Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/13/938430-07b4-45b3-9496-f53ee32ed816/1/2KqsBZlqW0YUxu7a_-f49fmivGc.mft
File:                     2KqsBZlqW0YUxu7a_-f49fmivGc.mft (raw, json)
Hash identifier:          hBC2jFZIYcPL5z/jvT46FFY0nRD8TNDLU+KRZyKDbO8=
Subject key identifier:   86:5C:EB:BF:B1:B8:C1:6B:C0:8C:5F:2F:94:BB:8D:01:9A:7A:CA:4C
Authority key identifier: D8:AA:AC:05:99:6A:5B:46:14:C6:EE:DA:FF:E7:F8:F5:F9:A2:BC:67
Certificate issuer:       /CN=d8aaac05996a5b4614c6eedaffe7f8f5f9a2bc67
Certificate serial:       01962DF39670A886B757EC5D8483BBBE2DF4
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/2KqsBZlqW0YUxu7a_-f49fmivGc.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/13/938430-07b4-45b3-9496-f53ee32ed816/1/2KqsBZlqW0YUxu7a_-f49fmivGc.mft
Manifest number:          14ED
Signing time:             Sun 13 Apr 2025 07:01:00 +0000
Manifest this update:     Sun 13 Apr 2025 07:01:00 +0000
Manifest next update:     Mon 14 Apr 2025 07:01:00 +0000
Files and hashes:         1: 2KqsBZlqW0YUxu7a_-f49fmivGc.crl (hash: E38IdkAup8PpjLHngzo9xU2d7yclbVfT7FbpOAgqffY=)
                          2: W9bI_JNQHDDt7Tw4mN0K9_OAUEo.roa (hash: H3aapZtXnHfhVIDiayaGFZvNcV7JScFiYfbfDkzVZMc=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2d:f3:96:70:a8:86:b7:57:ec:5d:84:83:bb:be:2d:f4
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d8aaac05996a5b4614c6eedaffe7f8f5f9a2bc67
        Validity
            Not Before: Apr 13 07:01:00 2025 GMT
            Not After : Apr 14 07:01:00 2025 GMT
        Subject: CN=865cebbfb1b8c16bc08c5f2f94bb8d019a7aca4c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c7:07:95:50:21:2b:7d:e8:98:58:9b:03:99:5b:
                    70:78:e9:d8:0f:d0:da:60:75:9c:b2:a3:bf:4e:56:
                    d3:3e:42:75:2e:e2:59:47:62:be:77:c2:66:87:37:
                    3c:ff:46:46:33:fb:b5:1f:9a:74:c7:6e:ae:a7:2b:
                    93:3a:78:8d:f4:59:d9:8f:fc:84:19:72:b4:ab:1f:
                    15:83:66:79:fb:8b:bb:c9:bc:69:3d:2a:24:b8:ab:
                    ec:bd:9c:49:09:40:1f:1d:83:36:cf:db:1f:48:e8:
                    23:af:8b:44:f3:29:33:53:0f:7a:43:e3:9d:af:01:
                    1d:4a:16:63:b4:4e:09:5b:0b:9b:21:9b:ab:30:26:
                    39:8f:1e:eb:56:96:c3:1f:48:7a:82:fd:d3:b3:7e:
                    d5:6d:bc:2a:cc:51:27:a1:be:e7:cd:8d:d3:e9:6a:
                    15:ef:e7:da:1d:5d:e6:13:5a:a3:08:15:21:ee:f8:
                    de:7d:d1:18:f7:44:2b:39:64:9f:ec:5c:2a:e5:7c:
                    fc:72:e0:1c:da:aa:31:68:a1:da:8d:5f:66:11:3b:
                    11:a8:21:4e:6a:92:b0:ba:51:3c:0a:e0:bf:d7:11:
                    9c:85:f0:45:6e:36:1f:4b:97:a4:85:1a:e3:d5:42:
                    e9:e3:aa:a4:14:0d:42:87:c8:83:5b:df:5e:9f:8c:
                    5d:b3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                86:5C:EB:BF:B1:B8:C1:6B:C0:8C:5F:2F:94:BB:8D:01:9A:7A:CA:4C
            X509v3 Authority Key Identifier:
                keyid:D8:AA:AC:05:99:6A:5B:46:14:C6:EE:DA:FF:E7:F8:F5:F9:A2:BC:67

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/2KqsBZlqW0YUxu7a_-f49fmivGc.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/13/938430-07b4-45b3-9496-f53ee32ed816/1/2KqsBZlqW0YUxu7a_-f49fmivGc.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/13/938430-07b4-45b3-9496-f53ee32ed816/1/2KqsBZlqW0YUxu7a_-f49fmivGc.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         8c:f7:53:52:7d:9a:9e:4f:5e:c9:2e:fb:7b:52:48:a6:58:14:
         6c:2f:5e:fc:7c:dc:07:d8:a9:9a:dd:2a:46:98:80:33:6a:a1:
         39:30:af:1f:03:f1:1e:f7:57:4b:bd:0b:96:0d:c2:c2:82:d4:
         65:c4:10:70:15:33:6a:87:28:14:b1:30:b9:b1:9a:38:21:fc:
         bc:65:41:6f:5c:38:ca:a6:4f:d1:1b:b5:f5:cf:36:4a:76:1f:
         5b:46:da:69:57:a7:3e:5a:de:a1:22:2b:80:ef:8b:23:91:bb:
         08:fa:2d:94:e8:0d:0a:71:be:83:91:fe:35:19:d1:ea:2b:2c:
         04:44:c7:77:70:9d:16:35:87:e9:7e:bc:de:f8:d6:92:a5:c0:
         51:f3:a0:29:c1:30:5e:b8:1e:c8:89:90:b1:46:84:53:e5:65:
         39:44:2c:d5:b3:7d:1b:10:49:f3:d5:bb:24:4c:d9:c8:f1:81:
         b0:76:8e:1a:6d:d8:a4:9b:d6:1c:19:13:1e:ce:69:59:d3:3a:
         41:03:d1:0f:8b:28:1b:87:2f:32:19:17:cb:0d:6e:ff:24:ab:
         2d:0d:e8:23:c0:38:42:0f:99:f6:b3:2c:36:ea:99:66:34:7a:
         8e:b4:cd:47:ff:43:84:b8:1b:4b:7b:05:e3:94:69:b6:b6:25:
         dd:18:85:3b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----