Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/01/870bf0-9166-4f60-a603-707b0a38b1e0/1/l5FbqA0-1wRSRoFIinK-mR-mcNw.mft
File:                     l5FbqA0-1wRSRoFIinK-mR-mcNw.mft (raw, json)
Hash identifier:          CpPk5nBg+eqa4UW9jKA4DodSHksCVqJlO5ceyjdRVr0=
Subject key identifier:   66:40:DA:D0:CB:3A:C8:CF:B0:01:CB:FA:8B:0B:81:D4:60:2E:2F:16
Authority key identifier: 97:91:5B:A8:0D:3E:D7:04:52:46:81:48:8A:72:BE:99:1F:A6:70:DC
Certificate issuer:       /CN=97915ba80d3ed704524681488a72be991fa670dc
Certificate serial:       01962F3D4AD78474B25C82F6F0754F22376B
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/l5FbqA0-1wRSRoFIinK-mR-mcNw.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/01/870bf0-9166-4f60-a603-707b0a38b1e0/1/l5FbqA0-1wRSRoFIinK-mR-mcNw.mft
Manifest number:          03DE
Signing time:             Sun 13 Apr 2025 13:01:08 +0000
Manifest this update:     Sun 13 Apr 2025 13:01:08 +0000
Manifest next update:     Mon 14 Apr 2025 13:01:08 +0000
Files and hashes:         1: l5FbqA0-1wRSRoFIinK-mR-mcNw.crl (hash: BpsG7WvqQ+rENAKAZ07ptxnx7sWeyLQ3fq20hqd6S2Q=)
                          2: qo2vOLLpvqAX5XPyfjQO2wLnHqA.roa (hash: ngupliw7DsEh4VFD2q0dSrJhCE7Y9aSPjgmNKBH+xq4=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2f:3d:4a:d7:84:74:b2:5c:82:f6:f0:75:4f:22:37:6b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=97915ba80d3ed704524681488a72be991fa670dc
        Validity
            Not Before: Apr 13 13:01:08 2025 GMT
            Not After : Apr 14 13:01:08 2025 GMT
        Subject: CN=6640dad0cb3ac8cfb001cbfa8b0b81d4602e2f16
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a9:8b:58:92:27:0c:25:e4:8c:bc:0b:64:b5:68:
                    04:9b:39:3d:5a:7b:44:e1:98:fb:32:6f:1b:1b:52:
                    11:12:b0:40:e2:39:3d:ef:08:dc:57:fe:40:84:2c:
                    34:de:80:af:8b:77:80:87:dc:47:fa:e2:aa:44:21:
                    98:df:88:1a:84:ac:c0:70:6f:e6:a6:71:f0:8e:d7:
                    cb:22:48:d6:76:84:7a:96:db:53:c3:e4:61:8a:c9:
                    9c:a0:63:2c:13:4b:fc:35:c4:04:73:64:23:93:25:
                    b9:4a:01:b4:8f:ac:48:81:11:6f:5a:f8:1d:9d:c3:
                    f6:9f:99:51:14:c5:90:0c:ee:5b:ac:db:af:c3:62:
                    64:03:29:02:96:50:59:a3:c0:0d:42:2f:82:7c:46:
                    b9:45:1f:cc:11:13:6a:31:34:41:f0:d5:9a:e7:02:
                    8c:cd:46:eb:8f:db:fe:44:f2:53:61:14:7f:8d:a9:
                    e4:c7:20:03:e4:5a:bd:fd:9c:11:7d:03:5b:86:5d:
                    15:22:0b:e8:12:0a:1e:15:9b:bc:66:23:8f:ec:6c:
                    77:44:ea:ee:8b:77:0e:c2:85:fe:b5:00:fb:94:13:
                    94:6c:1c:88:5f:80:a7:b0:05:ac:5d:6a:1d:7e:84:
                    e9:a1:69:73:88:c4:86:d9:3c:b8:98:ee:2c:82:24:
                    70:0f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                66:40:DA:D0:CB:3A:C8:CF:B0:01:CB:FA:8B:0B:81:D4:60:2E:2F:16
            X509v3 Authority Key Identifier:
                keyid:97:91:5B:A8:0D:3E:D7:04:52:46:81:48:8A:72:BE:99:1F:A6:70:DC

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/l5FbqA0-1wRSRoFIinK-mR-mcNw.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/01/870bf0-9166-4f60-a603-707b0a38b1e0/1/l5FbqA0-1wRSRoFIinK-mR-mcNw.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/01/870bf0-9166-4f60-a603-707b0a38b1e0/1/l5FbqA0-1wRSRoFIinK-mR-mcNw.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         47:6a:e4:74:a6:e0:39:87:5f:05:bf:b7:41:12:69:c1:15:71:
         ad:39:3c:5a:62:fd:77:15:65:6a:73:45:3b:a7:df:98:f5:b3:
         73:eb:e7:5d:f8:45:41:0c:90:2f:8b:d1:3c:8d:f8:fa:9b:0a:
         cc:cb:d1:7d:d1:b1:65:79:bc:c2:4c:f6:39:d3:1c:21:98:be:
         98:38:46:d0:26:3a:b8:07:a6:a2:99:da:75:0f:a1:3a:6d:1e:
         0a:18:52:a8:ae:43:05:3c:47:50:e2:22:c0:96:8d:f2:d9:95:
         91:95:64:9c:22:c7:a8:7d:06:3a:c6:56:3e:e5:63:be:2d:08:
         10:bf:9e:a3:0c:ec:90:83:85:e7:99:fc:01:46:5c:31:86:2b:
         db:ca:23:b5:7f:02:9e:64:65:3e:07:a5:c6:3b:c9:be:61:28:
         ee:58:01:4d:72:04:f1:c2:9f:fc:ab:7b:e7:15:0b:ff:63:05:
         0c:0b:53:20:04:71:dd:70:d6:20:5c:3e:37:d6:5b:11:e7:24:
         0f:3d:05:ff:c7:87:2f:bd:fe:64:7d:37:2f:9d:56:95:21:ef:
         ea:5e:39:0a:ec:e2:5e:d5:09:c4:45:02:e4:52:fd:1c:a1:19:
         cb:b8:ec:6e:bb:76:dc:c2:20:84:75:0e:21:c8:18:cf:42:5f:
         42:21:06:f3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----