Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ec/908a8a-58db-4509-a285-1ac2edda8e2a/1/AHTsPsU_Uvf1KDW7UQq2vtqgCj0.mft
File:                     AHTsPsU_Uvf1KDW7UQq2vtqgCj0.mft (raw, json)
Hash identifier:          YjdCOwXpV4OXHCDedHLCZn4MScG/fnJJ8fHCocZzcGk=
Subject key identifier:   7F:5A:43:D1:E1:3D:49:DA:C0:EE:50:9A:90:83:AC:52:74:34:E3:8F
Authority key identifier: 00:74:EC:3E:C5:3F:52:F7:F5:28:35:BB:51:0A:B6:BE:DA:A0:0A:3D
Certificate issuer:       /CN=0074ec3ec53f52f7f52835bb510ab6bedaa00a3d
Certificate serial:       01962E2B3977639A467CBACD1CBEF178B922
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/AHTsPsU_Uvf1KDW7UQq2vtqgCj0.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/ec/908a8a-58db-4509-a285-1ac2edda8e2a/1/AHTsPsU_Uvf1KDW7UQq2vtqgCj0.mft
Manifest number:          147D
Signing time:             Sun 13 Apr 2025 08:01:46 +0000
Manifest this update:     Sun 13 Apr 2025 08:01:46 +0000
Manifest next update:     Mon 14 Apr 2025 08:01:46 +0000
Files and hashes:         1: AHTsPsU_Uvf1KDW7UQq2vtqgCj0.crl (hash: r3fjKkGwtFuq5Br3FJLg6r5PZDvcx7uOKTKGVU7R2w8=)
                          2: RZsQW2mn0p77cUSrDj82xlpY4kU.roa (hash: PgZwlEZ/SO6/ySPSoJ7naRU3kSxO9+Lme8pB8HNwF8Q=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2e:2b:39:77:63:9a:46:7c:ba:cd:1c:be:f1:78:b9:22
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0074ec3ec53f52f7f52835bb510ab6bedaa00a3d
        Validity
            Not Before: Apr 13 08:01:46 2025 GMT
            Not After : Apr 14 08:01:46 2025 GMT
        Subject: CN=7f5a43d1e13d49dac0ee509a9083ac527434e38f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d6:fe:88:10:4d:7c:f6:70:84:ba:4a:ce:6a:f8:
                    e5:6c:ba:fe:fc:38:b7:49:6a:96:7d:da:f2:28:03:
                    67:e7:61:08:3f:6c:cf:21:0b:22:b3:df:fc:b2:10:
                    16:5e:d2:2c:c1:0d:cf:30:93:dd:83:cf:a0:ea:80:
                    68:61:72:8e:f3:e9:87:ff:e3:67:88:7f:66:4a:91:
                    1c:03:0b:fc:f8:de:ef:20:ff:d4:fc:5e:d6:fc:53:
                    c3:e9:66:63:ca:49:7f:67:1a:7b:da:dd:b8:00:96:
                    63:ad:29:5d:2b:ff:7b:0a:fa:f7:a4:02:be:8f:16:
                    f8:b4:44:99:1b:12:ad:e2:1b:7d:3a:22:ff:63:f9:
                    a3:90:6a:9b:6a:95:e5:6c:d6:b8:7d:df:e8:1e:2f:
                    05:22:d8:2f:77:59:e1:aa:fe:7f:ec:b5:06:13:22:
                    50:80:e2:1b:f2:22:e1:76:7e:bd:4b:8b:fa:a1:fa:
                    cc:bf:4c:b3:c6:e8:48:56:c3:07:50:40:e7:73:7b:
                    2a:1a:44:ee:4d:b6:bc:c4:55:9b:ff:3f:3d:62:39:
                    11:c9:2c:17:dd:1c:f9:d4:9c:6a:f4:99:fc:24:11:
                    90:e2:a4:8d:40:9a:c9:ac:d6:9b:87:45:49:d8:40:
                    67:bd:5f:b8:16:1b:45:6b:95:9a:49:2d:6c:5c:8d:
                    ad:05
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7F:5A:43:D1:E1:3D:49:DA:C0:EE:50:9A:90:83:AC:52:74:34:E3:8F
            X509v3 Authority Key Identifier:
                keyid:00:74:EC:3E:C5:3F:52:F7:F5:28:35:BB:51:0A:B6:BE:DA:A0:0A:3D

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/AHTsPsU_Uvf1KDW7UQq2vtqgCj0.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ec/908a8a-58db-4509-a285-1ac2edda8e2a/1/AHTsPsU_Uvf1KDW7UQq2vtqgCj0.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/ec/908a8a-58db-4509-a285-1ac2edda8e2a/1/AHTsPsU_Uvf1KDW7UQq2vtqgCj0.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         a7:e1:e8:63:10:93:01:44:d0:57:ea:c1:6b:da:5b:4a:de:73:
         75:f6:9a:7c:67:64:28:68:a2:a0:31:41:53:eb:7b:97:f8:0e:
         12:6c:68:80:ff:cf:f1:31:31:7c:23:09:b4:bd:09:65:77:39:
         87:1f:e8:a5:df:9f:7d:7c:ec:8b:b7:2b:09:b5:49:69:b2:14:
         43:71:c1:01:56:11:e3:9f:53:2c:bb:16:40:73:01:77:0c:90:
         53:60:87:90:ed:93:02:a9:3f:a6:8f:d1:c8:c5:80:70:fd:c3:
         d9:af:c9:57:5a:6b:c4:f4:7b:ad:63:32:b8:f8:0b:3f:ca:56:
         66:4a:91:60:f5:a4:23:84:70:69:ea:25:fd:59:61:d2:e7:39:
         45:6e:53:f5:6d:e5:38:c8:6f:50:13:e6:19:36:0e:45:44:7a:
         ce:36:d2:ae:a3:ff:85:af:0f:70:80:5e:72:34:c1:6f:96:43:
         c7:83:c3:31:e6:b5:59:80:a7:75:0c:11:e9:7f:d4:c1:16:06:
         3d:3e:99:e9:63:2e:84:c6:d5:aa:5f:90:5d:2d:b8:5b:79:36:
         10:ed:0b:76:49:3a:e8:19:ea:15:25:ea:7c:2d:c4:0a:19:8a:
         eb:3f:9b:ba:8e:07:ab:ff:a5:27:4a:c4:a8:73:95:3f:3c:c4:
         e3:5b:e1:86
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----