Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8c/b26859-9b14-450f-bb85-592ed73761ca/1/rSRk7MlG8pLkBPLDUZIuz0xZD9g.mft
File:                     rSRk7MlG8pLkBPLDUZIuz0xZD9g.mft (raw, json)
Hash identifier:          /HFoVmGKwvQeoBQQNIqObZfz3p7eaX0YQXn2UTOMhS8=
Subject key identifier:   A2:D9:F5:21:C0:38:18:30:A6:25:41:A2:74:6C:E3:43:47:AF:35:1E
Authority key identifier: AD:24:64:EC:C9:46:F2:92:E4:04:F2:C3:51:92:2E:CF:4C:59:0F:D8
Certificate issuer:       /CN=ad2464ecc946f292e404f2c351922ecf4c590fd8
Certificate serial:       01962F3D31A8023380E61836DEE9D46A71F3
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/rSRk7MlG8pLkBPLDUZIuz0xZD9g.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/8c/b26859-9b14-450f-bb85-592ed73761ca/1/rSRk7MlG8pLkBPLDUZIuz0xZD9g.mft
Manifest number:          0695
Signing time:             Sun 13 Apr 2025 13:01:01 +0000
Manifest this update:     Sun 13 Apr 2025 13:01:01 +0000
Manifest next update:     Mon 14 Apr 2025 13:01:01 +0000
Files and hashes:         1: rSRk7MlG8pLkBPLDUZIuz0xZD9g.crl (hash: gcPR9ECh8EAzMJZRx5jaNI2NB/P6FBXkC5+kyBXheSc=)
                          2: saC2CSGHzjfoqz_AyeGRfbO_Z4c.roa (hash: evXXOhKr0k/9XMT8MxumeZizzHV0YoG5/EuRYGW5sl4=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2f:3d:31:a8:02:33:80:e6:18:36:de:e9:d4:6a:71:f3
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=ad2464ecc946f292e404f2c351922ecf4c590fd8
        Validity
            Not Before: Apr 13 13:01:01 2025 GMT
            Not After : Apr 14 13:01:01 2025 GMT
        Subject: CN=a2d9f521c0381830a62541a2746ce34347af351e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:db:a1:95:eb:db:d9:1f:17:f0:e9:2c:ad:11:0b:
                    5c:ff:47:3b:7e:9e:5b:95:78:94:36:9e:b0:5b:1a:
                    45:b6:18:ab:66:f1:76:e9:98:ee:33:1f:30:d1:17:
                    68:a0:31:bb:c2:6c:57:86:b0:8a:46:1d:be:49:47:
                    26:b0:0c:76:e7:fa:a8:3e:bc:27:fb:72:98:94:65:
                    97:ca:f3:e8:33:5a:35:23:34:e5:9e:90:04:22:5e:
                    69:50:5f:01:65:2b:b2:8a:45:1f:77:03:c1:66:1e:
                    a8:1e:4e:2d:1a:38:27:85:17:26:84:a4:1a:e2:de:
                    2c:17:e1:7e:e3:8f:05:cf:72:f3:6a:8e:a4:ff:e0:
                    28:ae:98:2a:69:38:09:ff:e6:5b:71:96:8c:f7:66:
                    60:fe:95:c3:46:66:3e:f4:57:18:90:14:49:aa:42:
                    06:9b:84:80:18:93:27:78:49:2b:28:02:70:b8:3a:
                    b9:41:7d:2d:c9:1a:da:12:07:04:51:dd:c3:a8:3e:
                    0e:1b:56:2e:50:fd:f1:2e:3e:16:9f:9c:43:69:39:
                    28:cc:dc:ac:09:e3:be:21:14:b1:a8:24:3f:9c:25:
                    c2:8e:95:88:34:9e:7a:fa:d8:f5:a5:d5:36:d3:66:
                    24:ef:a8:5d:b8:39:c8:54:d3:eb:56:65:15:96:90:
                    9f:f3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A2:D9:F5:21:C0:38:18:30:A6:25:41:A2:74:6C:E3:43:47:AF:35:1E
            X509v3 Authority Key Identifier:
                keyid:AD:24:64:EC:C9:46:F2:92:E4:04:F2:C3:51:92:2E:CF:4C:59:0F:D8

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/rSRk7MlG8pLkBPLDUZIuz0xZD9g.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8c/b26859-9b14-450f-bb85-592ed73761ca/1/rSRk7MlG8pLkBPLDUZIuz0xZD9g.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/8c/b26859-9b14-450f-bb85-592ed73761ca/1/rSRk7MlG8pLkBPLDUZIuz0xZD9g.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         22:41:19:c6:38:3c:8a:0b:ff:f9:ac:36:d8:a3:63:11:1d:84:
         22:76:04:af:a0:bc:f6:a9:ca:5f:d9:4d:e0:34:37:1c:59:19:
         49:1e:54:ec:f8:88:08:7d:f3:0b:5a:da:eb:a3:34:1f:54:c3:
         41:04:a3:13:d6:8c:c1:9f:39:14:6b:85:79:9e:52:3d:fb:81:
         89:92:31:d8:aa:22:08:cb:19:d0:3c:bf:78:0d:2a:4f:37:2f:
         5d:64:ab:0b:f1:7e:88:4a:8f:91:c0:cf:37:9c:51:3f:4f:1a:
         93:7a:c3:3c:ea:10:66:ea:4e:bb:a8:a5:87:ca:ed:f4:03:82:
         a7:41:62:d2:20:90:0c:89:40:bc:2a:24:12:f5:c2:21:f5:9e:
         11:37:34:f3:f6:46:58:8a:55:84:26:82:f7:43:09:c3:bc:a8:
         95:de:6e:11:b7:60:21:83:af:f7:0b:63:13:1d:ee:e3:8c:d9:
         2f:61:87:da:3a:41:17:ce:31:04:bb:d2:66:88:2c:c8:fc:f6:
         6c:e0:ce:50:7c:76:b6:cf:2e:73:a8:2a:64:45:90:89:bd:56:
         17:b9:de:35:fa:d3:87:f8:a1:da:99:0b:77:98:f3:4e:ce:3d:
         50:c0:98:54:5b:cb:38:ea:88:89:35:3d:13:30:ac:bc:6e:7b:
         cd:25:a4:0b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----