Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b3/6c0563-6a1c-4432-a58d-3b64cc336c79/1/4KACksKhBiuzKYCjxEP_84OkEAI.mft
File:                     4KACksKhBiuzKYCjxEP_84OkEAI.mft (raw, json)
Hash identifier:          IPOZhx1fmgUnW/EeQDNOzH1e+S8ahep/Zmk+ombixJY=
Subject key identifier:   0A:AD:35:4B:A1:27:64:08:3F:88:0D:8D:38:C3:A1:00:96:D8:CE:0B
Authority key identifier: E0:A0:02:92:C2:A1:06:2B:B3:29:80:A3:C4:43:FF:F3:83:A4:10:02
Certificate issuer:       /CN=e0a00292c2a1062bb32980a3c443fff383a41002
Certificate serial:       01962DF3F16298D2393BD295EE1191F4F72B
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/4KACksKhBiuzKYCjxEP_84OkEAI.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/b3/6c0563-6a1c-4432-a58d-3b64cc336c79/1/4KACksKhBiuzKYCjxEP_84OkEAI.mft
Manifest number:          08A9
Signing time:             Sun 13 Apr 2025 07:01:23 +0000
Manifest this update:     Sun 13 Apr 2025 07:01:23 +0000
Manifest next update:     Mon 14 Apr 2025 07:01:23 +0000
Files and hashes:         1: 4KACksKhBiuzKYCjxEP_84OkEAI.crl (hash: 3Qtjlkfyh/DKbG2xA10iI4v8SIR2eUsBKgiHp6G7Tz4=)
                          2: mSKL5dZ-DfhQmd3vDgNujHfDeWQ.roa (hash: kM0tftmTBoswJU9/17L/nHsaIm00B47zHx/WZDRsoCQ=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2d:f3:f1:62:98:d2:39:3b:d2:95:ee:11:91:f4:f7:2b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e0a00292c2a1062bb32980a3c443fff383a41002
        Validity
            Not Before: Apr 13 07:01:23 2025 GMT
            Not After : Apr 14 07:01:23 2025 GMT
        Subject: CN=0aad354ba12764083f880d8d38c3a10096d8ce0b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c5:19:25:25:da:e6:a1:fb:00:b8:98:dd:db:19:
                    49:90:74:88:7a:e9:78:18:ed:e9:58:49:c1:af:fb:
                    2b:36:db:45:1c:b4:79:1c:f7:e4:44:f8:4b:83:ad:
                    7e:88:ee:55:f6:e9:63:3b:22:34:2b:f8:a9:fe:10:
                    c9:04:9f:d5:97:5e:3b:43:26:53:15:30:e5:dd:59:
                    29:11:ea:27:47:95:ab:b4:64:76:40:41:19:32:f8:
                    7e:f6:26:46:43:54:f6:59:85:9b:2d:ec:6f:a9:2d:
                    dc:1a:dc:81:1d:46:e7:ae:29:13:da:41:e6:6a:91:
                    77:70:ab:c0:da:af:61:e5:5d:cf:b3:e9:72:e2:87:
                    ee:6f:90:86:ea:e5:ff:19:b6:9d:2a:3e:2d:e2:d3:
                    1d:0f:c2:a5:04:95:57:8d:55:af:9e:b1:17:8a:c7:
                    79:d2:b1:22:61:ab:a5:4d:d9:fb:5a:75:6b:22:0b:
                    58:09:32:50:c7:b7:58:80:22:77:5b:ac:f7:26:ba:
                    35:5a:9d:da:8e:3d:ab:00:56:f1:87:43:3b:ba:4e:
                    cf:15:a7:46:18:67:85:49:ff:64:93:e1:25:ca:89:
                    52:27:19:b4:04:cb:10:1f:71:ef:c6:16:fd:33:78:
                    f6:3d:7b:c6:ea:bc:f3:e0:b0:a4:e3:4c:3e:b2:15:
                    e2:89
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0A:AD:35:4B:A1:27:64:08:3F:88:0D:8D:38:C3:A1:00:96:D8:CE:0B
            X509v3 Authority Key Identifier:
                keyid:E0:A0:02:92:C2:A1:06:2B:B3:29:80:A3:C4:43:FF:F3:83:A4:10:02

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/4KACksKhBiuzKYCjxEP_84OkEAI.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b3/6c0563-6a1c-4432-a58d-3b64cc336c79/1/4KACksKhBiuzKYCjxEP_84OkEAI.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/b3/6c0563-6a1c-4432-a58d-3b64cc336c79/1/4KACksKhBiuzKYCjxEP_84OkEAI.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         3b:36:16:e2:2a:69:47:e3:86:61:46:09:9c:2b:7e:03:3f:e9:
         ae:80:41:4d:ca:2d:ae:f5:6f:34:df:38:20:53:ca:3e:f9:b6:
         cb:a7:22:de:82:ae:27:a1:20:ee:80:43:55:45:fa:7d:c5:fc:
         77:e5:0a:1b:c3:08:c3:95:66:74:68:e8:0a:5f:bd:a1:0a:85:
         59:04:c3:0e:41:d3:47:14:e3:3f:d7:73:4c:b5:a7:4c:dd:b4:
         d2:0f:40:0c:dc:a6:39:d5:94:79:76:78:0a:9b:80:41:d8:5e:
         6f:63:5c:a1:c0:4d:8e:6e:b3:51:3d:f4:ab:b4:61:ee:06:31:
         74:36:f5:1b:52:da:5f:d3:7a:b2:32:42:0b:4e:60:55:16:22:
         4a:36:d0:b4:a4:71:9e:4b:e4:9b:dc:c6:25:1a:94:60:2b:3e:
         58:83:a4:b9:75:7e:09:3c:5e:6d:8b:4c:e3:41:6f:95:b9:39:
         77:5d:79:23:4a:d9:81:51:b7:57:a5:fa:e6:b7:9a:c7:2b:59:
         50:ae:c6:8a:09:17:a5:0c:cf:cb:9e:f6:be:28:0f:56:2b:92:
         40:ce:9e:f3:72:d6:4a:44:c3:c5:c2:2f:d9:fc:37:6c:36:bf:
         a9:5a:0a:c6:e8:be:56:42:50:df:00:24:06:50:96:6f:2e:bb:
         b4:95:e4:6d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----