Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e5/1cf0a8-1be2-49fa-8151-df6cab4e45b4/1/BhiK39FkRaKgFOAS5zm7gS_pzQ4.mft
File:                     BhiK39FkRaKgFOAS5zm7gS_pzQ4.mft (raw, json)
Hash identifier:          qRc4frEHRGzO0g9WHr6Cku1cG5Ug0OuAukdc0K+dl8s=
Subject key identifier:   3A:2A:D1:06:2A:56:28:44:2E:2C:F0:2E:69:13:23:5A:00:7A:1F:1C
Authority key identifier: 06:18:8A:DF:D1:64:45:A2:A0:14:E0:12:E7:39:BB:81:2F:E9:CD:0E
Certificate issuer:       /CN=06188adfd16445a2a014e012e739bb812fe9cd0e
Certificate serial:       01962ECFCDADF3126B9E42DE6E8B60863AED
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/BhiK39FkRaKgFOAS5zm7gS_pzQ4.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/e5/1cf0a8-1be2-49fa-8151-df6cab4e45b4/1/BhiK39FkRaKgFOAS5zm7gS_pzQ4.mft
Manifest number:          01AD
Signing time:             Sun 13 Apr 2025 11:01:32 +0000
Manifest this update:     Sun 13 Apr 2025 11:01:32 +0000
Manifest next update:     Mon 14 Apr 2025 11:01:32 +0000
Files and hashes:         1: BhiK39FkRaKgFOAS5zm7gS_pzQ4.crl (hash: 5iBmHtu+xnSgEWeiriCv2SOQE0Fa8JyzFzSTRh/lwWE=)
                          2: IBb1HqZFTHsm_sCmjR2ccm8RUCA.roa (hash: KJ8NP0RBTfkNOG7Be7nzu7TlYeYPrpFzbgBEOJgWVgw=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2e:cf:cd:ad:f3:12:6b:9e:42:de:6e:8b:60:86:3a:ed
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=06188adfd16445a2a014e012e739bb812fe9cd0e
        Validity
            Not Before: Apr 13 11:01:32 2025 GMT
            Not After : Apr 14 11:01:32 2025 GMT
        Subject: CN=3a2ad1062a5628442e2cf02e6913235a007a1f1c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c0:e8:ed:2f:79:48:01:cf:99:53:08:87:2c:fa:
                    65:e5:ae:e9:7a:78:51:33:43:d2:7e:53:cd:b5:5a:
                    f5:dc:a7:fe:9d:e3:87:03:87:e7:3a:00:e7:18:eb:
                    b3:71:ca:f6:41:73:5b:42:df:35:7d:28:b7:32:02:
                    1d:eb:53:90:6c:fb:9a:a1:77:f3:c6:90:51:f0:0a:
                    3b:42:47:3d:46:b6:bd:60:19:c8:d4:39:3f:ee:fb:
                    0c:84:23:e7:7b:32:18:e8:44:af:fe:e8:63:c8:a3:
                    a0:b1:3c:6d:ff:1f:72:47:85:64:51:7e:47:3f:8a:
                    61:6f:df:e5:5f:05:5b:b1:cf:56:8f:33:68:9c:01:
                    73:63:d5:b4:13:0b:8d:ca:d3:6e:32:ea:76:29:26:
                    a9:49:6f:cb:d3:88:44:41:41:75:f3:8a:7d:e5:ba:
                    1b:b5:82:34:67:a2:cc:3a:ee:f7:5c:08:3e:9c:a0:
                    b0:b1:6e:c0:2d:64:35:10:1c:65:26:31:53:08:a0:
                    ff:a0:ee:11:7d:54:8e:ac:75:79:a6:cb:a9:89:d9:
                    3a:f1:4e:47:1c:b4:ee:e3:2d:f3:8e:d7:9b:42:cf:
                    d6:8f:a2:7b:8a:14:e0:2b:af:e3:b1:07:f9:b1:d0:
                    dd:6a:3e:64:d3:3d:0f:23:9b:f1:1d:73:4f:aa:26:
                    ca:3d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3A:2A:D1:06:2A:56:28:44:2E:2C:F0:2E:69:13:23:5A:00:7A:1F:1C
            X509v3 Authority Key Identifier:
                keyid:06:18:8A:DF:D1:64:45:A2:A0:14:E0:12:E7:39:BB:81:2F:E9:CD:0E

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/BhiK39FkRaKgFOAS5zm7gS_pzQ4.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e5/1cf0a8-1be2-49fa-8151-df6cab4e45b4/1/BhiK39FkRaKgFOAS5zm7gS_pzQ4.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/e5/1cf0a8-1be2-49fa-8151-df6cab4e45b4/1/BhiK39FkRaKgFOAS5zm7gS_pzQ4.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         63:d2:4d:82:1d:0c:3a:e0:bb:50:1f:5f:fa:3c:c3:50:ab:18:
         91:4a:16:93:a7:1f:8c:6e:ac:29:b3:95:3c:26:c7:d6:4e:3c:
         4a:10:cc:1b:77:7d:f6:95:89:dc:06:3e:a2:a4:47:1d:6a:4f:
         e6:6f:1c:be:ca:1b:4c:db:e7:9b:f7:41:e5:b1:8a:49:2c:13:
         1d:06:24:b2:76:51:8f:60:23:43:83:ae:8f:93:2b:02:35:0d:
         80:9a:28:13:71:1c:9f:f7:55:64:38:f3:a8:1c:9d:7e:ef:4c:
         d3:ad:80:70:4b:60:84:90:1c:59:77:3c:9b:d1:30:a2:9f:a5:
         f6:d2:85:eb:e0:fd:06:19:30:fd:42:27:8f:ea:33:e3:2b:c7:
         ec:9d:dd:da:ef:ab:24:06:de:1d:20:4e:d0:b1:5e:59:e3:a7:
         51:ac:58:60:8c:a1:99:99:21:8e:a4:53:d4:52:6b:07:c6:29:
         af:9b:5a:5e:99:82:85:9b:97:8e:26:b5:05:3e:08:f1:a8:ed:
         c6:86:03:95:34:69:b5:fb:2a:16:cc:21:86:0b:65:6b:36:b8:
         77:5c:0b:f0:02:87:65:d8:8c:67:0e:b2:7a:c7:bb:f6:12:ec:
         25:2d:48:b9:3e:74:43:e8:0b:d6:8f:31:a9:6a:bc:dd:71:46:
         fd:56:e2:78
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----