Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b2/cd9fd4-ccc5-43d6-9d58-9816c67a9262/1/aVu9VCkSpm_uajQSijqM9wl9xps.mft
File:                     aVu9VCkSpm_uajQSijqM9wl9xps.mft (raw, json)
Hash identifier:          UczmXch7shwLzREtYPF/ABUW2CKtgbeu1Hx1p+2NTEg=
Subject key identifier:   1B:D3:C7:41:BA:7D:A5:7C:11:EF:58:B0:29:51:8C:A5:6A:89:94:FD
Authority key identifier: 69:5B:BD:54:29:12:A6:6F:EE:6A:34:12:8A:3A:8C:F7:09:7D:C6:9B
Certificate issuer:       /CN=695bbd542912a66fee6a34128a3a8cf7097dc69b
Certificate serial:       01962F072B25E08E59D0814FEE883D59F999
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/aVu9VCkSpm_uajQSijqM9wl9xps.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/b2/cd9fd4-ccc5-43d6-9d58-9816c67a9262/1/aVu9VCkSpm_uajQSijqM9wl9xps.mft
Manifest number:          0504
Signing time:             Sun 13 Apr 2025 12:02:01 +0000
Manifest this update:     Sun 13 Apr 2025 12:02:01 +0000
Manifest next update:     Mon 14 Apr 2025 12:02:01 +0000
Files and hashes:         1: Ceq8ni5DLt6rfS2QOewOZADzIpY.roa (hash: sy82azLmDtvWPz93HHlbs3C4D4UnntFGcj5egr3ZE8c=)
                          2: aVu9VCkSpm_uajQSijqM9wl9xps.crl (hash: 13UJtIKy/Xfk/jKhwB+OeVnafJuzJrOLU3i4llPzt+4=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2f:07:2b:25:e0:8e:59:d0:81:4f:ee:88:3d:59:f9:99
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=695bbd542912a66fee6a34128a3a8cf7097dc69b
        Validity
            Not Before: Apr 13 12:02:01 2025 GMT
            Not After : Apr 14 12:02:01 2025 GMT
        Subject: CN=1bd3c741ba7da57c11ef58b029518ca56a8994fd
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a0:0b:9a:11:fc:b5:5a:be:ea:82:9c:6e:fb:fa:
                    1a:4f:97:1c:8d:88:30:70:a2:1f:3e:0a:aa:95:4a:
                    d3:29:7d:35:fa:30:cc:39:f5:f0:78:30:a7:c3:b3:
                    02:f9:4c:bb:2e:c3:a1:78:97:a3:46:d1:5b:27:df:
                    78:ab:fc:11:fe:d2:5b:9c:7c:21:25:2c:77:81:fc:
                    9c:cf:11:21:33:46:f3:42:6b:79:5e:21:0f:a6:d7:
                    4b:b8:6d:63:44:de:b2:87:bc:1a:55:fd:f1:21:00:
                    c2:ae:aa:56:b3:9d:5e:5d:24:5e:4d:b5:f5:77:d9:
                    e1:ea:af:1e:df:c9:ea:2f:58:98:c3:85:59:14:d0:
                    4f:4d:d9:41:29:0f:99:e5:a1:45:69:e5:56:e6:2b:
                    9e:9c:e4:ed:5f:d4:75:dc:19:51:a4:a3:69:3f:af:
                    a9:4c:9c:12:be:16:0b:b9:48:56:49:d7:8a:c8:6e:
                    a3:13:5d:af:98:6e:3f:ba:d3:6f:5a:2d:12:17:42:
                    9a:58:1f:6a:52:42:c2:5c:79:07:d4:db:6d:0b:e5:
                    4a:3c:57:14:64:96:0d:4a:ba:1e:2e:a0:8e:15:8e:
                    17:0d:f0:8f:09:cb:79:a3:f0:86:e0:90:be:72:df:
                    0d:39:d8:0d:c0:67:bc:2d:7d:99:09:63:5c:27:9c:
                    81:4b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1B:D3:C7:41:BA:7D:A5:7C:11:EF:58:B0:29:51:8C:A5:6A:89:94:FD
            X509v3 Authority Key Identifier:
                keyid:69:5B:BD:54:29:12:A6:6F:EE:6A:34:12:8A:3A:8C:F7:09:7D:C6:9B

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/aVu9VCkSpm_uajQSijqM9wl9xps.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b2/cd9fd4-ccc5-43d6-9d58-9816c67a9262/1/aVu9VCkSpm_uajQSijqM9wl9xps.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/b2/cd9fd4-ccc5-43d6-9d58-9816c67a9262/1/aVu9VCkSpm_uajQSijqM9wl9xps.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         7a:76:c9:25:fc:00:8d:4b:ba:b9:b3:b4:b7:94:5e:92:b2:93:
         44:88:6b:8b:84:fc:ce:49:a1:43:e1:a8:c7:5c:38:55:0e:6d:
         d2:85:a0:96:d8:c5:42:40:07:f3:5b:93:2f:9f:6c:86:bd:43:
         1f:39:6a:a0:c8:c9:37:e1:13:e1:05:cd:1e:7d:90:97:d1:fd:
         45:d5:b7:f5:5e:7f:db:4e:e9:4f:5a:60:e3:7e:76:36:5c:76:
         11:a6:84:70:2d:4a:a0:ae:87:0a:fa:e6:de:66:cb:00:0c:35:
         b7:13:80:cb:c7:65:73:f3:48:47:8f:4c:f8:ea:28:29:4d:fb:
         92:1e:1a:9f:00:69:8d:fb:e5:e6:89:48:e2:d5:fa:9b:9b:fb:
         fa:d6:e7:bc:bb:75:a9:99:7a:68:b6:1f:d0:4e:a9:09:52:49:
         17:ff:39:f0:69:60:42:cd:c8:fc:c8:e3:4a:88:96:49:a5:fa:
         4e:f2:1b:ca:a7:b5:8b:47:b7:25:a7:02:cf:42:be:d5:90:34:
         c8:0c:92:68:ec:e1:1f:69:62:9b:4e:a1:84:9c:ff:4a:98:94:
         b4:3c:1d:9d:5e:07:7a:04:c0:c4:25:fa:87:a0:7e:c4:5c:53:
         46:12:c4:1c:f7:b6:2d:8e:70:98:e4:3e:43:b3:fd:77:62:e0:
         ce:6d:64:c8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----