Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5e/0f50bb-1fe1-4c83-8c88-e35d2d5f00f8/1/2YrAsQZtDe_LFpVkPcuqBzmXXKg.mft
File:                     2YrAsQZtDe_LFpVkPcuqBzmXXKg.mft (raw, json)
Hash identifier:          TEcbqYnzyiyRXT3Hw9EkuJsbRnFK7ARCNs3+zvayW88=
Subject key identifier:   7E:BB:7C:E3:2F:D9:17:E7:C6:E4:57:AC:EC:8A:32:BD:59:5C:90:0D
Authority key identifier: D9:8A:C0:B1:06:6D:0D:EF:CB:16:95:64:3D:CB:AA:07:39:97:5C:A8
Certificate issuer:       /CN=d98ac0b1066d0defcb1695643dcbaa0739975ca8
Certificate serial:       01962F06C5FE24ED4E7B73DE20AEC5E060AB
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/2YrAsQZtDe_LFpVkPcuqBzmXXKg.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/5e/0f50bb-1fe1-4c83-8c88-e35d2d5f00f8/1/2YrAsQZtDe_LFpVkPcuqBzmXXKg.mft
Manifest number:          1141
Signing time:             Sun 13 Apr 2025 12:01:34 +0000
Manifest this update:     Sun 13 Apr 2025 12:01:34 +0000
Manifest next update:     Mon 14 Apr 2025 12:01:34 +0000
Files and hashes:         1: 2YrAsQZtDe_LFpVkPcuqBzmXXKg.crl (hash: 5yyXCU1pMi/iNS1ejM4XOX7W1MzQZNJ8IuwP+ip45QU=)
                          2: a0IOHkR8Hy4G4S5yuBNMKITBrOY.roa (hash: 1vK3mpE9sJgd81KLmucTH/3OWCFME4WKb3CLP0pv4Go=)
                          3: rYY4LoHLKvwtUeUNSpp95Qcfcq8.roa (hash: /s16opQaCPrDK0FCkiKZL+BAqy0vK7xfbC0nU+PFPrQ=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2f:06:c5:fe:24:ed:4e:7b:73:de:20:ae:c5:e0:60:ab
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d98ac0b1066d0defcb1695643dcbaa0739975ca8
        Validity
            Not Before: Apr 13 12:01:34 2025 GMT
            Not After : Apr 14 12:01:34 2025 GMT
        Subject: CN=7ebb7ce32fd917e7c6e457acec8a32bd595c900d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:98:78:45:a2:c0:6f:30:3b:74:fc:e4:dd:03:07:
                    c4:8f:94:48:40:9a:f1:99:64:e9:6d:6d:fc:e0:d9:
                    fe:1a:43:15:09:f7:a9:29:ec:5a:15:12:4b:31:d6:
                    07:d7:54:5c:38:30:6e:73:60:e6:1f:ed:f5:c3:0b:
                    83:a9:ce:40:4c:fb:9f:0c:4a:e3:72:4c:3a:fc:94:
                    5e:d2:8d:b3:ef:ae:be:59:c6:da:02:73:7e:79:f2:
                    3e:24:a8:f6:d2:82:44:7d:63:a5:69:32:b9:56:93:
                    2a:a9:5d:c0:64:dc:75:91:4e:09:69:f4:a2:38:dd:
                    34:57:c2:d2:87:d8:10:93:7b:8c:f5:5b:22:8e:36:
                    33:a9:55:f8:f0:8a:92:b7:95:2c:56:82:f6:14:b9:
                    58:6d:06:7e:31:e8:97:b6:b6:dd:11:c2:cb:20:94:
                    3a:f2:c7:08:5b:06:1e:01:f0:ac:65:34:56:7b:a6:
                    6f:6a:e4:68:d4:86:42:df:00:1f:81:95:eb:62:4a:
                    03:41:ec:23:e1:f6:57:c9:b7:48:e7:66:5c:f4:9f:
                    ff:b5:c9:e3:d5:49:ec:71:d4:cc:c6:33:74:63:48:
                    44:52:88:b7:b2:d4:89:2c:a2:d6:db:a9:4a:cb:d8:
                    b9:42:3c:61:fd:52:77:db:21:22:87:91:89:f6:18:
                    a2:b7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7E:BB:7C:E3:2F:D9:17:E7:C6:E4:57:AC:EC:8A:32:BD:59:5C:90:0D
            X509v3 Authority Key Identifier:
                keyid:D9:8A:C0:B1:06:6D:0D:EF:CB:16:95:64:3D:CB:AA:07:39:97:5C:A8

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/2YrAsQZtDe_LFpVkPcuqBzmXXKg.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/0f50bb-1fe1-4c83-8c88-e35d2d5f00f8/1/2YrAsQZtDe_LFpVkPcuqBzmXXKg.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/0f50bb-1fe1-4c83-8c88-e35d2d5f00f8/1/2YrAsQZtDe_LFpVkPcuqBzmXXKg.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         4d:04:0b:9e:d0:a5:fb:25:1f:34:66:85:05:50:d4:70:28:5f:
         68:92:b3:a0:a3:15:1d:fb:a9:f9:04:f6:13:4b:f7:7c:4d:7e:
         79:11:27:f0:51:7b:b1:0d:a0:70:ba:30:26:97:d4:d4:63:e6:
         78:df:b2:51:94:d6:21:fb:72:61:1e:c9:51:62:34:b2:6d:0d:
         f1:1a:f5:0c:63:41:c3:2d:44:ae:4b:96:ac:73:58:b3:ee:cd:
         de:a6:53:c9:28:bd:dc:f7:f2:c8:ef:ce:2a:51:67:81:e4:2b:
         bb:55:c2:25:11:3f:b9:7c:14:a7:70:30:54:f3:9b:1e:9b:24:
         6d:4a:0a:46:2c:9e:75:56:9a:a2:18:1b:87:71:64:78:72:97:
         45:df:7e:b9:a3:46:6b:16:95:69:9d:10:2a:10:b6:90:42:1d:
         99:04:40:52:eb:92:8e:ab:ac:63:b6:cf:61:c2:37:a4:30:f5:
         f8:6c:33:18:7c:f5:05:46:48:93:0b:c8:b1:38:94:7d:0a:45:
         31:73:12:8f:90:c5:90:57:28:e9:9b:13:2f:dd:06:49:70:bf:
         ed:58:90:06:1c:c4:30:60:20:a0:53:70:5a:09:9d:81:d1:34:
         98:18:b1:4f:ac:3e:fd:27:a6:4f:64:20:1d:de:7f:90:63:51:
         bc:91:c1:0c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----