Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a0/8d7c02-b38d-4d65-af35-837d0031b3d1/1/SiIu0bilM4WPRljF0lOfr1Kr2qc.mft
File:                     SiIu0bilM4WPRljF0lOfr1Kr2qc.mft (raw, json)
Hash identifier:          /QAHvPRoAxttLdN+ABmzkP4pyo7rpGobBwEiWFdoImw=
Subject key identifier:   8F:63:3A:6C:19:0F:DE:16:00:53:B2:56:30:6D:17:DB:87:AF:B9:8C
Authority key identifier: 4A:22:2E:D1:B8:A5:33:85:8F:46:58:C5:D2:53:9F:AF:52:AB:DA:A7
Certificate issuer:       /CN=4a222ed1b8a533858f4658c5d2539faf52abdaa7
Certificate serial:       01962F3DD74349769DDC73F7011CC41E9B7F
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/SiIu0bilM4WPRljF0lOfr1Kr2qc.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/a0/8d7c02-b38d-4d65-af35-837d0031b3d1/1/SiIu0bilM4WPRljF0lOfr1Kr2qc.mft
Manifest number:          14EA
Signing time:             Sun 13 Apr 2025 13:01:43 +0000
Manifest this update:     Sun 13 Apr 2025 13:01:43 +0000
Manifest next update:     Mon 14 Apr 2025 13:01:43 +0000
Files and hashes:         1: SiIu0bilM4WPRljF0lOfr1Kr2qc.crl (hash: ZI5sBeBnNgdDc3lh0ETx0rCGQfq95jbLmVtMh1YYUe0=)
                          2: bpYsiF18QRf5QtGXZ_iQjax9NTk.roa (hash: sxWNeli2Kw0W0CpyWRBKMIXDOOMhbuvbRuOafrwk3qg=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2f:3d:d7:43:49:76:9d:dc:73:f7:01:1c:c4:1e:9b:7f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4a222ed1b8a533858f4658c5d2539faf52abdaa7
        Validity
            Not Before: Apr 13 13:01:43 2025 GMT
            Not After : Apr 14 13:01:43 2025 GMT
        Subject: CN=8f633a6c190fde160053b256306d17db87afb98c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:db:5c:52:63:5c:34:ab:32:bf:a5:c2:65:e2:eb:
                    9c:46:56:6f:0f:34:5f:a8:ef:5b:29:3a:13:e4:13:
                    aa:ad:1b:6f:0b:66:da:7a:ff:36:4d:47:11:49:a7:
                    ed:cb:7f:ac:8f:7f:d4:fa:3f:05:19:4f:06:8f:53:
                    34:cf:ad:a1:20:f3:17:30:94:1b:55:35:27:2e:d5:
                    5b:ee:43:f7:69:1b:01:65:50:2e:3d:45:83:57:ad:
                    04:00:ad:45:a9:3e:f4:76:58:2e:fd:3a:7b:21:b1:
                    c2:18:31:a4:e2:26:f1:bd:65:82:87:4f:ff:8c:3c:
                    8c:4b:9b:f2:8c:42:45:a5:c9:9a:0e:2d:1b:fb:13:
                    86:fc:b2:f7:4d:40:31:ba:81:59:c4:d6:92:ab:db:
                    0b:84:92:cf:5d:53:2c:31:0f:99:5a:10:90:f5:1f:
                    19:35:02:ab:1c:33:0d:f0:b9:ff:3e:f5:5a:80:74:
                    77:2a:40:4e:f0:0c:10:7e:87:e8:48:1c:f3:10:5a:
                    e1:43:41:f3:42:bb:2a:02:3a:54:05:1c:2c:c7:ff:
                    1c:fc:3c:45:0a:82:5e:df:05:f0:21:bc:44:6e:41:
                    dd:5b:8a:8a:00:79:1f:34:99:b9:82:3e:13:78:60:
                    95:67:7f:c3:4a:34:b3:f8:a7:66:3e:e4:79:42:4e:
                    81:c9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8F:63:3A:6C:19:0F:DE:16:00:53:B2:56:30:6D:17:DB:87:AF:B9:8C
            X509v3 Authority Key Identifier:
                keyid:4A:22:2E:D1:B8:A5:33:85:8F:46:58:C5:D2:53:9F:AF:52:AB:DA:A7

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/SiIu0bilM4WPRljF0lOfr1Kr2qc.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a0/8d7c02-b38d-4d65-af35-837d0031b3d1/1/SiIu0bilM4WPRljF0lOfr1Kr2qc.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/a0/8d7c02-b38d-4d65-af35-837d0031b3d1/1/SiIu0bilM4WPRljF0lOfr1Kr2qc.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         0c:0d:a5:0a:bf:63:40:fb:11:0a:ae:f8:16:4e:b0:69:d9:85:
         69:28:11:0a:ad:4c:f6:4c:ab:2b:bb:e2:d2:e8:e2:71:31:8d:
         dd:b9:17:03:b3:42:a0:01:b3:85:fe:85:8d:05:c6:5d:58:f6:
         51:c8:d1:49:85:47:5b:02:de:12:d3:63:1a:c7:65:1b:bf:e5:
         d6:98:75:7e:62:a8:73:c6:73:8a:dc:52:a9:76:0a:b0:10:6c:
         bc:5a:3a:57:84:d2:f0:f5:d6:17:ed:74:7c:f9:51:a6:66:f0:
         fe:e3:f5:81:6d:7d:19:61:a2:3a:85:20:d6:15:d3:92:05:6c:
         d9:4d:f1:37:6a:9c:54:dc:9f:65:ed:f4:72:1c:b5:ef:48:f7:
         66:4a:4e:97:2d:4a:7a:4b:4f:cd:79:77:1d:ec:b1:9a:f7:5c:
         fb:92:fe:a9:c3:56:30:7a:93:d1:d3:17:1a:ad:2a:5e:24:6e:
         28:04:4e:4b:65:10:bc:ab:29:1d:94:8e:a4:63:29:a4:32:06:
         c3:ca:c8:33:52:c3:1c:f7:e8:6a:e1:fc:fd:2b:5a:6e:94:24:
         ac:1c:7f:1c:29:35:a0:a9:2b:2b:82:88:96:b7:9e:31:68:2d:
         28:85:3c:8f:de:86:68:22:42:ff:28:0b:6a:83:f3:5f:53:15:
         22:85:9d:f4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----