Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/55/98abe5-bd01-464f-96ab-40b6d67fcd94/1/L2pDTEtdI5xObkG35YXI1Y-Jlas.mft
File:                     L2pDTEtdI5xObkG35YXI1Y-Jlas.mft (raw, json)
Hash identifier:          vaHs87cYtpVK6hxJczGXY13RNLGX7MCk/ywPj9YB1Io=
Subject key identifier:   C8:F1:7D:7C:72:43:6F:DD:D2:61:C4:37:54:09:12:3B:7E:BA:45:B3
Authority key identifier: 2F:6A:43:4C:4B:5D:23:9C:4E:6E:41:B7:E5:85:C8:D5:8F:89:95:AB
Certificate issuer:       /CN=2f6a434c4b5d239c4e6e41b7e585c8d58f8995ab
Certificate serial:       01962F74BC1DF199A3DA6974E98829A34E06
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/L2pDTEtdI5xObkG35YXI1Y-Jlas.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/55/98abe5-bd01-464f-96ab-40b6d67fcd94/1/L2pDTEtdI5xObkG35YXI1Y-Jlas.mft
Manifest number:          12A5
Signing time:             Sun 13 Apr 2025 14:01:41 +0000
Manifest this update:     Sun 13 Apr 2025 14:01:41 +0000
Manifest next update:     Mon 14 Apr 2025 14:01:41 +0000
Files and hashes:         1: 1-R_5S-HoTbJj1vdtDeoFx_dxXYk.roa (hash: EHvR5uyupwNnSXoecE1yVkOoSC/Q4xz0f9J8m2hnzjI=)
                          2: 4Daq3sRA17ZdprqbzGRyjmXgl1E.roa (hash: VSeTV1A+yIJMWw7g87Rk+9SxMblNEgNbsAxn9i/toOI=)
                          3: 8QONkg1-sVvu25nrTHQAiE7_PVc.roa (hash: Y3bPcPPsDbmx1nSMSrbsDz9GOPEu4THJBnIThId/cto=)
                          4: Dy3_-2-qchhqwV6ugXKT-692o-I.roa (hash: lFXyJxAwe/vhzRI9PjKD7egxkU6i67oTKHLLv3nHv9Y=)
                          5: L2pDTEtdI5xObkG35YXI1Y-Jlas.crl (hash: BG3pfP93cX5t42nvwh65oQNv2tHOBUsPJOLmoZaIEF4=)
                          6: TUsdn5UyypZAySyIwD0122dO4hk.roa (hash: qROUQY1/zeBb3m/9z4pmEZOzjkUX8dhi6BLpMApkjMw=)
                          7: puxQYZc-bCSrSQ9uTbWytBh-eug.roa (hash: GCBmXahO4pMrxN7DjJxkuPfStuAZ5NPuhQw85mRhQ5g=)
                          8: qdxw7ICFkhNmOD2y920CquCl8Zs.roa (hash: 0IGxrItYdslNNm2Z4pvBdqn/xC9v6YAG/wAr3FTvC0g=)
                          9: qoKgk8neCLLMajChHz0fftLejzg.roa (hash: ehm4GjwYCbP5+m0/y/D+332hrTelfkErSjs/0NX8/E0=)
                          10: wqBm7rPN_QCGYMr0G_aOxp5hD2w.roa (hash: luljtEiBvQ077ULzFpsCWlvJ3NF6749HEShaCtOITcM=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2f:74:bc:1d:f1:99:a3:da:69:74:e9:88:29:a3:4e:06
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2f6a434c4b5d239c4e6e41b7e585c8d58f8995ab
        Validity
            Not Before: Apr 13 14:01:41 2025 GMT
            Not After : Apr 14 14:01:41 2025 GMT
        Subject: CN=c8f17d7c72436fddd261c4375409123b7eba45b3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9c:f3:4b:15:63:36:2f:59:9b:9a:75:63:ea:38:
                    22:b8:c6:a0:85:41:6e:e6:8a:c8:48:b8:73:b2:09:
                    f3:b0:a9:1c:e2:51:8d:7c:bf:e6:d5:67:e1:70:ee:
                    49:40:bf:e8:08:8f:35:55:5b:67:4b:b4:88:db:5d:
                    96:77:21:b1:c2:3c:e6:ce:a4:91:0d:4f:09:bd:ad:
                    45:74:b1:6a:43:7e:e5:57:e8:3b:c9:74:bc:6e:62:
                    0f:36:f8:df:a6:53:10:b8:a2:68:f8:28:18:be:44:
                    e9:a9:9c:a1:20:f7:1f:c9:ea:53:01:75:72:09:ac:
                    1d:ca:30:35:50:83:e1:d4:57:04:c6:b6:12:f8:3a:
                    70:d4:d2:0d:79:8d:26:d7:5b:be:8e:bc:8e:df:64:
                    94:cf:85:7b:2d:e9:03:5d:61:66:ef:45:2f:d9:fa:
                    56:61:8a:0f:15:56:aa:e7:ec:ce:82:53:f3:7b:19:
                    a3:85:93:6b:52:13:4d:06:10:0a:b3:2b:e7:48:6f:
                    d6:3d:b4:02:66:8a:17:8c:19:5c:0a:01:8f:e2:09:
                    95:13:f7:75:88:32:c7:92:41:ea:a5:0f:34:f0:7a:
                    fc:ee:15:48:50:1c:6d:5a:e2:26:b7:d9:f1:3a:62:
                    10:aa:27:a2:11:0f:a2:28:d1:39:c6:a3:3a:04:c6:
                    f5:77
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C8:F1:7D:7C:72:43:6F:DD:D2:61:C4:37:54:09:12:3B:7E:BA:45:B3
            X509v3 Authority Key Identifier:
                keyid:2F:6A:43:4C:4B:5D:23:9C:4E:6E:41:B7:E5:85:C8:D5:8F:89:95:AB

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/L2pDTEtdI5xObkG35YXI1Y-Jlas.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/55/98abe5-bd01-464f-96ab-40b6d67fcd94/1/L2pDTEtdI5xObkG35YXI1Y-Jlas.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/55/98abe5-bd01-464f-96ab-40b6d67fcd94/1/L2pDTEtdI5xObkG35YXI1Y-Jlas.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         56:61:31:3e:69:9d:b9:d3:32:93:b1:7d:fc:cc:44:fb:a3:2e:
         d2:02:90:16:0f:7d:bb:bb:2d:83:5e:bb:8d:b7:ca:e9:c2:ee:
         17:dc:91:d3:08:ad:fd:2a:5e:18:d9:ef:1e:4b:34:e1:95:c6:
         3b:a4:9f:a2:2a:8a:d2:1d:7e:ac:6b:9e:b1:55:04:28:9b:dd:
         db:f6:69:34:c8:2b:33:22:eb:3e:69:92:3c:77:b9:ae:82:a1:
         fb:e2:a0:80:a1:e2:18:97:b1:2d:b8:24:96:de:7b:04:69:a1:
         2c:81:3d:ed:39:2b:3a:5d:2f:96:84:42:33:16:76:8c:c9:7f:
         8f:cf:5b:7f:33:1d:2f:cd:b3:08:cc:14:5d:2d:9f:f0:e3:e2:
         b6:a9:3e:48:e7:59:8d:1a:6f:05:da:fc:04:25:7c:2d:91:e4:
         ad:44:3b:3b:24:fc:b8:8c:13:d4:48:2f:7c:3d:d4:a5:fd:51:
         10:c1:ba:2e:11:2a:45:85:88:7e:42:b5:07:8c:b8:83:5d:c1:
         de:c8:ec:d4:21:e3:b2:47:01:7b:52:e6:28:a5:bd:04:f8:00:
         60:87:48:a0:90:60:2b:44:67:0c:58:81:b7:b5:13:4a:bf:79:
         e0:e1:37:c4:07:e2:83:da:49:13:e5:2a:13:c7:7a:b8:a3:29:
         fe:94:ba:c8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----