Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ac/7b67fb-c8ba-462c-b064-7c65aec6f2bd/1/SqXjXAXCq1S-dYtshnGGzuFZvWM.mft
File:                     SqXjXAXCq1S-dYtshnGGzuFZvWM.mft (raw, json)
Hash identifier:          0ivIf801QEL9D37iLSmVuNQZKxK46atdvdtEuB4aa70=
Subject key identifier:   EF:F5:B2:92:2B:55:6A:C6:07:1B:BA:21:77:6B:32:B3:BA:50:52:44
Authority key identifier: 4A:A5:E3:5C:05:C2:AB:54:BE:75:8B:6C:86:71:86:CE:E1:59:BD:63
Certificate issuer:       /CN=4aa5e35c05c2ab54be758b6c867186cee159bd63
Certificate serial:       01962F3D4EB7304C03D7A3B0842C8B115FBF
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/SqXjXAXCq1S-dYtshnGGzuFZvWM.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/ac/7b67fb-c8ba-462c-b064-7c65aec6f2bd/1/SqXjXAXCq1S-dYtshnGGzuFZvWM.mft
Manifest number:          0EE5
Signing time:             Sun 13 Apr 2025 13:01:09 +0000
Manifest this update:     Sun 13 Apr 2025 13:01:09 +0000
Manifest next update:     Mon 14 Apr 2025 13:01:09 +0000
Files and hashes:         1: 0giOT2-cspinjb0AYnQ0xR7oe3s.roa (hash: JsKfvRyfvFNiFnymkkC31pksnK2WhZYhTKOkR+nS9d4=)
                          2: SqXjXAXCq1S-dYtshnGGzuFZvWM.crl (hash: 99ZrDfIDFfOBXUgkM3S4RFenD/IGESMGpGNSwudDbpw=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2f:3d:4e:b7:30:4c:03:d7:a3:b0:84:2c:8b:11:5f:bf
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4aa5e35c05c2ab54be758b6c867186cee159bd63
        Validity
            Not Before: Apr 13 13:01:09 2025 GMT
            Not After : Apr 14 13:01:09 2025 GMT
        Subject: CN=eff5b2922b556ac6071bba21776b32b3ba505244
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c8:6a:d5:9c:88:90:3d:2d:f1:93:72:b9:3c:54:
                    00:98:0d:d7:f0:e3:0b:b2:54:1b:02:be:68:81:52:
                    c1:08:4c:7e:b4:91:23:1a:1d:bd:a0:61:53:94:a2:
                    4d:d5:17:1f:53:45:af:32:08:92:4d:76:24:26:1d:
                    54:32:dc:c1:e9:8c:8f:5e:0f:49:8a:e8:4d:d5:c9:
                    c8:dc:fa:25:6b:e9:95:e7:94:a5:6f:a8:34:13:4a:
                    7d:cb:b9:ae:a8:30:a6:e1:48:5e:27:06:48:1e:c2:
                    24:a3:c7:a2:78:70:79:34:91:61:75:51:3e:1a:e4:
                    a6:c7:f7:51:89:02:0f:ea:84:da:1d:ae:aa:97:e8:
                    2e:1f:87:0d:ec:86:88:b0:b0:de:58:f2:28:b4:2e:
                    fa:80:9c:3f:ec:d1:af:4a:a4:d8:38:48:5c:66:88:
                    4a:e8:8f:c6:6f:2a:f2:1d:8c:2f:9f:11:26:c7:5e:
                    64:ca:09:0c:87:24:d0:85:f8:7a:2b:ba:ac:ce:05:
                    98:da:c4:01:f4:86:c9:d0:56:a2:5e:7f:51:39:2c:
                    32:c5:d8:30:53:9b:07:f2:5d:54:60:c6:77:66:37:
                    99:59:44:5a:99:ae:0e:86:b1:d2:e9:b3:ad:3a:54:
                    a1:34:1c:14:20:26:55:ea:9b:08:cc:32:cb:62:4e:
                    7b:1d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                EF:F5:B2:92:2B:55:6A:C6:07:1B:BA:21:77:6B:32:B3:BA:50:52:44
            X509v3 Authority Key Identifier:
                keyid:4A:A5:E3:5C:05:C2:AB:54:BE:75:8B:6C:86:71:86:CE:E1:59:BD:63

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/SqXjXAXCq1S-dYtshnGGzuFZvWM.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ac/7b67fb-c8ba-462c-b064-7c65aec6f2bd/1/SqXjXAXCq1S-dYtshnGGzuFZvWM.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/ac/7b67fb-c8ba-462c-b064-7c65aec6f2bd/1/SqXjXAXCq1S-dYtshnGGzuFZvWM.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         12:29:22:b0:51:51:c7:af:4e:15:ce:68:c5:43:c1:b4:6a:66:
         63:d2:29:cc:a8:b8:a3:e5:7e:38:91:3e:21:6f:c9:7d:9f:84:
         10:c0:0b:87:e2:03:1e:e1:3a:af:06:2e:44:44:e6:18:ac:05:
         11:27:2b:88:20:21:b2:16:68:a2:8f:32:83:3e:1a:ca:9c:35:
         18:41:22:f3:81:a8:05:df:8c:ed:4d:16:9a:86:f5:4c:a2:26:
         70:8e:01:43:1a:9b:4a:14:92:b5:1a:5d:54:b6:a6:ff:35:41:
         5d:45:3d:f0:e1:0a:e5:22:4c:4b:ce:49:d7:dd:8c:d1:f3:df:
         7d:14:9f:79:c1:aa:8d:b4:b4:13:a4:7b:58:74:98:d1:f4:c0:
         7d:a2:62:97:3c:25:97:cf:b4:b2:9e:41:fc:86:9d:2f:fc:40:
         10:17:71:2d:7e:6f:5d:8c:1b:f4:dd:63:e6:43:a4:73:92:b5:
         fc:c9:72:e7:f9:a3:9c:56:c0:fc:e0:c4:f3:48:2b:36:ac:67:
         21:07:91:5e:e3:6e:cf:44:6a:92:7e:f9:fe:e2:fc:98:af:67:
         6e:19:9b:f5:5f:c7:93:d0:4a:bb:af:f1:67:3f:ee:4f:94:fd:
         f4:11:4d:e2:48:6e:ac:b5:91:e3:b8:b8:51:79:ff:0d:3f:46:
         05:08:ed:7c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----