Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/51/68d348-ab65-415f-9751-ca1fbf7bb8c8/1/8spAIO_uYcMQasn-znnHpo9xqcs.mft
File:                     8spAIO_uYcMQasn-znnHpo9xqcs.mft (raw, json)
Hash identifier:          PeXmFuZ0srQevd/2/v/UQ3/Ed0NSKtNHUKv603WJWzY=
Subject key identifier:   38:79:4A:0B:F3:A4:37:6C:F5:0D:85:41:8A:F4:F0:CE:6F:EB:B3:01
Authority key identifier: F2:CA:40:20:EF:EE:61:C3:10:6A:C9:FE:CE:79:C7:A6:8F:71:A9:CB
Certificate issuer:       /CN=f2ca4020efee61c3106ac9fece79c7a68f71a9cb
Certificate serial:       01962F3DCED28DE3A8FD450E981307F2EDF3
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/8spAIO_uYcMQasn-znnHpo9xqcs.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/51/68d348-ab65-415f-9751-ca1fbf7bb8c8/1/8spAIO_uYcMQasn-znnHpo9xqcs.mft
Manifest number:          08C5
Signing time:             Sun 13 Apr 2025 13:01:41 +0000
Manifest this update:     Sun 13 Apr 2025 13:01:41 +0000
Manifest next update:     Mon 14 Apr 2025 13:01:41 +0000
Files and hashes:         1: 8spAIO_uYcMQasn-znnHpo9xqcs.crl (hash: gn0FtdNHVcT+PaencE5b6VjzauqpXS3S2nw+/B8GQMg=)
                          2: mKP-r2WNz-DcN8jHguqt0IynJdI.roa (hash: 64sCq3JbYFHT/xnTN/Iz1j1wV1/No8n++lWEXivZPic=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2f:3d:ce:d2:8d:e3:a8:fd:45:0e:98:13:07:f2:ed:f3
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=f2ca4020efee61c3106ac9fece79c7a68f71a9cb
        Validity
            Not Before: Apr 13 13:01:41 2025 GMT
            Not After : Apr 14 13:01:41 2025 GMT
        Subject: CN=38794a0bf3a4376cf50d85418af4f0ce6febb301
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c0:03:6c:35:58:c2:8e:38:01:e6:72:5c:1b:d1:
                    dd:2d:71:1e:7e:9d:7b:53:90:47:a6:b7:8c:09:94:
                    27:af:5a:85:9e:f1:8b:27:54:cc:6d:1c:8d:fb:9e:
                    12:79:6e:d4:87:f4:27:2e:24:ac:b9:94:5f:2e:86:
                    1e:3e:2f:95:3b:20:96:10:e5:e2:d9:f2:8c:24:c7:
                    8f:5b:04:6b:2c:a2:22:d9:4e:44:21:64:22:0b:d5:
                    35:c4:08:28:fa:8d:f3:bc:15:c5:be:5e:5b:6a:32:
                    ea:dd:44:db:f4:72:61:a4:f8:b7:81:85:d4:35:50:
                    f5:7e:07:dd:ee:9e:c7:dd:fa:2f:a4:d0:13:0c:42:
                    a1:71:59:50:34:3e:92:92:c0:8c:50:e3:24:0d:85:
                    40:45:2c:0d:c2:80:78:be:89:4b:6e:f6:4b:17:fd:
                    f0:4f:3f:1a:85:09:3f:aa:f6:1d:ee:84:6b:c3:a1:
                    de:db:c4:b0:f5:86:f4:98:7c:ee:0e:58:ec:d3:bc:
                    8f:7c:de:9f:83:02:5a:1f:b5:f8:01:31:96:af:1d:
                    8b:a7:fe:11:ec:b5:4d:dd:f8:53:57:96:62:e3:de:
                    f0:71:f4:03:12:78:df:fc:ab:a2:26:5b:fb:52:fb:
                    c5:e8:18:1d:12:7d:31:64:44:a4:f4:af:b3:31:3e:
                    e9:75
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                38:79:4A:0B:F3:A4:37:6C:F5:0D:85:41:8A:F4:F0:CE:6F:EB:B3:01
            X509v3 Authority Key Identifier:
                keyid:F2:CA:40:20:EF:EE:61:C3:10:6A:C9:FE:CE:79:C7:A6:8F:71:A9:CB

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/8spAIO_uYcMQasn-znnHpo9xqcs.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/51/68d348-ab65-415f-9751-ca1fbf7bb8c8/1/8spAIO_uYcMQasn-znnHpo9xqcs.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/51/68d348-ab65-415f-9751-ca1fbf7bb8c8/1/8spAIO_uYcMQasn-znnHpo9xqcs.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         5a:03:78:36:22:0d:bb:8e:53:8f:f7:5d:92:8b:f0:ed:ec:da:
         d6:ee:30:d6:fd:76:7e:07:0e:d8:2c:4c:2a:c5:be:8b:01:65:
         bc:22:de:c2:9a:c4:72:29:ad:15:fa:65:df:07:b1:17:84:b4:
         10:af:df:e8:eb:50:ae:42:ef:6f:6a:21:90:3e:f3:26:6a:fd:
         e0:df:7a:9a:50:8b:c8:0b:be:f8:bd:56:5e:07:81:b9:27:bc:
         87:45:66:43:43:30:95:cb:0d:74:cd:b6:07:e0:d4:3b:52:89:
         15:30:32:3d:c0:82:cd:38:a9:10:a8:15:c9:23:1e:26:99:65:
         ac:2c:5a:80:c5:b7:09:32:6f:08:a8:ab:49:f5:e9:4d:4e:24:
         d6:2e:05:96:1a:f7:63:28:8a:f3:39:73:0f:af:f1:ba:cb:21:
         dd:49:7f:5c:e6:c6:d0:4a:25:a2:56:05:3b:c8:20:25:35:c1:
         12:a6:0d:1b:99:a2:89:c4:cf:50:57:0e:07:c9:f1:30:97:63:
         76:42:d4:b3:c1:85:21:25:61:44:13:1b:3e:04:50:c8:cb:98:
         c3:60:02:83:70:97:fc:9f:ea:03:f4:c5:d2:9a:45:95:9a:45:
         92:e4:94:9f:78:d0:2e:51:0a:2d:2c:02:8b:10:39:bf:7f:cd:
         c6:78:ad:df
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----