Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/07/49d859-610a-4242-8ddf-37a0e474ab15/1/2f-eF7m0GYipJZnLyroDkf-2GiA.mft
File:                     2f-eF7m0GYipJZnLyroDkf-2GiA.mft (raw, json)
Hash identifier:          8tDPUe4X4aseQBs1wlbsRqjZ76LBDEWDJv/LOaQY2Gk=
Subject key identifier:   B5:41:54:A3:01:D6:3D:A7:48:BB:7D:6C:94:21:DB:9A:5B:6B:63:7F
Authority key identifier: D9:FF:9E:17:B9:B4:19:88:A9:25:99:CB:CA:BA:03:91:FF:B6:1A:20
Certificate issuer:       /CN=d9ff9e17b9b41988a92599cbcaba0391ffb61a20
Certificate serial:       01962DF43E68A520B0221A45EB7C42F06A0A
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/2f-eF7m0GYipJZnLyroDkf-2GiA.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/07/49d859-610a-4242-8ddf-37a0e474ab15/1/2f-eF7m0GYipJZnLyroDkf-2GiA.mft
Manifest number:          0991
Signing time:             Sun 13 Apr 2025 07:01:43 +0000
Manifest this update:     Sun 13 Apr 2025 07:01:43 +0000
Manifest next update:     Mon 14 Apr 2025 07:01:43 +0000
Files and hashes:         1: 2f-eF7m0GYipJZnLyroDkf-2GiA.crl (hash: IdsLqMhqC/AbIbGptDFAFbTNzR2YVUxuecQ0xPL7x8Q=)
                          2: UT5aV3lJ6FgDL5XHeTyJuVG6mSE.roa (hash: Cu2FnCFHqCtovjMBqgSsihXDirx6FiS+aJUImKLcRT8=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2d:f4:3e:68:a5:20:b0:22:1a:45:eb:7c:42:f0:6a:0a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d9ff9e17b9b41988a92599cbcaba0391ffb61a20
        Validity
            Not Before: Apr 13 07:01:43 2025 GMT
            Not After : Apr 14 07:01:43 2025 GMT
        Subject: CN=b54154a301d63da748bb7d6c9421db9a5b6b637f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cf:fc:c8:d9:2b:4f:e1:57:1b:2b:7b:eb:9b:1a:
                    28:bf:58:29:ec:0a:2b:3d:6d:f6:b4:cc:38:e1:17:
                    67:25:44:cf:c8:e2:59:05:9d:5c:8c:fc:79:18:2f:
                    b0:2b:a5:4d:e3:b8:f3:65:00:bf:59:ae:2a:2e:01:
                    9d:10:50:3f:f0:ed:89:96:de:48:da:a9:4f:9c:21:
                    0f:16:e6:d0:03:f7:28:2d:52:7d:09:82:14:00:4b:
                    7f:9c:3f:93:65:1a:45:d6:68:b4:eb:e2:e5:8b:d1:
                    a3:15:9e:b7:7b:38:d3:c0:f1:fc:d2:e8:e1:45:be:
                    cc:32:27:06:34:10:58:c3:19:69:83:1f:cb:2b:3a:
                    a8:1d:92:af:33:cb:5b:af:c0:2d:db:88:0e:e1:28:
                    48:13:72:5a:87:98:a6:53:48:4c:a2:21:bf:7a:b7:
                    fb:37:44:72:9a:01:a5:2a:ad:b2:65:b3:eb:39:08:
                    fb:db:43:6d:f7:e2:65:59:56:19:e7:5b:7f:9a:cf:
                    1d:09:fc:e9:20:17:2b:7c:bd:91:97:a3:81:77:97:
                    52:91:88:8a:b2:40:fe:d6:4e:08:7d:e9:90:a0:3a:
                    cf:a4:6b:82:a3:5a:70:28:d1:f2:f0:75:c4:d3:75:
                    bc:c3:5a:6d:69:9a:50:57:11:aa:a1:68:72:07:d7:
                    11:51
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B5:41:54:A3:01:D6:3D:A7:48:BB:7D:6C:94:21:DB:9A:5B:6B:63:7F
            X509v3 Authority Key Identifier:
                keyid:D9:FF:9E:17:B9:B4:19:88:A9:25:99:CB:CA:BA:03:91:FF:B6:1A:20

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/2f-eF7m0GYipJZnLyroDkf-2GiA.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/07/49d859-610a-4242-8ddf-37a0e474ab15/1/2f-eF7m0GYipJZnLyroDkf-2GiA.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/07/49d859-610a-4242-8ddf-37a0e474ab15/1/2f-eF7m0GYipJZnLyroDkf-2GiA.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         7a:86:ce:26:f8:72:ed:ea:62:d7:43:91:7b:19:55:8f:bf:f7:
         b6:b0:d3:71:37:fc:53:af:37:91:1f:97:ac:4b:58:ff:31:30:
         03:8a:15:2d:e6:b8:e2:3a:c3:e5:86:81:17:4f:c3:9c:df:14:
         ec:44:69:cd:fe:ab:36:21:ef:b7:e6:8d:31:6f:15:d9:e0:62:
         21:11:38:27:f4:e2:63:ec:95:7e:6b:95:64:00:d1:3d:cb:bd:
         66:d6:fd:95:68:3f:8b:44:13:c6:a0:72:4b:04:9c:5f:68:ae:
         0d:d7:af:ae:f8:a8:07:81:c0:c2:ce:d4:78:9c:ac:48:87:ec:
         1a:92:d2:40:e5:5a:2e:3f:c6:64:7c:af:8d:bd:29:fe:41:66:
         d3:3a:70:7b:31:8e:b1:b2:8f:de:cb:ea:af:9c:fb:c1:f6:58:
         e6:fa:f2:de:e4:20:7d:9f:e6:05:24:b9:dd:42:d0:6a:90:f2:
         e3:f8:e2:2b:01:e8:2b:60:b3:7d:ea:bb:13:82:b9:f3:41:4d:
         c7:d6:02:a5:d9:f8:b1:69:3c:d7:88:41:ed:eb:fb:18:4e:59:
         7e:56:21:44:eb:28:2a:43:93:ff:ea:46:40:a7:9e:d0:c3:f2:
         aa:2e:54:a6:4a:2a:70:d1:f3:af:63:79:96:b5:84:96:5e:74:
         e7:dc:43:d3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----