Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ac/52daab-6829-45fa-967e-01f4606c65ec/1/ABFADVSPohr4GaDG4j53pgEutek.mft
File:                     ABFADVSPohr4GaDG4j53pgEutek.mft (raw, json)
Hash identifier:          Q6or1o6xRfg4RPuGciHsTwtciNZqRjZQlT80/FeGwX0=
Subject key identifier:   EC:7D:19:E9:27:FA:91:3A:27:5C:4A:71:88:30:F2:20:14:77:C4:BD
Authority key identifier: 00:11:40:0D:54:8F:A2:1A:F8:19:A0:C6:E2:3E:77:A6:01:2E:B5:E9
Certificate issuer:       /CN=0011400d548fa21af819a0c6e23e77a6012eb5e9
Certificate serial:       01962F0728BA62C8BC125E06E13195364B59
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/ABFADVSPohr4GaDG4j53pgEutek.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/ac/52daab-6829-45fa-967e-01f4606c65ec/1/ABFADVSPohr4GaDG4j53pgEutek.mft
Manifest number:          147E
Signing time:             Sun 13 Apr 2025 12:02:00 +0000
Manifest this update:     Sun 13 Apr 2025 12:02:00 +0000
Manifest next update:     Mon 14 Apr 2025 12:02:00 +0000
Files and hashes:         1: 1-4u4Dw9kw9Y9CEi6GTjA8RhiXyk.roa (hash: Kdt5sjduBNPRdliFvzUojjEC7aaeGnPMG73opbmbK+Q=)
                          2: ABFADVSPohr4GaDG4j53pgEutek.crl (hash: 2eYNw5xVW27/t/AcW+uqIPcKT4a4tPFfhCrOVU5xeRU=)
                          3: nFTNuRdL8Z-Wdwlm8A1gxGSf2iE.roa (hash: Be/+xAPsxrgz7pa9P1aEcP7attPVHrGgMu7I83eiMD8=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2f:07:28:ba:62:c8:bc:12:5e:06:e1:31:95:36:4b:59
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0011400d548fa21af819a0c6e23e77a6012eb5e9
        Validity
            Not Before: Apr 13 12:02:00 2025 GMT
            Not After : Apr 14 12:02:00 2025 GMT
        Subject: CN=ec7d19e927fa913a275c4a718830f2201477c4bd
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9d:cd:4c:15:81:ec:a7:a9:1c:dd:01:61:e7:ed:
                    f5:05:f8:a7:39:55:f3:78:8e:1c:1e:c7:4f:21:8c:
                    bb:0e:fc:32:70:1d:56:c1:e0:f1:ff:d4:60:ab:35:
                    b5:d9:ce:40:01:3c:4a:61:69:bf:98:a9:d1:21:0d:
                    ef:a1:fa:6d:a9:1d:e8:ef:b3:12:a2:82:6a:9e:c5:
                    a5:4a:ab:51:83:f4:2b:fc:be:b0:61:42:a6:10:c3:
                    41:d3:5b:ff:b9:92:97:78:ac:ba:29:5c:1e:93:bc:
                    37:73:fa:e8:57:c9:94:66:4e:22:3b:87:69:e5:b0:
                    1e:f1:21:18:5b:c6:c1:b4:27:e4:ab:e2:e3:17:8b:
                    03:a6:90:51:f9:6f:b0:c8:aa:fc:91:07:41:e7:64:
                    c1:3e:3f:99:27:2e:76:4c:31:19:4a:57:3d:49:b5:
                    10:7f:1b:12:02:09:7b:60:ca:ee:a0:bb:c6:f0:e4:
                    93:83:3c:aa:55:cd:77:4f:da:cd:88:17:5a:13:8c:
                    25:38:aa:45:f0:ee:95:90:e1:82:ed:16:be:a6:8d:
                    08:5f:12:93:52:59:64:c4:87:e0:aa:61:2a:09:d8:
                    bb:2f:2a:1a:22:35:22:25:32:39:15:10:2a:b0:62:
                    b7:e3:31:f3:8a:28:70:12:f9:63:72:71:b0:13:be:
                    e1:c3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                EC:7D:19:E9:27:FA:91:3A:27:5C:4A:71:88:30:F2:20:14:77:C4:BD
            X509v3 Authority Key Identifier:
                keyid:00:11:40:0D:54:8F:A2:1A:F8:19:A0:C6:E2:3E:77:A6:01:2E:B5:E9

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ABFADVSPohr4GaDG4j53pgEutek.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ac/52daab-6829-45fa-967e-01f4606c65ec/1/ABFADVSPohr4GaDG4j53pgEutek.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/ac/52daab-6829-45fa-967e-01f4606c65ec/1/ABFADVSPohr4GaDG4j53pgEutek.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         9e:4d:96:0c:a4:df:60:87:7e:18:b7:71:95:41:50:3d:c1:7e:
         f3:b9:1a:80:aa:eb:40:bb:7f:da:f4:36:a2:53:56:26:21:d3:
         d9:9a:3e:c1:64:98:89:d4:10:99:5e:82:3d:47:e5:34:5d:5a:
         dd:16:a5:85:5b:39:96:f2:72:fc:63:68:95:cc:1f:2a:a1:93:
         72:4d:3c:dc:0a:cf:ce:65:63:53:42:28:7c:05:35:04:b4:c5:
         91:fa:5c:41:bd:1a:29:62:da:92:a9:d2:29:81:0e:d5:da:53:
         25:0f:48:e3:22:6b:82:10:aa:35:d7:d2:56:e6:9f:b3:4b:47:
         23:07:59:c5:97:70:44:40:73:e8:01:51:3b:79:f5:9a:45:d1:
         44:30:18:88:69:b4:57:59:12:c0:6d:5d:f2:fe:8d:cf:ec:52:
         c0:4a:08:64:48:ce:e8:cd:26:b9:e2:84:51:cc:45:65:d0:c5:
         b9:64:b7:67:23:c2:a6:c5:d9:58:da:6e:47:1c:6a:9d:0e:b3:
         89:fd:9a:2a:f2:9d:eb:81:d2:4f:25:77:9e:16:e8:e6:e7:d1:
         d7:ad:67:2f:29:44:3b:6e:f8:45:1a:6d:74:fc:75:89:04:dd:
         0e:f9:38:3c:91:8b:9d:b4:6b:8c:aa:0c:cb:02:1d:0b:3c:83:
         22:09:e8:34
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----