Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/29/40e5f4-d056-44f2-899e-2286b89e7a7e/1/V8dqgOwpEqVok1y1e2plDwPf2NI.mft
File:                     V8dqgOwpEqVok1y1e2plDwPf2NI.mft (raw, json)
Hash identifier:          iXgEqe/VJFl5RPIOfvCcLLNMxVrPFQXH8xionY5G60c=
Subject key identifier:   EB:82:F7:56:B1:A8:28:DE:8E:2F:10:4C:85:48:56:5D:2E:5B:7F:4E
Authority key identifier: 57:C7:6A:80:EC:29:12:A5:68:93:5C:B5:7B:6A:65:0F:03:DF:D8:D2
Certificate issuer:       /CN=57c76a80ec2912a568935cb57b6a650f03dfd8d2
Certificate serial:       01962ECF7208C0C213B1383E66A9D03A501F
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/V8dqgOwpEqVok1y1e2plDwPf2NI.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/29/40e5f4-d056-44f2-899e-2286b89e7a7e/1/V8dqgOwpEqVok1y1e2plDwPf2NI.mft
Manifest number:          0B16
Signing time:             Sun 13 Apr 2025 11:01:09 +0000
Manifest this update:     Sun 13 Apr 2025 11:01:09 +0000
Manifest next update:     Mon 14 Apr 2025 11:01:09 +0000
Files and hashes:         1: V8dqgOwpEqVok1y1e2plDwPf2NI.crl (hash: guPGBlEJ0Fj4BVUwKKQ+3JgebB5kVjsf/a3p/J63OKA=)
                          2: c0WcDmEa-I3e6oejtEWp5xBEKhk.roa (hash: gv5nn6HuxLobRhPQtfW9QLB/XRSSApZbiTBp/n9p8eo=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2e:cf:72:08:c0:c2:13:b1:38:3e:66:a9:d0:3a:50:1f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=57c76a80ec2912a568935cb57b6a650f03dfd8d2
        Validity
            Not Before: Apr 13 11:01:09 2025 GMT
            Not After : Apr 14 11:01:09 2025 GMT
        Subject: CN=eb82f756b1a828de8e2f104c8548565d2e5b7f4e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9c:fc:8f:f1:f6:23:8a:f1:be:05:3a:ce:1c:3d:
                    cb:e9:b9:57:c6:a5:bc:00:eb:5b:ac:23:83:23:6b:
                    5b:2c:90:17:4e:f5:92:78:8f:12:e6:de:4c:20:6c:
                    77:e3:b7:c6:f1:b8:59:4a:81:b5:ca:16:5f:dc:49:
                    3f:c6:30:62:e1:e6:46:4f:08:63:9d:6b:a6:dd:a3:
                    67:bd:cf:e0:99:7d:1d:ac:ce:b2:d2:ef:66:ba:33:
                    9f:b1:b4:6d:f7:f3:5e:77:c5:80:9c:75:49:b4:7e:
                    46:41:04:05:bb:e5:c4:77:4e:c3:cb:81:26:5b:4e:
                    0b:60:ca:d0:33:f5:cf:fe:21:cc:39:5e:18:5e:be:
                    5b:53:78:ed:cf:e1:ab:11:99:8d:88:82:26:20:48:
                    a5:4f:28:e9:a5:45:c3:1c:d5:b3:55:60:0e:21:e9:
                    7b:f5:fa:82:9c:f4:8b:4e:0a:9c:f9:89:4c:5d:f9:
                    06:f9:46:d9:70:19:30:5e:bf:7b:15:16:ee:10:4f:
                    24:b9:76:2c:d5:5a:a7:88:17:ad:f2:f8:10:9f:75:
                    58:92:2a:5e:3c:fb:d6:fb:33:d1:9b:b5:3c:96:0a:
                    82:b0:05:d3:34:20:15:e6:43:b6:66:91:a9:db:bd:
                    8c:f9:9a:ea:7c:3c:7b:a5:ea:f8:54:98:84:d1:67:
                    83:a1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                EB:82:F7:56:B1:A8:28:DE:8E:2F:10:4C:85:48:56:5D:2E:5B:7F:4E
            X509v3 Authority Key Identifier:
                keyid:57:C7:6A:80:EC:29:12:A5:68:93:5C:B5:7B:6A:65:0F:03:DF:D8:D2

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/V8dqgOwpEqVok1y1e2plDwPf2NI.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/29/40e5f4-d056-44f2-899e-2286b89e7a7e/1/V8dqgOwpEqVok1y1e2plDwPf2NI.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/29/40e5f4-d056-44f2-899e-2286b89e7a7e/1/V8dqgOwpEqVok1y1e2plDwPf2NI.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         ab:77:a4:80:17:ea:fe:19:c8:d0:03:c4:4f:9a:0b:41:4e:34:
         79:4c:fa:87:d6:01:ec:ee:2f:6b:a0:a9:3a:1e:e4:a3:44:87:
         2d:00:68:59:4f:5e:5a:2a:32:15:cc:22:94:d7:a6:87:db:f5:
         e8:09:a5:e2:38:d1:91:c4:4b:c7:cf:7d:29:11:cf:0e:09:32:
         b4:2e:86:b4:d8:c8:3a:4f:ed:46:ac:ab:d2:c1:24:03:e2:42:
         b8:d8:c9:ee:4f:9b:c7:8b:2d:e7:df:95:bc:49:cf:99:ff:93:
         50:4b:7c:72:33:02:30:b5:f1:31:3c:4c:dc:37:67:93:af:53:
         e6:be:3e:cc:f4:b2:3c:9d:7c:0c:db:98:3a:9f:62:7c:07:da:
         f1:e2:63:a9:a1:60:53:df:da:24:28:d6:c8:e6:6f:87:31:bc:
         26:1f:49:80:33:87:6b:1b:d1:42:76:ae:61:94:93:27:3e:02:
         50:ad:89:74:b5:b8:7c:aa:c8:99:20:1a:c4:69:ed:f1:4c:22:
         dc:5e:8d:1b:bc:29:8d:70:0e:30:1c:d2:fc:a8:af:cc:de:20:
         bc:70:fc:02:5e:b2:69:e5:07:98:99:f8:76:76:82:00:74:fa:
         06:19:24:0b:75:7c:b8:c2:81:32:21:18:03:af:21:5c:82:b0:
         bd:a4:e5:b6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----