Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ad/f54c57-deca-4685-8106-9fa78075330b/1/aDCZAOZItlowenhgECv3ixb1XXU.mft
File:                     aDCZAOZItlowenhgECv3ixb1XXU.mft (raw, json)
Hash identifier:          Kpxw530ezlnQSXkXilkkp14CtiVedDjlsLDnO5a8niw=
Subject key identifier:   81:EA:24:9D:2E:19:D1:70:EA:28:A9:E2:38:35:47:43:F5:16:14:E5
Authority key identifier: 68:30:99:00:E6:48:B6:5A:30:7A:78:60:10:2B:F7:8B:16:F5:5D:75
Certificate issuer:       /CN=68309900e648b65a307a7860102bf78b16f55d75
Certificate serial:       01962F06DA4D5D824F8FC550C2458AF8CD14
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/aDCZAOZItlowenhgECv3ixb1XXU.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/ad/f54c57-deca-4685-8106-9fa78075330b/1/aDCZAOZItlowenhgECv3ixb1XXU.mft
Manifest number:          0148
Signing time:             Sun 13 Apr 2025 12:01:40 +0000
Manifest this update:     Sun 13 Apr 2025 12:01:40 +0000
Manifest next update:     Mon 14 Apr 2025 12:01:40 +0000
Files and hashes:         1: MyHgwE9JQ37sKu_CcRwNe642FMI.roa (hash: UWTUq6zuuwDHpYw/C8xNP37TF6tAxhLymuOUDHs6DJk=)
                          2: aDCZAOZItlowenhgECv3ixb1XXU.crl (hash: GIZeeVIaRO3xgoCB49hnu0sCyUMDF8qODuFFK70Fb84=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2f:06:da:4d:5d:82:4f:8f:c5:50:c2:45:8a:f8:cd:14
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=68309900e648b65a307a7860102bf78b16f55d75
        Validity
            Not Before: Apr 13 12:01:40 2025 GMT
            Not After : Apr 14 12:01:40 2025 GMT
        Subject: CN=81ea249d2e19d170ea28a9e238354743f51614e5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b6:c2:97:6f:44:f5:e6:45:1b:3a:e2:06:83:a2:
                    99:4b:83:a4:ff:c6:c3:d8:da:3a:66:ee:12:0e:b0:
                    28:e2:24:0e:d3:ee:0a:d4:f1:13:6c:71:2f:a4:1a:
                    95:30:5e:a9:a7:81:3a:ad:7b:eb:5e:a1:a5:45:61:
                    40:cd:2a:d0:94:0c:f4:8c:ca:16:99:93:7a:a4:d6:
                    2e:5d:4a:74:3a:ee:18:b7:c7:bf:da:24:06:16:2b:
                    2a:18:2e:43:56:bd:44:1f:f6:19:f3:c8:27:1f:c8:
                    c6:57:72:97:26:60:fa:45:de:17:5f:88:77:39:1d:
                    83:42:60:2a:48:03:b3:8d:4a:bc:a9:04:ed:e9:98:
                    09:6b:a7:7f:f0:fa:c8:29:c8:c6:25:fa:c6:07:97:
                    62:67:b4:24:21:a8:60:8f:96:3e:c7:f6:8f:95:76:
                    99:f0:ee:55:af:79:e3:8d:8f:cf:c3:dd:38:96:9f:
                    84:9f:70:3f:a1:fe:a7:4c:29:2a:c2:7e:ba:df:45:
                    98:1b:db:7e:da:f0:4a:25:a1:71:72:a8:e1:09:66:
                    74:04:90:eb:ca:b2:05:c6:d4:d3:02:52:3a:e1:74:
                    73:d2:ca:b6:2f:90:c1:ed:d9:12:99:33:cc:b7:fb:
                    15:16:81:39:20:01:b5:f3:c6:1e:d0:08:9b:ec:cc:
                    d7:6b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                81:EA:24:9D:2E:19:D1:70:EA:28:A9:E2:38:35:47:43:F5:16:14:E5
            X509v3 Authority Key Identifier:
                keyid:68:30:99:00:E6:48:B6:5A:30:7A:78:60:10:2B:F7:8B:16:F5:5D:75

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/aDCZAOZItlowenhgECv3ixb1XXU.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ad/f54c57-deca-4685-8106-9fa78075330b/1/aDCZAOZItlowenhgECv3ixb1XXU.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/ad/f54c57-deca-4685-8106-9fa78075330b/1/aDCZAOZItlowenhgECv3ixb1XXU.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         9d:fc:a3:fc:4c:59:0b:3e:59:99:f1:62:48:22:fe:a2:2e:c7:
         f5:e6:12:b6:76:b1:0f:d5:f8:63:9d:38:92:e3:23:ab:57:5f:
         f3:c7:84:f2:f8:ae:7e:4a:44:70:37:05:d1:1f:eb:7a:5f:b3:
         e7:a5:ae:50:72:ce:42:fd:44:ae:0c:76:72:30:51:c3:16:81:
         cc:78:46:43:01:a6:8c:cd:9c:80:eb:52:b7:a2:ab:15:be:1f:
         69:42:46:38:23:a5:33:58:c0:a1:56:ad:43:83:5c:0b:83:2c:
         c9:b1:45:c3:f8:c8:ae:e2:ba:55:97:21:e7:b6:8c:54:eb:5e:
         5e:75:1f:04:51:9a:31:07:46:4f:31:da:a9:02:72:97:2c:d4:
         24:96:c4:b1:b3:ee:e3:fe:8c:c8:ec:51:f0:1f:dd:50:0a:b4:
         7c:b5:2e:28:b5:86:26:d5:af:6c:fa:ee:83:4c:e9:b0:db:33:
         ea:8e:04:fb:01:1e:6c:6c:43:dd:88:79:bb:11:e3:5c:8f:f6:
         6a:75:b0:ef:5b:97:98:32:0a:93:a7:34:4c:6c:56:1a:88:12:
         75:60:dd:c3:11:e9:77:91:d9:fc:a0:7c:35:a7:fc:1d:05:65:
         9b:1f:4e:86:8f:f6:0f:95:88:37:39:68:86:18:53:16:30:ab:
         a8:82:ed:b2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----