Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/25/a2ccb1-a728-4f04-9641-fc112ae63ea4/1/8dpnE1tzfKnS39e5f-WXi48wDWs.mft
File:                     8dpnE1tzfKnS39e5f-WXi48wDWs.mft (raw, json)
Hash identifier:          AWorsD+O4JcDfZtPwKNe+kc66pcGgbivqPKqVS/0H50=
Subject key identifier:   49:C7:21:52:B2:44:13:A9:AE:49:B7:E5:BF:00:75:EE:4E:78:D0:39
Authority key identifier: F1:DA:67:13:5B:73:7C:A9:D2:DF:D7:B9:7F:E5:97:8B:8F:30:0D:6B
Certificate issuer:       /CN=f1da67135b737ca9d2dfd7b97fe5978b8f300d6b
Certificate serial:       01962E2AC2C2B8CB26AF725A62899DEB66BA
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/8dpnE1tzfKnS39e5f-WXi48wDWs.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/25/a2ccb1-a728-4f04-9641-fc112ae63ea4/1/8dpnE1tzfKnS39e5f-WXi48wDWs.mft
Manifest number:          0969
Signing time:             Sun 13 Apr 2025 08:01:16 +0000
Manifest this update:     Sun 13 Apr 2025 08:01:16 +0000
Manifest next update:     Mon 14 Apr 2025 08:01:16 +0000
Files and hashes:         1: 2Utz6EvNmTYHORm-GQMKm69p8WI.roa (hash: j7FVQ06WFgxEJj//G5Co8Dizh+fdctkzSaSmR5/2mVM=)
                          2: 8dpnE1tzfKnS39e5f-WXi48wDWs.crl (hash: Hp+s1UPOvV7YBM5lJQKeTH8bLjwSBXkONfNgMVRZnk8=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2e:2a:c2:c2:b8:cb:26:af:72:5a:62:89:9d:eb:66:ba
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=f1da67135b737ca9d2dfd7b97fe5978b8f300d6b
        Validity
            Not Before: Apr 13 08:01:16 2025 GMT
            Not After : Apr 14 08:01:16 2025 GMT
        Subject: CN=49c72152b24413a9ae49b7e5bf0075ee4e78d039
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e6:f6:60:24:62:43:1b:d0:61:a3:52:ac:47:eb:
                    aa:a1:37:45:d8:7c:9f:d4:b3:ba:32:98:3c:72:fa:
                    ee:5b:1c:3c:b9:63:9c:f9:39:7e:ba:d8:8b:23:8b:
                    c3:e9:c0:70:29:3f:c9:5b:f2:f7:60:73:d0:67:80:
                    3a:48:49:5a:cb:e0:a1:e1:c9:f2:b3:a4:36:cf:f8:
                    88:cc:33:ce:6b:ee:bd:a0:58:65:41:02:a0:e1:a8:
                    f6:f8:c8:df:01:10:ee:8c:52:50:a5:62:6d:10:8c:
                    ea:2b:24:6a:ee:0f:fa:d3:9c:b0:49:01:b3:1e:ed:
                    77:6c:fb:95:67:6e:6b:04:8d:73:e9:d8:d1:03:98:
                    59:bf:ed:7e:9d:d8:ef:14:02:8f:c1:b5:1f:21:8d:
                    97:46:42:86:38:1d:a9:28:1b:da:8f:f1:9f:9a:ab:
                    d5:63:47:44:2d:a8:13:83:cd:7a:ba:01:3f:86:a0:
                    14:e7:79:bd:0c:fc:0e:b3:c9:15:67:d1:4c:8e:59:
                    42:8b:de:d1:9e:6d:35:d7:70:f1:f9:69:22:52:39:
                    9f:b5:88:b2:30:0f:07:77:87:37:d2:83:24:77:18:
                    d7:92:9e:84:28:92:f2:85:6b:ae:93:c4:9f:b7:81:
                    cf:bc:1b:3b:54:c7:c8:61:06:bb:49:a2:82:06:c1:
                    ba:e9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                49:C7:21:52:B2:44:13:A9:AE:49:B7:E5:BF:00:75:EE:4E:78:D0:39
            X509v3 Authority Key Identifier:
                keyid:F1:DA:67:13:5B:73:7C:A9:D2:DF:D7:B9:7F:E5:97:8B:8F:30:0D:6B

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/8dpnE1tzfKnS39e5f-WXi48wDWs.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/25/a2ccb1-a728-4f04-9641-fc112ae63ea4/1/8dpnE1tzfKnS39e5f-WXi48wDWs.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/25/a2ccb1-a728-4f04-9641-fc112ae63ea4/1/8dpnE1tzfKnS39e5f-WXi48wDWs.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         2b:63:9d:2f:8b:cb:39:96:bd:f7:4e:ad:31:04:d0:0f:51:e5:
         0a:65:32:e4:bc:ce:55:b1:81:0e:09:b8:a7:0b:94:15:3a:7f:
         31:27:aa:a4:6a:0a:29:b4:30:4f:79:42:95:47:a0:3b:be:34:
         02:ac:1e:0a:49:33:e8:80:7c:9c:7f:75:10:19:4c:d1:35:f0:
         9f:bd:fc:9c:b8:cb:7c:7d:6b:a6:ed:f2:df:6a:79:d3:37:1d:
         5a:ce:01:3f:40:f7:54:15:88:8f:05:1b:b7:aa:ac:bc:5e:8b:
         57:f8:a8:e7:81:74:18:66:25:80:77:2a:23:40:40:0b:44:ab:
         29:1b:06:de:0d:16:27:5b:92:63:f7:50:11:11:a7:43:e1:68:
         4f:ed:5b:81:a8:77:03:15:37:12:6a:9b:5d:6b:82:e6:ef:d3:
         2b:e4:3c:da:01:37:ca:85:91:03:52:6d:fa:93:44:84:0e:f5:
         79:ec:a8:f5:23:d1:f7:f9:67:bb:ee:0e:02:52:2d:65:91:99:
         fe:57:32:e2:d0:57:d7:f0:c7:34:59:05:91:51:92:b2:bd:17:
         18:a8:ad:b4:f3:ec:f0:5e:92:fc:ff:a7:c0:50:98:26:16:00:
         7b:21:63:63:3e:37:31:27:af:48:b1:de:a5:63:e8:0a:aa:4e:
         c6:17:e6:cf
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----