Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/64/8866bb-2eb7-4288-a82c-5559ac410ace/1/8x0cBavXFMZ8MpHgENIccKNd1X4.mft
File:                     8x0cBavXFMZ8MpHgENIccKNd1X4.mft (raw, json)
Hash identifier:          IkBbFeBqeSj9RK9fAjfUL4heGuqYg6TaP85KSUJnAUU=
Subject key identifier:   20:C9:6D:48:24:31:5B:6B:CA:40:D4:3A:78:6D:6D:C8:00:31:09:16
Authority key identifier: F3:1D:1C:05:AB:D7:14:C6:7C:32:91:E0:10:D2:1C:70:A3:5D:D5:7E
Certificate issuer:       /CN=f31d1c05abd714c67c3291e010d21c70a35dd57e
Certificate serial:       01962F074458D0737DEC8466824CB6DCA834
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/8x0cBavXFMZ8MpHgENIccKNd1X4.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/64/8866bb-2eb7-4288-a82c-5559ac410ace/1/8x0cBavXFMZ8MpHgENIccKNd1X4.mft
Manifest number:          05AB
Signing time:             Sun 13 Apr 2025 12:02:07 +0000
Manifest this update:     Sun 13 Apr 2025 12:02:07 +0000
Manifest next update:     Mon 14 Apr 2025 12:02:07 +0000
Files and hashes:         1: 8x0cBavXFMZ8MpHgENIccKNd1X4.crl (hash: leu2E0zP3uAi9E3WuqR0WbYEu6UFe5m5Jes7cLF1H04=)
                          2: NoirTMocfMUxRX4SSF3NnN1MXMg.roa (hash: k1dgXUxG201nPT5HWgsPlWuxupL/o/GsnkXTowkj8SY=)
                          3: kBL0NGTyltK_bUGqu0ZT8FN5oyY.roa (hash: RQ7q9e83VNSzPNBYQofT5w9K3HiXcrFugBatkkxu9/Y=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2f:07:44:58:d0:73:7d:ec:84:66:82:4c:b6:dc:a8:34
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=f31d1c05abd714c67c3291e010d21c70a35dd57e
        Validity
            Not Before: Apr 13 12:02:07 2025 GMT
            Not After : Apr 14 12:02:07 2025 GMT
        Subject: CN=20c96d4824315b6bca40d43a786d6dc800310916
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a2:5f:70:94:ad:3a:75:7d:64:9f:03:71:01:e5:
                    36:25:b8:34:5d:a4:34:4d:96:a4:b3:cf:ab:47:4f:
                    74:bb:06:26:9c:cf:35:4e:d7:25:91:a2:ce:13:1a:
                    76:e2:d2:2f:af:7e:e6:0e:74:42:98:0d:14:e1:a4:
                    83:57:e9:28:50:76:75:5f:e6:01:dd:7f:46:cb:73:
                    fd:c0:95:10:e8:7f:2f:cc:0a:d3:ea:e4:01:98:59:
                    6a:fe:61:e9:08:25:55:ab:a0:f0:dd:60:04:2c:ef:
                    2b:36:3b:6e:e0:75:c4:79:e0:86:d3:b2:e2:42:b5:
                    58:0b:47:30:c1:bb:ea:c0:fe:ca:d8:60:a2:ad:f5:
                    c7:89:48:8c:f4:b8:a0:8f:0b:65:15:18:26:3a:32:
                    03:69:32:21:72:61:c0:dc:d8:74:94:b3:66:ca:44:
                    e2:ed:d5:4f:c2:31:0e:b0:5e:01:bd:e3:79:01:cc:
                    10:ce:2e:06:fe:32:fa:ce:d4:76:6e:d8:ac:9f:1e:
                    46:80:59:6f:da:a6:30:d4:b7:e7:b5:8e:79:29:54:
                    0d:b3:c5:b4:e2:6f:b5:a9:87:7b:aa:30:f3:dd:77:
                    90:ce:3b:b8:a6:ef:6c:2e:83:19:da:3b:11:fb:4c:
                    0d:5e:53:4d:05:d6:50:08:42:53:36:2a:cd:eb:dd:
                    cf:97
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                20:C9:6D:48:24:31:5B:6B:CA:40:D4:3A:78:6D:6D:C8:00:31:09:16
            X509v3 Authority Key Identifier:
                keyid:F3:1D:1C:05:AB:D7:14:C6:7C:32:91:E0:10:D2:1C:70:A3:5D:D5:7E

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/8x0cBavXFMZ8MpHgENIccKNd1X4.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/64/8866bb-2eb7-4288-a82c-5559ac410ace/1/8x0cBavXFMZ8MpHgENIccKNd1X4.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/64/8866bb-2eb7-4288-a82c-5559ac410ace/1/8x0cBavXFMZ8MpHgENIccKNd1X4.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         42:b9:d7:53:c4:73:af:49:96:df:21:2f:6b:b9:77:99:2a:a7:
         b9:72:0f:2d:1e:77:06:7b:a3:78:c6:3d:22:53:1e:ec:69:e8:
         cd:da:9c:f4:5d:ce:87:b9:19:60:5d:c1:ec:ab:94:23:2b:4c:
         25:ef:05:70:57:48:40:da:cd:2b:9c:a7:c0:74:ae:31:bb:6e:
         33:8f:92:8f:d1:75:17:c9:12:03:5b:f1:dc:c2:d0:d1:ad:70:
         f7:9e:f1:31:ac:ae:12:f5:b5:ee:52:6a:e7:0b:48:c0:a0:7b:
         aa:06:b0:da:e3:5d:1c:17:64:30:56:f6:ee:ba:4d:37:25:07:
         5e:24:59:42:7f:70:fb:44:8b:6b:cf:b6:1d:21:d9:62:4e:b7:
         40:b0:ab:45:d2:1d:47:90:05:be:ae:d9:20:dc:18:87:a2:db:
         4b:a0:96:22:27:17:47:48:b3:ec:87:0a:0a:19:2c:1f:31:38:
         08:47:68:84:f6:83:73:45:cf:22:ee:85:32:55:31:c2:fb:2f:
         d5:fa:dd:5e:7a:e1:5b:2f:a3:2e:73:93:0c:94:51:5a:6c:f0:
         25:80:3a:39:9b:00:f0:f7:24:fb:a0:c7:6e:53:78:e2:be:42:
         23:96:d0:c0:bd:fa:17:99:21:52:37:15:d4:cb:a3:36:dc:ef:
         f4:a5:5b:0f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----