Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7d/134ccb-b0ab-446b-8172-62e27cd1e975/1/tA2EnMQ7cy2rZkH8b9Wk2zotuUc.mft
File:                     tA2EnMQ7cy2rZkH8b9Wk2zotuUc.mft (raw, json)
Hash identifier:          1cZk2mCZ1htsgww7fVsc87lmKJc8eBTKJh5+5TdMYaA=
Subject key identifier:   F6:01:E0:F4:2A:F4:91:20:27:D6:E3:69:B3:A0:7D:F6:DC:C3:54:DA
Authority key identifier: B4:0D:84:9C:C4:3B:73:2D:AB:66:41:FC:6F:D5:A4:DB:3A:2D:B9:47
Certificate issuer:       /CN=b40d849cc43b732dab6641fc6fd5a4db3a2db947
Certificate serial:       01962E9993FE5C5CC6437982CF6D37F1B9F7
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/tA2EnMQ7cy2rZkH8b9Wk2zotuUc.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/7d/134ccb-b0ab-446b-8172-62e27cd1e975/1/tA2EnMQ7cy2rZkH8b9Wk2zotuUc.mft
Manifest number:          0882
Signing time:             Sun 13 Apr 2025 10:02:18 +0000
Manifest this update:     Sun 13 Apr 2025 10:02:18 +0000
Manifest next update:     Mon 14 Apr 2025 10:02:18 +0000
Files and hashes:         1: tA2EnMQ7cy2rZkH8b9Wk2zotuUc.crl (hash: 69wgqLwudxguLLdfxofw6xxZcLc2nQnCApIXO7VX6PI=)
                          2: x7aEXzfMRzlzp6VorB64R028Jvk.roa (hash: 3aOt7CTs1p/zJJSbWQR2//U36Y0+Zh2Kxl00BzPCEXA=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2e:99:93:fe:5c:5c:c6:43:79:82:cf:6d:37:f1:b9:f7
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b40d849cc43b732dab6641fc6fd5a4db3a2db947
        Validity
            Not Before: Apr 13 10:02:18 2025 GMT
            Not After : Apr 14 10:02:18 2025 GMT
        Subject: CN=f601e0f42af4912027d6e369b3a07df6dcc354da
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a1:2e:55:eb:5c:c0:a8:98:14:32:59:e4:a6:30:
                    77:ab:0c:95:eb:3e:30:14:70:c8:a3:8e:f8:bd:81:
                    e7:40:25:2d:ff:0e:e7:ce:6b:3f:d1:3b:74:c0:2f:
                    bf:34:b3:e7:00:7f:6a:15:8e:96:07:58:88:57:7d:
                    7f:b7:bb:d7:73:df:c1:73:0a:ac:4a:15:a1:99:b2:
                    94:4f:65:58:bf:58:dd:72:7f:4b:67:0d:bf:68:28:
                    5b:1a:f4:e6:0a:3b:4b:32:40:5b:83:af:63:f2:67:
                    df:a8:92:db:5f:25:31:bb:48:c9:25:c3:b5:8f:1e:
                    9e:17:c6:37:fa:01:c5:e2:d9:dd:4f:c6:1e:14:89:
                    bb:d5:5c:64:a1:97:4f:98:bd:96:bb:4d:53:2b:66:
                    bb:2f:cb:81:4a:e5:c5:f8:b4:d2:10:63:b2:a5:bd:
                    08:19:0d:47:51:ca:af:2a:01:72:92:cd:fc:7a:9d:
                    fd:f5:b5:74:92:9e:db:b9:48:c4:5e:0e:ab:cd:5e:
                    03:9d:5a:63:42:ef:bb:32:8e:fc:04:1a:54:27:e2:
                    2b:7a:9e:d9:5b:7b:ad:a7:1a:c5:86:25:08:21:c7:
                    80:3e:0e:f0:5b:38:40:0f:0f:ca:9b:2c:3f:cf:5b:
                    f7:8b:7a:60:7a:fb:5b:5a:fe:93:cc:4c:69:f5:21:
                    84:ab
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F6:01:E0:F4:2A:F4:91:20:27:D6:E3:69:B3:A0:7D:F6:DC:C3:54:DA
            X509v3 Authority Key Identifier:
                keyid:B4:0D:84:9C:C4:3B:73:2D:AB:66:41:FC:6F:D5:A4:DB:3A:2D:B9:47

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/tA2EnMQ7cy2rZkH8b9Wk2zotuUc.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7d/134ccb-b0ab-446b-8172-62e27cd1e975/1/tA2EnMQ7cy2rZkH8b9Wk2zotuUc.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/7d/134ccb-b0ab-446b-8172-62e27cd1e975/1/tA2EnMQ7cy2rZkH8b9Wk2zotuUc.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         7a:75:4a:ca:d2:0d:2e:49:20:a7:b1:26:8b:43:12:50:3d:79:
         d0:e6:78:be:ef:58:97:99:70:5f:bf:78:6f:fe:3c:0b:c4:37:
         ec:ba:9e:a3:f8:f5:ce:a8:1e:23:8e:b0:6f:1c:66:4c:97:ff:
         43:07:f1:04:ea:a8:dc:87:7e:cc:d9:5d:4b:45:b4:f9:62:57:
         b1:25:59:06:17:df:65:4a:22:b6:f9:dc:d6:a1:15:10:80:fd:
         7c:32:f4:7f:fc:2a:0b:81:ae:af:08:e6:5d:7e:02:2f:f3:9f:
         02:c6:95:bf:d8:d7:65:1f:8f:37:91:55:63:32:9e:38:c7:87:
         59:49:a5:70:97:3f:1e:6e:ea:07:ba:c6:95:44:30:0f:cf:ce:
         20:98:32:2d:c4:92:2b:75:5e:46:29:37:c1:aa:f4:7b:c0:87:
         38:f8:39:97:b3:a7:b9:97:af:56:e7:cf:9b:72:b4:b1:e1:73:
         0a:e6:09:74:c9:56:ff:17:fb:ac:b2:64:85:79:05:63:fc:db:
         44:ab:fc:5e:f0:9b:df:bb:18:f3:2b:44:f5:b3:fa:90:a1:b5:
         b1:0f:86:5c:f7:35:aa:f9:d7:8b:6b:3b:65:88:d4:35:f0:c4:
         ed:22:a3:59:86:90:46:47:1c:0e:45:98:7c:f4:4d:77:9e:a3:
         a1:6d:6e:23
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----