Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/12/d9d9b6-c3be-4c5d-adea-4bc84c79fc58/1/2U8jjFx065p1pG4rxnQR6Nwi2YI.mft
File:                     2U8jjFx065p1pG4rxnQR6Nwi2YI.mft (raw, json)
Hash identifier:          hkwmJWUrKFyVr+4ZLxFOt7prS9xDzmf7//1kn8ARpqo=
Subject key identifier:   DF:30:60:63:AB:EB:EF:68:B6:77:13:80:17:80:60:77:CA:2A:2F:2A
Authority key identifier: D9:4F:23:8C:5C:74:EB:9A:75:A4:6E:2B:C6:74:11:E8:DC:22:D9:82
Certificate issuer:       /CN=d94f238c5c74eb9a75a46e2bc67411e8dc22d982
Certificate serial:       01962E2B12AF850C770EE4ED1B649EBDFBD5
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/2U8jjFx065p1pG4rxnQR6Nwi2YI.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/12/d9d9b6-c3be-4c5d-adea-4bc84c79fc58/1/2U8jjFx065p1pG4rxnQR6Nwi2YI.mft
Manifest number:          14ED
Signing time:             Sun 13 Apr 2025 08:01:36 +0000
Manifest this update:     Sun 13 Apr 2025 08:01:36 +0000
Manifest next update:     Mon 14 Apr 2025 08:01:36 +0000
Files and hashes:         1: 2U8jjFx065p1pG4rxnQR6Nwi2YI.crl (hash: zaysybFkO516B5AIFWQTzJr7PDZ02EEuwyCtWQUbeTU=)
                          2: RwRIIbsLE86bb0oQhRUjsIS4XoM.roa (hash: jROP5D4hIhexItED7utuAARdvaeH9hA5+gFDvAsHFLo=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2e:2b:12:af:85:0c:77:0e:e4:ed:1b:64:9e:bd:fb:d5
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d94f238c5c74eb9a75a46e2bc67411e8dc22d982
        Validity
            Not Before: Apr 13 08:01:36 2025 GMT
            Not After : Apr 14 08:01:36 2025 GMT
        Subject: CN=df306063abebef68b677138017806077ca2a2f2a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9f:ab:f2:10:a0:63:18:2e:1b:58:62:86:1b:d0:
                    9f:85:70:59:91:41:95:52:b6:de:79:78:e4:d6:f4:
                    3a:bd:ce:44:82:20:f4:15:9e:8b:a6:f3:4e:6b:f4:
                    f0:49:c7:74:a0:04:bf:6c:7d:0d:45:68:9e:46:ec:
                    e8:6e:1f:0f:ef:16:64:e8:97:85:0b:28:1d:a0:8a:
                    9e:02:ac:fd:94:ff:c2:19:62:ae:58:a6:14:ff:d3:
                    8e:ad:02:b1:ed:69:d3:a2:b4:c3:22:d2:68:0c:02:
                    d6:07:ee:f6:2e:2d:94:bf:c5:61:e1:35:eb:07:e1:
                    03:31:23:4d:63:24:a6:f9:9f:f4:a5:cc:2e:5f:24:
                    af:73:5a:9f:f7:65:51:aa:da:6d:45:f1:f4:ac:56:
                    f2:10:ae:12:ee:1e:f7:a1:2f:30:89:38:a8:91:a4:
                    a2:d4:63:5d:c4:b1:ff:af:36:40:5d:61:5e:bd:b6:
                    cf:11:b5:3f:44:6e:da:07:89:18:e9:f9:2b:f8:b9:
                    35:7b:75:4c:52:52:cb:2d:db:22:c2:cd:48:16:dd:
                    84:3a:ef:f3:63:e3:32:2a:ee:34:e8:b0:dc:fd:f1:
                    ff:cf:3d:1b:5d:97:0a:89:18:89:1a:71:73:4c:af:
                    34:34:4f:5d:49:8b:a6:c2:eb:c0:57:64:a6:ed:b7:
                    74:b7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DF:30:60:63:AB:EB:EF:68:B6:77:13:80:17:80:60:77:CA:2A:2F:2A
            X509v3 Authority Key Identifier:
                keyid:D9:4F:23:8C:5C:74:EB:9A:75:A4:6E:2B:C6:74:11:E8:DC:22:D9:82

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/2U8jjFx065p1pG4rxnQR6Nwi2YI.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/12/d9d9b6-c3be-4c5d-adea-4bc84c79fc58/1/2U8jjFx065p1pG4rxnQR6Nwi2YI.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/12/d9d9b6-c3be-4c5d-adea-4bc84c79fc58/1/2U8jjFx065p1pG4rxnQR6Nwi2YI.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         42:5f:ad:41:c4:1d:bf:44:92:93:5b:89:d3:2f:d5:0a:98:0b:
         ba:21:ba:1e:00:f6:35:f7:03:fd:c1:ef:7d:fd:71:6b:3f:ed:
         a6:9f:f0:05:3a:94:74:8e:d0:65:50:3d:c6:44:74:c7:6e:2c:
         f1:70:66:4a:ef:0d:a2:fe:ec:be:68:f4:f6:78:29:fb:9a:14:
         33:9a:31:a5:1c:b8:ba:71:55:fc:50:34:0d:07:d8:c7:71:17:
         69:c8:a3:9c:40:f3:53:d6:34:63:09:7a:4b:88:97:30:5a:77:
         c7:4a:ad:9d:2e:60:9e:82:e8:20:52:f1:54:a9:b2:38:81:39:
         78:58:88:eb:1b:f3:43:5f:26:17:86:e3:85:e7:30:79:5d:14:
         08:63:61:b7:4e:5d:3c:7a:ec:13:ea:bb:b2:96:42:92:1d:15:
         b7:ce:dc:e7:f3:aa:c2:37:64:62:eb:29:dc:1c:ca:1f:6d:e3:
         5b:11:93:77:26:ad:1d:f0:17:d3:4a:b0:83:19:a5:19:32:89:
         c6:60:0e:3f:46:7a:54:fe:a7:3c:4e:a2:ac:6a:24:1d:6f:69:
         29:b5:74:07:8e:21:f5:d2:85:4e:b9:71:e7:c4:96:75:4e:df:
         05:11:2e:b8:c1:3b:8d:c7:0a:78:41:1c:aa:87:a6:be:4f:03:
         34:91:6c:34
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----