Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d2/18feb3-f3d2-49f3-90d2-9d4b16b59de6/1/CCpuN38ciFptc_P1af0G1-pMekU.mft
File:                     CCpuN38ciFptc_P1af0G1-pMekU.mft (raw, json)
Hash identifier:          /hRPl4FpXT2PykEKIIJ/aIHFV1uxVsSrZhFZVsIUeNM=
Subject key identifier:   69:06:C1:7D:4B:C2:52:B3:99:5E:20:81:F2:17:24:3A:F1:E7:F0:C1
Authority key identifier: 08:2A:6E:37:7F:1C:88:5A:6D:73:F3:F5:69:FD:06:D7:EA:4C:7A:45
Certificate issuer:       /CN=082a6e377f1c885a6d73f3f569fd06d7ea4c7a45
Certificate serial:       01962E994C4DD3FD8518185361EB58541A6D
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/CCpuN38ciFptc_P1af0G1-pMekU.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/d2/18feb3-f3d2-49f3-90d2-9d4b16b59de6/1/CCpuN38ciFptc_P1af0G1-pMekU.mft
Manifest number:          14EA
Signing time:             Sun 13 Apr 2025 10:02:00 +0000
Manifest this update:     Sun 13 Apr 2025 10:02:00 +0000
Manifest next update:     Mon 14 Apr 2025 10:02:00 +0000
Files and hashes:         1: 7kjs94GsooBC3ok8_eDki6AqwvE.roa (hash: JBRZ5Zvu3ouJDx1Zug8almp1xArIsUFTcW8TFA1+REc=)
                          2: CCpuN38ciFptc_P1af0G1-pMekU.crl (hash: pZM2ah2NJhLZps15zWLT1LEeOshSo9QcB/0bBqvErn0=)
                          3: iSF6wZyO6If58sQqTXysl1_Kh_M.roa (hash: 3SWDCP6sS0WfTJUbeS9QKmM82fQRW3IvJzsiGsOp1qA=)
                          4: u-28X2e_QK57_FwKns881CWMp-M.roa (hash: mnCpJ6c77tMsA8C2BwDpmN2eotoq+p9B3KyML3KcafM=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2e:99:4c:4d:d3:fd:85:18:18:53:61:eb:58:54:1a:6d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=082a6e377f1c885a6d73f3f569fd06d7ea4c7a45
        Validity
            Not Before: Apr 13 10:02:00 2025 GMT
            Not After : Apr 14 10:02:00 2025 GMT
        Subject: CN=6906c17d4bc252b3995e2081f217243af1e7f0c1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b3:26:d7:46:14:fb:a4:03:84:42:e9:40:90:ba:
                    ef:a0:eb:5d:9e:b8:5f:2a:a3:42:6b:a5:1e:59:84:
                    9d:dc:ed:5a:0a:92:5d:bf:e0:0d:8d:b6:24:d2:b3:
                    b8:d2:04:ba:32:ae:9b:12:96:f5:b6:d7:b8:fe:59:
                    27:a4:94:f8:81:b3:50:a4:56:4e:2f:b9:79:f7:db:
                    87:58:37:dd:d0:fd:6c:dc:1b:63:a1:0c:ff:07:75:
                    17:6a:ca:b5:b5:4e:c4:df:11:a3:25:1f:e9:4e:bc:
                    68:24:d3:9d:26:95:fd:6d:88:69:1d:d2:02:20:7e:
                    a7:a5:8b:69:62:05:8d:e0:70:3d:f1:87:0f:2f:7d:
                    33:c8:2d:38:11:10:0e:d4:28:25:66:46:16:ab:df:
                    53:44:67:96:b8:6d:4a:3e:de:e5:01:e1:7a:d7:27:
                    f9:ea:59:a3:8d:83:98:d7:29:ab:e5:34:d5:29:d8:
                    be:8c:c6:46:4e:33:f5:3c:77:53:c8:2f:1a:bf:5b:
                    de:be:2d:1f:72:1f:0c:22:96:2e:27:bd:2e:aa:c0:
                    c8:6a:33:e9:2f:48:44:62:8b:57:22:16:61:92:2b:
                    cb:7d:52:99:3f:4f:b4:de:c6:cc:7c:ce:2e:b8:40:
                    1d:6e:bd:7c:3f:65:a4:f4:46:b2:7c:a7:ff:f8:d6:
                    c8:e1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                69:06:C1:7D:4B:C2:52:B3:99:5E:20:81:F2:17:24:3A:F1:E7:F0:C1
            X509v3 Authority Key Identifier:
                keyid:08:2A:6E:37:7F:1C:88:5A:6D:73:F3:F5:69:FD:06:D7:EA:4C:7A:45

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CCpuN38ciFptc_P1af0G1-pMekU.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d2/18feb3-f3d2-49f3-90d2-9d4b16b59de6/1/CCpuN38ciFptc_P1af0G1-pMekU.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/d2/18feb3-f3d2-49f3-90d2-9d4b16b59de6/1/CCpuN38ciFptc_P1af0G1-pMekU.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         2f:05:61:9e:09:85:e7:25:44:b4:e5:7f:08:76:ff:55:3f:3b:
         f5:8d:e4:24:59:b7:5e:5f:5c:5c:45:b1:50:6f:60:0b:ec:fa:
         32:56:20:b8:cc:34:59:50:ed:a5:75:3f:d0:ae:9f:3c:89:42:
         b9:62:32:51:bc:26:23:15:ef:72:d7:b4:07:1b:0a:1e:07:fc:
         11:3f:bf:27:d5:bf:18:1a:7e:89:03:8f:96:40:67:cc:ac:48:
         2e:36:2d:18:60:2f:da:8a:ec:bd:99:f3:23:5a:8f:1e:d7:b0:
         72:2b:e5:d0:84:40:72:3c:b6:f4:c4:84:01:19:f8:99:24:97:
         62:91:9c:9b:01:0f:40:f3:29:7a:0e:e9:9e:9e:bd:9b:24:d7:
         fb:ae:21:9a:1b:4d:70:b1:5e:1a:a0:1d:2c:6b:01:8b:86:2b:
         03:02:21:cc:80:fe:ca:52:c6:e4:b6:a7:e5:c6:fb:b3:c2:84:
         80:82:23:54:3f:50:f5:c5:fb:ee:8b:89:ab:32:7e:3a:88:c6:
         18:3d:68:9d:fd:f1:52:ad:a6:6f:cb:c5:bf:27:25:ff:f5:3c:
         bb:ae:94:bc:db:1c:3d:d8:99:87:3e:4f:16:76:0a:fd:6a:52:
         a5:86:f0:0e:93:be:da:4b:c2:9b:9e:27:7f:0c:f8:17:01:81:
         80:81:f3:bc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----