Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f3/8f23c1-043c-4956-bfb8-26c9f9932bbc/1/aGj2VoBTgMqG55FzeJ1mjcQB1bU.mft
File:                     aGj2VoBTgMqG55FzeJ1mjcQB1bU.mft (raw, json)
Hash identifier:          2+rAz2HUCItXbajLEvcEaftiFroNF8EBUjfbXFMkiyA=
Subject key identifier:   C6:F3:AF:5A:72:49:4B:CD:62:85:95:25:36:3E:3B:15:52:AB:79:00
Authority key identifier: 68:68:F6:56:80:53:80:CA:86:E7:91:73:78:9D:66:8D:C4:01:D5:B5
Certificate issuer:       /CN=6868f656805380ca86e79173789d668dc401d5b5
Certificate serial:       01962DF39778EAA69151ABB1CEA45F006774
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/aGj2VoBTgMqG55FzeJ1mjcQB1bU.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/f3/8f23c1-043c-4956-bfb8-26c9f9932bbc/1/aGj2VoBTgMqG55FzeJ1mjcQB1bU.mft
Manifest number:          131E
Signing time:             Sun 13 Apr 2025 07:01:00 +0000
Manifest this update:     Sun 13 Apr 2025 07:01:00 +0000
Manifest next update:     Mon 14 Apr 2025 07:01:00 +0000
Files and hashes:         1: HSyzFVthhSBBD96mxsl0scilpJU.roa (hash: q5u2KllVdiR/BqAy2dqAoFzSZ6PBl0fHr1yzfwddNTg=)
                          2: aGj2VoBTgMqG55FzeJ1mjcQB1bU.crl (hash: glpBo/C1+/JA5gi28TndGew2XAnKwoQSegsSZTYllw4=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2d:f3:97:78:ea:a6:91:51:ab:b1:ce:a4:5f:00:67:74
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6868f656805380ca86e79173789d668dc401d5b5
        Validity
            Not Before: Apr 13 07:01:00 2025 GMT
            Not After : Apr 14 07:01:00 2025 GMT
        Subject: CN=c6f3af5a72494bcd62859525363e3b1552ab7900
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9c:cd:6d:18:2e:e9:db:30:c7:30:91:73:4e:ca:
                    ba:7b:49:7e:ea:d6:a7:e5:3e:03:50:2d:d2:e0:1b:
                    6b:96:ac:67:20:fc:74:01:85:09:51:53:5a:64:f7:
                    d1:4c:79:45:e7:0f:ec:ec:c6:af:48:45:b5:c3:bf:
                    5d:83:ee:c1:54:b3:38:f3:22:65:d5:f7:de:8d:d8:
                    ca:1d:a8:5e:7b:ed:b5:28:47:32:f3:8f:7a:e7:07:
                    a6:b7:82:ed:1d:2f:70:f0:94:69:7d:40:82:85:a6:
                    e9:41:1f:41:47:b1:7c:81:a3:cd:51:b7:df:71:fa:
                    3c:d7:ae:f4:a4:5a:23:5d:14:3a:a9:22:16:45:ab:
                    2a:57:2f:f8:0d:3e:2e:17:a8:df:68:dd:a1:3f:21:
                    50:93:23:f5:02:f7:50:a4:ff:2d:fa:22:e7:0d:34:
                    7b:a0:42:23:a0:42:dd:1f:32:83:eb:7a:c1:64:31:
                    26:cd:74:68:ea:da:36:22:31:a0:2d:83:46:f2:96:
                    03:c9:33:26:06:9c:89:f5:02:50:91:79:da:b2:b7:
                    11:a0:8c:cb:d0:4b:59:b1:20:a3:9a:b6:ab:d7:3a:
                    5c:85:00:3a:2a:7c:d7:8d:74:90:ca:65:a6:df:0f:
                    5f:78:22:02:3f:a9:4d:b4:de:8d:c4:05:a4:4e:c8:
                    f2:6b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C6:F3:AF:5A:72:49:4B:CD:62:85:95:25:36:3E:3B:15:52:AB:79:00
            X509v3 Authority Key Identifier:
                keyid:68:68:F6:56:80:53:80:CA:86:E7:91:73:78:9D:66:8D:C4:01:D5:B5

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/aGj2VoBTgMqG55FzeJ1mjcQB1bU.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f3/8f23c1-043c-4956-bfb8-26c9f9932bbc/1/aGj2VoBTgMqG55FzeJ1mjcQB1bU.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/f3/8f23c1-043c-4956-bfb8-26c9f9932bbc/1/aGj2VoBTgMqG55FzeJ1mjcQB1bU.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         6b:30:56:17:aa:42:00:85:67:a0:59:f3:9c:bc:30:ea:06:45:
         a2:3e:90:85:cd:6f:42:51:de:e8:6c:d3:86:4e:d2:ae:bf:91:
         e1:3d:50:4a:4f:95:b5:7f:78:da:63:87:84:71:a8:ff:e8:d1:
         16:ed:e7:68:28:93:38:59:9c:1a:7b:07:fb:c7:a7:d8:16:e1:
         b5:a5:35:55:3d:6a:f9:06:81:20:bc:18:0c:d4:8f:93:6b:82:
         c2:05:95:aa:53:07:c5:4a:f6:dc:4f:92:c7:8f:fa:a1:54:d8:
         bd:a4:76:8f:4d:56:0d:59:fd:95:b5:5f:81:bd:77:02:32:05:
         e3:8a:fa:35:26:77:de:30:2f:11:03:9d:d2:93:b6:f4:5e:7b:
         a2:28:e1:6f:94:3f:03:97:2c:b0:40:99:28:db:26:17:51:c4:
         e6:14:3f:22:81:a8:4d:ae:72:5a:a9:94:c1:84:58:3b:9f:f0:
         43:c2:61:98:df:02:cb:d8:16:3e:6d:4c:68:c8:9f:0d:f0:a2:
         aa:58:ad:37:c2:d9:dc:4e:c3:ae:76:d1:cd:9b:8f:25:9c:a2:
         80:dc:52:10:68:6e:2f:e8:86:35:5a:e4:c9:c8:06:9b:20:89:
         cc:d1:9b:2d:61:dd:39:c9:8e:7f:96:2c:7e:35:10:fa:e8:fc:
         fb:7f:7c:8f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----