Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/98/b34d6f-66dc-4498-b205-79b6733bc5e6/1/L4g71OpOPesouJSxkPjgi68G8cw.mft
File:                     L4g71OpOPesouJSxkPjgi68G8cw.mft (raw, json)
Hash identifier:          m6EpPVwSNfT6/rdxB71Zv2UQ0x5zcQ8kt8DbTKk+5ak=
Subject key identifier:   38:6A:4A:91:7B:4B:AE:5E:CF:E6:54:2A:54:CD:A6:9E:01:BB:88:A7
Authority key identifier: 2F:88:3B:D4:EA:4E:3D:EB:28:B8:94:B1:90:F8:E0:8B:AF:06:F1:CC
Certificate issuer:       /CN=2f883bd4ea4e3deb28b894b190f8e08baf06f1cc
Certificate serial:       01962FAB7418B0BA5A465ED62976745FB160
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/L4g71OpOPesouJSxkPjgi68G8cw.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/98/b34d6f-66dc-4498-b205-79b6733bc5e6/1/L4g71OpOPesouJSxkPjgi68G8cw.mft
Manifest number:          0496
Signing time:             Sun 13 Apr 2025 15:01:27 +0000
Manifest this update:     Sun 13 Apr 2025 15:01:27 +0000
Manifest next update:     Mon 14 Apr 2025 15:01:27 +0000
Files and hashes:         1: 72212ELi_xTfEeuyR3CUIU7otcg.roa (hash: 05TY+/FULQvb5YOeymsTjWCBkX5gY/8/tCWpzbv8PI0=)
                          2: L4g71OpOPesouJSxkPjgi68G8cw.crl (hash: E14uW/YNGsrXKAPFpNDT7P+aZR43Dq2adOuPyGM3h+o=)
                          3: rKcLia0y-4QlTSWH-I5frDT77pU.roa (hash: dvn3H9WJWj8AZKwySDQ1F4qo4Fa0dQjkVokla1Xiyhc=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2f:ab:74:18:b0:ba:5a:46:5e:d6:29:76:74:5f:b1:60
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2f883bd4ea4e3deb28b894b190f8e08baf06f1cc
        Validity
            Not Before: Apr 13 15:01:27 2025 GMT
            Not After : Apr 14 15:01:27 2025 GMT
        Subject: CN=386a4a917b4bae5ecfe6542a54cda69e01bb88a7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9b:cf:cc:86:77:65:c0:1c:9a:50:5e:86:ba:c3:
                    77:f0:77:29:0d:ac:1a:0b:b1:62:66:65:16:f2:02:
                    eb:ff:a0:b9:1a:83:9b:c0:2b:e3:a6:0e:4a:42:0e:
                    4e:9e:5a:0b:d5:ae:b3:d9:f2:e4:73:af:ed:b4:37:
                    ab:9c:9a:d1:bf:24:04:90:c2:a1:87:cf:ef:63:82:
                    d6:db:59:0e:b9:15:0c:a0:f1:77:82:48:c7:8a:b5:
                    28:93:38:fa:0f:8c:8c:96:3f:6d:8f:c1:fe:70:c4:
                    47:67:e8:1e:71:a6:36:82:77:6e:4a:28:ae:3f:96:
                    eb:9c:b8:fc:a0:69:8e:93:ef:34:52:8e:8d:c7:b7:
                    ee:cb:86:4d:94:2e:b0:cd:bd:b5:b5:1b:58:6b:e3:
                    f0:58:33:ff:40:cf:eb:33:5c:cc:11:1d:d2:87:48:
                    e3:ec:4c:06:4e:fd:9f:49:5b:88:cc:5b:07:f3:3e:
                    9b:bc:e4:03:f7:03:fa:bb:ef:21:6d:41:e9:f9:63:
                    55:81:c3:b3:8c:97:aa:9a:42:82:65:90:17:da:12:
                    33:39:2b:ca:57:52:1c:15:56:2e:bf:6c:0e:bf:9f:
                    32:af:78:17:53:45:e7:ec:5f:19:bf:71:31:4b:dd:
                    c7:d0:70:4e:b1:9f:68:61:5f:19:21:81:6e:20:b7:
                    08:ff
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                38:6A:4A:91:7B:4B:AE:5E:CF:E6:54:2A:54:CD:A6:9E:01:BB:88:A7
            X509v3 Authority Key Identifier:
                keyid:2F:88:3B:D4:EA:4E:3D:EB:28:B8:94:B1:90:F8:E0:8B:AF:06:F1:CC

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/L4g71OpOPesouJSxkPjgi68G8cw.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/98/b34d6f-66dc-4498-b205-79b6733bc5e6/1/L4g71OpOPesouJSxkPjgi68G8cw.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/98/b34d6f-66dc-4498-b205-79b6733bc5e6/1/L4g71OpOPesouJSxkPjgi68G8cw.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         2d:be:20:1c:f8:e6:08:79:23:b0:34:2d:43:f9:6a:bd:73:79:
         44:a9:5c:86:aa:4a:f1:a2:04:a8:b9:10:cf:c3:20:f3:68:38:
         6b:98:f3:89:40:c4:e8:1d:8e:89:80:6d:1f:fb:d6:53:05:fc:
         5c:ff:0e:4e:76:fe:3d:82:30:ce:c9:eb:85:39:16:aa:9b:e5:
         c2:2a:e6:94:fb:1d:47:e7:e7:05:03:90:7c:21:49:42:f0:d1:
         38:13:26:70:56:b0:25:8a:47:5f:1d:51:77:38:1b:b7:68:26:
         ab:c7:15:26:ce:2f:28:d5:be:cf:55:43:c0:76:c7:8a:89:cf:
         fb:92:e2:71:db:54:b3:35:7a:7b:cd:af:2b:0f:88:c5:c0:ee:
         80:b7:fc:67:b8:ea:91:20:2d:12:25:10:02:af:28:a1:4f:07:
         8b:b5:6c:c3:a0:69:1e:e5:82:6f:fc:e8:7c:1f:f6:d9:2b:1b:
         6b:58:36:1e:4b:f9:8e:df:66:b8:f4:aa:ac:9f:e0:a2:5d:53:
         52:9e:52:8c:45:54:8d:64:60:e7:e5:68:a7:50:b0:6c:f2:e5:
         8e:96:5f:63:97:a4:93:35:56:24:a6:47:0b:07:41:44:1b:61:
         5a:86:ff:fa:97:f7:26:72:f3:ea:5e:c4:ab:7b:69:ce:52:09:
         42:71:ad:ba
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----