Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/42/bf58c5-f3e2-41ac-a216-4a67e4d056ab/1/K6cIjjnnrYgXt9EOoqW4oJikegs.mft
File:                     K6cIjjnnrYgXt9EOoqW4oJikegs.mft (raw, json)
Hash identifier:          f9KUPpffUbWgJNvaFvuDE3D09geWwvd7T9lw/WhHHx8=
Subject key identifier:   3B:A5:C4:59:86:6D:B6:1C:E6:2C:6E:B4:53:8F:E2:78:BB:9E:56:53
Authority key identifier: 2B:A7:08:8E:39:E7:AD:88:17:B7:D1:0E:A2:A5:B8:A0:98:A4:7A:0B
Certificate issuer:       /CN=2ba7088e39e7ad8817b7d10ea2a5b8a098a47a0b
Certificate serial:       01962FAB77ECCBB0DD2A54E1098471C92A94
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/K6cIjjnnrYgXt9EOoqW4oJikegs.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/42/bf58c5-f3e2-41ac-a216-4a67e4d056ab/1/K6cIjjnnrYgXt9EOoqW4oJikegs.mft
Manifest number:          14ED
Signing time:             Sun 13 Apr 2025 15:01:28 +0000
Manifest this update:     Sun 13 Apr 2025 15:01:28 +0000
Manifest next update:     Mon 14 Apr 2025 15:01:28 +0000
Files and hashes:         1: K6cIjjnnrYgXt9EOoqW4oJikegs.crl (hash: wNnQEGL4lQql0HVie1a7J9uA73FxZMOXbeMWk2b3qmE=)
                          2: nFthzao_iVS1TdMPq7jAXyRRLuU.roa (hash: NXsb3alCPuDvQ88g31RvJaxIIcKhEe221c9ghi3si40=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2f:ab:77:ec:cb:b0:dd:2a:54:e1:09:84:71:c9:2a:94
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2ba7088e39e7ad8817b7d10ea2a5b8a098a47a0b
        Validity
            Not Before: Apr 13 15:01:28 2025 GMT
            Not After : Apr 14 15:01:28 2025 GMT
        Subject: CN=3ba5c459866db61ce62c6eb4538fe278bb9e5653
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a3:3a:f9:6f:4f:5a:9f:69:31:c2:23:0a:43:34:
                    68:d9:cb:75:74:24:2c:a6:59:a4:85:83:f3:f9:dc:
                    6e:0c:54:c2:5a:33:ab:fd:b5:48:2e:30:ac:21:16:
                    14:51:23:ad:b5:9e:a2:8e:2a:c5:5f:ea:62:47:fe:
                    f3:03:94:7d:59:f4:ef:49:5e:95:59:fd:a8:48:a1:
                    5f:00:20:f5:f4:ea:48:41:81:f9:c0:e4:34:38:84:
                    7f:db:57:37:b0:6a:18:e4:d6:ce:9e:a7:67:4d:e3:
                    5d:b7:91:3f:9b:81:99:de:16:25:9b:34:f1:f7:20:
                    0e:ee:ac:5d:63:1a:a7:da:03:85:6c:98:22:4b:bf:
                    a8:94:ff:fc:40:d4:72:47:36:6e:49:54:09:67:1d:
                    3e:21:92:5f:1a:a3:66:0e:75:ca:be:82:81:c6:fc:
                    4d:67:84:c2:fe:e8:2c:cd:54:65:7e:e1:fb:3f:ea:
                    e1:99:de:0d:43:5d:06:40:3a:bb:4d:55:af:be:b9:
                    02:26:ed:e2:9e:03:9f:7f:3e:9f:48:fe:d5:b8:8b:
                    96:a2:c7:89:00:f4:45:b1:70:3f:15:06:3e:f5:13:
                    86:6d:fc:5c:32:6f:aa:7c:b1:43:d6:2f:3d:4c:0c:
                    60:ea:1b:a6:66:fc:a6:3c:02:f4:22:6a:90:60:7f:
                    89:9d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3B:A5:C4:59:86:6D:B6:1C:E6:2C:6E:B4:53:8F:E2:78:BB:9E:56:53
            X509v3 Authority Key Identifier:
                keyid:2B:A7:08:8E:39:E7:AD:88:17:B7:D1:0E:A2:A5:B8:A0:98:A4:7A:0B

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/K6cIjjnnrYgXt9EOoqW4oJikegs.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/42/bf58c5-f3e2-41ac-a216-4a67e4d056ab/1/K6cIjjnnrYgXt9EOoqW4oJikegs.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/42/bf58c5-f3e2-41ac-a216-4a67e4d056ab/1/K6cIjjnnrYgXt9EOoqW4oJikegs.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         4f:57:de:66:27:92:8e:b2:40:c1:98:4c:76:39:44:9a:44:65:
         27:2b:4b:c8:5e:f7:6c:ac:5d:d4:61:b4:db:4c:90:dc:26:d9:
         72:ca:3c:f0:c9:ae:e1:93:77:28:dc:8c:ed:fe:4c:86:04:db:
         4e:25:4f:ee:0a:12:f2:c4:67:11:e9:4c:d1:87:b5:fe:f6:43:
         1e:41:5f:6b:a1:53:da:d3:e0:ac:72:54:f4:e3:7d:4d:66:98:
         af:f7:f6:b7:4d:5c:e6:29:99:f4:b1:31:21:98:d1:8d:02:53:
         72:93:7d:9f:32:68:a3:78:2b:f7:9e:35:c4:9e:ff:3f:ff:94:
         5f:14:ca:3b:93:a6:66:ea:51:91:8f:e5:0e:6b:ff:d3:10:25:
         fe:07:54:c4:ff:d3:bb:d5:3d:d1:50:c8:90:21:9c:22:79:de:
         09:a9:07:96:4c:11:d6:72:b9:5d:70:6a:a2:8c:78:2a:d2:e8:
         d6:07:10:24:b3:d4:e7:98:71:c3:b2:b6:32:85:40:c7:d2:47:
         44:f0:33:4d:18:42:9f:f1:c9:e4:8e:b8:9a:43:99:3c:d5:eb:
         f9:c5:01:dd:5f:95:b1:cd:63:c3:4e:57:cc:ff:4b:91:a7:b0:
         10:cc:8f:1e:77:20:94:14:82:90:fa:ad:17:4f:87:8f:f9:e4:
         5e:55:c2:eb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----