Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9b/bec783-5b48-4938-87e7-7371b7d1a107/1/A2G_1FDhLplUBKROs3ovnkK_4Hw.mft
File:                     A2G_1FDhLplUBKROs3ovnkK_4Hw.mft (raw, json)
Hash identifier:          rmrI6KE6XtczZXknjwmhRL5QFbJTEaNr6q/NvKNHgjg=
Subject key identifier:   22:88:6C:E8:F1:1F:BC:AD:10:0E:80:89:90:8A:AC:85:09:DF:0E:12
Authority key identifier: 03:61:BF:D4:50:E1:2E:99:54:04:A4:4E:B3:7A:2F:9E:42:BF:E0:7C
Certificate issuer:       /CN=0361bfd450e12e995404a44eb37a2f9e42bfe07c
Certificate serial:       01962E61818E701536E3C748F592C84C1760
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/A2G_1FDhLplUBKROs3ovnkK_4Hw.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/9b/bec783-5b48-4938-87e7-7371b7d1a107/1/A2G_1FDhLplUBKROs3ovnkK_4Hw.mft
Manifest number:          016B
Signing time:             Sun 13 Apr 2025 09:01:04 +0000
Manifest this update:     Sun 13 Apr 2025 09:01:04 +0000
Manifest next update:     Mon 14 Apr 2025 09:01:04 +0000
Files and hashes:         1: A2G_1FDhLplUBKROs3ovnkK_4Hw.crl (hash: 2Kj286lbCfpS0oB5ZByxjeco7CU6igPXeXhyjNA5z1s=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2e:61:81:8e:70:15:36:e3:c7:48:f5:92:c8:4c:17:60
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0361bfd450e12e995404a44eb37a2f9e42bfe07c
        Validity
            Not Before: Apr 13 09:01:04 2025 GMT
            Not After : Apr 14 09:01:04 2025 GMT
        Subject: CN=22886ce8f11fbcad100e8089908aac8509df0e12
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c5:8d:a9:95:7a:cb:19:e9:f9:af:2e:d9:2c:40:
                    28:c5:79:56:68:7f:0d:4d:c4:47:7b:84:92:b5:a7:
                    9d:ac:67:4d:34:ce:82:be:f4:3e:d0:fa:69:f3:b8:
                    2b:87:dd:31:34:2f:f0:21:3b:b0:bf:25:d6:f5:df:
                    b0:44:51:a6:0d:58:4f:aa:12:75:fe:cc:ff:78:38:
                    65:6b:88:a7:c6:9f:d6:6e:9a:4e:fd:34:23:6f:39:
                    29:64:e9:2f:64:b1:ba:08:c2:da:75:fe:cb:e2:cb:
                    7f:89:87:31:3e:6d:d3:36:43:a8:d8:b5:3e:75:a0:
                    80:8f:15:38:a5:07:27:76:41:7b:a7:18:94:48:be:
                    b3:38:8f:6d:13:e0:08:94:53:b8:24:e6:76:f6:1a:
                    2d:ea:af:9d:d3:10:33:a9:9b:e2:d3:b9:56:97:bd:
                    21:b4:49:c6:b3:5c:97:96:4d:dd:af:f2:4b:20:34:
                    24:4e:92:63:4d:5b:b3:56:22:48:09:79:44:33:0e:
                    18:45:66:05:24:54:a2:7f:89:ad:f3:53:7d:8c:5d:
                    f8:a8:70:01:55:46:58:20:9c:51:5c:f4:50:05:55:
                    24:3f:53:7f:c1:62:58:cb:b9:d9:41:8b:0a:3f:06:
                    5c:32:51:be:48:59:81:57:0b:cf:3d:a2:e5:d7:2a:
                    ee:6f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                22:88:6C:E8:F1:1F:BC:AD:10:0E:80:89:90:8A:AC:85:09:DF:0E:12
            X509v3 Authority Key Identifier:
                keyid:03:61:BF:D4:50:E1:2E:99:54:04:A4:4E:B3:7A:2F:9E:42:BF:E0:7C

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/A2G_1FDhLplUBKROs3ovnkK_4Hw.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9b/bec783-5b48-4938-87e7-7371b7d1a107/1/A2G_1FDhLplUBKROs3ovnkK_4Hw.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/9b/bec783-5b48-4938-87e7-7371b7d1a107/1/A2G_1FDhLplUBKROs3ovnkK_4Hw.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         49:e3:82:8b:4f:c4:b4:86:4d:56:7f:da:41:bb:6b:90:ef:4d:
         99:85:14:86:5f:ac:54:ca:5a:df:3f:d7:e3:8b:c9:0d:4d:a7:
         8d:cb:11:82:d6:9b:2c:3f:27:16:5a:92:74:46:6b:85:22:8a:
         47:db:e1:d9:1c:8a:6f:b4:32:73:15:4d:6b:d7:a5:e7:aa:5d:
         f9:5a:5a:89:7c:79:85:92:19:4e:71:62:18:66:17:a8:8c:f8:
         46:eb:e0:8e:d9:da:ed:42:ca:6a:06:ae:88:d4:15:c2:2e:8b:
         6f:c8:01:3d:41:12:8a:2a:81:9b:c6:cf:07:45:9c:04:0d:d5:
         77:c2:cc:81:08:ff:d1:1e:c2:42:d8:27:58:c1:c4:c9:2a:ca:
         6c:4d:a2:f9:00:47:37:49:1f:9b:9b:ca:6d:6b:4e:98:27:a6:
         e1:8a:e1:0d:64:23:99:31:7f:5b:24:62:d0:f1:81:8b:88:9c:
         a2:48:a8:a5:f1:c9:b8:71:be:c0:0a:16:ea:da:2b:3b:cc:68:
         b8:af:0d:7d:b4:0b:74:10:30:e9:d0:f5:3a:dd:2a:2d:f3:67:
         1a:5d:b8:0e:a5:8d:9a:f3:f2:61:83:93:92:fb:35:c7:77:ed:
         dd:58:1a:a8:b7:17:fd:5a:4b:e3:fa:db:46:c7:df:55:f7:c8:
         1c:61:f7:21
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----