Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c6/bd9e55-d20a-4259-b712-d7582589bb59/1/A7sK13ZWE5U7krbL9M2pP5wTcuY.mft
File:                     A7sK13ZWE5U7krbL9M2pP5wTcuY.mft (raw, json)
Hash identifier:          dEi1zLnuYBM/UOndR52JK6lvsTJ1imlSokE8hyczqqI=
Subject key identifier:   9D:C9:98:5C:65:89:45:15:BA:C8:D1:75:29:82:CC:6A:65:8D:80:08
Authority key identifier: 03:BB:0A:D7:76:56:13:95:3B:92:B6:CB:F4:CD:A9:3F:9C:13:72:E6
Certificate issuer:       /CN=03bb0ad7765613953b92b6cbf4cda93f9c1372e6
Certificate serial:       01962E2AEE99B9E5CDBE3F39062003C3C152
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/A7sK13ZWE5U7krbL9M2pP5wTcuY.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/c6/bd9e55-d20a-4259-b712-d7582589bb59/1/A7sK13ZWE5U7krbL9M2pP5wTcuY.mft
Manifest number:          016D
Signing time:             Sun 13 Apr 2025 08:01:27 +0000
Manifest this update:     Sun 13 Apr 2025 08:01:27 +0000
Manifest next update:     Mon 14 Apr 2025 08:01:27 +0000
Files and hashes:         1: A7sK13ZWE5U7krbL9M2pP5wTcuY.crl (hash: k0RxFstHkJA6fTxrQ8E8moZx9R3vR3APYuREr3X4J4M=)
                          2: E09vqP6Dhzwi3swUd7vdKQdAZ-E.roa (hash: MzWcZL4YZkWICabmNLBtwrsQlq2zb5xWQgY5PAU+5oM=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2e:2a:ee:99:b9:e5:cd:be:3f:39:06:20:03:c3:c1:52
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=03bb0ad7765613953b92b6cbf4cda93f9c1372e6
        Validity
            Not Before: Apr 13 08:01:27 2025 GMT
            Not After : Apr 14 08:01:27 2025 GMT
        Subject: CN=9dc9985c65894515bac8d1752982cc6a658d8008
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b3:e1:4f:3b:9d:ee:65:b6:88:15:6a:ae:34:47:
                    ec:8f:af:db:a8:54:6d:f5:db:82:5a:ec:1e:af:d3:
                    f8:dd:83:a9:e2:28:9d:a3:53:2b:41:bf:ad:44:a4:
                    30:ae:fb:23:7d:49:eb:9a:81:a3:71:f3:81:ae:01:
                    e5:52:10:28:bf:48:d8:78:d9:14:b2:80:95:7e:ca:
                    2a:9e:0a:59:20:81:51:2c:f4:e7:80:e5:f7:6a:33:
                    c2:d5:6c:a4:a2:23:7e:d3:84:93:93:4b:e7:ab:e3:
                    cc:5d:b9:a2:64:02:7e:24:67:2f:45:69:16:8b:1f:
                    dc:f9:b3:35:57:0c:ab:ad:a0:ac:24:f2:4a:0f:8e:
                    59:90:04:db:71:3b:40:b7:64:18:4e:85:44:29:24:
                    86:bc:21:6d:48:95:39:99:11:f1:05:a1:a6:fc:b7:
                    45:e1:fb:0b:54:96:6e:3b:ed:66:c1:f0:86:3d:52:
                    62:05:d2:8c:3d:da:4e:d8:5f:5f:57:0d:34:1d:3c:
                    13:b0:c6:12:ee:a4:e2:72:43:c2:b7:db:a3:88:1d:
                    e3:c1:dc:e3:58:ea:02:80:5b:0e:81:78:e3:f7:db:
                    54:cb:ac:a4:e4:52:27:91:0e:83:f0:28:8a:3e:0b:
                    42:13:29:81:ed:16:87:12:49:ab:80:ab:07:6d:9e:
                    16:9b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9D:C9:98:5C:65:89:45:15:BA:C8:D1:75:29:82:CC:6A:65:8D:80:08
            X509v3 Authority Key Identifier:
                keyid:03:BB:0A:D7:76:56:13:95:3B:92:B6:CB:F4:CD:A9:3F:9C:13:72:E6

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/A7sK13ZWE5U7krbL9M2pP5wTcuY.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c6/bd9e55-d20a-4259-b712-d7582589bb59/1/A7sK13ZWE5U7krbL9M2pP5wTcuY.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/c6/bd9e55-d20a-4259-b712-d7582589bb59/1/A7sK13ZWE5U7krbL9M2pP5wTcuY.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         a5:48:89:fb:f3:d0:50:c4:54:d2:4e:c8:c1:e0:4f:3d:fa:ba:
         6a:6f:90:a6:3d:99:c1:33:90:d1:44:1b:dd:62:49:18:6a:84:
         07:96:42:af:ff:72:cd:0c:8f:c9:2c:e4:a8:92:69:fc:ae:49:
         da:1d:6f:dd:cf:3e:a6:d8:e1:5b:5f:f5:79:75:46:63:26:38:
         ba:c1:a6:5a:04:bf:90:ae:44:a5:92:e2:21:f1:66:96:63:2b:
         85:bf:a2:27:b8:86:96:93:69:ea:0e:64:4a:59:dc:22:49:68:
         cc:21:97:0c:fe:d9:1b:e3:d1:49:d6:1c:cc:7e:19:4f:99:03:
         05:82:c2:4a:7e:bf:1f:b6:e1:be:4c:57:f5:54:c9:18:e9:25:
         72:46:17:c4:ba:31:dc:ac:fc:9c:84:bf:1f:10:98:d9:c2:87:
         47:41:c2:60:46:6e:eb:41:23:8e:70:3d:b1:62:b9:7e:a0:43:
         22:ca:73:88:1d:7d:1a:e8:be:11:22:af:86:5e:f8:70:92:9d:
         bb:cd:6b:21:ef:c2:ef:75:2c:0f:1a:ef:2f:1a:18:7e:82:6c:
         10:0e:94:7e:95:44:fc:e0:34:57:aa:df:1e:c9:22:56:e6:e5:
         6c:c0:99:20:d5:b5:e3:2c:30:12:11:5c:65:76:7a:54:c0:81:
         5b:1a:40:44
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----