Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1c/a98e4a-45aa-408c-b807-bfcf9a922a8b/1/_Sr5BgwfQsYo_PuPB4HXpbwh_AI.mft
File:                     _Sr5BgwfQsYo_PuPB4HXpbwh_AI.mft (raw, json)
Hash identifier:          Gz+BM27iTVtwoHj4EEdTbjvn23I2U4/e68li5QQufhQ=
Subject key identifier:   C2:38:F5:EF:49:FE:2C:03:F2:B0:33:79:11:DD:E0:83:59:CF:4C:17
Authority key identifier: FD:2A:F9:06:0C:1F:42:C6:28:FC:FB:8F:07:81:D7:A5:BC:21:FC:02
Certificate issuer:       /CN=fd2af9060c1f42c628fcfb8f0781d7a5bc21fc02
Certificate serial:       01962F06E4AA26CE37D84B63BED319F1C0A2
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/_Sr5BgwfQsYo_PuPB4HXpbwh_AI.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/1c/a98e4a-45aa-408c-b807-bfcf9a922a8b/1/_Sr5BgwfQsYo_PuPB4HXpbwh_AI.mft
Manifest number:          14EB
Signing time:             Sun 13 Apr 2025 12:01:42 +0000
Manifest this update:     Sun 13 Apr 2025 12:01:42 +0000
Manifest next update:     Mon 14 Apr 2025 12:01:42 +0000
Files and hashes:         1: 0LP5ahEEWvnMaK30aMTVzU6uXkA.roa (hash: lB/VdYravFr8twO2oC/vGE6G8jo6civSr7gweO3k+0U=)
                          2: _Sr5BgwfQsYo_PuPB4HXpbwh_AI.crl (hash: Tkb007tk2zMrpAuIfQ7lm2T1Fmg+muUrijktOIh7Tiw=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2f:06:e4:aa:26:ce:37:d8:4b:63:be:d3:19:f1:c0:a2
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=fd2af9060c1f42c628fcfb8f0781d7a5bc21fc02
        Validity
            Not Before: Apr 13 12:01:42 2025 GMT
            Not After : Apr 14 12:01:42 2025 GMT
        Subject: CN=c238f5ef49fe2c03f2b0337911dde08359cf4c17
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:da:b3:5a:b1:95:70:c5:29:e1:44:8f:55:5d:e3:
                    f6:a5:ea:fa:d5:e2:e8:3f:0c:37:be:d8:00:5a:2d:
                    45:b2:4f:c6:a0:29:b1:d9:f4:0a:d2:49:89:79:29:
                    b6:39:3a:5c:a2:d0:3e:33:f6:31:20:27:28:9e:96:
                    9b:29:d1:f9:65:fc:04:5d:9b:1f:e8:b8:55:9f:ca:
                    7b:06:8e:2d:00:c0:49:c1:1f:55:77:28:8d:6b:c8:
                    1f:00:ee:da:4c:2f:2f:c6:71:dd:67:0f:3b:12:3e:
                    4a:94:7e:27:77:7c:7f:41:18:79:14:de:4e:3a:0e:
                    79:ba:12:95:ea:5a:ad:7f:27:75:8d:e0:41:ac:47:
                    5f:0a:6a:0e:92:89:ba:67:bc:2b:a1:f5:33:1f:67:
                    5e:12:3e:e9:14:64:8f:2e:38:dc:43:cf:02:8a:a8:
                    53:c0:29:9b:8a:0a:57:e2:70:ca:6f:27:a2:da:d3:
                    03:d0:94:67:ff:3b:61:c3:a4:db:20:40:18:54:52:
                    07:f3:71:5d:f8:1c:ab:6e:92:83:94:5c:60:ce:b4:
                    90:37:ea:4c:15:34:2f:4d:99:d7:96:63:d3:f6:1d:
                    26:c1:d0:fc:01:2e:bf:cd:05:24:3c:ee:5a:54:16:
                    38:f0:4f:e8:d5:73:d4:f7:63:1a:90:4e:80:ae:ed:
                    6e:25
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C2:38:F5:EF:49:FE:2C:03:F2:B0:33:79:11:DD:E0:83:59:CF:4C:17
            X509v3 Authority Key Identifier:
                keyid:FD:2A:F9:06:0C:1F:42:C6:28:FC:FB:8F:07:81:D7:A5:BC:21:FC:02

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/_Sr5BgwfQsYo_PuPB4HXpbwh_AI.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1c/a98e4a-45aa-408c-b807-bfcf9a922a8b/1/_Sr5BgwfQsYo_PuPB4HXpbwh_AI.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/1c/a98e4a-45aa-408c-b807-bfcf9a922a8b/1/_Sr5BgwfQsYo_PuPB4HXpbwh_AI.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         ba:ae:b4:70:69:e3:45:8b:ec:92:60:06:ab:2d:27:ce:3c:71:
         f6:7a:82:fc:99:8d:30:16:aa:b7:62:13:dc:e8:49:5d:3d:5e:
         63:cf:6f:43:01:80:24:31:72:c0:29:0f:5f:0d:24:3c:7a:49:
         bd:30:14:13:a3:59:0d:3e:d8:01:41:45:b0:b0:ea:ef:df:3f:
         24:1d:59:27:48:51:55:e5:bc:a3:64:32:35:34:06:9b:4d:3c:
         14:19:70:f9:a1:35:b9:5d:40:b8:ea:3c:f8:54:61:c5:c3:5e:
         dc:c8:ab:82:94:da:d4:50:cd:e7:9d:9c:2c:aa:33:0b:e6:a7:
         bc:0d:d6:f9:86:90:9c:6d:06:a9:4f:fb:e7:9d:f6:e6:d6:90:
         c2:05:ff:06:d8:da:e3:f5:29:54:69:ee:d8:c9:fc:6a:15:e0:
         a0:99:48:ae:b9:fa:f3:90:d6:5b:69:2b:5a:18:14:e1:26:be:
         d1:90:3d:a6:c3:bf:03:16:84:81:6e:86:52:27:2c:55:88:e4:
         c3:95:97:40:28:e2:96:17:bc:a4:ca:cc:01:47:44:da:f8:89:
         3c:c3:77:9f:a5:f0:b0:9b:db:c1:bb:66:57:5a:0e:18:a0:31:
         db:79:18:8a:f7:a3:7b:73:b3:2d:c8:f2:9f:3b:ce:57:1e:fe:
         9b:9e:50:bd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----