Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/95/2ed5da-85cf-449f-bd85-628b0fbcd0b6/1/A4IOlk39PSgUIK_aIM6UnmDUzEQ.mft
File:                     A4IOlk39PSgUIK_aIM6UnmDUzEQ.mft (raw, json)
Hash identifier:          2R32qdCu2dpIJk5QN0WLZ8LKOy4TvowuFSxoeMkAnDY=
Subject key identifier:   93:BF:DB:FE:AC:73:05:63:2E:CC:35:82:49:AF:5C:96:56:25:94:D8
Authority key identifier: 03:82:0E:96:4D:FD:3D:28:14:20:AF:DA:20:CE:94:9E:60:D4:CC:44
Certificate issuer:       /CN=03820e964dfd3d281420afda20ce949e60d4cc44
Certificate serial:       01962DF398496D9E5C21CDEDE1F142FDC574
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/A4IOlk39PSgUIK_aIM6UnmDUzEQ.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/95/2ed5da-85cf-449f-bd85-628b0fbcd0b6/1/A4IOlk39PSgUIK_aIM6UnmDUzEQ.mft
Manifest number:          14EB
Signing time:             Sun 13 Apr 2025 07:01:00 +0000
Manifest this update:     Sun 13 Apr 2025 07:01:00 +0000
Manifest next update:     Mon 14 Apr 2025 07:01:00 +0000
Files and hashes:         1: A4IOlk39PSgUIK_aIM6UnmDUzEQ.crl (hash: ZaMuYUXfiL7Wtzs++xxn4hX9fvitctgU/zE+8aMSh3E=)
                          2: LXtV1SOyemLIBBZI_VMF85otBtE.roa (hash: GHDun7QlntuZhx8oP1im/VJfuudrY5drYDWrntuirXo=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2d:f3:98:49:6d:9e:5c:21:cd:ed:e1:f1:42:fd:c5:74
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=03820e964dfd3d281420afda20ce949e60d4cc44
        Validity
            Not Before: Apr 13 07:01:00 2025 GMT
            Not After : Apr 14 07:01:00 2025 GMT
        Subject: CN=93bfdbfeac7305632ecc358249af5c96562594d8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9e:fe:b7:d7:e6:31:a9:fd:35:a1:83:62:37:6b:
                    1e:1a:0c:28:f2:00:4c:4d:5a:6d:ff:30:a2:98:b4:
                    3a:ab:c3:f0:7e:8c:cf:02:9d:13:27:12:94:aa:a5:
                    43:e0:c7:d1:61:90:e0:26:5c:ff:2b:03:01:89:f3:
                    81:dd:ae:81:c1:2b:f2:1e:34:fa:ce:3b:e5:13:1d:
                    02:9f:a5:1a:6e:31:64:e9:4f:13:e2:c2:63:bc:5b:
                    41:72:e0:3d:b8:f8:f6:aa:2b:c2:f9:72:92:a2:27:
                    77:7d:1d:ea:55:5f:1f:04:a5:ad:26:7e:e9:a7:23:
                    5d:87:de:b6:3f:d8:55:80:4d:89:00:c0:68:12:b0:
                    e6:3e:bc:34:b6:a9:52:5d:19:93:21:6f:1a:1e:9f:
                    68:4f:f3:0a:ef:41:f9:c9:85:49:70:26:12:86:54:
                    f1:15:2f:ce:f1:32:ec:1f:49:9f:2e:54:0a:05:ad:
                    c3:a6:8e:6c:05:12:63:fa:7b:03:cd:f9:76:85:82:
                    fb:58:37:a5:c0:8a:77:d8:c2:de:6d:34:c3:b3:0a:
                    aa:b7:67:67:ed:05:87:8a:64:ef:65:4a:5f:57:6e:
                    b7:70:69:aa:cc:2b:6f:bb:63:13:1d:9c:1b:40:c8:
                    b4:47:1f:a4:df:03:8a:7b:6a:51:00:d2:eb:8a:07:
                    85:eb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                93:BF:DB:FE:AC:73:05:63:2E:CC:35:82:49:AF:5C:96:56:25:94:D8
            X509v3 Authority Key Identifier:
                keyid:03:82:0E:96:4D:FD:3D:28:14:20:AF:DA:20:CE:94:9E:60:D4:CC:44

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/A4IOlk39PSgUIK_aIM6UnmDUzEQ.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/95/2ed5da-85cf-449f-bd85-628b0fbcd0b6/1/A4IOlk39PSgUIK_aIM6UnmDUzEQ.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/95/2ed5da-85cf-449f-bd85-628b0fbcd0b6/1/A4IOlk39PSgUIK_aIM6UnmDUzEQ.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         00:de:d5:32:03:34:5f:ae:93:05:27:4d:6c:1b:88:56:62:db:
         7c:2c:56:c5:44:72:b9:cc:a7:bc:2a:54:65:a1:ae:f3:e7:f7:
         9e:e1:83:48:ee:fc:b2:1e:08:56:b6:57:25:f2:13:79:4e:39:
         b5:97:b9:14:3f:4b:ab:bf:dc:bf:86:36:9b:d9:44:03:2a:df:
         1e:ca:e9:6b:6b:3e:40:ee:34:e9:35:6e:3e:c2:59:a9:41:59:
         11:5a:f9:ff:2b:3a:82:65:c0:4e:ce:a6:ff:aa:6c:a9:cf:01:
         6b:cf:a6:a1:aa:4c:a3:41:3e:2a:ac:25:f5:19:cf:f0:60:33:
         7c:b6:fb:cd:77:e3:d7:e3:7c:15:d9:2c:2d:68:fc:7a:98:69:
         36:d3:38:c4:16:7a:97:d4:30:e5:09:6b:f5:73:59:0d:f1:d5:
         2d:26:fb:ba:c3:0b:a8:8e:c0:87:69:8c:c3:32:bb:cf:15:fa:
         3b:a7:1e:80:d0:34:bd:1d:cc:6c:b7:fe:1f:eb:0b:63:78:b8:
         81:fc:14:bb:81:59:e9:63:e8:2a:85:b7:ad:2c:2f:5f:74:8f:
         0a:5d:46:85:3e:6e:45:8c:67:c3:0a:6d:43:c7:ac:c5:34:40:
         b4:14:4b:2d:5f:63:d8:51:1d:54:d1:e1:35:f8:71:7f:5d:33:
         bb:79:af:d4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----