Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/21/53ffa0-9060-472c-aac2-8eb85e3283e2/1/2PuW6jr1HFMtfo_oyUN29R4epAI.mft
File:                     2PuW6jr1HFMtfo_oyUN29R4epAI.mft (raw, json)
Hash identifier:          i4hcEAq+0oIHs3MnBRveQtODMY5U/kn5Im9NXZ24Qc8=
Subject key identifier:   C6:B9:2E:54:DC:7F:95:46:C4:FE:C6:98:CB:50:2C:B7:40:FF:3C:FA
Authority key identifier: D8:FB:96:EA:3A:F5:1C:53:2D:7E:8F:E8:C9:43:76:F5:1E:1E:A4:02
Certificate issuer:       /CN=d8fb96ea3af51c532d7e8fe8c94376f51e1ea402
Certificate serial:       01962DF3BA1D4C3CEBF1B80CAD36906BC71E
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/2PuW6jr1HFMtfo_oyUN29R4epAI.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/21/53ffa0-9060-472c-aac2-8eb85e3283e2/1/2PuW6jr1HFMtfo_oyUN29R4epAI.mft
Manifest number:          130E
Signing time:             Sun 13 Apr 2025 07:01:09 +0000
Manifest this update:     Sun 13 Apr 2025 07:01:09 +0000
Manifest next update:     Mon 14 Apr 2025 07:01:09 +0000
Files and hashes:         1: 2PuW6jr1HFMtfo_oyUN29R4epAI.crl (hash: x3R8rd2wz7ai2dP5D4S7EsAY2o3SzQc3cYk1gB6cBr4=)
                          2: qvV18edZ4nG1g9Z6XFGjfB91HGk.roa (hash: xA0FHg4k3qhHIOcw440t6o/vgKfLrTtDa1pgd5bBDMs=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2d:f3:ba:1d:4c:3c:eb:f1:b8:0c:ad:36:90:6b:c7:1e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d8fb96ea3af51c532d7e8fe8c94376f51e1ea402
        Validity
            Not Before: Apr 13 07:01:09 2025 GMT
            Not After : Apr 14 07:01:09 2025 GMT
        Subject: CN=c6b92e54dc7f9546c4fec698cb502cb740ff3cfa
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a9:42:ac:29:3c:5c:18:c0:f1:36:1d:ce:79:07:
                    61:f3:ae:46:f2:b0:ba:24:1d:a0:8c:24:f5:fa:fb:
                    0b:e4:ba:0f:a5:da:3f:e6:60:ce:a0:37:8f:a0:ee:
                    f7:20:bc:1b:4c:0a:de:57:e3:84:64:56:c2:ad:9f:
                    07:66:83:30:1a:d0:e4:f2:0a:d2:f9:19:4e:ea:be:
                    4d:34:aa:bf:06:e8:66:f6:b4:0d:34:81:e5:49:6e:
                    ab:b1:05:df:a6:8f:fc:dc:c5:8f:9b:08:d6:17:b0:
                    b2:3a:81:b1:4f:db:1a:1e:cb:17:9a:ce:38:26:4d:
                    56:44:67:27:b4:f9:1b:1d:ab:13:2e:b6:6d:39:42:
                    b6:4c:a0:e9:d1:e8:61:b8:85:5a:36:7e:5e:ae:ac:
                    d9:16:74:47:41:cd:52:46:9c:a5:de:54:ce:96:06:
                    af:e1:1f:15:99:eb:0d:f9:93:45:e4:75:f1:e1:3d:
                    14:33:c9:4a:6c:9d:d2:1c:1c:5d:e5:86:d7:5b:93:
                    b9:27:00:77:11:e0:62:31:bc:df:19:28:af:52:75:
                    2d:a8:01:6b:e4:66:0b:95:de:46:a4:69:0b:08:f9:
                    f9:8a:ca:77:09:4c:95:f1:0d:da:5d:19:0f:7d:e3:
                    9b:a9:69:bc:da:b9:ab:10:a3:76:46:c1:0c:52:39:
                    96:5d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C6:B9:2E:54:DC:7F:95:46:C4:FE:C6:98:CB:50:2C:B7:40:FF:3C:FA
            X509v3 Authority Key Identifier:
                keyid:D8:FB:96:EA:3A:F5:1C:53:2D:7E:8F:E8:C9:43:76:F5:1E:1E:A4:02

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/2PuW6jr1HFMtfo_oyUN29R4epAI.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/21/53ffa0-9060-472c-aac2-8eb85e3283e2/1/2PuW6jr1HFMtfo_oyUN29R4epAI.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/21/53ffa0-9060-472c-aac2-8eb85e3283e2/1/2PuW6jr1HFMtfo_oyUN29R4epAI.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         1a:07:41:1d:d5:a8:49:41:ad:2b:22:7c:68:7d:6f:a9:f1:68:
         34:71:e0:eb:f6:79:98:c9:8c:ff:df:e6:4e:c6:be:7a:6f:de:
         33:3c:9d:ec:a3:97:d2:43:3a:0b:8f:09:ff:b1:ec:58:40:e1:
         b4:1a:fa:f5:4c:7f:2b:13:d6:c8:e0:d3:4d:da:52:59:44:dc:
         05:c7:71:47:e9:38:0e:32:e4:18:56:d3:e3:9e:25:66:a3:4b:
         dd:eb:50:3a:ba:8d:3a:07:c6:90:12:0c:df:0d:e3:75:48:46:
         b5:74:01:8b:eb:58:65:ec:62:cd:25:63:a8:da:18:a8:7b:51:
         38:55:44:47:6e:1f:ce:bc:70:73:d2:f1:1f:4f:91:4d:89:3c:
         dd:25:26:fa:be:a3:07:43:19:66:1f:70:5d:fc:42:55:c1:2e:
         ad:32:8a:ec:9e:fd:4d:12:1f:4a:ed:68:bc:94:4d:a9:e2:62:
         47:14:bb:b3:d8:9c:fc:86:80:2a:03:30:aa:5a:ff:1b:53:e3:
         94:27:7e:b8:f4:b6:97:9f:6e:06:d7:72:2d:f7:fc:31:17:be:
         cd:32:04:e8:cb:c3:a7:91:7a:5e:80:e0:9a:f3:95:b8:31:99:
         ee:af:2b:a5:13:77:99:8e:82:28:fc:13:6b:3b:34:d7:fb:4d:
         2b:6d:8d:e5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----