Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ac/e0c5b7-d2ac-4a5a-8098-60f9dea43899/1/SGfTe3Yct6BfxzPj20M2b6NiU2w.mft
File:                     SGfTe3Yct6BfxzPj20M2b6NiU2w.mft (raw, json)
Hash identifier:          O65xUiUrG4ERz1dm7iEoROt904raD29fcc1pJvm9Upk=
Subject key identifier:   A0:C5:6A:ED:B0:22:29:D1:DB:46:0C:AD:90:A1:94:53:5E:60:86:01
Authority key identifier: 48:67:D3:7B:76:1C:B7:A0:5F:C7:33:E3:DB:43:36:6F:A3:62:53:6C
Certificate issuer:       /CN=4867d37b761cb7a05fc733e3db43366fa362536c
Certificate serial:       01962E98EC57C10EE5BA53872ADD337B01F7
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/SGfTe3Yct6BfxzPj20M2b6NiU2w.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/ac/e0c5b7-d2ac-4a5a-8098-60f9dea43899/1/SGfTe3Yct6BfxzPj20M2b6NiU2w.mft
Manifest number:          0DBF
Signing time:             Sun 13 Apr 2025 10:01:36 +0000
Manifest this update:     Sun 13 Apr 2025 10:01:36 +0000
Manifest next update:     Mon 14 Apr 2025 10:01:36 +0000
Files and hashes:         1: Nx8KeWYh1HnL5iAJ_PCU7YJun4c.roa (hash: MQQ4lqV14DgsP9PSgDv3Sm3nFuHvBvMEPlVur5pwdsw=)
                          2: SGfTe3Yct6BfxzPj20M2b6NiU2w.crl (hash: aVve23pAsaag1ALnSsuTJ/TKy8uS1QqmN3FKGVTkPpM=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2e:98:ec:57:c1:0e:e5:ba:53:87:2a:dd:33:7b:01:f7
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4867d37b761cb7a05fc733e3db43366fa362536c
        Validity
            Not Before: Apr 13 10:01:36 2025 GMT
            Not After : Apr 14 10:01:36 2025 GMT
        Subject: CN=a0c56aedb02229d1db460cad90a194535e608601
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c4:3f:81:32:a0:b8:bf:bc:d2:73:6f:3f:02:c8:
                    1f:ba:2c:bf:3b:5f:70:39:00:30:53:37:ee:fa:5c:
                    27:76:c9:f1:18:3a:d7:63:38:7d:85:2d:d3:24:c6:
                    75:08:89:49:b4:3f:94:1a:23:56:ae:18:4f:44:b6:
                    08:f7:49:f6:7a:78:d4:7f:73:9a:8c:73:d3:8e:28:
                    9d:bf:a6:a4:3e:cf:5f:ca:8c:ab:2b:02:c3:8f:09:
                    2f:24:1a:66:33:17:71:be:39:bb:10:0b:1d:a0:7d:
                    1c:2a:e7:5a:61:57:c5:a2:74:a1:4c:68:25:d5:47:
                    fc:f6:eb:39:3d:db:7c:73:9a:f1:76:e2:5e:2c:f4:
                    72:11:30:dd:ae:d7:47:0b:f3:f1:ff:fd:64:d7:b9:
                    89:3c:cd:de:63:1d:9b:d9:b3:10:e6:ba:f9:0a:4d:
                    89:49:e5:22:59:27:e8:33:81:00:ba:41:c9:cd:7a:
                    aa:bc:6b:66:a6:d2:58:91:a4:21:e8:2a:a4:7f:01:
                    c3:5e:63:c9:77:59:2e:27:d0:3e:f2:22:f4:a3:b2:
                    ea:f6:20:43:9a:31:0a:2b:f5:91:e0:2f:4a:1a:37:
                    29:bb:cb:f6:7d:f6:d6:5a:e8:8a:ce:5e:f3:44:c1:
                    fc:03:32:ea:c4:02:03:2b:e6:48:b8:e9:a2:22:3e:
                    6b:15
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A0:C5:6A:ED:B0:22:29:D1:DB:46:0C:AD:90:A1:94:53:5E:60:86:01
            X509v3 Authority Key Identifier:
                keyid:48:67:D3:7B:76:1C:B7:A0:5F:C7:33:E3:DB:43:36:6F:A3:62:53:6C

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/SGfTe3Yct6BfxzPj20M2b6NiU2w.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ac/e0c5b7-d2ac-4a5a-8098-60f9dea43899/1/SGfTe3Yct6BfxzPj20M2b6NiU2w.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/ac/e0c5b7-d2ac-4a5a-8098-60f9dea43899/1/SGfTe3Yct6BfxzPj20M2b6NiU2w.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         84:a2:c7:ca:cc:93:2e:a1:6b:35:19:23:9e:7b:bf:00:fa:5e:
         3e:ff:98:2d:70:84:f4:76:4b:f4:d5:c9:d5:2d:2a:fd:47:97:
         22:23:7a:53:4a:a4:6d:87:02:e1:8c:d5:57:bc:fb:d6:0c:e3:
         cc:3f:27:94:dc:5a:1b:ae:e2:24:81:2e:6a:82:cc:57:a6:80:
         ed:c0:6c:d3:d4:97:00:9a:a9:d1:2b:5e:3b:87:66:24:4e:88:
         a5:45:4d:c9:0e:f1:62:9a:9f:17:a3:fe:92:c9:fa:eb:c3:49:
         31:b3:1e:09:22:15:db:a2:75:34:38:e8:cf:f1:a7:7c:63:6e:
         f5:7d:8c:4c:f5:27:e3:e6:f8:78:f1:9e:bd:6b:b8:0f:f7:a8:
         07:28:92:9d:fb:1e:ce:60:c0:0e:17:8e:7c:f8:5e:99:d4:0b:
         51:2a:1a:3d:2a:0f:1a:cd:e7:7a:8a:a8:be:36:39:1a:f7:79:
         44:6a:df:95:e5:3f:55:51:77:61:65:a2:4c:ad:6a:18:73:a0:
         26:1d:fd:e2:40:e4:df:55:34:6e:68:bd:e0:0f:86:08:35:48:
         df:62:8c:92:8e:4b:cd:28:07:f7:60:53:7f:3f:c4:22:11:c7:
         87:a9:d8:ce:b5:45:d4:4e:41:de:ac:e0:b1:15:a6:09:0f:63:
         65:ac:da:eb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----