Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b5/ac9aba-9735-4b9d-8eae-19bc7bdccbc1/1/AGQrYHuUoUP_QcVUyRO9WmUfjAU.mft
File:                     AGQrYHuUoUP_QcVUyRO9WmUfjAU.mft (raw, json)
Hash identifier:          KxVCFfJzNMd7vhyQQDb/A92OvMnsjptemMg8keg8PJM=
Subject key identifier:   25:C4:12:49:30:B6:48:67:CA:E3:4D:0E:F3:FE:C0:F2:BB:53:3C:EA
Authority key identifier: 00:64:2B:60:7B:94:A1:43:FF:41:C5:54:C9:13:BD:5A:65:1F:8C:05
Certificate issuer:       /CN=00642b607b94a143ff41c554c913bd5a651f8c05
Certificate serial:       01962DF3A8493D0A943B97AB59B413130507
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/AGQrYHuUoUP_QcVUyRO9WmUfjAU.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/b5/ac9aba-9735-4b9d-8eae-19bc7bdccbc1/1/AGQrYHuUoUP_QcVUyRO9WmUfjAU.mft
Manifest number:          14EE
Signing time:             Sun 13 Apr 2025 07:01:05 +0000
Manifest this update:     Sun 13 Apr 2025 07:01:05 +0000
Manifest next update:     Mon 14 Apr 2025 07:01:05 +0000
Files and hashes:         1: 1-BqPUmwLhiY4Yhx0LfgUMnThGxA.roa (hash: K4n04vrpGIt/U+DsbhlaysS9N4rLWgryrsGr6i9waUc=)
                          2: 1nS0uX-20m5q3S5s2ax-hzltY7M.roa (hash: fPbs3orCk/9uH211HxlkX/O3dh9FAzUrv0hFLfs7bIc=)
                          3: 2MWwWUq-nPd7Gzhb6Z0417winfw.roa (hash: JU/lw4BXm/KV3NT2WmLhKrIC3zR0XBpPPnNeGokCO90=)
                          4: AGQrYHuUoUP_QcVUyRO9WmUfjAU.crl (hash: XIsBF0930+kynIbS9oInFklPR4deBDFT34+fuxdjqAM=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2d:f3:a8:49:3d:0a:94:3b:97:ab:59:b4:13:13:05:07
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=00642b607b94a143ff41c554c913bd5a651f8c05
        Validity
            Not Before: Apr 13 07:01:05 2025 GMT
            Not After : Apr 14 07:01:05 2025 GMT
        Subject: CN=25c4124930b64867cae34d0ef3fec0f2bb533cea
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b4:f5:4d:3f:d5:07:f0:29:a9:5f:2d:f1:19:86:
                    fe:68:52:cc:1a:b7:94:91:19:27:3e:ff:af:80:46:
                    9b:62:91:0e:c4:85:c7:17:d2:9e:11:54:78:65:d7:
                    31:20:1a:80:e0:48:74:35:4b:9b:90:1b:2e:0d:ac:
                    24:c6:1e:1e:56:b8:57:84:39:77:a6:b6:7b:81:8c:
                    cb:3b:78:6c:e1:6a:2d:02:ad:c1:46:18:dd:63:48:
                    00:91:f9:bb:14:1e:d5:da:8b:d9:2f:ad:cc:77:33:
                    f8:68:a7:f6:5e:16:b0:57:13:06:dd:7f:32:5e:9f:
                    3a:46:51:fe:a5:c6:14:70:2b:ff:69:56:4a:98:7d:
                    92:13:cb:ca:9d:d0:e6:23:40:df:6b:3c:b0:5b:45:
                    2c:ef:bc:40:be:f1:bf:b2:55:c3:5a:c9:d2:5d:8a:
                    c0:03:e8:e1:40:fc:dc:cb:24:11:89:fa:8c:71:0c:
                    46:32:23:19:ec:a6:04:b3:eb:94:1b:b8:14:19:b1:
                    26:1d:88:d2:16:11:29:6b:be:f7:08:eb:2f:9e:4a:
                    46:b0:49:34:1d:89:11:70:fe:56:d4:62:01:e2:94:
                    e1:6c:00:5b:a5:9b:fb:7e:af:2f:d8:5a:86:8c:ff:
                    64:71:9f:46:2d:c0:4c:f2:82:58:86:30:75:ae:43:
                    61:19
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                25:C4:12:49:30:B6:48:67:CA:E3:4D:0E:F3:FE:C0:F2:BB:53:3C:EA
            X509v3 Authority Key Identifier:
                keyid:00:64:2B:60:7B:94:A1:43:FF:41:C5:54:C9:13:BD:5A:65:1F:8C:05

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/AGQrYHuUoUP_QcVUyRO9WmUfjAU.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b5/ac9aba-9735-4b9d-8eae-19bc7bdccbc1/1/AGQrYHuUoUP_QcVUyRO9WmUfjAU.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/b5/ac9aba-9735-4b9d-8eae-19bc7bdccbc1/1/AGQrYHuUoUP_QcVUyRO9WmUfjAU.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         1f:8c:7e:3c:9e:55:e5:30:0d:29:4b:64:a6:b0:c2:f3:4a:d9:
         d8:2e:ce:f6:79:3b:bd:4c:eb:e6:1e:8a:d7:f3:00:29:ef:79:
         6b:6e:8a:2a:ee:21:6c:91:b6:dd:f2:1e:f7:06:10:f6:c7:63:
         aa:2c:c3:89:11:d4:30:07:d9:00:11:43:cb:03:fb:61:65:05:
         27:5d:97:15:4e:53:00:c8:0a:d3:de:a5:91:ff:7f:f1:62:08:
         a3:ca:ae:fc:f1:ef:72:36:a9:87:da:69:2d:7a:32:63:0b:2b:
         c5:f0:65:4b:5b:8a:b2:06:87:74:9d:99:1c:23:59:ad:eb:3e:
         5e:c9:a8:39:de:20:45:2c:63:b6:67:5d:34:cf:d1:00:98:56:
         e7:42:e5:2a:52:15:7e:08:f1:9d:9e:83:1a:09:a7:39:38:3d:
         54:ac:0d:80:8d:cd:bb:f6:2c:7b:11:7a:b8:18:ca:20:d0:c9:
         a9:79:73:33:35:ec:fa:e1:05:b7:f3:cb:a5:c7:4b:05:2c:86:
         b2:25:97:96:6c:ae:d1:34:e6:96:a4:d6:87:c9:d7:1c:2c:c1:
         e2:1b:c9:1b:62:8d:2e:f4:3f:1c:95:15:4b:75:8f:d3:24:26:
         f8:d3:57:b6:5d:58:38:cc:8d:c3:78:c2:17:af:61:bf:d0:1b:
         1c:7b:c0:ea
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----