Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/20/a92fce-7a1b-4cb7-9e5c-819db16b66ee/1/AIP2l5VOx8xJLlqkbMjvE_yO2pE.mft
File:                     AIP2l5VOx8xJLlqkbMjvE_yO2pE.mft (raw, json)
Hash identifier:          LuiULC4l1A2PrPbI7/Vv9BSOK37qezRyBm56bDUrNPc=
Subject key identifier:   24:F6:32:00:A1:47:95:FE:F5:08:91:DA:0E:07:D2:02:E8:D8:A5:21
Authority key identifier: 00:83:F6:97:95:4E:C7:CC:49:2E:5A:A4:6C:C8:EF:13:FC:8E:DA:91
Certificate issuer:       /CN=0083f697954ec7cc492e5aa46cc8ef13fc8eda91
Certificate serial:       01962FAB70DDDBDA1867918461DF279D3779
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/AIP2l5VOx8xJLlqkbMjvE_yO2pE.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/20/a92fce-7a1b-4cb7-9e5c-819db16b66ee/1/AIP2l5VOx8xJLlqkbMjvE_yO2pE.mft
Manifest number:          0B8B
Signing time:             Sun 13 Apr 2025 15:01:26 +0000
Manifest this update:     Sun 13 Apr 2025 15:01:26 +0000
Manifest next update:     Mon 14 Apr 2025 15:01:26 +0000
Files and hashes:         1: AIP2l5VOx8xJLlqkbMjvE_yO2pE.crl (hash: f9dXLT7eZFNPXmJguC3czV/eFBfGoGPtN3lQZcW70nw=)
                          2: ttoTW1mb5ILG0PA-_tc15H39Bu4.roa (hash: NuP48I/0CSAZd0tA3+gwMRRMyGbGny18PxWX5GZCZw0=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2f:ab:70:dd:db:da:18:67:91:84:61:df:27:9d:37:79
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0083f697954ec7cc492e5aa46cc8ef13fc8eda91
        Validity
            Not Before: Apr 13 15:01:26 2025 GMT
            Not After : Apr 14 15:01:26 2025 GMT
        Subject: CN=24f63200a14795fef50891da0e07d202e8d8a521
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:91:b0:b5:41:7b:79:ea:d7:71:29:21:7b:fd:c0:
                    2b:a0:c7:d5:18:b5:7f:72:a5:e0:03:ab:90:cb:f4:
                    0a:25:c3:5e:4b:35:1b:d0:0d:0b:86:a8:e6:5f:54:
                    ff:62:25:85:a4:39:28:77:46:38:1c:8c:86:3a:74:
                    9d:8d:e6:56:60:a7:ab:7d:5a:5c:65:01:1f:8f:f0:
                    5c:16:12:8e:17:9b:0f:d8:41:b5:a6:9b:c1:f5:25:
                    d1:71:3d:e1:9b:0b:45:7a:3d:b9:87:23:62:f0:01:
                    50:44:f7:d8:75:8b:69:8a:39:1f:c8:c3:18:a5:b5:
                    be:d4:be:07:c0:ca:4a:dd:b7:f3:e4:57:db:ce:a4:
                    39:ac:0a:89:2c:7a:45:34:d7:76:de:8a:d8:3c:c9:
                    80:bd:95:54:31:a5:ee:4c:aa:dd:07:2e:33:78:b5:
                    0e:62:b8:35:85:a0:48:2e:75:62:d4:3d:5c:6e:29:
                    ff:c3:9c:22:45:05:d9:0c:a0:d1:23:60:1b:62:6c:
                    8f:67:f8:10:53:a0:21:e5:7a:7d:f7:fe:14:0f:86:
                    c7:e7:3a:c5:1b:cf:2f:e6:70:de:56:61:fd:c2:83:
                    5b:e7:ca:78:01:31:af:bb:d3:cb:26:43:9c:94:a2:
                    4d:6d:b2:38:c3:fd:a3:10:58:00:cc:56:21:d4:fd:
                    b1:35
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                24:F6:32:00:A1:47:95:FE:F5:08:91:DA:0E:07:D2:02:E8:D8:A5:21
            X509v3 Authority Key Identifier:
                keyid:00:83:F6:97:95:4E:C7:CC:49:2E:5A:A4:6C:C8:EF:13:FC:8E:DA:91

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/AIP2l5VOx8xJLlqkbMjvE_yO2pE.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/20/a92fce-7a1b-4cb7-9e5c-819db16b66ee/1/AIP2l5VOx8xJLlqkbMjvE_yO2pE.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/20/a92fce-7a1b-4cb7-9e5c-819db16b66ee/1/AIP2l5VOx8xJLlqkbMjvE_yO2pE.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         24:75:6f:c3:d7:d6:81:c1:0a:d9:29:ce:a6:bf:83:92:6d:3a:
         34:8a:c1:0c:b5:70:d5:cd:01:db:d9:7a:59:84:43:b6:fc:b7:
         3f:ea:a7:1b:a4:c5:d9:84:69:51:e7:1a:02:62:62:24:b9:c5:
         9a:c3:09:f3:ab:08:22:37:4a:4a:f7:96:a2:e2:18:39:74:fe:
         77:2c:19:41:ae:41:c0:f4:7f:cc:27:92:10:62:15:ae:76:a3:
         8c:fe:32:d4:5c:96:6b:73:3b:69:cc:af:fd:fd:bf:73:fa:22:
         a5:d3:da:63:7e:2b:8e:53:b0:ce:48:74:89:3d:e3:87:ee:22:
         a2:b1:97:72:a4:a9:9a:b3:eb:4b:7d:c9:1b:81:f4:89:73:b7:
         14:26:a2:54:9c:e5:8a:f5:ab:5f:ee:89:a3:37:08:28:ae:69:
         df:92:53:79:d9:b7:47:56:97:e9:b0:36:ae:45:14:71:79:9f:
         2c:2c:f2:41:5b:2b:d6:74:69:d9:67:4d:c4:8f:72:36:15:98:
         65:0c:c9:8c:13:c0:2b:14:c4:3f:75:8e:f3:51:8f:41:86:a0:
         99:7b:f4:96:36:89:47:98:40:ad:b4:ee:66:e0:e1:f2:6b:66:
         d0:c5:e4:ab:94:35:f0:3e:8a:41:3a:31:13:68:3d:77:f0:18:
         26:5c:00:bf
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----