Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/30/46cf2c-5bea-4861-8e5d-40989d0dfc5c/1/CCEA8LGZHYCkZCHZ_lFH8tVayTA.mft
File:                     CCEA8LGZHYCkZCHZ_lFH8tVayTA.mft (raw, json)
Hash identifier:          um4NE4iA5Plbne/f37QxMrAPzJHsFRh4Ksu/Uwg3ZYA=
Subject key identifier:   2F:33:4D:BA:80:DA:AE:1A:9C:36:0B:26:88:3D:E9:86:D7:30:FD:74
Authority key identifier: 08:21:00:F0:B1:99:1D:80:A4:64:21:D9:FE:51:47:F2:D5:5A:C9:30
Certificate issuer:       /CN=082100f0b1991d80a46421d9fe5147f2d55ac930
Certificate serial:       01962E2B14C9EE0BE465DFAB31CF7800DEF9
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/CCEA8LGZHYCkZCHZ_lFH8tVayTA.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/30/46cf2c-5bea-4861-8e5d-40989d0dfc5c/1/CCEA8LGZHYCkZCHZ_lFH8tVayTA.mft
Manifest number:          DA
Signing time:             Sun 13 Apr 2025 08:01:37 +0000
Manifest this update:     Sun 13 Apr 2025 08:01:37 +0000
Manifest next update:     Mon 14 Apr 2025 08:01:37 +0000
Files and hashes:         1: 3rwXWtFbCIuCgGU96PeqAGUhWU4.roa (hash: rp0bCqxBlPPCcVLUBh0MkWETtPWfiqbHwRVpOhMjnK4=)
                          2: CCEA8LGZHYCkZCHZ_lFH8tVayTA.crl (hash: 3SbzaO8iHmC/A9YkT9B760F+OEXsEiH9yURaLhcAQR4=)
                          3: wmuRmPBv_IlkfBBV-hF7o6UUILQ.roa (hash: hs6pyaykF/zQtIhils9uIo2Funb7iBy2l/PAgFXmXMM=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2e:2b:14:c9:ee:0b:e4:65:df:ab:31:cf:78:00:de:f9
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=082100f0b1991d80a46421d9fe5147f2d55ac930
        Validity
            Not Before: Apr 13 08:01:37 2025 GMT
            Not After : Apr 14 08:01:37 2025 GMT
        Subject: CN=2f334dba80daae1a9c360b26883de986d730fd74
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d1:78:c2:66:9e:41:c6:95:d4:a2:5a:a6:d1:4e:
                    57:a9:5c:bd:22:a0:bb:73:39:88:6d:57:5a:1f:27:
                    d3:f9:0e:ab:c3:3e:52:9f:a7:ee:02:84:e5:ed:43:
                    ee:62:a5:d0:67:79:03:bc:38:d3:3c:0f:4e:82:e7:
                    51:c7:40:23:4f:d4:68:ac:eb:1f:ce:6d:06:b8:2b:
                    94:cf:23:b3:b2:19:26:2f:72:39:39:b4:6a:2c:7e:
                    64:ec:26:b6:4d:72:9d:6e:19:ba:01:d4:2d:73:92:
                    54:76:72:6c:e2:71:e1:31:3d:14:39:8f:73:f9:35:
                    cf:de:06:39:0c:fc:88:9b:a7:f5:ca:06:df:29:72:
                    4c:67:3c:2a:98:69:c1:be:67:0e:24:3c:7e:bc:f3:
                    ff:46:20:5f:1e:8a:fa:c9:ae:5d:e0:f1:8f:d7:6e:
                    fe:ce:a8:72:a7:bf:a2:78:d5:42:26:69:e9:ff:ec:
                    df:15:53:5b:09:84:ef:90:bf:b5:41:94:f3:3e:52:
                    7d:29:f0:24:bb:88:4f:fb:f6:5e:37:cf:15:c3:a1:
                    cf:6d:1d:31:27:03:b6:4e:69:7a:d2:1d:93:d2:63:
                    8b:ac:a4:09:4f:fb:8f:86:0a:3b:19:ff:6b:6a:ad:
                    37:81:cd:e9:aa:c0:87:db:5a:30:e3:46:50:d8:0c:
                    b1:63
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2F:33:4D:BA:80:DA:AE:1A:9C:36:0B:26:88:3D:E9:86:D7:30:FD:74
            X509v3 Authority Key Identifier:
                keyid:08:21:00:F0:B1:99:1D:80:A4:64:21:D9:FE:51:47:F2:D5:5A:C9:30

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CCEA8LGZHYCkZCHZ_lFH8tVayTA.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/30/46cf2c-5bea-4861-8e5d-40989d0dfc5c/1/CCEA8LGZHYCkZCHZ_lFH8tVayTA.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/30/46cf2c-5bea-4861-8e5d-40989d0dfc5c/1/CCEA8LGZHYCkZCHZ_lFH8tVayTA.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         1e:de:04:d9:91:0e:aa:35:0c:c6:99:2a:dc:32:84:fb:50:36:
         10:7b:7e:29:8e:9a:c2:cc:e1:a2:35:65:ac:c5:22:0e:bb:09:
         c8:f1:92:f6:b8:c8:e1:ac:4e:51:e7:38:a1:8b:17:f2:13:73:
         3a:26:3a:92:88:b7:56:c7:3c:92:a6:44:f2:52:ef:9a:a3:6f:
         3c:73:d3:6d:d0:69:68:00:5b:12:3d:f7:80:47:8f:f2:40:9d:
         bb:ae:c4:06:3f:77:43:cc:53:98:1b:2e:84:82:46:f5:6b:a7:
         a8:ac:05:d7:a1:c0:6e:fc:7b:e4:f2:7d:8b:1d:1e:05:03:da:
         c0:7f:c5:39:9a:28:8f:0d:13:9f:2c:a7:c1:c9:4f:fa:8d:2a:
         b9:2e:05:d6:06:7c:5d:83:fc:26:71:4c:87:58:c7:14:92:e7:
         d3:0d:d8:54:7a:73:b7:f8:05:8e:28:03:e4:ae:c7:27:79:44:
         88:f2:26:e3:55:36:05:bc:28:12:6a:7e:47:b9:c3:68:62:0b:
         b1:5c:ef:ac:a5:9c:0f:af:ef:2b:35:f7:67:a9:7f:03:0c:61:
         c5:03:d8:24:5c:37:0c:82:eb:85:88:d3:3e:5a:f4:0e:60:38:
         70:d2:f2:f4:d0:12:1e:1e:77:31:b9:71:30:45:58:aa:fd:98:
         fb:15:fb:03
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----