Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f9/391e54-c21a-405a-88aa-6079789100ca/1/o6qN0Rh2au07Ce1p8uR9wdLBYVk.mft
File:                     o6qN0Rh2au07Ce1p8uR9wdLBYVk.mft (raw, json)
Hash identifier:          HXRfyriJyiW0himAKWQ7KTLzhX2tbmesAyXeT8w2G4Q=
Subject key identifier:   8A:AE:96:41:96:C2:C1:56:7A:FA:9D:0A:52:34:BD:7A:43:5B:C2:B5
Authority key identifier: A3:AA:8D:D1:18:76:6A:ED:3B:09:ED:69:F2:E4:7D:C1:D2:C1:61:59
Certificate issuer:       /CN=a3aa8dd118766aed3b09ed69f2e47dc1d2c16159
Certificate serial:       01962F067CF473EBDA634BEE09D9A366A5E0
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/o6qN0Rh2au07Ce1p8uR9wdLBYVk.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/f9/391e54-c21a-405a-88aa-6079789100ca/1/o6qN0Rh2au07Ce1p8uR9wdLBYVk.mft
Manifest number:          14EA
Signing time:             Sun 13 Apr 2025 12:01:16 +0000
Manifest this update:     Sun 13 Apr 2025 12:01:16 +0000
Manifest next update:     Mon 14 Apr 2025 12:01:16 +0000
Files and hashes:         1: HwLcn2tbXfaewoRLUqvEJHtXkUs.roa (hash: W1uC8oFLMGagyUd1+ow2TTRqqrP/F081zqAOESqRLNw=)
                          2: Mx-fCqDASlNjjbccZ-B5nKyFs1w.roa (hash: 1mo/7uKD2fUUwhxoh/B2HIiYyRaaQnMnmEkbBF+A3yk=)
                          3: o6qN0Rh2au07Ce1p8uR9wdLBYVk.crl (hash: PL+N6bCKD5nZz431cdvlMjCYyPXZIb0thGsV18DetyU=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2f:06:7c:f4:73:eb:da:63:4b:ee:09:d9:a3:66:a5:e0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=a3aa8dd118766aed3b09ed69f2e47dc1d2c16159
        Validity
            Not Before: Apr 13 12:01:16 2025 GMT
            Not After : Apr 14 12:01:16 2025 GMT
        Subject: CN=8aae964196c2c1567afa9d0a5234bd7a435bc2b5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cd:cd:25:dc:8d:c2:11:85:63:82:ca:ac:f8:ea:
                    78:d5:46:b3:a8:fa:04:81:7c:9d:f7:07:47:9e:0f:
                    a9:a9:e7:d6:57:3a:d3:50:f4:ab:67:a1:40:e3:04:
                    ed:37:cf:86:4d:cf:5a:95:25:5f:cc:94:69:cc:58:
                    46:41:d3:e1:9a:e1:de:3a:f2:03:93:36:93:98:69:
                    0d:73:f8:f4:04:75:73:95:6b:ac:92:53:6d:99:2f:
                    97:45:f1:40:71:9e:d2:f3:cf:3f:47:07:1d:92:05:
                    74:f0:f4:1a:a3:5e:59:ac:36:2b:d6:bc:68:d6:82:
                    e8:e1:2f:25:60:42:89:01:ba:95:4e:36:12:b2:a7:
                    5c:f2:bd:f0:d1:de:98:d4:af:a4:df:cc:c9:fa:e6:
                    6d:39:db:9f:76:ef:4b:9a:47:cd:8f:3f:52:ea:cc:
                    7f:7f:d9:ea:9c:01:80:16:83:38:b6:0a:bb:a0:01:
                    07:a8:d3:bb:39:18:fc:70:b6:6d:08:8d:63:ae:f5:
                    de:08:aa:dd:e2:5c:58:2b:aa:a0:4b:ad:af:e6:50:
                    6d:b6:cf:aa:4a:d9:5d:5e:ac:9c:9a:64:15:47:5f:
                    6e:51:27:59:36:81:c1:99:03:8c:98:30:fa:44:b9:
                    76:a6:3c:af:22:83:56:15:fc:8d:07:99:18:c9:bb:
                    fe:27
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8A:AE:96:41:96:C2:C1:56:7A:FA:9D:0A:52:34:BD:7A:43:5B:C2:B5
            X509v3 Authority Key Identifier:
                keyid:A3:AA:8D:D1:18:76:6A:ED:3B:09:ED:69:F2:E4:7D:C1:D2:C1:61:59

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/o6qN0Rh2au07Ce1p8uR9wdLBYVk.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f9/391e54-c21a-405a-88aa-6079789100ca/1/o6qN0Rh2au07Ce1p8uR9wdLBYVk.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/f9/391e54-c21a-405a-88aa-6079789100ca/1/o6qN0Rh2au07Ce1p8uR9wdLBYVk.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         32:b4:ba:91:2a:22:a3:83:26:b9:e3:83:79:82:3a:75:d4:b2:
         82:2c:7a:fc:e7:df:5c:f2:17:1f:3e:3d:a2:6a:4e:89:3d:32:
         13:6f:fa:d5:77:48:a1:c5:8a:17:4f:d3:e0:37:e6:d5:8b:be:
         a5:28:2d:01:6e:ac:7a:85:39:fb:dd:fd:33:27:3a:82:55:9f:
         3a:3e:60:57:11:1a:ab:09:f4:a9:0c:3c:3d:1c:d8:56:06:1c:
         7c:54:50:44:02:5b:11:0a:b0:04:da:7e:df:97:2b:dd:9d:1e:
         b7:fb:c8:4d:08:8e:8e:21:32:5e:16:98:ec:59:d2:f6:e7:20:
         3e:c3:52:44:72:ff:cb:88:f5:57:7d:60:6e:f1:a9:7a:1d:04:
         23:3a:03:7d:30:43:0b:d5:b9:1a:7f:b6:6e:0c:9a:41:2f:51:
         1b:cc:65:86:a5:30:5f:f8:8c:02:65:8f:62:52:7c:5e:88:d2:
         aa:d2:f0:29:52:0a:7d:23:b3:6a:d2:5f:76:d5:a2:f8:bb:94:
         d7:f8:36:fc:85:31:85:1b:90:de:25:f6:86:4d:d9:79:6e:dc:
         eb:c4:1e:17:15:46:2d:a1:3c:80:6b:80:93:40:ab:db:e9:9a:
         b7:55:b4:79:63:73:d2:ac:18:1b:49:6c:7b:b3:ff:8f:92:72:
         dd:08:63:50
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----