Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3e/b1282f-71c5-47e7-aea1-4d05498aa97d/1/sPiohfd3bSq5m7TyDoTTBuA5SqM.mft
File:                     sPiohfd3bSq5m7TyDoTTBuA5SqM.mft (raw, json)
Hash identifier:          EVF1oq6jb8tO6qoTM8D3gNLp2B7HMr5BC7BYHa3kv/E=
Subject key identifier:   01:40:1C:F5:5A:D3:C7:DF:3F:7F:44:8B:0D:E6:BF:6D:67:8D:2E:A0
Authority key identifier: B0:F8:A8:85:F7:77:6D:2A:B9:9B:B4:F2:0E:84:D3:06:E0:39:4A:A3
Certificate issuer:       /CN=b0f8a885f7776d2ab99bb4f20e84d306e0394aa3
Certificate serial:       01962E2AF2B0CDE7F39AEC47D7D8493D6485
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/sPiohfd3bSq5m7TyDoTTBuA5SqM.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/3e/b1282f-71c5-47e7-aea1-4d05498aa97d/1/sPiohfd3bSq5m7TyDoTTBuA5SqM.mft
Manifest number:          127D
Signing time:             Sun 13 Apr 2025 08:01:28 +0000
Manifest this update:     Sun 13 Apr 2025 08:01:28 +0000
Manifest next update:     Mon 14 Apr 2025 08:01:28 +0000
Files and hashes:         1: SvV3htVhXEPI7wFXdPP_R5R2jOo.roa (hash: ADbpdowWW8HzIQ0XmIe2lqnPixhQxjU2ME36RexdQ8I=)
                          2: sPiohfd3bSq5m7TyDoTTBuA5SqM.crl (hash: kwn4kfpGGAYfdCsNyN6K1UNQ3mOvYBQVo2slpE2G85Y=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2e:2a:f2:b0:cd:e7:f3:9a:ec:47:d7:d8:49:3d:64:85
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b0f8a885f7776d2ab99bb4f20e84d306e0394aa3
        Validity
            Not Before: Apr 13 08:01:28 2025 GMT
            Not After : Apr 14 08:01:28 2025 GMT
        Subject: CN=01401cf55ad3c7df3f7f448b0de6bf6d678d2ea0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c8:e5:99:4a:8b:6a:46:cb:4b:bd:e3:f2:17:ac:
                    12:9d:cf:a7:55:89:fc:02:7b:5d:67:62:a6:b3:3b:
                    b5:d5:cf:d0:c6:c9:ca:1c:1f:7a:41:4d:ab:0d:44:
                    3f:bd:c2:86:1e:0a:7d:55:48:34:e3:6c:5d:15:c3:
                    4d:86:32:cf:78:c2:24:5e:2f:6b:77:5a:a1:08:55:
                    ac:cb:2f:9a:20:a9:22:3d:18:39:8c:02:a7:d6:bf:
                    9f:58:83:36:d7:ef:32:1c:20:f8:bf:60:59:77:40:
                    10:cc:e8:26:c4:bf:28:00:6d:be:14:2b:74:59:c8:
                    56:97:c1:ca:a9:ac:e1:dd:5a:6a:db:85:3c:6a:51:
                    c4:4e:ab:fb:99:ae:21:8a:9c:41:df:ca:da:b3:9e:
                    53:78:0d:53:df:f8:1f:07:ef:ab:38:de:5d:08:2a:
                    55:5e:25:f1:dd:ae:7f:4d:7e:ad:8a:61:5f:59:a4:
                    e6:33:c1:06:39:b4:aa:36:df:05:77:63:61:cf:4e:
                    84:b9:c7:f7:dd:a5:9e:18:18:9c:e3:35:2e:13:89:
                    ac:a1:7b:48:97:4f:a7:31:5c:5b:b5:26:7d:6c:99:
                    5e:6a:0e:80:63:3a:00:d8:60:28:09:fe:49:70:f7:
                    d4:56:e0:7f:ba:04:6e:54:75:2b:42:60:c9:dc:b5:
                    38:e1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                01:40:1C:F5:5A:D3:C7:DF:3F:7F:44:8B:0D:E6:BF:6D:67:8D:2E:A0
            X509v3 Authority Key Identifier:
                keyid:B0:F8:A8:85:F7:77:6D:2A:B9:9B:B4:F2:0E:84:D3:06:E0:39:4A:A3

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/sPiohfd3bSq5m7TyDoTTBuA5SqM.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3e/b1282f-71c5-47e7-aea1-4d05498aa97d/1/sPiohfd3bSq5m7TyDoTTBuA5SqM.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/3e/b1282f-71c5-47e7-aea1-4d05498aa97d/1/sPiohfd3bSq5m7TyDoTTBuA5SqM.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         26:fd:f0:92:b3:0e:d6:2f:d3:7c:73:cd:5b:50:87:88:61:d1:
         12:dd:59:70:3c:27:4d:9d:81:d9:34:15:04:e9:82:bf:9a:b6:
         39:28:ff:3e:b3:a8:9e:ba:90:6f:9b:e6:44:3a:7f:33:7b:e8:
         8e:98:e0:7c:6e:82:0b:46:1e:3d:d6:ce:c9:09:dd:00:13:fe:
         3a:e9:2f:ec:31:2e:f2:ae:2a:1f:67:e2:c5:35:58:d4:d9:be:
         4e:e4:f7:48:ed:50:dd:7e:43:fa:39:1c:b0:b1:d9:f3:f2:ba:
         06:0d:03:b1:fc:be:72:28:7b:89:fc:85:e4:62:78:48:01:8b:
         02:51:35:a4:34:08:71:32:43:91:a3:ed:c2:6f:1e:52:90:c2:
         5b:c7:85:f7:52:fe:46:f5:28:65:0a:f8:b7:30:fb:ae:71:ec:
         1c:fe:63:61:44:aa:be:5e:a3:d2:0c:41:60:ca:db:ba:0c:26:
         dd:e3:b3:fe:f8:49:63:a1:ef:e6:0a:e9:fa:d3:bc:77:19:5b:
         75:36:e8:6c:92:3f:31:ec:ff:8e:8b:80:a8:79:0f:35:fd:27:
         f0:3d:d3:43:b0:78:39:f3:fe:33:d9:d5:eb:bc:77:95:e4:43:
         61:40:75:d5:4b:71:0c:5c:4d:b0:d1:c0:ee:23:8b:e6:9c:0c:
         4d:05:e5:cb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----