Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7e/077a53-314b-4004-8f1e-def0cc34e008/1/2nFI11vcOc6d0uO9qnWEexezTss.mft
File:                     2nFI11vcOc6d0uO9qnWEexezTss.mft (raw, json)
Hash identifier:          dxq5nIBY70wuO+DldQnXcp2VontpThIgk6lfEu461bM=
Subject key identifier:   2D:30:EE:25:2E:0A:99:C7:43:A9:85:91:72:74:0E:1F:F8:22:14:AE
Authority key identifier: DA:71:48:D7:5B:DC:39:CE:9D:D2:E3:BD:AA:75:84:7B:17:B3:4E:CB
Certificate issuer:       /CN=da7148d75bdc39ce9dd2e3bdaa75847b17b34ecb
Certificate serial:       01962E61D65B024702C89E96AC03CCF73D95
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/2nFI11vcOc6d0uO9qnWEexezTss.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/7e/077a53-314b-4004-8f1e-def0cc34e008/1/2nFI11vcOc6d0uO9qnWEexezTss.mft
Manifest number:          14E8
Signing time:             Sun 13 Apr 2025 09:01:25 +0000
Manifest this update:     Sun 13 Apr 2025 09:01:25 +0000
Manifest next update:     Mon 14 Apr 2025 09:01:25 +0000
Files and hashes:         1: 2nFI11vcOc6d0uO9qnWEexezTss.crl (hash: Y84DumCyuuI2tC3sII/hFS9dDFCbF8mzx1q0HmHPya4=)
                          2: 5p4iEJjCWHg2NCuzUgou4J5Rpxg.roa (hash: NfyhhVjM+im96vYLz64L3GHHSJz/s1weqZvBCCm8Yaw=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2e:61:d6:5b:02:47:02:c8:9e:96:ac:03:cc:f7:3d:95
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=da7148d75bdc39ce9dd2e3bdaa75847b17b34ecb
        Validity
            Not Before: Apr 13 09:01:25 2025 GMT
            Not After : Apr 14 09:01:25 2025 GMT
        Subject: CN=2d30ee252e0a99c743a9859172740e1ff82214ae
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:dc:2c:8c:0f:f6:28:18:77:3e:4a:3f:33:d8:6a:
                    92:6d:72:92:df:3b:d0:a7:b8:aa:e0:52:65:7a:7f:
                    6a:6b:98:a8:be:df:b8:84:27:4b:65:64:50:e7:37:
                    e9:65:d6:12:37:aa:ea:f7:3f:12:3a:02:d7:d2:a4:
                    e7:6d:b2:e6:d4:ae:77:31:03:b3:af:d8:b6:7e:8c:
                    94:a9:a1:6f:04:1d:5d:46:8d:0c:6d:f5:6e:a5:c3:
                    9f:00:37:f4:30:cd:0d:54:f5:ad:57:dd:df:3a:7b:
                    6a:bc:68:f3:ca:d0:06:fa:c6:2b:40:ec:5b:5c:7c:
                    b7:8e:db:4d:a4:c7:2e:c9:0b:1d:f0:7a:01:17:01:
                    67:04:51:3f:20:01:96:07:c5:21:7c:89:56:a3:e9:
                    c7:a0:b4:3d:6d:dd:49:68:79:18:29:74:d0:41:9c:
                    16:19:86:2e:ac:b9:1c:8a:9c:bd:f9:01:0f:65:ab:
                    30:46:75:11:bc:97:be:78:cb:a5:49:8e:99:d7:f3:
                    54:3f:59:4c:fa:1d:07:cf:05:3d:6d:16:bd:45:d5:
                    83:49:28:66:5b:c4:b4:7e:84:eb:b0:88:13:46:3c:
                    6f:01:1c:7b:01:f9:e7:1e:ce:24:2f:b3:86:be:90:
                    5c:17:d4:57:52:af:17:a1:2b:69:bf:63:dd:8c:f6:
                    2b:01
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2D:30:EE:25:2E:0A:99:C7:43:A9:85:91:72:74:0E:1F:F8:22:14:AE
            X509v3 Authority Key Identifier:
                keyid:DA:71:48:D7:5B:DC:39:CE:9D:D2:E3:BD:AA:75:84:7B:17:B3:4E:CB

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/2nFI11vcOc6d0uO9qnWEexezTss.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7e/077a53-314b-4004-8f1e-def0cc34e008/1/2nFI11vcOc6d0uO9qnWEexezTss.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/7e/077a53-314b-4004-8f1e-def0cc34e008/1/2nFI11vcOc6d0uO9qnWEexezTss.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         50:f8:a1:a6:41:e1:ff:9e:e4:25:9a:c1:e5:5e:56:87:fe:9a:
         c3:a0:80:a5:e7:70:ea:1e:05:db:12:6a:80:87:ce:fd:15:7a:
         f8:46:d5:e5:73:c9:c7:b0:e9:ac:e8:f1:28:e0:92:f1:9f:1d:
         14:d5:bf:52:2a:d9:ef:d7:4d:31:69:2e:d3:f0:72:84:83:e3:
         32:e9:45:1f:a4:2c:14:2b:88:90:43:19:b2:78:97:e3:3c:35:
         3c:5d:e1:92:0f:a4:c0:75:a7:c8:9e:58:cd:78:16:24:21:fb:
         5d:ab:48:79:08:20:56:ec:92:33:9a:79:65:c9:51:c2:05:0f:
         77:d6:ad:30:1f:d3:f5:ef:76:96:9a:f2:c2:ff:64:ed:e7:ea:
         04:74:59:12:cc:15:6e:29:88:26:d0:b9:77:1b:fb:0c:c5:86:
         04:78:cb:9c:b5:bf:77:2a:b8:55:f1:8f:72:9a:90:3d:b2:58:
         a6:f9:9a:08:6c:f0:82:1e:10:5c:d5:e3:36:00:cf:80:14:c9:
         a3:4e:3c:0d:2e:53:55:d4:4f:39:25:8b:4a:3f:13:c2:24:d2:
         9b:5a:ce:13:29:b1:d0:81:f3:02:7e:68:ed:8d:5d:6e:f3:76:
         e1:9a:a8:a8:6b:69:a8:69:20:16:7d:26:b3:80:c5:aa:fc:f1:
         a2:7f:3f:ab
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----