Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/28/2a8f7e-e605-4114-90e8-f600d0fd03ce/1/rCEZF4v9kjpLXsQG2f4UUrJ3bvo.mft
File:                     rCEZF4v9kjpLXsQG2f4UUrJ3bvo.mft (raw, json)
Hash identifier:          xpBG1ShrM2TrFvDd/CpzINuZ31ncO/as4uW82y6wLjA=
Subject key identifier:   72:BB:62:91:66:20:B4:A4:13:7C:9A:6D:A3:34:F5:7D:7E:7B:03:2E
Authority key identifier: AC:21:19:17:8B:FD:92:3A:4B:5E:C4:06:D9:FE:14:52:B2:77:6E:FA
Certificate issuer:       /CN=ac2119178bfd923a4b5ec406d9fe1452b2776efa
Certificate serial:       01962F7494565F42BD08F07D5E169D88DC7B
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/rCEZF4v9kjpLXsQG2f4UUrJ3bvo.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/28/2a8f7e-e605-4114-90e8-f600d0fd03ce/1/rCEZF4v9kjpLXsQG2f4UUrJ3bvo.mft
Manifest number:          0A08
Signing time:             Sun 13 Apr 2025 14:01:31 +0000
Manifest this update:     Sun 13 Apr 2025 14:01:31 +0000
Manifest next update:     Mon 14 Apr 2025 14:01:31 +0000
Files and hashes:         1: nd2mEoM182MlqnyU97QFBEBtYLc.roa (hash: H4CTJi+dex4a2tP/U9S7boExXOmFzvTZ0iE52ANC1z0=)
                          2: rCEZF4v9kjpLXsQG2f4UUrJ3bvo.crl (hash: AbGgBG3oDTiwtng4YFMYTJPViDyxo6Ahm1TdsRXhy0w=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2f:74:94:56:5f:42:bd:08:f0:7d:5e:16:9d:88:dc:7b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=ac2119178bfd923a4b5ec406d9fe1452b2776efa
        Validity
            Not Before: Apr 13 14:01:31 2025 GMT
            Not After : Apr 14 14:01:31 2025 GMT
        Subject: CN=72bb62916620b4a4137c9a6da334f57d7e7b032e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a3:08:f3:42:60:a1:06:d2:44:f2:e5:b1:e9:f4:
                    eb:dc:da:27:3e:fd:d3:1b:48:be:5d:50:65:3d:70:
                    06:85:94:1c:94:26:2e:4c:19:0a:29:51:1e:cd:b2:
                    c3:d5:c1:4a:e5:01:b1:46:ce:68:83:6c:96:b6:20:
                    c5:36:d3:2f:2c:64:dd:69:fc:a1:f0:b0:a5:34:30:
                    34:ed:31:97:ce:63:1c:96:ee:54:45:b9:41:c1:5f:
                    aa:68:04:5a:ca:29:fb:66:72:74:ed:10:ab:4b:40:
                    ce:fd:78:ca:0f:46:6a:84:f8:ad:80:32:14:b5:1e:
                    d2:29:f3:26:4d:85:fd:eb:bd:15:1c:34:75:c8:4b:
                    27:de:9e:86:d7:d8:4b:2c:d2:78:3f:0c:08:83:a9:
                    5e:75:ea:09:12:6d:de:83:1d:31:a7:86:52:7f:e9:
                    b5:e7:52:40:90:65:8d:bb:a9:28:6c:fe:1d:86:01:
                    ec:81:ee:9d:aa:b8:25:78:0f:66:d6:0d:86:72:ff:
                    5b:60:d5:cf:5a:89:9d:1f:f0:67:97:e8:63:57:4b:
                    32:97:8d:2a:a4:1d:8a:bb:79:6c:f3:97:2d:ee:36:
                    52:a9:1a:b7:39:b9:49:80:4b:ac:23:8d:d2:b2:f7:
                    3e:f1:f2:e3:1a:e0:8d:6f:79:68:b4:01:cc:66:da:
                    ef:45
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                72:BB:62:91:66:20:B4:A4:13:7C:9A:6D:A3:34:F5:7D:7E:7B:03:2E
            X509v3 Authority Key Identifier:
                keyid:AC:21:19:17:8B:FD:92:3A:4B:5E:C4:06:D9:FE:14:52:B2:77:6E:FA

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/rCEZF4v9kjpLXsQG2f4UUrJ3bvo.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/28/2a8f7e-e605-4114-90e8-f600d0fd03ce/1/rCEZF4v9kjpLXsQG2f4UUrJ3bvo.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/28/2a8f7e-e605-4114-90e8-f600d0fd03ce/1/rCEZF4v9kjpLXsQG2f4UUrJ3bvo.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         38:55:fe:00:c7:23:8b:c3:76:8e:ca:1d:6e:c5:35:26:65:7a:
         a5:57:4b:52:fa:68:94:a4:c4:2a:06:52:9b:c5:44:d5:b9:69:
         1d:fa:06:32:f2:2a:84:16:10:90:6d:9f:76:22:21:92:4b:85:
         b7:51:17:b0:11:e4:3c:fc:eb:bd:c7:27:0c:4c:81:c5:20:54:
         51:67:83:f5:12:e2:f6:73:25:af:56:68:6c:7d:66:19:0e:82:
         bc:61:6b:92:52:de:d9:c3:55:f8:6b:5c:ae:94:40:58:49:92:
         35:a6:63:ec:bf:66:aa:ed:98:c2:f4:eb:1d:e1:3d:7d:c1:ce:
         1f:a7:ae:06:61:72:c9:62:dd:91:5b:6b:0c:9c:8c:a3:05:69:
         7a:c3:b2:d1:6a:aa:ca:81:dc:a7:21:c0:d7:1e:b9:77:26:b5:
         ce:8e:8b:44:7e:95:68:1b:d0:ff:7c:2f:34:04:c9:5f:10:65:
         5a:48:60:f5:7c:6a:99:60:0b:69:07:19:e8:e1:4c:f0:fa:c3:
         31:bf:68:23:fc:7d:91:90:3b:0a:44:79:47:d2:9f:48:32:50:
         fe:1b:d2:69:94:c0:5a:a1:fe:13:7d:ee:0b:82:74:a0:19:9b:
         b8:8c:9f:e1:90:93:28:65:bd:47:85:b6:8b:e4:15:f9:0b:1d:
         1c:b4:80:47
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----