d4:b1:44:c7:16:fd:
                    ec:b3:a8:66:b5:e8:b9:1d:d0:90:6a:20:61:1b:b3:
                    00:9c:92:a4:a6:ff:b4:c4:fe:7a:fb:04:a8:6f:03:
                    18:fe:30:de:54:24:d9:2f:75:bb:78:e0:f6:6b:f0:
                    cb:ba:af:19:af:03:33:63:63:8a:d2:35:74:a5:f9:
                    2a:14:50:76:0e:40:58:4b:15:89:50:5b:6f:fa:50:
                    d0:49:9f:ec:2d:4e:8f:44:51:17:63:68:c0:f6:24:
                    49:31:df:78:ab:6c:ab:5d:ca:b7:58:f4:f4:36:8f:
                    e0:81:f9:a2:e3:50:f7:6f:5d:8b:03:7a:0b:df:4b:
                    69:f1:c3:41:cf:db:5c:a7:d5:df:91:b0:cd:30:fd:
                    7b:5b:11:50:f2:88:46:e4:13:16:5c:0f:53:01:9d:
                    ff:cb:55:d2:69:45:9b:90:f2:7b:0c:20:66:1b:fe:
                    51:cc:d7:14:61:3a:49:a8:a3:52:98:d6:a0:2f:4f:
                    5e:29:39:87:a3:91:7e:b4:ff:7b:c1:d9:d0:85:43:
                    a2:36:ba:54:26:03:d3:88:d9:a0:22:cd:a7:b7:7a:
                    55:60:a7:73:47:98:e1:9a:47:3c:81:54:32:7c:90:
                    d4:73:db:84:5b:31:e7:12:f3:19:0b:83:8c:64:28:
                    99:65
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F1:60:24:E3:8C:47:56:4C:94:E1:41:E6:A2:77:9E:D5:E0:6C:D7:8B
            X509v3 Authority Key Identifier:
                keyid:68:03:8D:4C:AC:BD:41:91:99:52:EB:37:09:C1:65:33:83:89:00:E3

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/aAONTKy9QZGZUus3CcFlM4OJAOM.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/81/207167-d551-41ba-86a8-2f50ea27213c/1/aAONTKy9QZGZUus3CcFlM4OJAOM.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/81/207167-d551-41ba-86a8-2f50ea27213c/1/aAONTKy9QZGZUus3CcFlM4OJAOM.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         7a:3b:62:37:33:e7:e5:09:a6:26:5d:f3:57:c5:cf:9c:86:42:
         db:35:81:2c:c7:c0:b0:4c:43:d9:a3:ff:67:6f:1e:3b:ef:9c:
         03:a6:f4:87:5e:ef:88:4d:54:54:f2:49:25:9b:3a:22:a7:97:
         13:89:ce:4d:cc:d3:89:c0:b4:94:aa:ab:67:76:62:86:18:56:
         a5:80:99:93:99:38:44:a1:76:b5:b7:e4:34:49:be:ce:bd:80:
         0d:50:bb:01:5b:9d:61:a0:55:9c:f0:a6:5e:a9:58:ed:60:bc:
         97:1c:09:41:2e:81:3d:43:f5:b5:08:de:75:4d:77:e4:4d:74:
         f6:b9:1b:c6:a8:0c:dd:66:21:18:e9:da:b5:48:04:26:f8:96:
         ff:8c:5a:02:73:c8:a0:3d:39:5a:09:16:ab:91:82:8a:39:6e:
         b8:41:a3:72:7c:79:1d:1f:08:50:af:54:1d:73:67:97:54:84:
         03:9d:96:a7:72:83:e5:88:c2:14:5e:ff:e2:c7:44:97:27:d9:
         13:e9:90:6b:e9:34:61:fd:ee:50:59:23:33:bd:20:fc:de:bd:
         3e:fb:af:f7:ec:fb:70:87:af:4d:89:d7:75:7b:ff:f7:42:b9:
         70:90:28:96:1c:92:af:68:e4:3b:c9:d6:08:33:3c:c7:ab:f3:
         08:bf:7a:f0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----