Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/48/71ee7c-3c04-4a9c-9df7-0bf5905b35ef/1/2jQhazvZIbbGYYeoyGpKS7DuUj8.mft
File:                     2jQhazvZIbbGYYeoyGpKS7DuUj8.mft (raw, json)
Hash identifier:          TEd+I+fv6kY5hsdONjOukHVSI0djrGPxUgzBlGwh/w4=
Subject key identifier:   42:09:72:57:A5:4F:FF:C3:45:39:17:3A:E6:C4:35:99:96:4F:93:FB
Authority key identifier: DA:34:21:6B:3B:D9:21:B6:C6:61:87:A8:C8:6A:4A:4B:B0:EE:52:3F
Certificate issuer:       /CN=da34216b3bd921b6c66187a8c86a4a4bb0ee523f
Certificate serial:       01962F0690F1AF95AA01C564FC8B849DB25A
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/2jQhazvZIbbGYYeoyGpKS7DuUj8.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/48/71ee7c-3c04-4a9c-9df7-0bf5905b35ef/1/2jQhazvZIbbGYYeoyGpKS7DuUj8.mft
Manifest number:          11F1
Signing time:             Sun 13 Apr 2025 12:01:21 +0000
Manifest this update:     Sun 13 Apr 2025 12:01:21 +0000
Manifest next update:     Mon 14 Apr 2025 12:01:21 +0000
Files and hashes:         1: 2jQhazvZIbbGYYeoyGpKS7DuUj8.crl (hash: eCZU/M+RKrowovJGXzbHlfTF88Wtw+Vic4hLS9zhjz0=)
                          2: y-rAx3x5ggb3kBBIMyQl2KhriYw.roa (hash: j/sr0gEHuELryIqb8wmwmOpvCJwyct02mKuP2NU5Abs=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2f:06:90:f1:af:95:aa:01:c5:64:fc:8b:84:9d:b2:5a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=da34216b3bd921b6c66187a8c86a4a4bb0ee523f
        Validity
            Not Before: Apr 13 12:01:21 2025 GMT
            Not After : Apr 14 12:01:21 2025 GMT
        Subject: CN=42097257a54fffc34539173ae6c43599964f93fb
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ac:a4:6c:9f:a6:3b:00:c3:22:25:af:9c:48:66:
                    ac:16:b6:a7:01:10:0a:92:8f:f4:c5:26:2e:47:71:
                    b9:87:8e:60:d5:58:20:8f:cd:b9:02:b5:5a:2a:57:
                    34:e8:5f:55:9b:f1:2f:c3:25:a4:9d:9b:e9:73:6d:
                    6b:6a:0a:ca:db:25:dc:ce:52:01:f1:1c:0c:76:9c:
                    19:05:e2:99:30:b9:44:bb:94:27:46:ee:57:58:a1:
                    d4:c7:a7:af:65:7c:81:46:83:9e:66:55:7e:c7:5e:
                    9e:39:6f:d8:9b:5b:64:b9:8c:f1:0a:ff:18:0a:ad:
                    74:e4:23:b4:91:06:66:36:a7:c8:96:cc:2a:aa:98:
                    61:2e:49:5e:bb:55:27:93:f7:6f:d9:c3:db:ec:ae:
                    86:8e:d6:c1:3f:d3:ac:37:5e:df:b6:ae:82:6f:d5:
                    77:08:23:5d:fb:75:9b:03:55:4d:74:4b:ea:1d:6e:
                    cd:49:b8:8e:1a:88:61:c8:fb:b7:8d:54:d2:f8:3b:
                    cc:a3:52:5d:97:32:b6:48:77:87:00:ee:47:f3:dd:
                    67:d9:85:06:f0:2b:a7:de:0b:b8:57:b4:cc:20:07:
                    39:f6:30:3c:df:13:45:9d:34:6f:b9:01:83:e1:47:
                    8a:7c:48:82:44:b2:aa:08:3b:c3:3a:0f:e1:73:70:
                    dd:99
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                42:09:72:57:A5:4F:FF:C3:45:39:17:3A:E6:C4:35:99:96:4F:93:FB
            X509v3 Authority Key Identifier:
                keyid:DA:34:21:6B:3B:D9:21:B6:C6:61:87:A8:C8:6A:4A:4B:B0:EE:52:3F

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/2jQhazvZIbbGYYeoyGpKS7DuUj8.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/48/71ee7c-3c04-4a9c-9df7-0bf5905b35ef/1/2jQhazvZIbbGYYeoyGpKS7DuUj8.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/48/71ee7c-3c04-4a9c-9df7-0bf5905b35ef/1/2jQhazvZIbbGYYeoyGpKS7DuUj8.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         88:76:a9:12:83:0d:3a:82:2b:44:b4:58:99:32:14:73:5e:69:
         0c:59:46:25:2f:c5:fb:21:36:a1:05:bd:ee:a3:a0:86:52:25:
         5c:9b:55:16:d5:25:e3:e1:de:d7:6c:2b:be:88:93:fc:eb:73:
         5a:d9:b4:06:59:50:82:fd:19:34:92:6e:51:08:10:2d:fa:9b:
         b7:c7:62:26:41:00:35:7d:f9:70:38:4e:ea:25:c2:5c:1c:49:
         63:29:ec:a8:e3:5b:6d:83:69:e5:d3:83:31:17:de:19:51:77:
         6b:dd:3f:b1:c0:4d:54:cc:f4:c2:05:f2:5a:41:5b:e9:13:2c:
         96:0b:d0:4e:a4:3f:ca:74:1a:b7:83:7e:1a:46:a0:f2:40:e1:
         bc:66:48:3d:88:ce:35:ce:78:b8:75:6c:ca:a0:92:15:1f:f0:
         75:29:40:04:3d:2d:a6:bb:40:14:c8:73:74:db:f8:2e:23:54:
         0b:c9:d5:c1:5b:55:78:06:7b:d7:77:be:e2:53:a1:0b:d6:8e:
         0f:af:03:86:98:db:1a:c7:21:2e:ee:74:c9:a5:2c:af:e1:87:
         6b:8a:80:eb:73:45:19:80:d4:39:05:6b:fb:c5:c7:1d:0b:46:
         5a:e4:ed:8b:ed:18:c8:65:09:21:98:f7:93:a5:03:3c:d7:1a:
         b0:31:9f:0a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----