Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/54/86d1aa-6475-4013-86ea-38c756aa4b50/1/81ROkj2IO6zkqj9-9wByr-NRHyg.mft
File:                     81ROkj2IO6zkqj9-9wByr-NRHyg.mft (raw, json)
Hash identifier:          SjxVaZWX9L/W9JChM3f1uOCnLArUAtNs4akwQttMy+A=
Subject key identifier:   E1:07:C6:CA:63:D3:BE:BA:35:58:CF:AD:05:2E:BC:87:16:70:A5:44
Authority key identifier: F3:54:4E:92:3D:88:3B:AC:E4:AA:3F:7E:F7:00:72:AF:E3:51:1F:28
Certificate issuer:       /CN=f3544e923d883bace4aa3f7ef70072afe3511f28
Certificate serial:       01962F3D6E3EA70AA8234DBD78E09EBB2A4A
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/81ROkj2IO6zkqj9-9wByr-NRHyg.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/54/86d1aa-6475-4013-86ea-38c756aa4b50/1/81ROkj2IO6zkqj9-9wByr-NRHyg.mft
Manifest number:          0229
Signing time:             Sun 13 Apr 2025 13:01:17 +0000
Manifest this update:     Sun 13 Apr 2025 13:01:17 +0000
Manifest next update:     Mon 14 Apr 2025 13:01:17 +0000
Files and hashes:         1: 81ROkj2IO6zkqj9-9wByr-NRHyg.crl (hash: +LTpzZ4au+NxSq6C242dudGJyI9ZETbm1HOFcuxlheE=)
                          2: Gv4EnRb88MY5aVLEY17_OZ0Wl08.roa (hash: WkS34pHH/XzAUtEopuzXUXT2LtpQyPdLz2PYfITDjLQ=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2f:3d:6e:3e:a7:0a:a8:23:4d:bd:78:e0:9e:bb:2a:4a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=f3544e923d883bace4aa3f7ef70072afe3511f28
        Validity
            Not Before: Apr 13 13:01:17 2025 GMT
            Not After : Apr 14 13:01:17 2025 GMT
        Subject: CN=e107c6ca63d3beba3558cfad052ebc871670a544
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9b:74:86:27:c4:2f:2e:e7:ea:09:6d:54:6c:df:
                    78:7a:61:4d:fc:fd:54:1d:18:e7:28:ab:4b:1d:da:
                    bb:5d:5a:69:8e:b2:5f:d4:80:63:4d:f3:8c:cd:f4:
                    d9:3c:ca:ab:36:fe:b8:e4:7b:bf:aa:29:39:5a:61:
                    c8:87:55:62:02:1b:de:4a:8d:18:93:35:63:b7:72:
                    2d:4a:ec:fa:04:64:a3:a0:6e:76:ce:f6:b7:8f:85:
                    1c:10:62:04:12:6b:fd:c9:a3:c5:9d:23:d5:ff:4b:
                    3d:c3:d0:5f:78:30:f3:c4:43:eb:32:8b:29:9a:bb:
                    22:3f:aa:bf:4f:85:99:5e:96:47:14:c5:c5:ba:12:
                    b4:2c:c3:59:31:33:a8:92:84:bb:55:97:51:37:53:
                    7e:02:a5:ea:33:5e:8e:6e:d3:23:63:b5:16:54:3e:
                    99:3c:f7:8d:ac:d0:98:bb:6f:e9:f7:80:69:f9:15:
                    ec:b8:e7:3c:d1:35:ba:d8:a6:84:74:d8:30:43:f9:
                    be:b5:44:ce:39:f1:d9:4d:f3:2f:24:3c:f9:94:83:
                    02:b3:04:c2:42:de:c6:b2:ff:d5:8d:96:6c:70:39:
                    ec:34:c8:72:c9:36:6d:42:fa:a9:0f:0a:2c:61:2d:
                    5f:b7:2c:71:0a:97:f8:a2:1f:b8:cd:f4:a6:7d:42:
                    fb:ff
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E1:07:C6:CA:63:D3:BE:BA:35:58:CF:AD:05:2E:BC:87:16:70:A5:44
            X509v3 Authority Key Identifier:
                keyid:F3:54:4E:92:3D:88:3B:AC:E4:AA:3F:7E:F7:00:72:AF:E3:51:1F:28

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/81ROkj2IO6zkqj9-9wByr-NRHyg.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/54/86d1aa-6475-4013-86ea-38c756aa4b50/1/81ROkj2IO6zkqj9-9wByr-NRHyg.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/54/86d1aa-6475-4013-86ea-38c756aa4b50/1/81ROkj2IO6zkqj9-9wByr-NRHyg.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         a7:37:75:a1:bb:9e:f3:1d:ea:69:28:c6:9a:68:f3:6d:92:ee:
         09:5b:c2:e9:d6:91:3d:5e:36:87:a5:ad:a0:e9:57:d7:49:0f:
         b4:0c:7d:08:e8:a8:05:7b:7f:9a:5d:b9:ea:01:57:58:97:06:
         cd:9b:9e:83:53:f6:a8:d0:dd:64:35:e8:b6:65:d3:69:9e:fb:
         48:a1:1e:b5:f3:f3:b6:79:7e:ef:4b:a1:10:84:4b:25:79:65:
         e7:f3:d9:82:30:8f:db:7a:b0:26:40:2e:a1:01:9e:0c:22:f3:
         d6:66:9a:f7:ed:92:f1:76:f1:c3:d0:02:88:ab:bf:49:f9:16:
         c7:2d:7d:11:50:db:35:6e:9f:12:91:8b:67:27:f8:c4:04:ed:
         b6:cf:60:73:c4:9c:10:a0:cb:13:48:a8:8e:13:22:76:5b:73:
         52:2f:09:1d:0c:e9:0c:32:f7:4e:ce:ae:a4:29:cb:31:6a:b8:
         4b:a5:9c:35:27:77:51:2a:c8:a0:d6:ec:26:b0:39:68:1c:34:
         3c:d4:f0:0e:2f:bd:b6:bd:1e:3a:f7:1c:01:ce:1c:6c:43:6f:
         2e:6c:ba:51:52:99:60:e3:5f:1b:94:d7:17:90:84:d4:6d:a1:
         f6:c3:fc:e4:4a:ac:fb:16:d4:e9:e1:49:22:aa:ef:32:60:99:
         07:a3:f8:d6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----