Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b3/8bf7ea-883a-4c43-946c-82dafe104bc5/1/A_P-YHUIK-jliDKbQ9dhv257AdA.mft
File:                     A_P-YHUIK-jliDKbQ9dhv257AdA.mft (raw, json)
Hash identifier:          A7iGj7wnT/sjWXIDLBTUgHMBO53Qn/UFKKLHEJoSyKc=
Subject key identifier:   AC:FE:07:29:AD:06:42:71:E5:FC:54:B0:2A:47:51:E3:88:C9:59:00
Authority key identifier: 03:F3:FE:60:75:08:2B:E8:E5:88:32:9B:43:D7:61:BF:6E:7B:01:D0
Certificate issuer:       /CN=03f3fe6075082be8e588329b43d761bf6e7b01d0
Certificate serial:       01962F3D48A5E175923F73AC8063CD848A30
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/A_P-YHUIK-jliDKbQ9dhv257AdA.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/b3/8bf7ea-883a-4c43-946c-82dafe104bc5/1/A_P-YHUIK-jliDKbQ9dhv257AdA.mft
Manifest number:          071D
Signing time:             Sun 13 Apr 2025 13:01:07 +0000
Manifest this update:     Sun 13 Apr 2025 13:01:07 +0000
Manifest next update:     Mon 14 Apr 2025 13:01:07 +0000
Files and hashes:         1: A_P-YHUIK-jliDKbQ9dhv257AdA.crl (hash: yuKC23FXpkcFfX3ZtZfkZhf6sxMy1eNTpFlZdTLsxFY=)
                          2: l0K6PAqN9Gt27j_CVXz67WejrWo.roa (hash: 791A1HYehBk0Xv4a4YcluI/Rrf5zyMUHKzRR42V6uDU=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2f:3d:48:a5:e1:75:92:3f:73:ac:80:63:cd:84:8a:30
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=03f3fe6075082be8e588329b43d761bf6e7b01d0
        Validity
            Not Before: Apr 13 13:01:07 2025 GMT
            Not After : Apr 14 13:01:07 2025 GMT
        Subject: CN=acfe0729ad064271e5fc54b02a4751e388c95900
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ca:91:ad:5c:0c:2b:a1:3d:d6:63:a2:17:af:d7:
                    31:6a:8f:b5:cc:95:38:96:cc:c4:4c:64:25:b7:7e:
                    d1:96:25:b5:c3:d1:4a:fc:59:db:b1:18:2f:c3:d9:
                    95:39:22:0c:c4:07:67:b4:0e:26:1e:c6:2a:44:c0:
                    cd:16:e9:0d:fb:3f:de:b0:d6:62:fc:2d:38:3f:1f:
                    70:f4:2e:37:28:10:29:f4:ed:9b:81:25:c5:b2:66:
                    eb:2f:99:5e:d8:be:22:d4:3a:15:cd:9d:56:23:d8:
                    a0:11:a0:e9:3c:cc:63:71:84:7b:32:03:0e:88:f5:
                    d1:fa:ad:58:1c:be:23:2a:35:8c:52:d6:52:14:5a:
                    9d:e8:53:1f:25:4a:d8:4d:8e:62:a3:a9:e3:87:ba:
                    f0:c6:cd:3b:2a:8c:b4:77:69:3c:55:b2:21:71:e3:
                    23:09:c8:98:8f:63:19:d7:60:ca:10:7e:8c:da:d3:
                    e1:e5:03:74:9e:a8:97:ec:0a:4c:44:82:74:3c:5b:
                    19:94:3f:e5:33:98:f0:50:89:01:47:92:37:81:83:
                    09:5b:4c:4c:24:b8:45:e0:00:b5:24:3f:42:d2:42:
                    2f:2c:4d:6a:55:22:43:20:8f:b2:65:2b:3d:3e:1e:
                    df:fb:31:9f:fd:a0:27:03:67:61:19:74:40:f0:48:
                    9f:a1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AC:FE:07:29:AD:06:42:71:E5:FC:54:B0:2A:47:51:E3:88:C9:59:00
            X509v3 Authority Key Identifier:
                keyid:03:F3:FE:60:75:08:2B:E8:E5:88:32:9B:43:D7:61:BF:6E:7B:01:D0

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/A_P-YHUIK-jliDKbQ9dhv257AdA.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b3/8bf7ea-883a-4c43-946c-82dafe104bc5/1/A_P-YHUIK-jliDKbQ9dhv257AdA.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/b3/8bf7ea-883a-4c43-946c-82dafe104bc5/1/A_P-YHUIK-jliDKbQ9dhv257AdA.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         69:84:e1:0a:30:a1:97:1c:01:9c:3b:87:4e:c8:c2:4a:b2:5e:
         8c:40:e7:e0:09:f1:94:fe:f8:e3:a5:39:7f:66:a7:a4:89:77:
         54:95:aa:a3:7c:b6:00:ca:0c:b8:6c:88:a2:07:15:f0:13:bb:
         bd:17:e1:9d:89:da:fa:59:3d:e8:4a:10:b9:3a:7b:90:88:5c:
         54:10:0d:e2:af:94:c9:6e:fb:c4:ab:e9:47:a3:58:09:c6:a8:
         16:6a:aa:52:12:17:bb:fd:f8:b9:15:6d:0a:1c:0c:74:90:48:
         c6:ed:d0:17:06:f1:e4:19:1e:ee:0d:31:95:c7:1a:19:01:e5:
         38:9d:9b:3e:05:1c:bc:09:98:74:d6:f9:0d:5d:59:27:35:84:
         16:bb:39:2a:0d:48:41:1e:5b:21:64:10:c1:69:88:a7:72:d4:
         83:59:f1:c2:de:63:6d:00:40:81:4f:ed:0f:a5:a0:bd:55:22:
         2c:1b:56:6e:d8:12:b9:2a:42:ea:e7:b7:4d:d9:55:c6:3a:a0:
         a2:af:e5:43:f6:f5:12:41:76:d1:50:75:e8:b8:7f:ad:0b:49:
         d7:fc:4d:61:3d:59:46:be:33:e3:ad:b1:f3:26:87:5f:6d:5a:
         d3:d9:f0:4f:b8:c3:08:e2:95:54:78:bd:37:eb:aa:ef:dc:61:
         29:55:b4:28
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----