Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/83/68239f-09a3-4108-89ba-eee50dd9193c/1/AF8NRLIh9LEcidtolp-Xw8cVSQY.mft
File:                     AF8NRLIh9LEcidtolp-Xw8cVSQY.mft (raw, json)
Hash identifier:          riArQ+3GA/YRvhuiJubV7zEvb6Xyb4Ec8JNJD4ex+48=
Subject key identifier:   73:C3:26:D6:BD:F1:25:E7:B8:7B:A8:31:33:11:C3:DD:D4:D4:2D:EA
Authority key identifier: 00:5F:0D:44:B2:21:F4:B1:1C:89:DB:68:96:9F:97:C3:C7:15:49:06
Certificate issuer:       /CN=005f0d44b221f4b11c89db68969f97c3c7154906
Certificate serial:       01962F0710CC540ED8B83B9E37B73D44BAAC
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/AF8NRLIh9LEcidtolp-Xw8cVSQY.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/83/68239f-09a3-4108-89ba-eee50dd9193c/1/AF8NRLIh9LEcidtolp-Xw8cVSQY.mft
Manifest number:          14EA
Signing time:             Sun 13 Apr 2025 12:01:54 +0000
Manifest this update:     Sun 13 Apr 2025 12:01:54 +0000
Manifest next update:     Mon 14 Apr 2025 12:01:54 +0000
Files and hashes:         1: AF8NRLIh9LEcidtolp-Xw8cVSQY.crl (hash: 6WKwcoC7/jwCKl6As5V0jh2qrgxTtawbE+MsTwbiCNU=)
                          2: YU4fCfmpK-fuEOwSolTjGJvHl-Q.roa (hash: jEvy+I1e+1GaLBXiJtzyH21Rx3ZNEpokSAtj3mt7uI4=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2f:07:10:cc:54:0e:d8:b8:3b:9e:37:b7:3d:44:ba:ac
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=005f0d44b221f4b11c89db68969f97c3c7154906
        Validity
            Not Before: Apr 13 12:01:54 2025 GMT
            Not After : Apr 14 12:01:54 2025 GMT
        Subject: CN=73c326d6bdf125e7b87ba8313311c3ddd4d42dea
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a7:f2:c4:53:b8:89:d0:f6:8e:12:d5:a4:d1:e9:
                    eb:fc:da:3d:93:53:95:77:a9:39:89:b5:59:43:2e:
                    90:aa:34:22:99:05:e4:9b:f7:d2:2a:a6:22:0a:cc:
                    6a:f2:36:ae:92:5d:f5:63:9a:53:1c:8d:26:f8:ef:
                    75:b7:53:84:07:2c:54:1b:98:28:9a:48:a9:07:4c:
                    c7:7a:a8:f2:7e:f9:9f:d3:a4:91:b3:a0:9d:a0:d9:
                    04:72:c1:b0:a9:2a:66:fe:9b:2c:f2:4a:1e:cc:3a:
                    5f:b5:1d:3f:9e:07:41:35:65:2d:9b:fd:4b:9b:9a:
                    d7:12:63:b4:85:79:5c:3e:c0:bd:4b:d5:5f:52:63:
                    c8:d3:01:df:29:20:0c:b1:33:17:ad:44:9e:33:a8:
                    45:fd:54:76:18:38:6d:33:4a:80:ff:11:77:f5:1f:
                    28:57:11:8a:69:f7:b7:11:7b:f2:42:09:b9:00:93:
                    f0:d2:de:c0:fc:96:56:c5:93:1a:68:6c:cb:3c:6c:
                    27:21:14:0b:6d:5f:84:3a:12:e8:7e:15:fe:a0:6a:
                    ba:f1:50:81:b7:64:93:b5:58:cf:a5:f1:43:8e:e7:
                    d4:16:fb:1f:18:82:cd:43:97:77:32:44:98:9d:37:
                    77:a4:84:07:0e:16:92:89:a1:fc:45:5e:32:ab:20:
                    1f:69
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                73:C3:26:D6:BD:F1:25:E7:B8:7B:A8:31:33:11:C3:DD:D4:D4:2D:EA
            X509v3 Authority Key Identifier:
                keyid:00:5F:0D:44:B2:21:F4:B1:1C:89:DB:68:96:9F:97:C3:C7:15:49:06

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/AF8NRLIh9LEcidtolp-Xw8cVSQY.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/83/68239f-09a3-4108-89ba-eee50dd9193c/1/AF8NRLIh9LEcidtolp-Xw8cVSQY.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/83/68239f-09a3-4108-89ba-eee50dd9193c/1/AF8NRLIh9LEcidtolp-Xw8cVSQY.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         30:ce:15:b4:39:d7:72:59:3c:ac:dd:76:09:66:8b:4a:24:a2:
         09:0e:3e:ef:7b:9d:62:f3:b4:33:15:03:bb:31:e9:ae:70:97:
         3e:d7:ae:39:ad:9a:0c:c0:43:df:1d:18:e8:3f:b4:4c:1c:b9:
         d9:c4:f9:e0:5a:e3:cd:79:be:bf:a7:ef:39:e2:5f:d6:be:53:
         40:7f:5a:62:a4:e7:59:4e:04:8d:ea:02:48:7e:03:bc:d2:40:
         86:f4:cc:a7:a9:c4:f2:5e:dc:5c:38:2f:bd:db:f5:cc:a8:3e:
         b5:15:ad:e1:ad:ed:01:93:12:3b:90:a9:fc:f3:39:29:47:d1:
         96:75:7e:84:64:b0:32:0f:ec:5d:ca:8d:93:03:2b:dc:37:41:
         2f:85:1f:5c:d8:2e:2a:3f:90:3a:3c:03:03:43:6e:c2:f7:0f:
         ec:10:33:30:cd:a9:bb:92:ca:02:36:d9:e6:fa:71:bb:01:da:
         79:7c:9f:8e:49:e2:1a:e3:5a:80:ef:43:ab:71:f8:c1:04:a8:
         49:5b:81:20:66:07:bf:a2:12:19:d9:60:fc:f6:14:54:19:8d:
         1d:7f:8b:5f:3b:4b:6f:b5:82:e6:5f:8d:6d:b2:f5:84:f0:80:
         01:3e:7f:61:81:fe:f4:e3:73:1b:0b:27:5e:a0:24:44:b3:d9:
         e8:97:83:3c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----