Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a6/cccc41-dd2c-41f0-82bf-e92dd8fa6abb/1/rKL3dI_jY9xZOem4VPwAQDEw66U.mft
File:                     rKL3dI_jY9xZOem4VPwAQDEw66U.mft (raw, json)
Hash identifier:          jcDrwtDke8Iu6Sz7sXHvi6omhTOKaqqHIr5NC6UJa+g=
Subject key identifier:   08:A1:EB:90:CC:48:26:47:50:17:44:BC:11:B3:4E:ED:FA:85:0D:96
Authority key identifier: AC:A2:F7:74:8F:E3:63:DC:59:39:E9:B8:54:FC:00:40:31:30:EB:A5
Certificate issuer:       /CN=aca2f7748fe363dc5939e9b854fc00403130eba5
Certificate serial:       01962FAB0D3503CEC51E753C22B61C6AF0BF
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/rKL3dI_jY9xZOem4VPwAQDEw66U.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/a6/cccc41-dd2c-41f0-82bf-e92dd8fa6abb/1/rKL3dI_jY9xZOem4VPwAQDEw66U.mft
Manifest number:          1160
Signing time:             Sun 13 Apr 2025 15:01:01 +0000
Manifest this update:     Sun 13 Apr 2025 15:01:01 +0000
Manifest next update:     Mon 14 Apr 2025 15:01:01 +0000
Files and hashes:         1: j1MFNSh109TR4xhuIO7hEIzzLx0.roa (hash: m4Zoo8iLf6w6vYmDzKqVKXqfQB+bfWM+4JfQ0Ih+lSM=)
                          2: rKL3dI_jY9xZOem4VPwAQDEw66U.crl (hash: Fj0Y3ORmy619VManG2pixEVdAjONmsZGFNOyUhhaj+8=)
                          3: u7VG8MqdZGcH4gUtF3RkiJXAbmg.roa (hash: 2LYlYxgKHIzR/5x4DJBXFV3DllJcEY1kUeTRo0v7v2A=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2f:ab:0d:35:03:ce:c5:1e:75:3c:22:b6:1c:6a:f0:bf
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=aca2f7748fe363dc5939e9b854fc00403130eba5
        Validity
            Not Before: Apr 13 15:01:01 2025 GMT
            Not After : Apr 14 15:01:01 2025 GMT
        Subject: CN=08a1eb90cc482647501744bc11b34eedfa850d96
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ad:fc:f5:f8:82:9a:7f:7e:3d:65:be:5f:79:59:
                    5c:c5:0a:cb:4f:84:19:e8:63:2e:b0:0f:87:f1:c0:
                    4f:5f:fc:b0:ce:ca:ca:8a:65:41:9e:d4:55:a3:f8:
                    5e:96:be:37:b6:22:da:4f:61:99:b3:4f:a2:55:23:
                    83:0b:d7:ff:da:d2:23:dd:64:7a:59:eb:66:b7:de:
                    c0:fc:3f:b4:de:6a:a3:44:c5:3b:a0:f4:9c:a8:04:
                    0b:0b:f1:20:95:a7:05:ea:90:1e:c5:09:70:12:70:
                    c9:3c:32:69:22:69:e0:a6:05:60:ed:6d:15:48:6b:
                    ea:36:23:84:42:2c:55:47:bd:a3:f9:7a:f1:0c:6a:
                    dd:5f:97:01:37:f5:8a:ff:51:19:6b:57:27:1b:e2:
                    32:d8:88:3f:c8:60:52:2b:bb:b6:21:6a:92:07:59:
                    92:df:79:83:56:ad:94:da:0f:aa:d5:5c:97:d4:e7:
                    a0:f1:40:01:a0:bd:f0:e2:f1:99:6f:7a:1d:14:6b:
                    5c:0b:d9:3f:a2:18:7f:f9:86:f7:1c:65:89:e9:10:
                    22:4c:a3:b3:bc:60:45:28:bb:4d:f5:44:87:11:4c:
                    ff:85:72:2b:1a:4b:a1:eb:1d:0a:8a:d9:51:4a:dc:
                    33:86:59:7a:2e:eb:c9:7a:98:76:70:b3:de:cf:b2:
                    d6:59
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                08:A1:EB:90:CC:48:26:47:50:17:44:BC:11:B3:4E:ED:FA:85:0D:96
            X509v3 Authority Key Identifier:
                keyid:AC:A2:F7:74:8F:E3:63:DC:59:39:E9:B8:54:FC:00:40:31:30:EB:A5

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/rKL3dI_jY9xZOem4VPwAQDEw66U.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a6/cccc41-dd2c-41f0-82bf-e92dd8fa6abb/1/rKL3dI_jY9xZOem4VPwAQDEw66U.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/a6/cccc41-dd2c-41f0-82bf-e92dd8fa6abb/1/rKL3dI_jY9xZOem4VPwAQDEw66U.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         9e:f4:79:60:b1:dd:64:0f:c6:d6:6e:6a:9b:1f:11:8b:ae:00:
         0c:b8:6a:cd:fb:3b:3e:9f:62:98:57:dd:bc:91:d7:06:4b:ab:
         36:80:16:48:c7:ff:cc:96:7f:93:fe:47:3f:4f:0a:e2:15:da:
         80:c2:5f:3b:77:05:21:b7:2b:d0:17:4c:dc:c1:04:1e:47:4b:
         15:b6:df:95:bf:b1:21:57:49:40:60:a4:ce:4e:3e:71:fd:43:
         9a:31:0c:a4:7e:a1:5e:2b:02:e7:8c:ad:05:61:e7:90:04:8a:
         f0:18:fd:c5:d4:d2:95:a4:c0:ee:75:48:aa:09:e5:c2:f1:17:
         7d:4f:fc:42:d8:da:3b:7b:54:1c:17:3f:a3:73:e8:0a:45:0e:
         96:b2:86:03:ca:b6:f7:3b:61:37:f0:d6:f7:c0:0f:df:03:8d:
         98:1a:1f:b4:61:62:f8:54:97:21:0e:f0:42:1d:8f:53:8e:2c:
         57:4e:ef:33:63:e6:e3:25:b1:2c:8a:cc:d4:ee:b9:46:98:6a:
         0d:9a:b2:ce:b1:2e:82:1a:1f:28:b7:bf:7a:8a:00:bf:6c:e3:
         dd:8f:55:ad:35:78:ce:07:71:58:02:b2:b9:74:8e:60:0b:2a:
         3c:74:54:28:e4:af:4a:3d:65:1c:ca:ef:6b:37:1c:b4:4d:6f:
         e6:58:6b:14
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----