Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/86/7ae133-d0b6-4b68-8f61-d4d9a2e60e64/1/STKJJW4ziHd9leTVMVZ842cqFJo.mft
File:                     STKJJW4ziHd9leTVMVZ842cqFJo.mft (raw, json)
Hash identifier:          9twNQUbPXrq1bIjEJNK3TiRS/7Q3/RUWlQGNiHkULZg=
Subject key identifier:   75:8B:91:93:61:C4:DB:9A:15:A6:E3:DD:2E:30:84:E9:B6:B3:8B:14
Authority key identifier: 49:32:89:25:6E:33:88:77:7D:95:E4:D5:31:56:7C:E3:67:2A:14:9A
Certificate issuer:       /CN=493289256e3388777d95e4d531567ce3672a149a
Certificate serial:       01962ECF5F26995D2875C8D82CA33AE156D2
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/STKJJW4ziHd9leTVMVZ842cqFJo.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/86/7ae133-d0b6-4b68-8f61-d4d9a2e60e64/1/STKJJW4ziHd9leTVMVZ842cqFJo.mft
Manifest number:          14EA
Signing time:             Sun 13 Apr 2025 11:01:04 +0000
Manifest this update:     Sun 13 Apr 2025 11:01:04 +0000
Manifest next update:     Mon 14 Apr 2025 11:01:04 +0000
Files and hashes:         1: PDkI417cWn_abbXt0o9HD-0vD6g.roa (hash: mxVaLWpnhSe1agkXL4xYhLyldi4/weSHgH61n+a6Rqk=)
                          2: STKJJW4ziHd9leTVMVZ842cqFJo.crl (hash: xbjmR4d+4dAKbVdPn8K771smb3z6/gLBpmCbYCVBGa8=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2e:cf:5f:26:99:5d:28:75:c8:d8:2c:a3:3a:e1:56:d2
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=493289256e3388777d95e4d531567ce3672a149a
        Validity
            Not Before: Apr 13 11:01:04 2025 GMT
            Not After : Apr 14 11:01:04 2025 GMT
        Subject: CN=758b919361c4db9a15a6e3dd2e3084e9b6b38b14
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c0:2c:ed:6b:da:0f:41:62:e6:3e:c3:3a:06:f1:
                    9b:17:6c:bb:87:26:34:5d:58:01:e3:87:51:72:f8:
                    1b:e5:d2:2f:f3:cb:30:97:67:4d:a6:22:cc:8e:79:
                    98:d6:7b:4b:6e:1e:5d:f4:c9:27:2a:09:b3:e5:ea:
                    97:0d:49:2b:40:90:c1:7d:11:0c:a5:03:d2:fa:5d:
                    c0:92:34:08:c6:71:ef:ee:8e:db:4f:be:39:36:8f:
                    15:8e:1e:54:d2:c3:fb:23:78:05:a7:f0:fc:4f:b4:
                    23:f5:41:aa:18:3b:15:38:9e:22:99:8f:e7:ff:9c:
                    c7:be:06:55:6b:65:41:0e:ce:e0:87:30:c1:ad:cc:
                    22:44:3b:4e:0e:28:be:84:6d:11:76:52:b5:6c:7f:
                    97:35:44:62:ed:21:0c:6c:55:53:65:84:d9:00:e0:
                    fe:31:29:c3:3d:aa:0e:a5:58:e5:9f:6c:5d:b3:43:
                    ad:b2:66:46:6f:11:a0:cf:59:41:13:1b:f0:8a:4b:
                    65:76:85:03:42:6d:b1:6e:af:69:bc:c7:45:6a:e0:
                    f9:89:8c:70:d1:bb:80:05:8e:bc:30:a2:5f:88:7c:
                    ec:64:54:d5:f8:54:42:1b:c4:7a:10:20:ae:1a:11:
                    7d:ea:e3:d6:a3:f1:43:6c:25:40:7a:c4:37:de:f8:
                    54:3b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                75:8B:91:93:61:C4:DB:9A:15:A6:E3:DD:2E:30:84:E9:B6:B3:8B:14
            X509v3 Authority Key Identifier:
                keyid:49:32:89:25:6E:33:88:77:7D:95:E4:D5:31:56:7C:E3:67:2A:14:9A

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/STKJJW4ziHd9leTVMVZ842cqFJo.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/86/7ae133-d0b6-4b68-8f61-d4d9a2e60e64/1/STKJJW4ziHd9leTVMVZ842cqFJo.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/86/7ae133-d0b6-4b68-8f61-d4d9a2e60e64/1/STKJJW4ziHd9leTVMVZ842cqFJo.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         77:b1:5d:fa:8e:2c:80:c0:c4:87:80:9d:9a:93:7d:9f:b0:8f:
         4e:ce:17:85:25:83:30:a4:d4:0a:e3:24:80:62:7d:a9:2c:46:
         ad:b5:71:0e:34:27:59:9b:fa:01:44:62:30:ca:0b:a8:c9:a4:
         af:7e:6b:cd:ab:7a:83:1e:72:32:50:2b:cf:61:32:eb:f6:41:
         42:5f:b6:29:a6:60:c3:43:30:0b:11:b5:b2:95:8c:ad:80:1e:
         e1:e9:48:95:93:9e:90:6a:10:86:6b:bf:85:44:90:10:9f:b6:
         92:c9:47:38:bf:1c:50:42:63:37:89:7c:8e:7d:04:72:ba:9c:
         a8:6b:8e:78:c2:77:6b:97:2c:3b:fb:82:09:4e:05:fb:24:98:
         91:66:5e:0a:50:ce:d7:b7:21:67:62:4a:e9:c3:e1:f7:63:ed:
         26:25:e2:83:18:e5:2e:1e:f2:dd:59:90:7c:be:8e:d5:1a:0b:
         10:02:21:49:50:38:92:e2:75:04:73:7b:a1:9b:21:38:32:fc:
         78:53:9e:86:77:5a:ea:79:de:d9:cc:3f:a7:a4:91:5b:ba:c2:
         2c:f4:78:1c:df:31:19:08:f9:21:8d:3b:38:9c:90:43:7b:cc:
         2b:43:06:4e:6c:28:b6:53:10:b6:9c:6c:dc:38:5d:7a:e4:98:
         61:ff:7d:4b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----