Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/31/a01acd-a3de-4839-9d02-643c1fe38385/1/8PY2_se1stGN43l-aYTAaVXnFtc.mft
File:                     8PY2_se1stGN43l-aYTAaVXnFtc.mft (raw, json)
Hash identifier:          m9/sp+JVDymcyygPn4NgiL0Ro+mnqXkWmiWhXyoLgos=
Subject key identifier:   47:01:E4:72:D2:30:51:C4:DD:0D:DC:4B:8B:F7:68:6D:01:5C:28:08
Authority key identifier: F0:F6:36:FE:C7:B5:B2:D1:8D:E3:79:7E:69:84:C0:69:55:E7:16:D7
Certificate issuer:       /CN=f0f636fec7b5b2d18de3797e6984c06955e716d7
Certificate serial:       01962F7446ECE124AB771C32A159D49DA1BC
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/8PY2_se1stGN43l-aYTAaVXnFtc.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/31/a01acd-a3de-4839-9d02-643c1fe38385/1/8PY2_se1stGN43l-aYTAaVXnFtc.mft
Manifest number:          14EA
Signing time:             Sun 13 Apr 2025 14:01:11 +0000
Manifest this update:     Sun 13 Apr 2025 14:01:11 +0000
Manifest next update:     Mon 14 Apr 2025 14:01:11 +0000
Files and hashes:         1: 8PY2_se1stGN43l-aYTAaVXnFtc.crl (hash: f9Sa34c/iEvVrw1NQzWXvhLv6JvEXl2g9Wgela00mA0=)
                          2: rChpwrHAhzHtDWk3Wn4ou5CDTWY.roa (hash: rliHydAwaJdesMgVkjuoZQYXcZjxQiZ7KBN8WESMw/M=)
                          3: t92LD4JF1zzqhKIJX4gc4PGoZiU.roa (hash: QB9NxoH5XmIj8//Y6YIrgAvA3ml34TrM1hbyfS/v07g=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2f:74:46:ec:e1:24:ab:77:1c:32:a1:59:d4:9d:a1:bc
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=f0f636fec7b5b2d18de3797e6984c06955e716d7
        Validity
            Not Before: Apr 13 14:01:11 2025 GMT
            Not After : Apr 14 14:01:11 2025 GMT
        Subject: CN=4701e472d23051c4dd0ddc4b8bf7686d015c2808
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c7:92:8d:e0:3f:36:d6:71:ee:b4:41:53:ab:2b:
                    ac:0f:0d:25:09:04:7c:dd:e8:cd:f6:57:86:ef:ec:
                    a7:07:69:1f:6c:16:dc:db:03:4f:10:17:ef:61:e0:
                    a6:70:43:47:5a:ba:6d:ad:ca:40:f6:7f:e3:8a:3f:
                    10:72:5a:5a:ff:e0:3a:90:68:b2:be:00:e8:62:ec:
                    10:ae:48:b1:c5:df:55:d8:e1:65:7a:73:41:de:cf:
                    c2:89:fb:dc:1b:e7:be:ac:1a:c3:5b:0c:84:73:e4:
                    3d:7b:39:38:a5:b1:09:82:72:74:24:9e:df:10:6d:
                    de:02:3b:9e:ce:2d:97:68:38:56:92:a2:8e:2a:4f:
                    f2:0d:34:98:b0:cc:48:9c:a7:ef:5f:5f:14:fc:64:
                    6d:32:f8:1c:20:e1:e8:1a:ff:85:3a:0f:65:f8:67:
                    53:e9:e5:d2:67:dd:f6:c9:eb:02:0e:a2:5f:16:4d:
                    55:f1:f4:13:8a:30:3f:d9:6b:0d:6e:82:bc:fc:d4:
                    47:79:7e:ae:71:f1:67:70:14:07:0b:b7:cf:22:df:
                    df:ac:92:fe:20:bb:50:b3:fa:b5:17:00:d5:02:e9:
                    75:62:ad:28:6a:9a:4b:81:1b:30:72:51:ad:cd:df:
                    77:af:a5:70:a4:bd:59:a7:ed:9d:9f:92:a0:61:13:
                    d3:37
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                47:01:E4:72:D2:30:51:C4:DD:0D:DC:4B:8B:F7:68:6D:01:5C:28:08
            X509v3 Authority Key Identifier:
                keyid:F0:F6:36:FE:C7:B5:B2:D1:8D:E3:79:7E:69:84:C0:69:55:E7:16:D7

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/8PY2_se1stGN43l-aYTAaVXnFtc.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/31/a01acd-a3de-4839-9d02-643c1fe38385/1/8PY2_se1stGN43l-aYTAaVXnFtc.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/31/a01acd-a3de-4839-9d02-643c1fe38385/1/8PY2_se1stGN43l-aYTAaVXnFtc.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         32:09:e3:2b:4f:5e:83:53:34:a6:46:0a:cc:1d:13:51:a1:18:
         71:a7:1e:bb:ed:bb:6c:21:a2:1e:8c:26:bd:60:09:aa:49:54:
         a0:13:55:82:e0:a7:88:8b:22:24:b9:0c:e4:06:dc:f1:e8:00:
         68:23:c5:f9:67:4c:13:c3:a0:78:07:9a:28:8f:71:e7:15:e7:
         57:75:c9:65:c3:ae:a1:fa:f6:66:a1:bf:63:ad:b7:f0:83:e6:
         e2:cd:17:6c:82:1a:c3:07:7b:fd:35:9e:49:90:6b:34:fd:bd:
         29:50:f3:63:10:bc:9b:c3:2d:56:e7:eb:8f:c0:4c:d1:fb:c9:
         17:28:e5:30:1b:b3:2d:34:20:b8:06:db:c0:f6:12:80:ee:1e:
         11:f7:5e:56:df:d6:1c:8d:5c:3a:b4:37:77:ab:17:f5:b9:e3:
         81:2d:83:02:97:14:2e:f0:ac:7d:66:cb:a7:36:31:80:84:0d:
         d9:cc:c9:a9:88:ce:d7:1e:1a:e2:98:2e:fd:2d:f4:33:a2:2d:
         d5:23:3f:8e:4e:46:9f:7f:c7:79:61:f5:a0:03:1f:b0:f2:09:
         5c:4a:42:19:7f:94:45:2f:ab:6f:0d:4d:6d:6c:c1:53:64:e1:
         ab:04:42:d1:1e:59:b1:78:20:7a:c3:5c:0b:bc:1b:fa:52:c2:
         63:50:ce:6e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----