Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c8/aa3350-aa2a-4477-9fcd-a60b2cc8d080/1/cHSIc9gyAihk-skAZdUdjie0Pl0.mft
File:                     cHSIc9gyAihk-skAZdUdjie0Pl0.mft (raw, json)
Hash identifier:          DSoAsckAPQ+sUmP+XOLW5kTWbf7EQQT564y6DiAZh40=
Subject key identifier:   53:06:B2:87:F6:DC:B8:90:52:20:C4:03:79:25:15:B6:C9:90:1C:F2
Authority key identifier: 70:74:88:73:D8:32:02:28:64:FA:C9:00:65:D5:1D:8E:27:B4:3E:5D
Certificate issuer:       /CN=70748873d832022864fac90065d51d8e27b43e5d
Certificate serial:       01962E617902A1C365653AFAFB4B8825D4E2
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/cHSIc9gyAihk-skAZdUdjie0Pl0.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/c8/aa3350-aa2a-4477-9fcd-a60b2cc8d080/1/cHSIc9gyAihk-skAZdUdjie0Pl0.mft
Manifest number:          14E6
Signing time:             Sun 13 Apr 2025 09:01:01 +0000
Manifest this update:     Sun 13 Apr 2025 09:01:01 +0000
Manifest next update:     Mon 14 Apr 2025 09:01:01 +0000
Files and hashes:         1: cHSIc9gyAihk-skAZdUdjie0Pl0.crl (hash: qDR1lHvt5PHToONGKN00T9fSlhyn4ON6FxSItFNXqsk=)
                          2: luaqw9G-VvVeUOUerH8hYnJDYmk.roa (hash: cGv6tVYRF/4yXJn3TxE1a8gXuaOG4Us7R7XWbyYOP1U=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2e:61:79:02:a1:c3:65:65:3a:fa:fb:4b:88:25:d4:e2
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=70748873d832022864fac90065d51d8e27b43e5d
        Validity
            Not Before: Apr 13 09:01:01 2025 GMT
            Not After : Apr 14 09:01:01 2025 GMT
        Subject: CN=5306b287f6dcb8905220c403792515b6c9901cf2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d6:b1:67:5a:b3:27:64:b9:6a:1f:2a:fc:4f:db:
                    25:bb:62:81:09:76:d2:d4:54:1d:21:6f:68:83:41:
                    fb:05:20:e8:ac:bf:7e:eb:99:f4:26:a9:f1:7b:49:
                    24:2f:ea:0f:c1:0f:81:7e:9c:96:62:de:a7:31:68:
                    93:e2:58:2c:13:04:5c:f0:59:31:4a:52:fb:0d:83:
                    7e:97:a2:1b:1e:f3:e7:67:dd:42:77:bc:0f:47:8a:
                    02:c2:93:6a:9b:26:c9:6e:85:55:3c:20:e7:58:99:
                    a5:f4:9d:00:f4:11:ee:62:a0:d0:fb:f8:6c:f3:56:
                    57:29:d1:95:cb:3c:f8:a3:f2:f5:18:82:f9:f9:18:
                    eb:6e:1c:c0:09:6a:b4:c9:33:af:49:30:da:23:c4:
                    30:25:2d:53:21:8c:72:47:16:3d:ff:f3:02:17:7c:
                    ac:ca:7c:d7:c4:3d:dd:6d:3d:21:7b:1f:0e:03:e7:
                    15:ca:51:fb:d3:a7:45:49:93:c4:7b:36:e5:ee:d9:
                    d2:41:6a:45:a9:ef:b8:6c:8c:05:96:59:66:e1:90:
                    93:d8:03:b7:25:3f:a1:72:5e:e4:99:91:e9:13:d2:
                    72:2e:c7:92:02:6e:4e:c0:4c:33:6c:e5:c7:9f:42:
                    8d:2a:bc:ae:bf:92:20:56:f5:5d:dd:41:2c:f5:9c:
                    08:8b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                53:06:B2:87:F6:DC:B8:90:52:20:C4:03:79:25:15:B6:C9:90:1C:F2
            X509v3 Authority Key Identifier:
                keyid:70:74:88:73:D8:32:02:28:64:FA:C9:00:65:D5:1D:8E:27:B4:3E:5D

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cHSIc9gyAihk-skAZdUdjie0Pl0.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/aa3350-aa2a-4477-9fcd-a60b2cc8d080/1/cHSIc9gyAihk-skAZdUdjie0Pl0.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/aa3350-aa2a-4477-9fcd-a60b2cc8d080/1/cHSIc9gyAihk-skAZdUdjie0Pl0.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         9f:41:77:df:29:6a:a5:5c:5e:8a:5e:05:19:66:64:80:06:0a:
         09:03:09:d0:1f:b4:d3:01:8e:ae:7e:f5:45:29:e2:89:fa:2a:
         08:d7:a6:3b:2f:4b:f7:8a:89:a0:61:01:48:c7:fa:80:3a:12:
         e8:e2:98:c9:eb:f4:59:ed:4c:93:19:3c:cd:57:05:04:16:d3:
         9e:ae:c5:ef:bc:27:21:25:97:49:0b:c8:ab:ca:6a:47:63:76:
         c3:3b:97:05:7f:ca:9d:a6:9c:1b:8e:59:d7:13:c9:3d:df:c4:
         a2:b9:ee:d0:91:0a:3b:55:71:72:ad:5e:7d:a6:83:b4:f5:1a:
         e0:8d:4f:5a:c3:3e:67:21:a5:81:fb:aa:40:2f:e7:03:24:aa:
         68:82:3a:1e:65:0b:38:38:b6:e5:08:b7:19:a4:00:c5:83:60:
         94:6f:02:2e:1d:c7:ba:29:e0:94:08:f5:14:7e:65:be:48:21:
         3a:71:06:cd:06:72:5a:ff:71:ae:14:b2:b2:ce:3f:b5:a5:5f:
         60:c4:cd:2f:ca:e5:e8:f2:9c:7d:07:77:40:e6:af:33:2d:b4:
         a4:6d:51:db:93:c5:d7:56:e6:78:94:56:ce:f2:d1:a5:bd:88:
         ec:4b:cf:dc:2f:0e:c0:86:0a:09:83:10:fb:b4:7d:8b:37:15:
         e9:ca:93:fe
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----