Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ec/af4ef8-ed07-4acd-a42f-c96c2ce859e5/1/AW5eMfqHFqqlThj83P7T_JTbkLU.mft
File:                     AW5eMfqHFqqlThj83P7T_JTbkLU.mft (raw, json)
Hash identifier:          pmyM/NcLsnfAZtKPomENTCsvmF+5sbaDnntwZeRkD0E=
Subject key identifier:   CC:61:ED:B7:38:70:F2:26:EF:29:CB:E4:37:B4:6E:BB:1C:0A:4A:7B
Authority key identifier: 01:6E:5E:31:FA:87:16:AA:A5:4E:18:FC:DC:FE:D3:FC:94:DB:90:B5
Certificate issuer:       /CN=016e5e31fa8716aaa54e18fcdcfed3fc94db90b5
Certificate serial:       01962E98E02331B9444BB3F0B859FD58071C
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/AW5eMfqHFqqlThj83P7T_JTbkLU.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/ec/af4ef8-ed07-4acd-a42f-c96c2ce859e5/1/AW5eMfqHFqqlThj83P7T_JTbkLU.mft
Manifest number:          14ED
Signing time:             Sun 13 Apr 2025 10:01:32 +0000
Manifest this update:     Sun 13 Apr 2025 10:01:32 +0000
Manifest next update:     Mon 14 Apr 2025 10:01:32 +0000
Files and hashes:         1: AW5eMfqHFqqlThj83P7T_JTbkLU.crl (hash: Q5Mf+V5o3Yxeec5CdICeRM4/u3Uhokbkp4SM88JnKA0=)
                          2: Rgcekkes1KhkPm-geec6ef8_SvQ.roa (hash: 0N6GYLdc56+kVBGDj5O5jPTIUR3nKttL77HbNqyqtCs=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2e:98:e0:23:31:b9:44:4b:b3:f0:b8:59:fd:58:07:1c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=016e5e31fa8716aaa54e18fcdcfed3fc94db90b5
        Validity
            Not Before: Apr 13 10:01:32 2025 GMT
            Not After : Apr 14 10:01:32 2025 GMT
        Subject: CN=cc61edb73870f226ef29cbe437b46ebb1c0a4a7b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bf:9c:19:db:e2:09:62:f0:20:eb:9f:ee:ca:92:
                    5d:b0:98:13:fb:c5:37:8e:8e:af:93:33:b2:0c:28:
                    03:1c:86:a9:7b:8f:e7:92:ac:3d:f6:65:64:49:4c:
                    81:ae:60:5a:72:f9:d4:97:5a:03:7c:c1:52:6b:59:
                    92:96:ea:04:fb:db:ae:00:fc:55:9c:55:94:34:7a:
                    05:77:43:9d:7b:4f:43:9b:9f:e8:92:2d:cc:8e:59:
                    4d:c0:65:45:86:3c:53:a8:33:0f:a8:19:df:ba:a5:
                    26:d8:84:4a:ff:a3:18:e1:e8:8f:ee:16:72:93:39:
                    55:cd:7e:89:0d:30:7b:42:b5:ae:9c:4c:17:92:6d:
                    08:2c:19:1c:49:e8:ac:68:f3:09:4a:8d:b3:4d:5b:
                    1a:92:72:7c:df:ba:f9:a8:c3:75:0c:48:57:bb:db:
                    a1:d0:b7:3d:57:61:25:16:82:35:4b:8b:4f:3e:da:
                    9d:99:e6:10:3e:38:cc:50:ec:71:a8:1d:23:1b:58:
                    bb:f8:c5:5c:9b:ff:a6:84:46:9b:7e:00:81:33:b5:
                    7a:c6:95:8c:2e:b0:a6:0c:d8:37:6c:9c:51:be:ed:
                    9d:fd:f2:a0:e5:26:42:be:c1:49:bb:1a:bc:87:46:
                    dc:c9:10:4a:1e:7b:d4:37:26:03:66:4b:35:92:c6:
                    f2:1d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CC:61:ED:B7:38:70:F2:26:EF:29:CB:E4:37:B4:6E:BB:1C:0A:4A:7B
            X509v3 Authority Key Identifier:
                keyid:01:6E:5E:31:FA:87:16:AA:A5:4E:18:FC:DC:FE:D3:FC:94:DB:90:B5

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/AW5eMfqHFqqlThj83P7T_JTbkLU.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ec/af4ef8-ed07-4acd-a42f-c96c2ce859e5/1/AW5eMfqHFqqlThj83P7T_JTbkLU.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/ec/af4ef8-ed07-4acd-a42f-c96c2ce859e5/1/AW5eMfqHFqqlThj83P7T_JTbkLU.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         2d:98:82:a0:97:a7:1c:05:6c:52:86:65:de:ed:67:57:dd:a8:
         4d:c1:6b:3a:fe:bd:0c:98:ed:f7:2d:ba:cd:19:27:82:1c:f7:
         3f:d6:8a:c7:9b:dc:6e:fa:bb:5e:a4:1c:4a:a8:31:1a:6a:a0:
         b0:52:4a:b0:a6:80:c8:30:6e:fd:2c:ac:08:2b:ae:71:58:cd:
         e8:a4:60:58:6c:c2:77:ee:f1:4c:ca:c7:27:a8:84:dd:c1:31:
         62:d6:e0:22:14:ae:a4:bc:07:3a:b2:17:cb:69:c3:45:00:11:
         e9:11:c2:53:1d:32:f5:0c:1a:34:25:1c:ad:86:6b:7e:5f:e6:
         af:86:bb:ce:87:22:08:62:ed:b8:a4:ed:f4:52:6d:2f:02:01:
         fe:8a:93:93:b7:b6:13:c0:b2:c7:b3:37:7a:03:fa:a9:18:f3:
         93:73:0f:12:4f:8d:0c:29:e0:a1:31:2c:d2:3d:14:e6:a3:fd:
         ac:21:cb:8b:dd:70:eb:ab:fb:45:ca:89:eb:99:4b:de:1e:6b:
         72:52:2c:fc:d1:0b:02:9b:12:48:90:8e:f0:2b:e6:f6:17:15:
         3c:07:f1:6a:f5:78:62:8f:a5:59:6b:0b:d3:95:e8:b1:fb:74:
         b0:3a:1d:f1:4f:f1:ff:a0:3f:8d:bb:fe:32:20:bf:ab:9c:29:
         7d:27:e4:06
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----