Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/33/333c1a-e4a5-496d-9a81-b791b989af29/1/2KPKzfjzNRS-Or3FLFDshkZ16VU.mft
File:                     2KPKzfjzNRS-Or3FLFDshkZ16VU.mft (raw, json)
Hash identifier:          Mf3JyViK37Er6SKjD5HRBZXa6KwEhupark4yjjpDaag=
Subject key identifier:   44:55:8C:24:E1:4C:5E:AF:98:7E:83:45:DC:79:06:AB:EB:F5:31:EB
Authority key identifier: D8:A3:CA:CD:F8:F3:35:14:BE:3A:BD:C5:2C:50:EC:86:46:75:E9:55
Certificate issuer:       /CN=d8a3cacdf8f33514be3abdc52c50ec864675e955
Certificate serial:       01962E6170FABD136ADA0A3BEFA8C419A225
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/2KPKzfjzNRS-Or3FLFDshkZ16VU.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/33/333c1a-e4a5-496d-9a81-b791b989af29/1/2KPKzfjzNRS-Or3FLFDshkZ16VU.mft
Manifest number:          0A42
Signing time:             Sun 13 Apr 2025 09:00:59 +0000
Manifest this update:     Sun 13 Apr 2025 09:00:59 +0000
Manifest next update:     Mon 14 Apr 2025 09:00:59 +0000
Files and hashes:         1: 2KPKzfjzNRS-Or3FLFDshkZ16VU.crl (hash: KGA/h+mreHZMImqTkhTJxzMiuEMjx6pQ9PMDhavfvVI=)
                          2: YfAgsC_cdxTTdTc3lRuKLUA9Ek4.roa (hash: 6JxCw6QKy553BkYrq5SFqTFyUQePShSh+1QhYyHxmes=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2e:61:70:fa:bd:13:6a:da:0a:3b:ef:a8:c4:19:a2:25
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d8a3cacdf8f33514be3abdc52c50ec864675e955
        Validity
            Not Before: Apr 13 09:00:59 2025 GMT
            Not After : Apr 14 09:00:59 2025 GMT
        Subject: CN=44558c24e14c5eaf987e8345dc7906abebf531eb
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:aa:fb:58:54:24:71:2c:37:b8:69:40:c1:03:aa:
                    d2:60:be:bc:e2:3f:aa:0c:ff:bb:60:09:c7:bc:a1:
                    d3:e2:ef:ef:22:6a:51:d0:87:32:49:3c:fc:43:36:
                    74:82:17:d0:7a:e4:93:cb:ad:50:c3:55:64:48:f8:
                    93:ee:d8:ce:5e:80:2e:d0:1d:a8:d7:bf:dd:97:f5:
                    f7:92:55:0f:47:ea:4b:f0:56:4d:c4:f0:e1:cb:e4:
                    5f:2b:f7:df:b7:d8:25:70:ad:e7:b8:10:9e:e9:5e:
                    3e:b5:97:e8:ab:29:2c:91:a8:12:0e:41:7f:af:c0:
                    cf:32:f0:17:a7:85:6c:a2:6e:54:57:db:03:3e:2f:
                    5e:24:90:d4:93:0f:6a:e3:ba:a1:16:a1:ef:8c:10:
                    27:ab:15:dd:df:80:12:ba:74:a4:3e:f4:f3:fa:41:
                    87:b1:cc:7a:65:9f:6b:56:2c:8f:1c:6e:32:1a:f3:
                    36:32:d1:c2:e5:36:18:15:ce:56:b4:b4:25:b1:b3:
                    12:bb:10:62:82:a6:25:9b:70:23:2c:af:4b:3c:92:
                    5c:4d:da:d0:58:21:22:c6:b2:9f:82:4d:1f:c8:91:
                    7b:d8:dd:7d:0a:09:82:55:82:ed:ac:5a:04:47:ac:
                    5c:e1:f5:70:25:34:a5:76:1a:9b:a3:e4:84:70:ce:
                    b4:99
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                44:55:8C:24:E1:4C:5E:AF:98:7E:83:45:DC:79:06:AB:EB:F5:31:EB
            X509v3 Authority Key Identifier:
                keyid:D8:A3:CA:CD:F8:F3:35:14:BE:3A:BD:C5:2C:50:EC:86:46:75:E9:55

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/2KPKzfjzNRS-Or3FLFDshkZ16VU.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/33/333c1a-e4a5-496d-9a81-b791b989af29/1/2KPKzfjzNRS-Or3FLFDshkZ16VU.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/33/333c1a-e4a5-496d-9a81-b791b989af29/1/2KPKzfjzNRS-Or3FLFDshkZ16VU.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         c5:5c:86:79:80:bc:08:34:c7:fb:68:22:85:18:af:ba:eb:ff:
         0d:fa:6a:5d:48:71:2f:82:b8:f8:b1:21:5e:c4:ac:2d:fd:db:
         91:d1:4a:56:cf:f2:97:dc:51:87:a3:d4:c0:23:1b:4d:84:6d:
         cf:9d:4c:3f:79:45:f5:f6:fe:92:1b:3a:5e:69:e7:af:79:eb:
         cc:66:62:d1:bf:3c:fb:e7:9d:e0:d2:ce:4f:8d:8e:83:3f:4e:
         63:eb:65:e5:93:74:14:ac:f0:57:6e:57:49:7f:58:a4:58:82:
         f5:c4:ed:d3:bb:57:f8:ba:7a:1a:74:e9:a9:78:88:f0:44:ff:
         f7:f9:e1:2b:c3:1f:a9:f3:a1:08:da:e6:23:c4:30:11:55:16:
         ab:76:a7:5e:a8:ce:01:85:11:c6:05:f1:1c:b3:35:d7:40:1a:
         5a:3e:6d:bb:ca:2f:2d:92:d5:12:fd:ad:b9:77:2a:b7:e4:2c:
         9b:d0:9a:84:18:ce:fd:bd:0b:ae:8c:3c:be:52:dd:dd:ac:12:
         f2:29:45:ac:f7:c0:17:2d:3b:96:0d:91:c9:6f:c3:4e:50:fb:
         84:0d:96:b1:00:e7:60:f7:05:29:50:07:8e:35:91:18:e1:28:
         ec:d8:64:4d:cb:76:df:01:11:4f:33:d7:0b:1f:5b:92:36:d0:
         a8:a4:f3:a4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----