Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a1/d43c2c-74e9-47d4-bf62-80f7fd6ea9c9/1/CkGloqGDOWKcwTA-beyLtgXdymU.mft
File:                     CkGloqGDOWKcwTA-beyLtgXdymU.mft (raw, json)
Hash identifier:          1MT14HUDGbNarD5dw1jR7N1/MxtJDaYhOUa8e8DWv5w=
Subject key identifier:   A2:8A:8A:DF:03:4C:25:FB:6A:68:3D:B3:EA:AF:CB:33:DC:D1:77:6E
Authority key identifier: 0A:41:A5:A2:A1:83:39:62:9C:C1:30:3E:6D:EC:8B:B6:05:DD:CA:65
Certificate issuer:       /CN=0a41a5a2a18339629cc1303e6dec8bb605ddca65
Certificate serial:       01962E995F840D5AFD526723AA480130E345
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/CkGloqGDOWKcwTA-beyLtgXdymU.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/a1/d43c2c-74e9-47d4-bf62-80f7fd6ea9c9/1/CkGloqGDOWKcwTA-beyLtgXdymU.mft
Manifest number:          14EE
Signing time:             Sun 13 Apr 2025 10:02:05 +0000
Manifest this update:     Sun 13 Apr 2025 10:02:05 +0000
Manifest next update:     Mon 14 Apr 2025 10:02:05 +0000
Files and hashes:         1: CkGloqGDOWKcwTA-beyLtgXdymU.crl (hash: 2Tdej1JC4YkOKTGZq8C1iAPqAIUOeBhSAKM7q5GTNI8=)
                          2: NYpGsgvZZnS43WLsZ6IiOuK1URk.roa (hash: 1DbDkDpg7L2mWH/maxc8wFOk6zRLCwxEnE3jGY7E3oU=)
                          3: hER6wRwe_hUZJ0u9RImVrBTy1as.roa (hash: iyJ20Ahzbr3qZY7vMtDGjDttWYIPJenArxH2H2QEoYE=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2e:99:5f:84:0d:5a:fd:52:67:23:aa:48:01:30:e3:45
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0a41a5a2a18339629cc1303e6dec8bb605ddca65
        Validity
            Not Before: Apr 13 10:02:05 2025 GMT
            Not After : Apr 14 10:02:05 2025 GMT
        Subject: CN=a28a8adf034c25fb6a683db3eaafcb33dcd1776e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a8:10:f8:bc:d7:ba:ef:13:17:cc:81:ff:89:5c:
                    00:1f:67:65:28:fd:6b:0a:e0:0c:07:d7:4f:aa:32:
                    69:56:19:74:59:ea:f8:13:42:4f:22:94:4e:68:88:
                    88:da:57:84:1e:01:36:36:5f:3d:d0:32:52:89:a3:
                    ae:cd:84:62:d8:30:1f:5c:02:8e:d7:12:ae:76:65:
                    72:e8:95:42:54:93:4c:33:e5:b7:20:24:c0:a9:68:
                    42:01:3d:1b:48:77:a3:43:a0:db:d0:9b:81:7a:c2:
                    aa:76:7d:c6:d2:91:69:61:ef:c5:6c:00:9f:31:73:
                    5a:45:83:b8:76:48:bc:18:db:ee:01:a8:3b:13:4e:
                    58:9e:9f:24:18:7e:26:6a:cb:7f:75:26:8d:9a:c5:
                    45:b3:65:c4:10:7f:44:a1:f3:75:d1:d9:70:0d:13:
                    87:76:af:1a:d6:5c:e9:4e:25:0d:ae:a1:2f:88:ec:
                    fc:e3:11:48:f0:1a:20:14:31:a0:88:f6:52:e0:dc:
                    f3:41:c3:78:2f:e4:62:81:0d:11:cc:7d:e9:75:77:
                    e9:2b:c0:d2:96:2b:24:50:6e:ed:73:c1:6b:80:53:
                    07:b6:e2:1f:0f:b0:b0:84:ef:9d:a7:80:b2:7f:e8:
                    bd:06:32:f3:55:7e:0b:2d:88:8c:86:32:97:a6:ad:
                    15:0f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A2:8A:8A:DF:03:4C:25:FB:6A:68:3D:B3:EA:AF:CB:33:DC:D1:77:6E
            X509v3 Authority Key Identifier:
                keyid:0A:41:A5:A2:A1:83:39:62:9C:C1:30:3E:6D:EC:8B:B6:05:DD:CA:65

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CkGloqGDOWKcwTA-beyLtgXdymU.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a1/d43c2c-74e9-47d4-bf62-80f7fd6ea9c9/1/CkGloqGDOWKcwTA-beyLtgXdymU.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/a1/d43c2c-74e9-47d4-bf62-80f7fd6ea9c9/1/CkGloqGDOWKcwTA-beyLtgXdymU.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         68:b3:72:37:29:11:68:37:51:5d:a1:98:ac:36:e9:f2:1c:4d:
         a6:f4:04:72:9e:60:71:d8:d7:f1:94:63:8c:14:46:d7:59:48:
         a2:f1:51:d4:b3:73:d2:24:52:dd:86:c7:c7:6e:a5:89:e7:21:
         ea:17:bc:0f:49:26:9e:a3:57:41:86:cc:fb:04:6c:fa:98:3c:
         94:30:02:3b:f5:37:d2:1f:9f:c6:83:77:58:aa:4f:7a:30:8a:
         c0:d4:6f:7a:e2:a8:d2:46:23:32:24:79:95:bc:2e:1d:ba:91:
         21:1b:45:99:96:ee:25:65:43:f4:b6:ab:c5:9e:7d:f6:01:6d:
         ec:ba:f8:19:9b:35:7a:e0:f1:a6:3c:83:2e:78:7e:51:a4:73:
         e3:65:a5:0c:9f:53:a6:1b:0f:5c:1d:37:45:72:ed:94:c7:e6:
         19:16:76:e6:cf:70:8c:98:d3:18:1a:48:6a:56:09:60:67:30:
         0d:3b:63:b2:18:6b:3f:3d:d8:55:99:88:ad:65:f9:ad:2a:d6:
         fd:2a:22:6c:dd:1f:58:c0:b9:fb:e7:f7:86:66:c4:17:c6:8c:
         44:db:2e:b3:58:44:d1:cf:57:25:90:9c:18:64:85:84:d8:b1:
         8e:07:e9:32:83:bc:d8:c0:b0:8f:74:6f:51:a9:36:07:9a:a9:
         6e:8c:1c:f9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----