Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/36/a02262-e37f-4142-9a2c-9f176e24c034/1/sID4AB1ZkzNz_o5YhJ5Lkd6qK7I.mft
File:                     sID4AB1ZkzNz_o5YhJ5Lkd6qK7I.mft (raw, json)
Hash identifier:          Bhg6d844eoCfwRvZe88v7SzwojKxmfAyr9fCvA80zUc=
Subject key identifier:   F1:CF:67:D8:7C:1C:2E:65:1E:F8:CB:7B:7A:64:38:A5:50:BD:1D:E9
Authority key identifier: B0:80:F8:00:1D:59:93:33:73:FE:8E:58:84:9E:4B:91:DE:AA:2B:B2
Certificate issuer:       /CN=b080f8001d59933373fe8e58849e4b91deaa2bb2
Certificate serial:       01962E99411F91EB47E8213FE2C3F112713F
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/sID4AB1ZkzNz_o5YhJ5Lkd6qK7I.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/36/a02262-e37f-4142-9a2c-9f176e24c034/1/sID4AB1ZkzNz_o5YhJ5Lkd6qK7I.mft
Manifest number:          032F
Signing time:             Sun 13 Apr 2025 10:01:57 +0000
Manifest this update:     Sun 13 Apr 2025 10:01:57 +0000
Manifest next update:     Mon 14 Apr 2025 10:01:57 +0000
Files and hashes:         1: f-wF0yIlDOHaFqLViWnFWeP4B9o.roa (hash: 8olsSb6V441J0mOtJjve8qF0Z7IUWgXwJVtuxOxK2Bg=)
                          2: sID4AB1ZkzNz_o5YhJ5Lkd6qK7I.crl (hash: LtXmxQnKm2V4wub2e1GSiHqAbCsre0hxNTKIBY0n9vI=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2e:99:41:1f:91:eb:47:e8:21:3f:e2:c3:f1:12:71:3f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b080f8001d59933373fe8e58849e4b91deaa2bb2
        Validity
            Not Before: Apr 13 10:01:57 2025 GMT
            Not After : Apr 14 10:01:57 2025 GMT
        Subject: CN=f1cf67d87c1c2e651ef8cb7b7a6438a550bd1de9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a9:00:0c:d7:c5:e4:42:52:7d:7b:08:5f:57:bd:
                    a3:20:48:49:f4:32:a3:93:65:6f:4a:5b:47:d7:5b:
                    25:55:53:14:e9:97:9b:3b:0d:8a:6f:74:e8:90:13:
                    88:31:78:8d:c2:dd:c3:23:7a:18:e6:99:b0:50:31:
                    47:4b:f2:03:9e:30:5b:5a:76:ab:8d:b3:52:6f:67:
                    1e:e4:d0:66:64:ae:6a:55:35:66:a5:2b:6e:13:20:
                    68:ff:63:0b:b5:5b:d5:12:b7:88:68:2b:d0:fe:13:
                    4e:0f:0b:ca:ea:42:7e:ef:8a:6f:e7:9a:9b:21:8b:
                    75:6a:dc:d9:96:c2:58:e9:f9:9a:80:7e:2d:ca:42:
                    cc:a7:94:aa:91:47:e0:b1:0c:66:b1:3a:fc:a5:f0:
                    fb:9f:c3:57:39:ff:96:da:b0:00:40:71:6a:8f:ab:
                    b7:f5:da:48:01:ff:6b:8b:67:c4:56:d8:0e:03:e6:
                    3b:35:6c:18:6d:b1:8c:e8:40:44:0d:f3:02:8e:5d:
                    82:0d:18:c4:28:5c:f6:f8:1f:1f:08:35:af:c7:83:
                    4d:5a:62:92:ab:d1:02:31:c7:b8:d1:5c:d3:7e:9b:
                    95:6e:84:0d:51:a6:37:1d:dd:12:d9:46:07:6a:87:
                    e7:ea:6f:08:b8:7d:cc:a4:f8:21:8b:81:e3:5d:b3:
                    da:7b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F1:CF:67:D8:7C:1C:2E:65:1E:F8:CB:7B:7A:64:38:A5:50:BD:1D:E9
            X509v3 Authority Key Identifier:
                keyid:B0:80:F8:00:1D:59:93:33:73:FE:8E:58:84:9E:4B:91:DE:AA:2B:B2

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/sID4AB1ZkzNz_o5YhJ5Lkd6qK7I.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/36/a02262-e37f-4142-9a2c-9f176e24c034/1/sID4AB1ZkzNz_o5YhJ5Lkd6qK7I.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/36/a02262-e37f-4142-9a2c-9f176e24c034/1/sID4AB1ZkzNz_o5YhJ5Lkd6qK7I.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         14:25:99:86:96:3c:24:c3:47:d3:1c:4b:5e:a6:c1:8c:94:db:
         90:d4:1b:37:26:e0:ca:b9:f4:3e:2f:bb:9f:e5:2e:83:0a:4c:
         d1:12:54:9a:6d:35:54:64:74:36:29:00:7a:83:4c:8a:fe:bf:
         d7:4c:83:6d:62:5b:42:26:3a:43:30:99:79:3b:89:b3:1d:4a:
         6e:a7:80:06:e6:09:26:99:33:68:20:68:0c:c5:9c:b7:0d:90:
         3f:24:bd:6a:61:89:2a:41:f6:3d:fc:c6:a1:fc:01:a9:89:5b:
         45:09:b8:9f:ed:41:4c:6a:e8:e7:9f:08:d1:a7:51:dd:6e:2d:
         b8:22:a1:e8:59:09:4c:a3:95:c3:8d:92:c4:1c:36:7f:0a:4c:
         93:c3:e4:01:02:0d:08:2d:6f:61:09:38:4e:d4:9f:f8:10:8c:
         e4:74:13:36:11:5d:46:d2:35:4a:00:4e:63:53:bc:25:e7:73:
         34:4d:2a:de:69:20:e3:74:8e:90:01:7b:b1:c9:14:5f:9c:ba:
         7b:df:ce:58:54:53:5e:d5:51:16:66:1d:58:d2:62:0a:cf:81:
         b0:e0:50:e1:b2:8b:e8:0a:57:6d:e7:e2:a5:af:81:40:56:21:
         4a:4f:80:54:50:df:e0:53:61:95:13:37:74:ca:49:d4:bf:18:
         1d:c0:cc:b7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----