Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b2/09b7de-ffb7-4d6b-b414-f21b4f11faf0/1/aRLQSrDDekc7H8gaNp_JrV2f_UQ.mft
File:                     aRLQSrDDekc7H8gaNp_JrV2f_UQ.mft (raw, json)
Hash identifier:          OTc3KfBfpRLFPmC9OD6GDchiafImAOt12nG2bDsvYJ4=
Subject key identifier:   27:10:9A:93:E0:13:04:37:D2:EE:C1:3D:1C:2B:9E:48:8F:A1:6E:33
Authority key identifier: 69:12:D0:4A:B0:C3:7A:47:3B:1F:C8:1A:36:9F:C9:AD:5D:9F:FD:44
Certificate issuer:       /CN=6912d04ab0c37a473b1fc81a369fc9ad5d9ffd44
Certificate serial:       01962DF39C21A190C841C562636778D4B4DE
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/aRLQSrDDekc7H8gaNp_JrV2f_UQ.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/b2/09b7de-ffb7-4d6b-b414-f21b4f11faf0/1/aRLQSrDDekc7H8gaNp_JrV2f_UQ.mft
Manifest number:          0210
Signing time:             Sun 13 Apr 2025 07:01:01 +0000
Manifest this update:     Sun 13 Apr 2025 07:01:01 +0000
Manifest next update:     Mon 14 Apr 2025 07:01:01 +0000
Files and hashes:         1: aRLQSrDDekc7H8gaNp_JrV2f_UQ.crl (hash: r0N1jR8SduIJMd/R6yEuqrDnAckLu3Mabe4PgTDSgaE=)
                          2: hYYmw5fVDAR1P_MMb_9KXEfTATs.roa (hash: 094S5zaCMwQU0QTJCaSJoP16OB3rfJsQF3J8+250u5M=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2d:f3:9c:21:a1:90:c8:41:c5:62:63:67:78:d4:b4:de
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6912d04ab0c37a473b1fc81a369fc9ad5d9ffd44
        Validity
            Not Before: Apr 13 07:01:01 2025 GMT
            Not After : Apr 14 07:01:01 2025 GMT
        Subject: CN=27109a93e0130437d2eec13d1c2b9e488fa16e33
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:dd:fc:7e:9b:82:e8:b9:c8:2f:16:07:27:5f:48:
                    18:82:b2:69:fe:57:26:3e:e4:92:99:9b:b4:6a:38:
                    88:48:cf:a2:59:58:99:15:32:47:29:3d:37:84:8f:
                    4a:ce:15:4a:95:1d:20:98:3e:e8:98:8a:e5:8c:c8:
                    8f:ca:1b:69:cf:61:70:44:db:2e:87:c3:61:a8:3e:
                    c9:d0:a4:53:40:0e:a5:a0:38:43:1e:21:56:10:66:
                    62:4d:7c:7e:ce:69:77:c8:6d:18:63:41:77:a7:a9:
                    77:e9:68:68:38:26:1d:e9:9c:fe:f3:1b:1c:6d:91:
                    c3:82:f7:4d:c7:74:0f:9f:03:a9:fa:6b:4b:b8:35:
                    bb:84:0b:b1:77:58:13:4d:77:86:e1:b2:d8:d9:45:
                    1d:0d:2f:b8:9c:fa:d8:1c:bd:06:df:83:58:6d:ca:
                    8d:a2:6c:31:72:0f:35:65:3e:c6:4c:cf:56:77:a6:
                    1b:69:eb:73:99:9c:e1:85:04:75:9a:7f:3c:31:97:
                    21:2f:35:c2:57:bf:95:90:b0:ad:80:4e:42:fc:f2:
                    fb:65:d3:ae:05:5f:a9:60:a6:98:0c:da:b6:65:4f:
                    b7:34:f1:f3:f1:2d:b3:b7:c6:6f:c1:1a:93:c7:4d:
                    84:4d:4d:d4:6f:f5:dd:4f:fe:6d:03:d6:37:18:56:
                    34:8b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                27:10:9A:93:E0:13:04:37:D2:EE:C1:3D:1C:2B:9E:48:8F:A1:6E:33
            X509v3 Authority Key Identifier:
                keyid:69:12:D0:4A:B0:C3:7A:47:3B:1F:C8:1A:36:9F:C9:AD:5D:9F:FD:44

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/aRLQSrDDekc7H8gaNp_JrV2f_UQ.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b2/09b7de-ffb7-4d6b-b414-f21b4f11faf0/1/aRLQSrDDekc7H8gaNp_JrV2f_UQ.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/b2/09b7de-ffb7-4d6b-b414-f21b4f11faf0/1/aRLQSrDDekc7H8gaNp_JrV2f_UQ.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         9a:9e:e0:ab:78:c0:99:d5:11:89:ad:71:98:2c:6c:b3:23:d2:
         cb:3e:5e:0e:56:a0:a0:55:2d:5b:91:17:08:65:0a:25:a7:3f:
         80:d3:70:ac:db:61:92:3b:bb:99:89:ff:42:95:16:ea:74:59:
         58:84:7a:e0:88:f1:1c:b3:78:1e:b7:ac:d6:20:08:f5:ed:70:
         33:d7:39:80:62:8c:47:18:74:cc:50:5a:91:84:b6:fd:9a:61:
         6a:15:81:d7:17:a0:ee:f4:33:1e:ea:aa:c7:2c:e5:4f:cb:fd:
         58:be:7b:f3:39:b6:ae:88:9f:68:2c:e8:49:f7:53:82:7d:0e:
         73:26:c3:1e:98:58:21:3d:97:bc:5d:94:86:41:a0:25:d0:97:
         91:28:09:1e:1b:0b:15:20:39:c0:03:a1:f7:fb:10:ea:03:4a:
         28:d5:e4:9d:44:db:d0:3b:fd:de:54:88:77:45:79:6f:88:a9:
         b7:6d:fb:30:65:ff:03:99:e3:41:93:55:fa:23:06:98:43:19:
         0f:44:74:0a:0a:cc:4c:8b:67:dd:f5:b9:dd:e8:1a:11:5f:fa:
         18:be:45:36:e2:55:d5:c6:6b:90:5f:d4:ff:a4:5e:1e:46:f1:
         0d:f1:76:2a:29:5e:39:b0:c7:9a:f1:ba:84:be:45:d4:74:eb:
         63:60:da:02
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----