Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e8/744eeb-e064-4fef-9e90-5686d4313595/1/aeAcyPjm5ex1CWDZpwRRDf-Vcvc.mft
File:                     aeAcyPjm5ex1CWDZpwRRDf-Vcvc.mft (raw, json)
Hash identifier:          cmDuTohzH0wyRaAlgqa05gHnEF2/VakP6nkgOhxC5zs=
Subject key identifier:   F2:CC:39:61:9A:E3:F6:59:AD:7D:18:37:8B:CC:29:80:91:59:BA:E8
Authority key identifier: 69:E0:1C:C8:F8:E6:E5:EC:75:09:60:D9:A7:04:51:0D:FF:95:72:F7
Certificate issuer:       /CN=69e01cc8f8e6e5ec750960d9a704510dff9572f7
Certificate serial:       01962E986589FC6A976FDEE6493E1697592F
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/aeAcyPjm5ex1CWDZpwRRDf-Vcvc.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/e8/744eeb-e064-4fef-9e90-5686d4313595/1/aeAcyPjm5ex1CWDZpwRRDf-Vcvc.mft
Manifest number:          13E8
Signing time:             Sun 13 Apr 2025 10:01:01 +0000
Manifest this update:     Sun 13 Apr 2025 10:01:01 +0000
Manifest next update:     Mon 14 Apr 2025 10:01:01 +0000
Files and hashes:         1: ARb5ZPDad5FfTT7dZ8xHZ7gMy6A.roa (hash: 8snm/YmhdjNlAruJqhnmmmr90GFSb4amikZSdNm3KvA=)
                          2: aeAcyPjm5ex1CWDZpwRRDf-Vcvc.crl (hash: snic5qx5B4cTdBGz8KuESPVSAkw7ppsbsEl34wH4lqY=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2e:98:65:89:fc:6a:97:6f:de:e6:49:3e:16:97:59:2f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=69e01cc8f8e6e5ec750960d9a704510dff9572f7
        Validity
            Not Before: Apr 13 10:01:01 2025 GMT
            Not After : Apr 14 10:01:01 2025 GMT
        Subject: CN=f2cc39619ae3f659ad7d18378bcc29809159bae8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cf:cb:13:36:30:cf:2d:53:70:5d:d7:6f:c5:6f:
                    cb:fb:0b:9c:7d:b7:d0:a9:5f:4a:0d:a4:ac:eb:c6:
                    1f:b4:4a:38:c4:69:d7:54:45:d0:b1:67:7f:10:e1:
                    57:97:0b:14:38:ce:93:8f:62:95:06:8f:25:4c:22:
                    50:2f:00:ad:0f:cd:47:79:56:0b:98:35:f1:1e:42:
                    15:28:f8:4b:1a:3a:9f:03:b5:ff:92:88:af:1b:1b:
                    97:5c:27:59:41:ea:ef:90:7f:0d:d4:94:a7:4f:7b:
                    90:ef:7c:ca:3e:98:da:84:3c:d6:3c:9e:b1:ae:0a:
                    cd:cc:65:99:79:53:fd:46:aa:b6:73:85:3d:ae:40:
                    2a:8d:23:42:32:47:61:a2:d2:f5:32:fa:03:76:ef:
                    5c:dd:1a:02:9d:11:a1:52:61:7e:cc:00:6f:3f:b2:
                    09:47:4c:9a:da:c7:ac:d7:86:13:6b:3d:ec:9b:3e:
                    ca:a3:e2:d4:71:09:95:8d:ae:d7:e0:7b:b3:0b:92:
                    0f:8c:9c:99:ba:61:89:a6:f7:ea:f2:23:c9:73:ed:
                    9c:24:5d:33:ec:b4:4e:b7:43:b4:8a:94:33:51:73:
                    83:10:34:61:8d:52:58:80:8b:74:25:ab:c0:22:80:
                    f4:d9:70:31:f2:f0:05:61:cd:2a:88:87:8d:b9:93:
                    c2:ad
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F2:CC:39:61:9A:E3:F6:59:AD:7D:18:37:8B:CC:29:80:91:59:BA:E8
            X509v3 Authority Key Identifier:
                keyid:69:E0:1C:C8:F8:E6:E5:EC:75:09:60:D9:A7:04:51:0D:FF:95:72:F7

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/aeAcyPjm5ex1CWDZpwRRDf-Vcvc.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e8/744eeb-e064-4fef-9e90-5686d4313595/1/aeAcyPjm5ex1CWDZpwRRDf-Vcvc.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/e8/744eeb-e064-4fef-9e90-5686d4313595/1/aeAcyPjm5ex1CWDZpwRRDf-Vcvc.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         1c:ea:96:c9:16:2a:a4:a2:f1:16:c8:0c:0b:29:69:84:86:45:
         bd:f6:7b:ab:70:ed:9e:b0:9d:2d:cd:39:11:f7:32:6e:dc:04:
         58:e9:b7:d4:1d:78:30:89:63:e9:1b:5d:d0:4b:9a:31:93:d4:
         59:be:75:d9:10:04:4c:bf:11:7b:48:ce:1e:86:40:80:67:8a:
         91:82:c4:f2:03:de:c0:0f:1e:80:da:b0:b8:9f:1a:16:2f:83:
         fe:84:f4:82:46:6e:3a:15:06:ec:01:1c:73:b2:c3:33:2b:8d:
         1a:d6:20:b3:00:02:62:51:d5:8f:54:77:52:e2:aa:f9:60:38:
         75:79:08:5e:ee:48:ce:46:04:16:35:9b:9c:0e:fe:fa:05:3b:
         72:18:78:b8:a4:d7:41:97:d7:4b:f0:d1:65:86:de:49:98:4d:
         92:3f:7d:0d:58:06:45:31:fa:30:38:bc:59:2e:53:de:1d:ea:
         04:b1:69:64:a7:cf:b9:b0:ea:77:a1:c7:38:45:7a:42:03:8f:
         88:69:ce:a1:24:f9:eb:a5:7c:9d:7a:35:d6:d6:49:b5:0d:86:
         a2:df:ba:e3:3b:6f:95:ac:77:fb:04:ee:49:eb:8f:bc:7e:b6:
         c9:3e:61:cc:35:ab:a1:d4:fa:68:3d:3f:36:5e:c3:5f:de:6b:
         68:81:b3:a5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----