Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0c/f295ce-826d-4f54-970f-50f34f435f03/1/2qZ8WLSm_iEvwg-3VpSa3cGppiw.mft
File:                     2qZ8WLSm_iEvwg-3VpSa3cGppiw.mft (raw, json)
Hash identifier:          MosoYKjQ0DwESVib5PRLAx3shSM6ZN85u4QnqN9oe1k=
Subject key identifier:   BA:DC:6A:AB:98:74:4C:C1:DB:2E:1E:71:14:80:9F:BD:FC:86:27:AA
Authority key identifier: DA:A6:7C:58:B4:A6:FE:21:2F:C2:0F:B7:56:94:9A:DD:C1:A9:A6:2C
Certificate issuer:       /CN=daa67c58b4a6fe212fc20fb756949addc1a9a62c
Certificate serial:       01962F7430F59E93D6CC56DED827BF372BA4
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/2qZ8WLSm_iEvwg-3VpSa3cGppiw.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/0c/f295ce-826d-4f54-970f-50f34f435f03/1/2qZ8WLSm_iEvwg-3VpSa3cGppiw.mft
Manifest number:          032C
Signing time:             Sun 13 Apr 2025 14:01:05 +0000
Manifest this update:     Sun 13 Apr 2025 14:01:05 +0000
Manifest next update:     Mon 14 Apr 2025 14:01:05 +0000
Files and hashes:         1: 2qZ8WLSm_iEvwg-3VpSa3cGppiw.crl (hash: uLY1W8oH08GFNzQjeEWce6c9LfXu4Zxu2P1oHccLnCY=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2f:74:30:f5:9e:93:d6:cc:56:de:d8:27:bf:37:2b:a4
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=daa67c58b4a6fe212fc20fb756949addc1a9a62c
        Validity
            Not Before: Apr 13 14:01:05 2025 GMT
            Not After : Apr 14 14:01:05 2025 GMT
        Subject: CN=badc6aab98744cc1db2e1e7114809fbdfc8627aa
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c1:7e:a8:2b:0e:9b:2a:a6:18:42:ac:e4:0b:d7:
                    92:80:76:93:ed:34:cb:ed:9b:50:17:73:2c:0d:50:
                    13:b7:1b:57:0a:6e:67:4e:4c:88:cd:d9:16:ed:ec:
                    af:8b:e2:da:3c:b7:59:e3:2d:2e:6c:9c:5d:63:9a:
                    66:8f:32:4f:da:8b:80:b0:e8:4f:23:c8:d2:cf:79:
                    76:0b:f0:a4:e8:c3:f4:de:33:26:0e:9f:8e:b3:af:
                    d5:55:2a:0a:7e:a4:89:a8:98:16:86:93:b3:e5:4d:
                    cb:81:25:26:09:68:95:b8:44:3d:51:37:d9:d6:f9:
                    a4:18:5e:bf:f9:92:76:5d:44:2c:5f:1e:92:c1:31:
                    e7:71:6e:46:69:f0:84:3b:ff:64:4e:fb:ed:df:fd:
                    a8:78:58:0e:eb:57:97:9a:56:69:e9:84:3a:92:c6:
                    44:1c:45:0d:96:76:bc:1a:ed:3e:0d:3a:2d:f4:2a:
                    1e:3c:3a:bf:44:67:2a:0c:a0:7d:c8:7e:c3:75:f5:
                    e0:83:9d:3f:d3:18:da:18:f8:7e:f2:f9:b5:12:fe:
                    bc:a4:62:57:06:4e:b6:ad:c7:33:09:a3:20:63:ca:
                    cf:3e:9d:c8:4d:9c:f8:f1:62:61:6a:cd:a4:6a:75:
                    d9:24:76:ba:e4:97:e6:b2:78:5b:94:38:a0:62:91:
                    a6:33
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BA:DC:6A:AB:98:74:4C:C1:DB:2E:1E:71:14:80:9F:BD:FC:86:27:AA
            X509v3 Authority Key Identifier:
                keyid:DA:A6:7C:58:B4:A6:FE:21:2F:C2:0F:B7:56:94:9A:DD:C1:A9:A6:2C

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/2qZ8WLSm_iEvwg-3VpSa3cGppiw.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0c/f295ce-826d-4f54-970f-50f34f435f03/1/2qZ8WLSm_iEvwg-3VpSa3cGppiw.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/0c/f295ce-826d-4f54-970f-50f34f435f03/1/2qZ8WLSm_iEvwg-3VpSa3cGppiw.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         4c:02:1f:9a:b9:37:ea:ab:54:28:47:13:ad:f9:26:69:d7:3d:
         d2:76:a6:ae:d6:4f:14:97:7e:0e:2d:15:d3:8f:27:05:9b:64:
         91:f6:63:43:fe:73:86:be:74:5e:50:f8:34:e2:9d:32:52:72:
         e4:3b:cd:96:61:9a:4a:3f:6e:b2:86:ee:30:3d:c7:9a:f2:aa:
         75:83:20:98:5d:65:e4:3a:47:08:b1:cd:b2:a8:2d:fd:29:a3:
         ab:c6:9a:38:24:6d:0b:b1:4c:eb:56:cf:7a:d8:c9:14:ce:31:
         e1:72:b5:d9:0f:f0:39:65:b9:7d:96:fc:0b:56:34:5e:63:33:
         81:e9:d9:58:6d:c3:d4:5b:9f:9b:0a:ef:5d:b5:33:5a:18:5a:
         8b:40:6a:00:02:48:61:42:41:6d:bc:0b:c2:22:b0:4d:bc:f0:
         60:f8:05:04:a7:0c:1b:d8:68:ec:f8:45:ff:73:72:44:cf:2b:
         66:ff:0d:4f:91:d7:bf:22:32:84:2d:f8:e2:93:b9:48:1c:bb:
         af:54:24:4b:a8:81:bd:80:19:41:dd:e0:66:a8:3a:09:58:87:
         65:df:d2:78:98:a4:ce:45:87:c5:20:3a:43:b8:b5:30:44:85:
         7d:23:48:c2:05:ff:9c:e5:cc:7e:72:74:80:1d:5a:8d:0d:9e:
         45:58:85:18
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----