Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c7/796823-6d81-4d91-b664-e0abd4d84571/1/BCaK5Ac3U2pGTChJPq9QPbmhjyA.mft
File:                     BCaK5Ac3U2pGTChJPq9QPbmhjyA.mft (raw, json)
Hash identifier:          Vlih6LSd+pgEf+lvvgKGyX+phnxezoxdzRiaF1oLKlE=
Subject key identifier:   ED:AC:CC:77:4F:4E:0D:54:19:08:77:5D:F6:D7:49:CC:5F:C2:04:8D
Authority key identifier: 04:26:8A:E4:07:37:53:6A:46:4C:28:49:3E:AF:50:3D:B9:A1:8F:20
Certificate issuer:       /CN=04268ae40737536a464c28493eaf503db9a18f20
Certificate serial:       01962F068C676F5C485D67BB3595859BA035
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/BCaK5Ac3U2pGTChJPq9QPbmhjyA.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/c7/796823-6d81-4d91-b664-e0abd4d84571/1/BCaK5Ac3U2pGTChJPq9QPbmhjyA.mft
Manifest number:          142A
Signing time:             Sun 13 Apr 2025 12:01:20 +0000
Manifest this update:     Sun 13 Apr 2025 12:01:20 +0000
Manifest next update:     Mon 14 Apr 2025 12:01:20 +0000
Files and hashes:         1: BCaK5Ac3U2pGTChJPq9QPbmhjyA.crl (hash: 4G7B7zWRtW1sI2p0vgZFK1Uiu57dcv9+XhFu91Ke964=)
                          2: CLXmnDFSTo8gYOSfsi36Eul40PU.roa (hash: 8Z8KtVhkqNicLx/HNFdK6oyXYk9JSXXv8S9J27mq/xY=)
                          3: lZAakdp_BLG_rPCj1oo9i4pPv2Q.roa (hash: 1gPUwLHqyRYBWV9FA/ZpZB+VDiIwSRS3XaQWbg+vKSc=)
                          4: pzYaLDX-85nYF2riSdG9v-AKZYM.roa (hash: EygpfdGwPkKz8M66wN+etr5plBuJkHzB1mglzx/9MuQ=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2f:06:8c:67:6f:5c:48:5d:67:bb:35:95:85:9b:a0:35
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=04268ae40737536a464c28493eaf503db9a18f20
        Validity
            Not Before: Apr 13 12:01:20 2025 GMT
            Not After : Apr 14 12:01:20 2025 GMT
        Subject: CN=edaccc774f4e0d541908775df6d749cc5fc2048d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e2:49:72:3d:cf:b9:09:85:db:b7:b3:2e:c3:7b:
                    a5:ca:14:b1:b8:20:d1:3a:39:ad:88:27:5c:fb:dc:
                    3e:12:f5:bf:f4:49:70:94:a2:0b:46:91:08:23:3b:
                    00:4c:87:19:00:ba:da:4e:ad:c1:5d:5c:5f:be:fa:
                    5f:50:64:77:e7:5b:d1:cf:fd:02:78:20:40:70:b1:
                    62:74:fd:ac:01:b5:85:d3:be:0e:63:65:09:fe:1b:
                    1e:79:27:30:17:27:9f:aa:a2:87:85:de:21:e7:39:
                    c4:87:7f:a7:84:3d:c3:7e:f6:b9:cc:4e:92:a1:ad:
                    cf:72:45:35:57:51:2e:85:5b:be:c6:1e:b2:0c:8b:
                    d1:d8:1b:ef:91:94:43:21:08:c1:39:cc:c6:e8:4c:
                    85:52:6f:3d:3b:c5:9c:3d:05:85:cc:00:76:4e:8e:
                    55:2a:2f:40:67:ad:c1:f8:07:83:0f:85:ac:c7:4a:
                    10:9b:15:64:ab:72:b4:8e:a0:a5:c3:ac:8a:17:f4:
                    6c:e5:af:e8:65:b0:be:94:16:69:d3:f3:bc:f3:69:
                    75:5a:5b:ee:96:c0:98:e2:5a:df:44:c2:f9:d3:ee:
                    0b:d9:a5:5d:96:09:ca:95:8e:3c:09:7b:5e:50:39:
                    82:d1:c1:41:b9:e2:d3:e8:cc:50:0f:49:75:3d:02:
                    a0:15
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                ED:AC:CC:77:4F:4E:0D:54:19:08:77:5D:F6:D7:49:CC:5F:C2:04:8D
            X509v3 Authority Key Identifier:
                keyid:04:26:8A:E4:07:37:53:6A:46:4C:28:49:3E:AF:50:3D:B9:A1:8F:20

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/BCaK5Ac3U2pGTChJPq9QPbmhjyA.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c7/796823-6d81-4d91-b664-e0abd4d84571/1/BCaK5Ac3U2pGTChJPq9QPbmhjyA.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/c7/796823-6d81-4d91-b664-e0abd4d84571/1/BCaK5Ac3U2pGTChJPq9QPbmhjyA.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         1c:e6:d0:8d:8d:61:8f:dd:87:7f:50:4d:b2:1e:57:32:d9:74:
         11:29:0a:a5:e1:d5:f4:65:92:fa:e6:ed:ae:14:c5:b1:e1:4e:
         74:7d:f6:79:3e:d8:be:f8:fe:d3:35:a5:bd:a8:5b:10:0f:7d:
         5f:4a:ab:c0:6a:d5:c1:a0:51:1d:cb:0f:20:1f:c3:5b:95:e2:
         f8:e0:f4:cc:95:31:bf:a7:b9:8c:08:65:1a:59:27:b6:b4:82:
         41:d5:69:c8:42:9d:50:3d:62:14:ad:e1:14:28:75:0d:80:9f:
         2d:ae:da:14:9f:b3:b0:94:f2:74:22:33:8c:9c:52:96:bf:5b:
         f6:1c:1d:f1:b0:44:38:b0:03:a2:74:35:86:7a:82:d1:25:79:
         41:da:73:6d:cf:4f:a6:b2:e2:e5:12:1b:39:b7:86:3e:c8:13:
         fc:09:75:52:34:24:28:6a:2d:32:5b:e9:bf:83:b7:6c:cf:ad:
         85:86:70:b6:a0:dd:76:b0:72:b4:b6:6f:ad:a8:90:6f:5c:79:
         24:ad:ae:26:fa:db:8c:d4:11:5e:6e:5c:4c:c8:5a:46:26:f3:
         89:2e:f8:5e:b9:ae:ce:cd:21:fe:88:a7:c8:0f:f4:b6:62:64:
         89:82:ec:20:c6:63:d2:fb:f7:4e:27:ca:7c:4d:da:1c:54:51:
         00:ac:a0:31
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----