Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c3/c9242e-e424-4ed1-ac8b-c136405b7bb7/1/SGiJzk60_XR4GCSDld5fuT0f4UI.mft
File:                     SGiJzk60_XR4GCSDld5fuT0f4UI.mft (raw, json)
Hash identifier:          WnQBCUZpnw9mJRrvvZ1GvFx7/ArEFlRsQwBOemCVLUI=
Subject key identifier:   96:52:3B:CE:96:DA:75:E2:5B:BD:44:BA:98:25:97:6B:C1:27:98:F7
Authority key identifier: 48:68:89:CE:4E:B4:FD:74:78:18:24:83:95:DE:5F:B9:3D:1F:E1:42
Certificate issuer:       /CN=486889ce4eb4fd747818248395de5fb93d1fe142
Certificate serial:       01962ECFDB93FC5E77B738F607612A52BC8C
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/SGiJzk60_XR4GCSDld5fuT0f4UI.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/c3/c9242e-e424-4ed1-ac8b-c136405b7bb7/1/SGiJzk60_XR4GCSDld5fuT0f4UI.mft
Manifest number:          67
Signing time:             Sun 13 Apr 2025 11:01:36 +0000
Manifest this update:     Sun 13 Apr 2025 11:01:36 +0000
Manifest next update:     Mon 14 Apr 2025 11:01:36 +0000
Files and hashes:         1: FfqUAa7-KKr54JP8aBzk5nNv21g.roa (hash: PY8USvms98PE+f6r3SXsrpm0zwpXY4+1N+NCv5EFelE=)
                          2: SGiJzk60_XR4GCSDld5fuT0f4UI.crl (hash: DoIerVzhQRwRnF3oLeTlu6wZeOXSL4h69XhLmLiLKlI=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2e:cf:db:93:fc:5e:77:b7:38:f6:07:61:2a:52:bc:8c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=486889ce4eb4fd747818248395de5fb93d1fe142
        Validity
            Not Before: Apr 13 11:01:36 2025 GMT
            Not After : Apr 14 11:01:36 2025 GMT
        Subject: CN=96523bce96da75e25bbd44ba9825976bc12798f7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:be:e0:1e:18:bb:fd:45:6b:72:de:71:95:49:66:
                    f0:16:a0:02:0c:53:e1:dd:59:a5:18:0d:df:0b:e3:
                    94:4e:cf:9c:8e:d8:c5:a0:ae:b4:64:1d:35:c1:b9:
                    48:95:ce:61:11:a8:75:f2:0f:0c:57:0e:03:e7:1c:
                    2b:29:bc:17:8c:ed:25:4e:f3:45:53:a2:14:25:85:
                    fd:f2:67:07:3d:d8:6f:e6:a4:26:34:1e:cb:09:6f:
                    33:dc:96:e1:ab:12:5d:70:27:2e:ce:0c:64:09:5c:
                    36:0e:06:f9:c5:72:f7:10:e6:5c:4b:35:34:f8:4e:
                    85:57:1e:52:81:8b:f7:7c:04:a6:0e:ef:79:bc:af:
                    e2:8d:63:81:7e:ed:a9:11:1a:87:8e:44:1b:78:00:
                    10:1e:0f:22:85:52:c9:aa:e1:02:ca:ab:f0:31:a4:
                    4c:1d:ca:d4:11:0b:3b:25:a1:b8:0c:8d:e3:e8:bf:
                    ae:b1:1b:98:a4:1f:c6:2b:05:af:f5:5d:0b:09:73:
                    fa:0f:7e:5b:0c:02:bd:4b:a9:c2:09:81:fd:83:26:
                    e9:d7:9d:74:f2:dc:05:3a:15:4d:44:4a:7d:41:64:
                    7a:97:04:ea:b6:b2:81:19:36:eb:82:dc:cb:9e:2e:
                    40:5c:5e:cf:36:2b:38:81:eb:cb:97:7e:f9:e8:69:
                    8a:5d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                96:52:3B:CE:96:DA:75:E2:5B:BD:44:BA:98:25:97:6B:C1:27:98:F7
            X509v3 Authority Key Identifier:
                keyid:48:68:89:CE:4E:B4:FD:74:78:18:24:83:95:DE:5F:B9:3D:1F:E1:42

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/SGiJzk60_XR4GCSDld5fuT0f4UI.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c3/c9242e-e424-4ed1-ac8b-c136405b7bb7/1/SGiJzk60_XR4GCSDld5fuT0f4UI.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/c3/c9242e-e424-4ed1-ac8b-c136405b7bb7/1/SGiJzk60_XR4GCSDld5fuT0f4UI.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         b1:40:be:9e:6d:82:de:5e:7f:c0:32:db:d0:22:cb:f5:91:48:
         96:e4:a1:b2:25:78:a2:01:90:29:3e:05:ea:f4:97:c2:fd:28:
         9f:56:b6:99:85:f6:14:60:40:56:e8:68:07:63:fd:64:9d:09:
         9c:7b:ff:a7:19:f4:45:0c:3c:ba:06:a6:0a:d4:c0:c4:1b:9b:
         61:bd:5e:85:35:bd:bc:28:10:ba:45:59:0b:a7:0a:96:9e:31:
         04:1b:b0:39:f2:07:15:dc:ab:d0:ea:95:e4:ad:07:e2:ac:db:
         8b:fa:a2:b9:02:a5:da:c1:86:3f:78:c2:58:00:ba:a6:23:f6:
         72:f5:6e:5d:8f:4b:d1:f1:37:2a:f6:81:94:74:6e:c7:bc:82:
         0b:3e:de:5d:12:7d:1c:1a:d6:a7:b6:4d:07:74:78:2f:02:8d:
         48:a2:30:0b:3b:09:a5:b9:55:19:8f:2e:3b:85:ac:39:0f:90:
         ac:f9:4c:7c:87:24:09:39:bc:a8:97:44:24:e1:5a:5d:dd:0e:
         78:29:b0:e3:61:cb:c8:a6:68:35:51:3c:47:87:21:6a:07:c8:
         cc:c5:c8:c5:12:8c:bc:7a:e2:ed:8a:52:f9:a0:9c:16:2c:75:
         41:2e:a3:0b:a0:f2:f0:04:66:b5:2a:f6:de:65:bb:2a:d2:84:
         f1:71:b6:b2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----