Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ac/248588-1f8d-48d1-8bb2-971b0c065460/1/Ai526JlLZmE3SOAhtfQAfwG1TU8.mft
File:                     Ai526JlLZmE3SOAhtfQAfwG1TU8.mft (raw, json)
Hash identifier:          DJ3RTj0BvaHMtpZSJ+6dnBAw8HLgwt7VYPmKodXeouI=
Subject key identifier:   78:5B:6E:F7:32:6B:3D:9A:FA:17:D6:75:CF:A5:19:15:44:98:25:B8
Authority key identifier: 02:2E:76:E8:99:4B:66:61:37:48:E0:21:B5:F4:00:7F:01:B5:4D:4F
Certificate issuer:       /CN=022e76e8994b66613748e021b5f4007f01b54d4f
Certificate serial:       01962DF41CDDB67A28DBF0EB081A929A8D5F
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/Ai526JlLZmE3SOAhtfQAfwG1TU8.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/ac/248588-1f8d-48d1-8bb2-971b0c065460/1/Ai526JlLZmE3SOAhtfQAfwG1TU8.mft
Manifest number:          05B0
Signing time:             Sun 13 Apr 2025 07:01:35 +0000
Manifest this update:     Sun 13 Apr 2025 07:01:35 +0000
Manifest next update:     Mon 14 Apr 2025 07:01:35 +0000
Files and hashes:         1: Ai526JlLZmE3SOAhtfQAfwG1TU8.crl (hash: DJj7XbYgvrvSEYdHmE9gA2Q1mgW0AlID5GDvwCYmKN0=)
                          2: F2c_uapmp4EWBvth9YsoExmggYE.roa (hash: F+OHkAH0cbjuGBPEpniF6/AR3wbSHhM+96aLypnHnng=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2d:f4:1c:dd:b6:7a:28:db:f0:eb:08:1a:92:9a:8d:5f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=022e76e8994b66613748e021b5f4007f01b54d4f
        Validity
            Not Before: Apr 13 07:01:35 2025 GMT
            Not After : Apr 14 07:01:35 2025 GMT
        Subject: CN=785b6ef7326b3d9afa17d675cfa51915449825b8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:91:17:3f:2a:c0:ca:38:cf:4c:51:f5:70:e0:27:
                    15:e8:0f:85:05:f4:98:8e:ab:13:5b:04:1f:af:96:
                    a5:02:5e:4e:73:0e:85:f9:28:98:03:3c:ce:8b:ff:
                    25:fe:7f:51:94:8e:f8:51:2c:76:5b:7a:95:b6:63:
                    e5:b5:36:78:7f:cf:40:5b:43:56:a1:9d:63:a1:88:
                    8b:5d:95:1c:cb:d5:00:b1:28:cb:ce:3f:e5:4e:28:
                    9c:68:02:3d:91:9b:00:4a:fd:5c:d6:2e:66:bf:85:
                    e4:28:7d:2c:ba:4a:de:ce:38:c8:be:30:3b:ef:53:
                    63:03:e8:df:9c:34:87:9a:16:14:84:16:9c:b9:53:
                    72:4a:3b:46:7b:9b:79:20:ef:8d:ba:2c:2f:b5:2b:
                    2a:66:14:3a:b0:81:3d:8f:23:92:e3:57:3e:c3:f2:
                    7e:29:7a:d8:59:d2:f7:17:c7:c5:37:44:2c:9e:61:
                    4f:47:40:06:ed:45:26:c7:10:f6:d3:07:94:a3:69:
                    75:23:14:e3:38:6b:ac:9b:03:c9:87:81:32:7c:e0:
                    43:73:27:f5:be:d3:03:d5:03:cf:e1:41:bc:a7:25:
                    90:eb:cb:ca:37:61:79:b8:55:a9:85:4c:e2:bc:26:
                    bb:3e:f4:33:63:9f:1d:bf:7a:71:cd:1d:03:5c:e2:
                    d4:99
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                78:5B:6E:F7:32:6B:3D:9A:FA:17:D6:75:CF:A5:19:15:44:98:25:B8
            X509v3 Authority Key Identifier:
                keyid:02:2E:76:E8:99:4B:66:61:37:48:E0:21:B5:F4:00:7F:01:B5:4D:4F

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Ai526JlLZmE3SOAhtfQAfwG1TU8.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ac/248588-1f8d-48d1-8bb2-971b0c065460/1/Ai526JlLZmE3SOAhtfQAfwG1TU8.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/ac/248588-1f8d-48d1-8bb2-971b0c065460/1/Ai526JlLZmE3SOAhtfQAfwG1TU8.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         6e:ca:4e:e4:dd:69:e7:26:a7:f9:f5:e4:65:b1:49:38:49:76:
         0d:95:fa:28:da:62:62:d8:a1:31:4c:52:ba:a8:7a:ec:6a:c0:
         b5:77:d0:c0:8a:b1:75:e1:44:fc:ad:99:70:81:00:06:34:5a:
         08:63:e4:2b:00:b5:f1:a3:0f:3b:17:34:37:8e:2b:89:bc:9f:
         5f:b4:e7:45:8e:84:82:51:db:dc:40:5a:63:2e:bb:fc:ae:59:
         b3:3a:67:6b:02:a7:1d:fe:57:21:20:b7:d4:7d:46:07:b4:d4:
         a0:18:31:e7:96:69:c6:c5:2e:b7:fa:81:40:20:3f:12:fa:e7:
         80:ef:6f:89:6f:81:48:d0:52:c1:60:50:92:28:6f:1a:68:eb:
         35:c1:c6:9a:bf:e1:9d:d5:fa:30:89:dc:03:0d:44:54:97:11:
         38:82:be:0b:f9:9e:01:83:b7:09:2b:3a:b0:54:1a:61:98:5f:
         d5:54:37:d8:a4:e2:5d:60:3e:62:d0:9c:1e:88:4c:17:3f:d2:
         4b:c9:dc:a2:8b:63:1a:61:3c:6a:87:ba:8f:63:49:73:29:72:
         aa:4f:f0:2a:f7:66:0b:85:74:1a:43:4f:8c:ed:e7:c1:da:f4:
         82:38:fa:fe:3e:58:79:62:e4:e2:66:0b:88:2f:30:cc:57:13:
         b5:d7:66:db
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----