Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/55/95dbce-d4e9-41f1-82dc-e84cb1da21bd/1/Ks2NFoLmYiwcCSN7xBqlFmaWcrc.mft
File:                     Ks2NFoLmYiwcCSN7xBqlFmaWcrc.mft (raw, json)
Hash identifier:          FLw4NZBZ+aPBAk7z/Eiri9N7/Au75knbnaB0GWQYLwI=
Subject key identifier:   F2:70:9A:B5:E8:AB:D1:15:03:BF:4E:8C:5C:D2:C3:3E:F8:6A:35:A2
Authority key identifier: 2A:CD:8D:16:82:E6:62:2C:1C:09:23:7B:C4:1A:A5:16:66:96:72:B7
Certificate issuer:       /CN=2acd8d1682e6622c1c09237bc41aa516669672b7
Certificate serial:       01962F064DB711F65028FC104452D7FA05C4
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/Ks2NFoLmYiwcCSN7xBqlFmaWcrc.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/55/95dbce-d4e9-41f1-82dc-e84cb1da21bd/1/Ks2NFoLmYiwcCSN7xBqlFmaWcrc.mft
Manifest number:          1499
Signing time:             Sun 13 Apr 2025 12:01:04 +0000
Manifest this update:     Sun 13 Apr 2025 12:01:04 +0000
Manifest next update:     Mon 14 Apr 2025 12:01:04 +0000
Files and hashes:         1: Ks2NFoLmYiwcCSN7xBqlFmaWcrc.crl (hash: 3v3+/Yv76LtUkv1k4z/MJDF+4uigoRG0xOUp1AyKnlc=)
                          2: iKZxL2ITs2UEzwBih25U8l0JZY4.roa (hash: vWT6oURLAcf2YPbSqMzxuY7JjVV7uzKdKfyzAxVTuCQ=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2f:06:4d:b7:11:f6:50:28:fc:10:44:52:d7:fa:05:c4
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2acd8d1682e6622c1c09237bc41aa516669672b7
        Validity
            Not Before: Apr 13 12:01:04 2025 GMT
            Not After : Apr 14 12:01:04 2025 GMT
        Subject: CN=f2709ab5e8abd11503bf4e8c5cd2c33ef86a35a2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:99:5b:5c:29:9f:bf:06:6b:20:b4:14:2d:a6:e6:
                    ea:e9:1a:ca:4b:08:66:5b:54:c8:35:19:fc:78:51:
                    de:19:39:49:f6:14:dc:ef:fb:a1:10:3f:b7:55:7b:
                    73:5c:20:1a:cd:0f:4d:65:26:70:56:a4:a8:84:1b:
                    53:9c:44:3d:25:e6:57:a3:aa:c9:5a:30:20:a7:d4:
                    dd:0f:62:65:4c:ae:c3:e4:4a:d3:17:52:b0:7b:02:
                    ec:34:85:c0:44:4e:a5:41:f8:29:bf:7a:e4:39:db:
                    38:41:a7:cf:0b:7f:db:ef:80:5c:a1:e2:be:cb:e8:
                    a6:ed:d3:fe:73:70:69:18:d3:68:d7:6b:9d:e2:c2:
                    92:0e:e0:3a:01:d8:87:a5:62:1c:94:f3:80:8e:7f:
                    14:79:6f:34:2a:fb:b9:5e:00:f8:1e:68:b1:f0:b7:
                    c4:9b:de:72:b8:67:d1:bf:d3:91:e2:0b:4f:8f:35:
                    18:e1:cd:77:7c:13:8e:c5:12:fe:1e:e6:9d:d2:f0:
                    ad:de:84:c1:23:07:ca:0b:b4:d9:3c:10:cf:6f:ea:
                    66:65:1b:a7:76:d2:af:81:63:5e:0e:62:66:b7:c2:
                    e0:db:06:2e:fb:7c:a1:cf:65:86:ec:1a:96:3a:2b:
                    05:52:32:f2:7d:ea:b4:e1:72:25:4e:39:45:3d:c0:
                    97:c1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F2:70:9A:B5:E8:AB:D1:15:03:BF:4E:8C:5C:D2:C3:3E:F8:6A:35:A2
            X509v3 Authority Key Identifier:
                keyid:2A:CD:8D:16:82:E6:62:2C:1C:09:23:7B:C4:1A:A5:16:66:96:72:B7

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Ks2NFoLmYiwcCSN7xBqlFmaWcrc.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/55/95dbce-d4e9-41f1-82dc-e84cb1da21bd/1/Ks2NFoLmYiwcCSN7xBqlFmaWcrc.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/55/95dbce-d4e9-41f1-82dc-e84cb1da21bd/1/Ks2NFoLmYiwcCSN7xBqlFmaWcrc.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         09:d4:69:60:97:1e:f0:27:b0:18:83:11:41:86:ec:20:32:0d:
         48:da:78:d0:fb:d8:38:9c:9f:e2:e1:fe:ca:34:93:a4:97:61:
         14:2a:0d:01:1e:92:cb:2d:21:ad:ab:ab:1d:62:5a:7c:4a:57:
         64:96:de:6f:1b:29:3a:97:d1:d8:d2:b9:5f:87:02:87:df:ea:
         fd:05:69:f5:b6:a0:69:b9:d0:fc:d7:cf:a8:b5:13:60:20:10:
         55:e9:25:cf:17:7f:b7:d7:53:24:99:5e:77:5c:fc:36:ff:9e:
         f6:f4:77:56:83:c0:eb:02:7b:06:25:a2:44:2c:5c:18:c8:2c:
         69:40:74:72:00:64:50:39:42:9f:61:8b:c2:08:4f:95:bf:94:
         b0:76:9e:be:31:53:cf:b8:e5:4d:6a:e2:b8:1c:34:23:ab:da:
         d0:97:9d:37:c8:98:21:36:98:5d:40:31:0c:dc:e0:b8:71:3c:
         14:d6:8e:b9:43:65:41:dd:b9:33:80:24:88:2c:dd:d2:16:db:
         4e:df:cf:ca:9f:58:e5:dd:1f:17:f7:d9:84:45:38:bf:1e:95:
         9f:61:47:2d:87:00:e8:ae:83:94:77:b6:14:c8:b5:b6:26:a1:
         37:96:6f:08:c0:a2:50:ba:76:b3:78:e7:92:c5:5d:58:3b:50:
         f8:23:b5:cd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----