Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/88/d05a2e-c281-4dab-8373-a1779904b1c5/1/slLdonImonXj55s3TI8mPNLY7NE.mft
File:                     slLdonImonXj55s3TI8mPNLY7NE.mft (raw, json)
Hash identifier:          WOyX/eIV6szXQHRM/dJS5+wKPpvp4t6d3amFLEm28pM=
Subject key identifier:   41:E0:36:57:8D:19:73:EE:CF:6F:7F:CD:A6:C2:3C:44:44:A5:3D:43
Authority key identifier: B2:52:DD:A2:72:26:A2:75:E3:E7:9B:37:4C:8F:26:3C:D2:D8:EC:D1
Certificate issuer:       /CN=b252dda27226a275e3e79b374c8f263cd2d8ecd1
Certificate serial:       01962ECFCB82AED1027B6532FC7AD533CD65
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/slLdonImonXj55s3TI8mPNLY7NE.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/88/d05a2e-c281-4dab-8373-a1779904b1c5/1/slLdonImonXj55s3TI8mPNLY7NE.mft
Manifest number:          14ED
Signing time:             Sun 13 Apr 2025 11:01:32 +0000
Manifest this update:     Sun 13 Apr 2025 11:01:32 +0000
Manifest next update:     Mon 14 Apr 2025 11:01:32 +0000
Files and hashes:         1: 7QMuMfRcubM7Dw9mRD9Oeleudm0.roa (hash: 34yr97BhHkN5u8FjcTkMX2e6CbJy1pgn7SWZTkyU8GQ=)
                          2: slLdonImonXj55s3TI8mPNLY7NE.crl (hash: SjXx1G95aKvC7AT/pAfwslgSf0UeW0HId8CCBo6rLuQ=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2e:cf:cb:82:ae:d1:02:7b:65:32:fc:7a:d5:33:cd:65
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b252dda27226a275e3e79b374c8f263cd2d8ecd1
        Validity
            Not Before: Apr 13 11:01:32 2025 GMT
            Not After : Apr 14 11:01:32 2025 GMT
        Subject: CN=41e036578d1973eecf6f7fcda6c23c4444a53d43
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b8:8e:7e:70:8c:e7:da:ef:fc:8c:d1:6b:3c:b5:
                    79:de:78:1d:39:57:0e:86:d0:3d:05:b3:e0:b5:4e:
                    5f:72:77:06:dd:f9:97:1a:8c:5e:cd:be:af:63:e6:
                    dc:4a:30:f6:80:6e:29:7d:ad:49:7f:0b:f3:4a:09:
                    b0:41:e8:a5:d6:23:be:9c:99:b3:41:87:1f:0c:30:
                    76:07:02:95:26:b6:7d:1c:e9:8f:43:aa:34:7b:a6:
                    93:32:6b:54:08:42:b4:be:5b:b3:04:fe:57:54:13:
                    60:5c:e5:25:43:13:6c:07:34:08:0e:d6:ae:5a:f1:
                    03:2c:4a:98:d3:ac:b1:45:2a:fd:43:c4:38:9a:c1:
                    cb:00:2b:55:ee:3c:37:df:f2:ec:37:e9:52:57:8f:
                    16:89:eb:bf:2a:6f:95:71:f3:e6:53:f0:73:74:21:
                    86:07:f7:1f:05:fb:66:dd:df:1b:59:59:ad:44:e6:
                    92:e7:b1:fb:bb:27:dc:3c:bf:57:19:0c:e3:40:fc:
                    4d:91:aa:cc:e3:29:37:90:cf:43:31:e0:90:22:96:
                    14:f9:7b:e5:a7:56:a3:d2:24:19:de:9a:c9:7f:7d:
                    4e:63:b7:8c:74:f7:86:1a:91:f7:6c:56:7d:d8:26:
                    0f:ec:21:3d:0f:8b:98:15:b1:5d:27:f3:89:58:69:
                    24:0b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                41:E0:36:57:8D:19:73:EE:CF:6F:7F:CD:A6:C2:3C:44:44:A5:3D:43
            X509v3 Authority Key Identifier:
                keyid:B2:52:DD:A2:72:26:A2:75:E3:E7:9B:37:4C:8F:26:3C:D2:D8:EC:D1

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/slLdonImonXj55s3TI8mPNLY7NE.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/88/d05a2e-c281-4dab-8373-a1779904b1c5/1/slLdonImonXj55s3TI8mPNLY7NE.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/88/d05a2e-c281-4dab-8373-a1779904b1c5/1/slLdonImonXj55s3TI8mPNLY7NE.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         5f:d6:5d:ef:39:c6:28:3e:ad:b7:d5:a3:12:7d:b0:a0:58:b0:
         92:e8:b7:cd:15:a7:9e:7b:37:96:ef:dd:c4:3d:85:b5:f8:6e:
         fd:54:13:d4:1e:3c:8e:29:1e:6b:d8:88:fa:cf:6d:8d:23:81:
         fb:fc:f0:47:c8:71:12:94:01:6e:42:d0:20:c3:cb:62:80:57:
         84:30:1a:ce:2d:42:dc:47:4b:e3:3d:01:c1:22:0e:53:68:6b:
         60:cf:28:5f:59:5a:dd:c5:2d:08:b3:e2:07:91:64:72:62:6e:
         5c:52:20:36:ce:5a:7b:4b:1e:c1:c8:fe:a3:e2:41:96:6b:f9:
         e8:42:dd:e4:5d:86:4f:7b:45:d2:2d:a4:02:bf:18:44:3a:69:
         23:0b:bc:4b:a1:93:48:cb:dd:a0:5f:f5:5c:13:03:e3:64:35:
         19:89:e6:11:29:98:85:d6:de:bd:0b:4c:36:9b:0a:b4:c6:cd:
         ad:f2:a6:6e:f5:1a:6f:be:67:c5:c2:62:5c:16:22:66:9f:26:
         78:93:75:02:b3:58:3c:b8:be:93:0b:e3:73:c4:8f:d4:66:0d:
         65:d9:5a:ca:03:36:f4:11:7b:14:87:f8:da:89:19:be:48:08:
         83:9b:7c:3a:4c:3a:ca:ce:b8:d8:a6:b7:1e:45:8a:e7:34:68:
         d5:cf:ef:01
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----