Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ec/fff1c7-cee1-4fa6-a99b-c9c8ab188853/1/aSJs60DGcfMKzxH6NrjX0cZ1RwQ.mft
File:                     aSJs60DGcfMKzxH6NrjX0cZ1RwQ.mft (raw, json)
Hash identifier:          xXnFEMtxf12x8P3S57tnzrL4bdRSTflV5oMIiJD5DxE=
Subject key identifier:   5A:83:7D:7E:0D:9C:3E:69:1A:00:F9:C7:0A:20:47:EC:31:1E:81:E5
Authority key identifier: 69:22:6C:EB:40:C6:71:F3:0A:CF:11:FA:36:B8:D7:D1:C6:75:47:04
Certificate issuer:       /CN=69226ceb40c671f30acf11fa36b8d7d1c6754704
Certificate serial:       01962ECF610F8284A0C95B669FFD87557A06
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/aSJs60DGcfMKzxH6NrjX0cZ1RwQ.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/ec/fff1c7-cee1-4fa6-a99b-c9c8ab188853/1/aSJs60DGcfMKzxH6NrjX0cZ1RwQ.mft
Manifest number:          14EA
Signing time:             Sun 13 Apr 2025 11:01:04 +0000
Manifest this update:     Sun 13 Apr 2025 11:01:04 +0000
Manifest next update:     Mon 14 Apr 2025 11:01:04 +0000
Files and hashes:         1: YixLFlfODucpz3SmvGUoO943czQ.roa (hash: U+vdy0unHKQkRcci4HnKyZFl5mHyggPlDsq3RNujwyk=)
                          2: aSJs60DGcfMKzxH6NrjX0cZ1RwQ.crl (hash: FMvPu86CHAfkbBui8i+iL18n1oJ0pOiHXrAFpnmVkBA=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2e:cf:61:0f:82:84:a0:c9:5b:66:9f:fd:87:55:7a:06
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=69226ceb40c671f30acf11fa36b8d7d1c6754704
        Validity
            Not Before: Apr 13 11:01:04 2025 GMT
            Not After : Apr 14 11:01:04 2025 GMT
        Subject: CN=5a837d7e0d9c3e691a00f9c70a2047ec311e81e5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d6:cc:e4:f3:e4:0e:f7:64:fe:56:48:9f:5e:a3:
                    1a:46:70:bc:a8:01:53:c4:58:d4:9c:17:6c:f1:f2:
                    36:82:42:77:40:96:17:4c:70:6d:0a:5f:a2:10:7c:
                    08:2b:a7:b0:41:22:48:9d:c9:e6:db:c7:ac:65:8f:
                    08:29:91:e8:81:8e:5c:1d:59:a7:00:a8:09:9e:1b:
                    f8:d3:93:5a:b3:6f:7c:cf:36:96:78:d1:44:f2:64:
                    6c:5e:f6:dd:8c:87:47:6b:48:30:1b:d9:ef:e4:a7:
                    79:80:f0:af:fa:6a:49:30:8e:12:07:75:3c:b0:d8:
                    85:08:37:51:96:12:5e:5a:d1:de:ef:db:e9:25:b8:
                    4a:04:a3:31:b7:cf:04:c9:21:4e:5c:00:11:d6:30:
                    f8:34:4d:22:89:97:bf:f8:99:75:7e:f8:e5:56:84:
                    d6:ce:45:66:93:ac:67:5d:3f:b7:72:cd:4f:ab:e4:
                    e0:8f:a5:d8:32:aa:c5:df:4b:72:5d:20:5a:fd:29:
                    7a:2f:e2:0c:f3:a7:67:6a:29:45:c5:c4:66:3e:59:
                    93:6e:e8:e2:95:d3:43:b3:b8:46:f7:2b:df:6e:6f:
                    18:d7:27:52:19:a1:2a:74:b0:82:0e:f3:51:e4:bf:
                    24:f6:95:9d:c7:4f:2e:ee:6f:5a:44:39:54:6b:e3:
                    95:37
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5A:83:7D:7E:0D:9C:3E:69:1A:00:F9:C7:0A:20:47:EC:31:1E:81:E5
            X509v3 Authority Key Identifier:
                keyid:69:22:6C:EB:40:C6:71:F3:0A:CF:11:FA:36:B8:D7:D1:C6:75:47:04

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/aSJs60DGcfMKzxH6NrjX0cZ1RwQ.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ec/fff1c7-cee1-4fa6-a99b-c9c8ab188853/1/aSJs60DGcfMKzxH6NrjX0cZ1RwQ.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/ec/fff1c7-cee1-4fa6-a99b-c9c8ab188853/1/aSJs60DGcfMKzxH6NrjX0cZ1RwQ.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         97:2c:4a:81:68:8a:b9:05:31:39:81:29:4c:fb:31:6f:f9:0f:
         77:1d:df:9c:5e:ae:53:99:02:ec:da:38:54:ec:de:0b:57:e7:
         84:3b:70:82:3a:e1:ef:ec:c0:38:52:48:7a:0b:b6:d9:33:4b:
         e3:ad:81:df:12:70:fe:e2:20:98:fa:04:7c:f7:7a:7f:ad:f9:
         79:75:84:1d:fc:8b:bc:a2:08:da:c9:44:55:3e:fe:a7:a1:fa:
         43:fe:62:f6:39:fb:7e:93:49:80:87:85:48:90:75:cb:57:e5:
         00:45:0e:1a:7a:cc:c9:d9:e3:5d:40:95:a7:e2:9d:b8:cb:de:
         b7:36:5d:40:f1:14:4a:13:6f:5f:aa:54:e3:20:f8:9d:f6:99:
         5f:16:5a:bf:5f:57:45:62:aa:d6:81:88:70:e4:a2:f1:c4:cf:
         1a:07:f5:dd:c5:18:fb:b5:3c:6c:19:36:e9:8a:9d:5b:76:73:
         36:0b:a1:69:ea:d6:33:ae:72:a3:f3:ea:f6:58:a3:80:35:6a:
         3d:bc:09:3d:ea:68:54:c7:99:38:65:41:b2:fa:68:e8:1f:72:
         5d:a7:bc:73:06:e3:ef:ab:8f:6a:d0:80:ca:fd:ea:06:bb:a6:
         a9:fd:70:e3:77:7d:fb:01:e5:70:ce:d7:1d:67:ce:90:0e:e0:
         80:01:1a:24
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----