Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f4/870383-df9a-479c-8ee1-36dc2800fded/1/axoVfiCtyjtEBnuo2NyrrmmKi-w.mft
File:                     axoVfiCtyjtEBnuo2NyrrmmKi-w.mft (raw, json)
Hash identifier:          iz29OewhOX7CSTGQQ9WePyYTxw+IOC6FVmUsnjbfEQI=
Subject key identifier:   2C:36:9C:A9:46:82:7B:C1:65:D0:FB:4A:C8:86:00:63:3F:93:09:68
Authority key identifier: 6B:1A:15:7E:20:AD:CA:3B:44:06:7B:A8:D8:DC:AB:AE:69:8A:8B:EC
Certificate issuer:       /CN=6b1a157e20adca3b44067ba8d8dcabae698a8bec
Certificate serial:       01962F74E958897FDBDE417F7A7B7DC8B501
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/axoVfiCtyjtEBnuo2NyrrmmKi-w.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/f4/870383-df9a-479c-8ee1-36dc2800fded/1/axoVfiCtyjtEBnuo2NyrrmmKi-w.mft
Manifest number:          0DEB
Signing time:             Sun 13 Apr 2025 14:01:53 +0000
Manifest this update:     Sun 13 Apr 2025 14:01:53 +0000
Manifest next update:     Mon 14 Apr 2025 14:01:53 +0000
Files and hashes:         1: HHW8_KabBwkh6LVEy__S-IfCKeo.roa (hash: 2dAL27yrvI2QASpUeAQxXgqjR0VeSsCg1NoOB6ydbps=)
                          2: axoVfiCtyjtEBnuo2NyrrmmKi-w.crl (hash: z7Oh8/zxu6VqYGNcf5DkV7btHJ1Z7ZYRFAxzO16czU4=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2f:74:e9:58:89:7f:db:de:41:7f:7a:7b:7d:c8:b5:01
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6b1a157e20adca3b44067ba8d8dcabae698a8bec
        Validity
            Not Before: Apr 13 14:01:53 2025 GMT
            Not After : Apr 14 14:01:53 2025 GMT
        Subject: CN=2c369ca946827bc165d0fb4ac88600633f930968
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:95:c2:4d:10:4a:ad:a8:dc:51:cd:2d:64:ed:8d:
                    2d:af:93:b2:17:f9:23:2c:9f:cb:c7:38:ee:09:e1:
                    e7:cc:03:d6:95:65:86:c2:8c:e6:de:86:75:b6:ed:
                    47:26:8c:bd:6f:2c:b0:5f:81:ce:01:8a:0e:5b:3a:
                    50:94:0b:ae:f4:72:15:64:c4:b8:95:ff:fa:48:3a:
                    6e:8f:88:b1:e1:58:af:98:39:d3:48:5c:50:9d:ce:
                    90:e1:12:56:f7:00:61:7a:35:5a:d5:ce:f8:4a:e5:
                    4a:1e:d3:ab:03:c8:82:a4:70:fd:cd:06:e9:f2:ce:
                    1a:ad:14:a8:b9:87:c6:be:5c:12:6b:61:fc:21:96:
                    1d:86:ef:2d:7d:bb:9f:da:15:00:74:5c:b6:41:94:
                    5c:d5:6a:17:8f:e2:4f:ce:63:62:c4:5d:2c:70:e9:
                    a3:ec:ae:8d:66:89:d8:b7:3f:04:4a:09:4b:e5:d1:
                    53:e0:f4:82:3a:ef:a6:d5:e4:ea:26:5c:0d:3b:73:
                    e2:d3:79:3e:76:a3:8c:42:db:5c:ad:7f:41:85:9a:
                    c7:d5:de:ef:64:2d:8a:c6:b4:4f:af:29:42:76:5c:
                    c6:fd:56:ff:c1:b2:37:db:8f:9f:c9:82:66:e1:8d:
                    77:f6:4a:4b:62:5d:90:2f:0c:e6:62:25:be:69:fe:
                    24:d3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2C:36:9C:A9:46:82:7B:C1:65:D0:FB:4A:C8:86:00:63:3F:93:09:68
            X509v3 Authority Key Identifier:
                keyid:6B:1A:15:7E:20:AD:CA:3B:44:06:7B:A8:D8:DC:AB:AE:69:8A:8B:EC

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/axoVfiCtyjtEBnuo2NyrrmmKi-w.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f4/870383-df9a-479c-8ee1-36dc2800fded/1/axoVfiCtyjtEBnuo2NyrrmmKi-w.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/f4/870383-df9a-479c-8ee1-36dc2800fded/1/axoVfiCtyjtEBnuo2NyrrmmKi-w.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         31:73:06:0a:d1:39:58:fd:2a:92:0e:4a:19:da:e7:0a:9e:c5:
         f2:c4:70:75:2f:f1:26:99:9f:a0:25:59:75:39:98:fa:49:cc:
         d8:51:ec:c7:6b:b5:86:f6:6b:1c:74:f1:7c:65:e3:07:5b:13:
         01:18:42:94:17:11:71:d2:2b:32:b6:04:8b:a0:f3:3a:b4:e1:
         84:43:0d:86:85:41:73:b0:82:b5:a3:7b:28:52:c2:0d:39:24:
         22:68:99:9d:6a:92:ae:19:96:8c:b4:ac:ea:41:e4:04:46:80:
         08:2c:a7:9d:eb:fa:0c:7a:73:30:c2:d8:be:de:5b:d8:8a:e8:
         d6:10:ff:1c:bc:bd:24:a7:02:e0:dd:73:24:6e:0c:60:5c:bc:
         ed:25:3d:c8:2b:08:32:b8:3b:9c:82:50:6c:76:01:72:3f:21:
         ae:7b:af:67:2d:4e:bd:f9:61:65:c6:2e:6a:2b:62:58:71:db:
         74:0c:4e:37:71:bc:3f:52:c3:1c:1e:96:77:bb:7a:21:72:8a:
         86:68:95:2e:b9:cd:1d:c3:ec:3e:61:99:79:32:17:59:8a:2b:
         b3:0f:0f:73:71:e7:34:94:6c:ec:4d:8c:68:8d:da:c2:4c:4e:
         c4:69:ae:b2:92:33:95:58:91:4b:7b:9d:38:be:6c:1d:e8:72:
         32:79:b4:b8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----