Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d9/aeae3f-af4d-4eee-b284-a5f6c0aa11de/1/SGUQoxFpcvztleiova_W5FXe0Lo.mft
File:                     SGUQoxFpcvztleiova_W5FXe0Lo.mft (raw, json)
Hash identifier:          srnvcGo8CoH8KqqEFrg9xIWEAdBLkC1ODxWrzy5LfP4=
Subject key identifier:   12:BF:58:A2:69:96:A8:84:B3:E4:36:CA:2A:A2:09:A1:FD:CB:08:80
Authority key identifier: 48:65:10:A3:11:69:72:FC:ED:95:E8:A8:BD:AF:D6:E4:55:DE:D0:BA
Certificate issuer:       /CN=486510a3116972fced95e8a8bdafd6e455ded0ba
Certificate serial:       01962F06771135A8F8B6C874AE7E9FA1B74B
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/SGUQoxFpcvztleiova_W5FXe0Lo.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/d9/aeae3f-af4d-4eee-b284-a5f6c0aa11de/1/SGUQoxFpcvztleiova_W5FXe0Lo.mft
Manifest number:          14ED
Signing time:             Sun 13 Apr 2025 12:01:14 +0000
Manifest this update:     Sun 13 Apr 2025 12:01:14 +0000
Manifest next update:     Mon 14 Apr 2025 12:01:14 +0000
Files and hashes:         1: SGUQoxFpcvztleiova_W5FXe0Lo.crl (hash: 9B3RcxrFpEXtjfiIOodqEFJ5IJeXpk5Ea8lDZK3CXps=)
                          2: lQwR3y5IAJ7kyCCFVo104fC4SsY.roa (hash: MwEmP7Sqq33K1HUPXLtLK+kd2q/HJrM3DtuK+SIM+zY=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2f:06:77:11:35:a8:f8:b6:c8:74:ae:7e:9f:a1:b7:4b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=486510a3116972fced95e8a8bdafd6e455ded0ba
        Validity
            Not Before: Apr 13 12:01:14 2025 GMT
            Not After : Apr 14 12:01:14 2025 GMT
        Subject: CN=12bf58a26996a884b3e436ca2aa209a1fdcb0880
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a7:ae:ec:c6:42:64:72:23:e2:14:9c:1f:cb:03:
                    1d:c6:4d:15:b3:62:28:5a:60:6d:bb:06:74:1a:c8:
                    2b:f3:8e:e3:73:00:f4:52:04:44:bd:d3:72:3d:54:
                    31:e0:6d:d2:48:34:4f:a5:e5:82:4d:f1:eb:6b:b7:
                    38:62:36:76:06:a6:35:fc:b8:c1:6b:cc:08:01:a1:
                    ec:78:b2:7f:65:c1:3b:57:21:9b:bf:bf:4a:d5:7f:
                    1b:d7:ef:1b:5c:44:5c:a5:ad:77:06:d0:a6:b2:fc:
                    b7:ed:d4:d1:1b:db:bd:67:60:64:f5:b1:13:10:b4:
                    aa:0f:94:18:58:7a:fb:61:b5:95:17:66:5d:5a:7d:
                    c0:c6:5a:32:56:e0:21:7f:42:4f:fd:0e:04:9e:53:
                    32:1a:2d:80:7c:d4:48:45:52:46:36:71:7f:4d:ab:
                    08:e7:55:bb:91:be:f6:56:11:a3:2a:82:8d:a9:d8:
                    66:1f:88:14:a6:22:b6:c3:74:7d:e8:4e:44:35:07:
                    2a:91:5c:1d:0b:a6:72:ad:89:9a:47:19:4d:91:3e:
                    86:ca:d6:98:35:47:06:9a:63:ab:86:5b:f8:6b:c0:
                    d3:e8:4f:8b:7a:34:95:ae:d4:7e:8a:8d:55:84:3a:
                    e2:e1:8c:53:c5:ee:ab:80:80:55:5b:48:61:75:36:
                    be:63
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                12:BF:58:A2:69:96:A8:84:B3:E4:36:CA:2A:A2:09:A1:FD:CB:08:80
            X509v3 Authority Key Identifier:
                keyid:48:65:10:A3:11:69:72:FC:ED:95:E8:A8:BD:AF:D6:E4:55:DE:D0:BA

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/SGUQoxFpcvztleiova_W5FXe0Lo.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d9/aeae3f-af4d-4eee-b284-a5f6c0aa11de/1/SGUQoxFpcvztleiova_W5FXe0Lo.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/d9/aeae3f-af4d-4eee-b284-a5f6c0aa11de/1/SGUQoxFpcvztleiova_W5FXe0Lo.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         6f:c2:71:a3:d7:9b:74:2f:d8:43:01:47:03:27:49:03:a5:ef:
         6d:34:75:13:a3:6d:ef:e2:b7:d8:32:6c:be:02:2f:cc:dc:dc:
         be:1b:cb:53:ee:ed:b2:c4:f0:71:fc:c4:74:83:2a:51:63:3b:
         f6:b4:4c:6b:95:e6:da:86:9f:37:6c:0c:4f:fa:8b:7e:72:11:
         2d:36:15:37:70:54:5d:99:e2:38:c8:a5:6a:dc:6f:0c:be:2a:
         ff:70:b9:cf:02:27:ac:2a:eb:f8:3a:15:ff:79:09:b5:cd:75:
         57:eb:37:a0:dc:ae:45:df:0c:10:cf:3c:2b:30:c5:45:f2:c8:
         ec:61:ca:3e:37:33:83:fd:e9:90:11:02:8c:c6:d0:92:aa:a1:
         26:7a:37:43:a9:93:c3:31:46:3d:04:60:82:3c:15:23:47:d7:
         a4:34:f5:8b:2c:b2:1a:d7:7a:c1:ef:0e:5f:99:9e:58:86:96:
         64:22:cb:72:d4:c4:0f:fd:8b:cd:4e:cf:92:06:e5:bb:ae:19:
         5a:8b:0b:2a:08:9e:4a:c6:ee:54:0a:bb:45:20:e7:db:42:a8:
         3e:41:7b:ec:1d:77:62:85:a9:be:09:c3:ce:4f:19:a5:f4:6a:
         2b:0f:c0:2e:e9:26:89:2d:5c:96:81:38:d1:a9:83:71:cd:58:
         3c:5f:3b:07
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----