Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2a/8f7892-7f7d-49db-a912-133f85994b1b/1/v2SXmq7U54jkUQ7fi2lr2WysdzI.mft
File:                     v2SXmq7U54jkUQ7fi2lr2WysdzI.mft (raw, json)
Hash identifier:          xCKGR6JUL9xgTkZU/o19RN/0205qcO16DjLZn9sa4OY=
Subject key identifier:   88:09:32:4F:51:E4:BA:CA:05:BD:C6:45:5F:BF:D1:91:C6:DE:76:B7
Authority key identifier: BF:64:97:9A:AE:D4:E7:88:E4:51:0E:DF:8B:69:6B:D9:6C:AC:77:32
Certificate issuer:       /CN=bf64979aaed4e788e4510edf8b696bd96cac7732
Certificate serial:       01962ECFC606D904EDAED6B72E9330B9B821
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/v2SXmq7U54jkUQ7fi2lr2WysdzI.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/2a/8f7892-7f7d-49db-a912-133f85994b1b/1/v2SXmq7U54jkUQ7fi2lr2WysdzI.mft
Manifest number:          14ED
Signing time:             Sun 13 Apr 2025 11:01:30 +0000
Manifest this update:     Sun 13 Apr 2025 11:01:30 +0000
Manifest next update:     Mon 14 Apr 2025 11:01:30 +0000
Files and hashes:         1: 5Gr2PKrQucQP8LHQL3W9WQyLZws.roa (hash: kX33qTBwgcLJcP02UZ6CIBiA/b6h+JlM7lkLX4HUf9k=)
                          2: v2SXmq7U54jkUQ7fi2lr2WysdzI.crl (hash: 0QVKjG4RMTUqvJun+NyXJRA0koJiI5z+qbcR7wnsrwE=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2e:cf:c6:06:d9:04:ed:ae:d6:b7:2e:93:30:b9:b8:21
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=bf64979aaed4e788e4510edf8b696bd96cac7732
        Validity
            Not Before: Apr 13 11:01:30 2025 GMT
            Not After : Apr 14 11:01:30 2025 GMT
        Subject: CN=8809324f51e4baca05bdc6455fbfd191c6de76b7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b5:67:fe:76:48:28:05:e3:96:e1:3f:e2:77:6b:
                    0d:6e:54:ee:9a:04:07:36:02:f4:2f:93:3c:b1:d6:
                    b9:c2:89:0e:24:a5:79:32:0e:5f:1c:8a:e1:b1:1d:
                    44:58:d4:45:73:70:54:90:17:ec:3a:d2:02:2b:ed:
                    88:3d:35:5d:68:b8:6c:70:18:02:ba:88:d7:ba:01:
                    eb:26:68:fe:96:da:d1:93:49:c9:d9:2f:0c:02:50:
                    55:fb:6f:61:cf:8f:86:a7:92:5a:d9:72:4c:2c:01:
                    47:1a:c0:3f:21:e5:91:bd:69:53:56:8e:4b:34:57:
                    1f:9e:a4:8e:8f:b8:33:ff:2d:9d:e7:8d:7e:8c:de:
                    08:60:94:fe:58:43:11:00:3a:e7:3e:ff:cb:0e:62:
                    02:78:67:0b:f1:88:1d:69:08:7b:66:ed:d8:59:d5:
                    c6:ca:6d:d6:16:76:bc:5e:64:0d:a5:29:8e:6f:d8:
                    95:f6:34:1d:41:42:74:90:1a:1f:84:3b:e5:d5:f4:
                    1b:e7:ca:f6:64:2f:c2:b8:9d:c7:29:0d:bf:3e:28:
                    41:e9:e1:cd:f3:27:60:d6:c7:51:bb:45:db:b0:a0:
                    19:ab:fc:14:2e:cc:7f:6d:30:d2:06:ac:95:65:ca:
                    d5:d7:19:46:0f:a3:94:8c:39:1a:6b:46:f1:20:36:
                    b9:93
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                88:09:32:4F:51:E4:BA:CA:05:BD:C6:45:5F:BF:D1:91:C6:DE:76:B7
            X509v3 Authority Key Identifier:
                keyid:BF:64:97:9A:AE:D4:E7:88:E4:51:0E:DF:8B:69:6B:D9:6C:AC:77:32

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/v2SXmq7U54jkUQ7fi2lr2WysdzI.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2a/8f7892-7f7d-49db-a912-133f85994b1b/1/v2SXmq7U54jkUQ7fi2lr2WysdzI.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/2a/8f7892-7f7d-49db-a912-133f85994b1b/1/v2SXmq7U54jkUQ7fi2lr2WysdzI.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         90:a9:ad:90:90:42:c3:8c:36:a6:1a:74:96:15:28:a3:54:fb:
         90:9a:d9:ab:4d:7d:d5:e6:1a:60:e6:bf:62:b9:87:d7:2d:ce:
         ab:d7:e0:9c:70:51:2d:17:a4:53:8e:ec:e5:60:c0:6e:d0:be:
         62:69:8d:f6:ba:19:c2:bb:13:12:57:fa:af:57:cb:31:39:9f:
         a4:20:c1:a8:52:61:31:2a:74:76:83:f5:36:22:7a:b0:ed:4f:
         50:55:0e:7c:be:e4:6f:a6:0c:5d:41:91:d9:aa:e5:bd:2a:f4:
         38:5e:b2:85:fc:79:8a:44:8c:5a:6d:16:4e:e6:6d:3e:bf:17:
         8b:bc:9b:b2:7f:26:2b:2e:53:b4:9b:ef:e6:e8:d2:ea:ec:f1:
         25:be:45:0a:c7:34:16:ec:26:4b:ca:40:63:73:c4:1d:3b:83:
         b8:1f:35:4f:0e:2d:88:cb:0e:fc:0c:31:19:f0:d8:19:f1:46:
         03:69:ed:3e:2b:65:70:ca:51:10:69:88:0f:9d:82:a7:d4:ce:
         b0:d2:2e:8b:14:d3:fa:a1:97:ac:87:3c:ee:c0:f4:ab:6c:70:
         c9:c2:40:3f:ec:3d:ae:df:0e:3a:d3:6c:88:27:6b:a2:79:63:
         fd:ee:70:67:e7:17:d0:a1:6d:fc:61:6a:62:84:e4:59:4d:e1:
         ec:1d:ba:ef
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----