Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/36/de875a-0576-4a15-be23-aea054cf43bb/1/0kgYWVbkQ7VbBiIA-WRTe8ELwTA.mft
File:                     0kgYWVbkQ7VbBiIA-WRTe8ELwTA.mft (raw, json)
Hash identifier:          XNe/s5fTWsdwFZ3PyYQuLxPE7V06izEGH/2AfE+dAtE=
Subject key identifier:   2E:A2:2A:84:96:E2:5D:FB:61:D6:BC:D8:F1:16:1B:9B:59:6A:0B:B5
Authority key identifier: D2:48:18:59:56:E4:43:B5:5B:06:22:00:F9:64:53:7B:C1:0B:C1:30
Certificate issuer:       /CN=d248185956e443b55b062200f964537bc10bc130
Certificate serial:       01962ECFD6A11AFA8C0D0BD7B5401BFD2F6F
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/0kgYWVbkQ7VbBiIA-WRTe8ELwTA.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/36/de875a-0576-4a15-be23-aea054cf43bb/1/0kgYWVbkQ7VbBiIA-WRTe8ELwTA.mft
Manifest number:          0159
Signing time:             Sun 13 Apr 2025 11:01:34 +0000
Manifest this update:     Sun 13 Apr 2025 11:01:34 +0000
Manifest next update:     Mon 14 Apr 2025 11:01:34 +0000
Files and hashes:         1: 0kgYWVbkQ7VbBiIA-WRTe8ELwTA.crl (hash: Pe93EXPc4NkzBB6R7C403htGYneyxcvsGbuqvJoKamQ=)
                          2: _O0LKSVD2FWQH20B8h-W2BSyf7E.roa (hash: /osVaD1xwsZSvzrjM1Npx7gTyOHOWobbSsuEq9U9lZY=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2e:cf:d6:a1:1a:fa:8c:0d:0b:d7:b5:40:1b:fd:2f:6f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d248185956e443b55b062200f964537bc10bc130
        Validity
            Not Before: Apr 13 11:01:34 2025 GMT
            Not After : Apr 14 11:01:34 2025 GMT
        Subject: CN=2ea22a8496e25dfb61d6bcd8f1161b9b596a0bb5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:f0:56:69:2a:2c:26:a1:26:e8:4e:43:e9:ae:fe:
                    e5:b3:ea:2e:7e:60:fe:79:0c:a5:a7:80:f4:ee:24:
                    f9:de:e8:36:09:ec:e9:73:e0:21:8e:61:29:79:c4:
                    8c:5a:87:3a:0e:88:4d:f2:d7:81:5d:27:5d:b4:56:
                    e3:ba:bb:8f:4b:04:bd:7a:ec:4d:c2:82:39:69:85:
                    07:7f:23:bd:a2:ec:ad:90:40:54:45:42:67:a9:8e:
                    c4:a3:b6:87:2d:da:82:88:dd:67:6f:35:c8:7d:cb:
                    9f:f7:e8:dc:f9:a2:d2:89:5b:45:e7:c8:20:77:93:
                    f0:cd:4c:8a:32:ab:86:83:ef:45:3f:90:7f:a0:15:
                    b8:1e:13:79:99:99:b1:ba:4a:e9:bb:69:21:50:3b:
                    1b:91:0a:fc:83:31:c3:18:2d:d5:50:94:55:02:ba:
                    92:ab:c4:17:6a:ce:bd:a8:8b:39:4c:8c:ff:a2:a9:
                    8e:ea:5d:a2:64:72:67:e3:6c:57:5a:96:14:ac:ff:
                    67:69:36:db:b8:8f:8b:40:30:41:51:0b:d9:98:ad:
                    ac:02:69:73:12:eb:2b:92:e0:70:a6:48:4f:b2:6a:
                    01:83:6b:c6:54:63:ab:0c:a6:76:1b:7f:c9:1d:51:
                    fd:1b:34:78:b8:01:c6:1c:3a:d1:e7:06:35:55:cd:
                    b4:8d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2E:A2:2A:84:96:E2:5D:FB:61:D6:BC:D8:F1:16:1B:9B:59:6A:0B:B5
            X509v3 Authority Key Identifier:
                keyid:D2:48:18:59:56:E4:43:B5:5B:06:22:00:F9:64:53:7B:C1:0B:C1:30

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/0kgYWVbkQ7VbBiIA-WRTe8ELwTA.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/36/de875a-0576-4a15-be23-aea054cf43bb/1/0kgYWVbkQ7VbBiIA-WRTe8ELwTA.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/36/de875a-0576-4a15-be23-aea054cf43bb/1/0kgYWVbkQ7VbBiIA-WRTe8ELwTA.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         72:cd:cc:01:c9:48:49:b0:dc:83:70:4d:98:23:22:6f:1a:84:
         b2:49:d5:21:cb:cb:29:d0:a3:6d:0d:ab:22:1b:af:f7:85:6c:
         63:0a:30:0b:83:b5:8c:f5:72:6b:8c:43:83:62:b7:ea:34:18:
         64:21:e8:5b:d6:8d:b8:32:25:8e:70:76:9c:09:e7:b2:7d:de:
         c8:bf:97:12:f0:d4:ce:8a:ad:b3:2c:23:ab:2e:11:41:27:e0:
         88:47:fd:d5:c3:9a:9c:aa:32:6e:4f:77:5b:b3:c0:0f:69:6c:
         fe:ff:9d:bb:a9:5e:ac:76:f3:6e:33:0e:cd:6b:78:82:a3:f2:
         d3:2b:4f:42:52:be:3a:40:e2:c7:6b:ed:2a:13:14:c2:f1:77:
         90:49:1b:68:2c:5e:a9:63:75:37:18:9d:c5:0e:a9:0c:ec:bc:
         28:1c:f4:d2:d3:d3:8d:97:ce:af:97:68:7b:3a:3f:c1:e3:76:
         9e:df:5f:6f:4c:19:2c:3e:ce:ce:6c:ec:31:52:be:27:46:26:
         ba:51:04:4d:07:a2:6e:a7:7f:73:79:66:1f:e9:65:bb:a7:ec:
         2c:7c:bc:f1:f5:39:03:5c:9e:16:9f:e5:ea:c8:99:43:c0:e8:
         d4:db:c8:0f:85:cb:dc:c2:52:01:30:a2:e4:87:45:5a:4d:c9:
         60:ac:d5:83
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----