Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/98/e6b8d9-6992-4841-a1a5-3fd180341cbb/1/2nJcOpxc2GZvhrB6gI8TLgkRGZ4.mft
File:                     2nJcOpxc2GZvhrB6gI8TLgkRGZ4.mft (raw, json)
Hash identifier:          ubG0gZQuSj/T7ilZPd+PrjakIXX3L7kowUajm4BOoAo=
Subject key identifier:   C2:37:89:D0:45:3D:62:EE:42:2E:D3:0F:DB:A9:4F:31:83:F6:36:46
Authority key identifier: DA:72:5C:3A:9C:5C:D8:66:6F:86:B0:7A:80:8F:13:2E:09:11:19:9E
Certificate issuer:       /CN=da725c3a9c5cd8666f86b07a808f132e0911199e
Certificate serial:       01962E61DA1AF14E6E50061F236C5D7541E9
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/2nJcOpxc2GZvhrB6gI8TLgkRGZ4.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/98/e6b8d9-6992-4841-a1a5-3fd180341cbb/1/2nJcOpxc2GZvhrB6gI8TLgkRGZ4.mft
Manifest number:          02A4
Signing time:             Sun 13 Apr 2025 09:01:26 +0000
Manifest this update:     Sun 13 Apr 2025 09:01:26 +0000
Manifest next update:     Mon 14 Apr 2025 09:01:26 +0000
Files and hashes:         1: 2nJcOpxc2GZvhrB6gI8TLgkRGZ4.crl (hash: kRMmhYNDt/gv394Vrgtin4R/tKQl5YE+8pB/Ny4UYkI=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2e:61:da:1a:f1:4e:6e:50:06:1f:23:6c:5d:75:41:e9
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=da725c3a9c5cd8666f86b07a808f132e0911199e
        Validity
            Not Before: Apr 13 09:01:26 2025 GMT
            Not After : Apr 14 09:01:26 2025 GMT
        Subject: CN=c23789d0453d62ee422ed30fdba94f3183f63646
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:af:0f:3a:28:23:87:47:04:da:86:24:d2:be:5b:
                    c7:ca:7a:15:d4:19:c4:c2:8b:18:93:26:e9:78:73:
                    11:6f:27:f6:fc:a9:a0:ae:a5:c1:96:b9:b9:20:fe:
                    60:7e:66:13:09:c3:58:1b:1e:be:57:65:82:50:82:
                    d2:2a:83:02:22:2e:44:1c:24:c4:2b:cd:8f:cc:2e:
                    bc:1c:00:99:ee:ad:9b:fa:44:a9:ba:45:28:07:92:
                    43:d7:ab:a7:9e:90:7f:fb:30:cb:86:77:68:89:2f:
                    b6:b5:9c:87:33:37:cc:a8:5a:a5:55:3e:5a:16:f9:
                    19:8a:81:ca:78:aa:57:36:4a:c3:a0:43:46:a5:8e:
                    1a:3a:ef:ec:cd:8e:c4:a4:48:85:bc:46:8d:b4:23:
                    cf:bc:17:99:cd:97:d7:2a:c4:d2:05:b5:93:d2:82:
                    17:eb:a9:55:a7:80:2d:85:60:60:4e:08:63:a0:49:
                    83:2a:c7:d3:45:b6:af:f5:87:42:a8:55:7a:6f:21:
                    be:4e:95:09:82:d0:a1:7a:6a:72:b1:27:1f:c8:b2:
                    5c:86:51:1a:a3:86:f1:d4:9d:57:89:65:69:83:80:
                    37:5c:5e:75:5e:82:9f:af:76:4e:7e:88:ed:f0:a9:
                    6a:f3:ae:ca:5a:bb:40:8c:7d:c1:e6:47:43:8f:92:
                    ea:a3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C2:37:89:D0:45:3D:62:EE:42:2E:D3:0F:DB:A9:4F:31:83:F6:36:46
            X509v3 Authority Key Identifier:
                keyid:DA:72:5C:3A:9C:5C:D8:66:6F:86:B0:7A:80:8F:13:2E:09:11:19:9E

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/2nJcOpxc2GZvhrB6gI8TLgkRGZ4.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/98/e6b8d9-6992-4841-a1a5-3fd180341cbb/1/2nJcOpxc2GZvhrB6gI8TLgkRGZ4.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/98/e6b8d9-6992-4841-a1a5-3fd180341cbb/1/2nJcOpxc2GZvhrB6gI8TLgkRGZ4.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         2e:ec:9f:0a:c9:1f:dc:71:e5:a2:be:7e:94:8c:e2:f3:be:d3:
         6b:7b:ad:07:a2:3f:74:26:53:8b:5d:79:e4:4c:14:64:48:48:
         36:db:33:b2:4a:20:2d:ef:31:80:90:3b:61:56:fe:c5:a6:b8:
         01:56:b6:f5:20:61:43:87:10:01:19:c1:00:8c:40:77:97:13:
         4a:f4:cc:84:0d:cc:1a:a6:87:cf:23:40:74:23:51:f9:3a:ca:
         56:26:03:a3:b3:06:1c:a4:6b:c4:71:a1:aa:0f:52:07:18:e3:
         33:b9:b5:33:3f:63:bc:37:8a:89:76:5f:f5:08:ef:1a:a4:5d:
         57:f2:a8:5a:ed:f6:7b:5e:47:18:e9:bb:39:12:19:59:26:d3:
         3a:9b:98:49:37:d4:dd:8e:e4:60:77:8b:14:d9:b1:8d:63:79:
         e9:2e:d6:a8:dc:93:86:a7:5f:33:58:d1:4f:44:17:57:c5:8c:
         e4:c2:27:db:20:d7:2b:64:c3:29:a9:b8:be:bf:a8:cf:ae:c2:
         75:ef:37:42:44:14:44:34:b0:10:22:bb:09:b2:83:8f:f8:b1:
         ce:44:48:e1:99:00:ad:54:ab:4b:d8:8c:32:9f:9f:7c:ce:45:
         fd:45:25:18:1c:27:95:eb:4e:3a:00:4e:d4:df:f7:01:da:b5:
         6f:31:8c:34
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----