Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ab/fa836c-1cd3-4ba7-b598-9f5597b56b76/1/aFeXIsOgywwzUcWV36PX6tgfFr8.mft
File:                     aFeXIsOgywwzUcWV36PX6tgfFr8.mft (raw, json)
Hash identifier:          /PX3CchYnjCoDfpziTSmU9cA9Q+cmPCLrersnWNExKI=
Subject key identifier:   43:00:EA:96:E2:E4:B5:AC:23:51:F2:0E:15:ED:31:66:47:54:9E:38
Authority key identifier: 68:57:97:22:C3:A0:CB:0C:33:51:C5:95:DF:A3:D7:EA:D8:1F:16:BF
Certificate issuer:       /CN=68579722c3a0cb0c3351c595dfa3d7ead81f16bf
Certificate serial:       01962F3D38343459680074183C192AB57B8C
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/aFeXIsOgywwzUcWV36PX6tgfFr8.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/ab/fa836c-1cd3-4ba7-b598-9f5597b56b76/1/aFeXIsOgywwzUcWV36PX6tgfFr8.mft
Manifest number:          14F0
Signing time:             Sun 13 Apr 2025 13:01:03 +0000
Manifest this update:     Sun 13 Apr 2025 13:01:03 +0000
Manifest next update:     Mon 14 Apr 2025 13:01:03 +0000
Files and hashes:         1: 5kpPrp0PsQaLwN-0f4M5ORyJaIo.roa (hash: sRLtBcmB7NMgyGt87xrsnTDd/kvjgxEDyhMytt8u1mY=)
                          2: aFeXIsOgywwzUcWV36PX6tgfFr8.crl (hash: PhEqFHSC4fY5tX3InK6Kiiz+pEbArSWPO+DPg0j1XA8=)
                          3: gAJowYToxXMF7RF5vvsMOYJumzQ.roa (hash: YtzVb80baHUBbI1OM11pUhHuNDyKujzR+uDb+twlqdI=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2f:3d:38:34:34:59:68:00:74:18:3c:19:2a:b5:7b:8c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=68579722c3a0cb0c3351c595dfa3d7ead81f16bf
        Validity
            Not Before: Apr 13 13:01:03 2025 GMT
            Not After : Apr 14 13:01:03 2025 GMT
        Subject: CN=4300ea96e2e4b5ac2351f20e15ed316647549e38
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b2:d8:b8:37:41:dd:b1:95:30:8c:9a:48:27:c4:
                    6f:22:06:b4:3c:80:7a:da:54:da:ba:a9:ae:3c:b1:
                    41:30:ae:b5:f0:62:b5:c5:31:cb:a6:63:d6:1b:22:
                    8f:6a:2c:8a:0b:b8:fb:4e:2f:5e:4d:c7:00:2c:0e:
                    b4:b8:03:46:29:09:7a:81:6c:0e:0f:b6:82:12:44:
                    05:d2:35:6f:c7:da:f4:6d:f2:dc:e2:56:3c:a9:5b:
                    e7:94:c6:ad:3d:85:2f:4c:8d:06:d9:63:b4:29:16:
                    1c:4c:ed:1a:b8:77:76:75:66:16:71:d6:7d:87:da:
                    a4:10:e8:32:37:ec:5c:a9:ab:1a:fd:b6:15:67:98:
                    52:c7:d2:0c:ee:a5:3a:09:d3:9b:6d:4e:28:72:8e:
                    09:63:ad:08:be:26:9d:17:44:50:65:6e:e0:ac:ff:
                    ff:10:80:2b:ed:75:65:e4:2f:a2:99:60:d1:ff:a7:
                    2f:47:da:93:88:03:4f:46:7e:86:b9:45:72:96:28:
                    9d:ae:9e:6d:c1:8f:8f:1f:92:81:b7:03:be:00:c7:
                    34:7e:53:a9:ee:fa:a4:d5:a1:4c:70:95:43:b3:20:
                    e5:81:d5:32:33:e2:3c:b9:f4:40:01:a0:18:fc:34:
                    e4:33:6f:e3:c1:ce:a3:c6:ca:be:d6:07:c7:b7:f3:
                    4f:c9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                43:00:EA:96:E2:E4:B5:AC:23:51:F2:0E:15:ED:31:66:47:54:9E:38
            X509v3 Authority Key Identifier:
                keyid:68:57:97:22:C3:A0:CB:0C:33:51:C5:95:DF:A3:D7:EA:D8:1F:16:BF

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/aFeXIsOgywwzUcWV36PX6tgfFr8.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ab/fa836c-1cd3-4ba7-b598-9f5597b56b76/1/aFeXIsOgywwzUcWV36PX6tgfFr8.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/ab/fa836c-1cd3-4ba7-b598-9f5597b56b76/1/aFeXIsOgywwzUcWV36PX6tgfFr8.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         39:0c:18:06:cc:80:d6:f5:f0:60:d0:b6:0e:5f:30:94:a1:8b:
         27:e4:e1:ff:29:df:19:b3:c9:09:55:54:c5:8b:1e:51:9b:21:
         dd:4c:5a:2a:cf:08:92:f2:ae:d8:19:4d:39:67:47:98:68:74:
         fc:cd:ce:d8:63:1a:e6:c8:4a:f1:72:f5:3f:f5:fc:9f:f1:57:
         8a:a7:56:d9:9d:4d:85:96:30:46:05:ff:5f:e0:94:af:65:9d:
         59:2e:f6:29:fe:77:39:aa:81:2a:9e:e0:8f:d3:26:f8:b9:ea:
         5b:87:b0:e7:68:40:7e:d1:a5:c4:94:53:dc:a2:46:10:80:f1:
         a8:57:fb:2d:4d:43:ce:a2:1f:cf:f0:e4:e2:38:c3:50:5e:ee:
         fc:ba:c9:04:47:db:99:3f:37:7e:e1:7d:ac:0b:70:c9:6f:84:
         5d:6c:f8:f4:ea:b6:21:f5:3c:04:c4:4c:b0:ce:02:8f:44:d6:
         98:df:27:61:5b:ab:25:be:36:f3:e0:ac:18:bf:6c:36:56:df:
         b3:6f:cd:b0:d1:15:8a:04:fc:a3:58:55:bb:62:cb:38:91:16:
         aa:03:a8:74:8d:bd:e8:c0:ea:b9:7f:4d:bc:cd:1a:98:de:3b:
         1d:50:37:8d:9f:09:9e:2c:fd:50:44:96:b5:37:e9:84:36:ba:
         f0:0e:54:d1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----