Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/26/62343c-edbe-4a8a-84f2-7eb2eb85b84a/1/2PxuRRgdg5_RDkqQJ2LybJpkZ5Y.mft
File:                     2PxuRRgdg5_RDkqQJ2LybJpkZ5Y.mft (raw, json)
Hash identifier:          zgjmPyHOMufBTRsUrUuIaCiuX8mQyCxfWShEOemsDYk=
Subject key identifier:   67:46:2A:CF:43:DB:EA:B9:48:9E:EF:59:B4:92:CE:70:63:19:A5:E5
Authority key identifier: D8:FC:6E:45:18:1D:83:9F:D1:0E:4A:90:27:62:F2:6C:9A:64:67:96
Certificate issuer:       /CN=d8fc6e45181d839fd10e4a902762f26c9a646796
Certificate serial:       01962DF418DCC1E25F6637E86392E02049A3
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/2PxuRRgdg5_RDkqQJ2LybJpkZ5Y.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/26/62343c-edbe-4a8a-84f2-7eb2eb85b84a/1/2PxuRRgdg5_RDkqQJ2LybJpkZ5Y.mft
Manifest number:          14EC
Signing time:             Sun 13 Apr 2025 07:01:33 +0000
Manifest this update:     Sun 13 Apr 2025 07:01:33 +0000
Manifest next update:     Mon 14 Apr 2025 07:01:33 +0000
Files and hashes:         1: 2PxuRRgdg5_RDkqQJ2LybJpkZ5Y.crl (hash: KucWsExq5Xgn7QDvImYxwD6yqtRC7vAX0KHwIz4RDlg=)
                          2: Hp-aUMiKFduSFShKvppXI42_Uj8.roa (hash: lCB+C5NdYk9yj77o+dq8fC9obFb6kuE+kfqjMFwOwXM=)
                          3: fj4ybxpsDPTq3Dcp32ARk19V658.roa (hash: G3z4kx3nRpiPVloWlnA+5o5/TapLF4KViU9lT9zaU4s=)
                          4: pE4C0VroSmY26_TJM0K-lSQgc7M.roa (hash: vf7UXC4PR0yUJjr6xqwo9zqitXjZXFvwlnGZdHjjf6A=)
                          5: waFJY_9Xx4HVBca8mozwG38i49k.roa (hash: 2sqvgn5zOZZ4lehKra8TFzA3bKpHh9AvNDOTiV97aSw=)
                          6: wwsOTx-pck8zIz4rEJvLSRVOW78.roa (hash: MNbHqch8VEMBR8R4jhawYSxV/uo6TDEte38JPI3LQos=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2d:f4:18:dc:c1:e2:5f:66:37:e8:63:92:e0:20:49:a3
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d8fc6e45181d839fd10e4a902762f26c9a646796
        Validity
            Not Before: Apr 13 07:01:33 2025 GMT
            Not After : Apr 14 07:01:33 2025 GMT
        Subject: CN=67462acf43dbeab9489eef59b492ce706319a5e5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8d:c0:70:60:e7:02:ae:a9:72:de:a2:21:01:ce:
                    02:dd:d5:f4:ce:a4:2b:46:a5:12:7c:26:cf:6f:cf:
                    77:40:c5:2e:7a:7d:a6:0d:e1:95:88:68:e4:5d:84:
                    48:56:95:06:18:6b:a5:41:e2:de:41:48:dc:ae:68:
                    c6:6f:2f:50:05:97:d7:2f:b3:ef:48:b4:9d:f0:e5:
                    f8:d0:7c:c5:f1:c3:92:ca:a5:10:93:01:aa:72:ba:
                    1c:7f:cb:48:b3:99:ef:b6:71:0c:d6:b4:9c:24:fa:
                    8e:52:ef:a3:f7:68:c0:ac:e8:bb:7e:8c:f6:35:52:
                    d4:ad:60:00:16:4c:e9:cb:9a:ca:da:24:e0:50:16:
                    d4:32:00:eb:d2:0a:7b:08:2a:1c:dd:86:73:3d:aa:
                    de:bc:60:d6:9f:8d:05:f7:e1:69:59:bb:1e:35:da:
                    8a:3f:7b:fc:1d:93:44:c1:ac:a7:ae:ba:1c:3d:ac:
                    3c:97:b2:7c:8b:56:c1:cb:f8:4b:84:dc:92:86:78:
                    d3:8a:29:82:ef:56:cb:c2:81:45:20:e1:46:2b:97:
                    cd:f4:0d:aa:02:49:58:e7:d2:7a:78:ec:7a:54:e3:
                    89:21:7a:32:eb:13:ab:5a:2f:1f:18:c0:95:02:7a:
                    fb:96:f2:35:4a:50:53:a2:ed:56:fb:98:60:8b:ad:
                    f7:6d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                67:46:2A:CF:43:DB:EA:B9:48:9E:EF:59:B4:92:CE:70:63:19:A5:E5
            X509v3 Authority Key Identifier:
                keyid:D8:FC:6E:45:18:1D:83:9F:D1:0E:4A:90:27:62:F2:6C:9A:64:67:96

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/2PxuRRgdg5_RDkqQJ2LybJpkZ5Y.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/26/62343c-edbe-4a8a-84f2-7eb2eb85b84a/1/2PxuRRgdg5_RDkqQJ2LybJpkZ5Y.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/26/62343c-edbe-4a8a-84f2-7eb2eb85b84a/1/2PxuRRgdg5_RDkqQJ2LybJpkZ5Y.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         91:2c:56:2b:71:42:23:bd:24:af:e9:53:ab:5a:73:4e:ba:1d:
         cb:66:48:4e:5f:d3:d0:b1:6f:63:db:4c:d6:55:32:9b:58:ee:
         d4:b1:85:9e:11:a9:72:83:cd:03:50:e6:1c:6e:03:37:7d:74:
         ec:36:ec:1d:24:73:7b:54:15:34:42:ca:a7:f5:db:53:7e:d5:
         16:90:f1:96:16:cf:d0:66:74:24:82:80:8e:c2:96:92:ae:88:
         2d:e8:48:0f:28:f6:a0:cc:42:4e:73:40:e0:b3:7e:fa:6f:0d:
         1b:ec:76:ff:c5:0d:f5:ee:e2:1e:f1:d5:d5:9e:45:ad:5b:a8:
         c0:d6:34:85:1f:79:83:da:dd:a3:c4:20:34:a0:3b:63:31:bd:
         71:6f:20:21:bd:a2:29:89:06:2d:97:ad:c9:0c:7d:6a:b3:ac:
         5a:fe:4e:82:3d:ce:c2:d0:4b:be:8a:4c:f0:c4:2c:82:3a:f5:
         8c:7d:0e:a1:21:42:82:0a:dc:1d:62:6e:3c:d5:77:93:c9:bf:
         17:c9:bc:b8:dd:e3:41:7f:9b:57:70:45:7f:a8:87:06:5a:31:
         50:66:f0:8c:a5:a6:49:5d:20:d6:af:a4:a5:16:ed:49:fb:ca:
         49:dd:2d:0f:3c:93:26:29:6d:62:86:7e:8d:76:12:b6:49:fe:
         c9:46:48:78
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----