Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9f/49e36c-74b6-4547-88ab-214a76210fd6/1/XS8h5aT74BUgX2zviK-uGc0GphI.mft
File:                     XS8h5aT74BUgX2zviK-uGc0GphI.mft (raw, json)
Hash identifier:          j3mc5BNe5v1JggzRjyjmKPM+lSvt6m3CRGxKlaAG+AU=
Subject key identifier:   33:65:E9:B7:9D:B8:9F:63:8E:EE:24:C2:CF:F1:49:CE:7C:C3:48:26
Authority key identifier: 5D:2F:21:E5:A4:FB:E0:15:20:5F:6C:EF:88:AF:AE:19:CD:06:A6:12
Certificate issuer:       /CN=5d2f21e5a4fbe015205f6cef88afae19cd06a612
Certificate serial:       01962E9956C46B77D68ADE1ED33C66A308F9
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/XS8h5aT74BUgX2zviK-uGc0GphI.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/9f/49e36c-74b6-4547-88ab-214a76210fd6/1/XS8h5aT74BUgX2zviK-uGc0GphI.mft
Manifest number:          147D
Signing time:             Sun 13 Apr 2025 10:02:03 +0000
Manifest this update:     Sun 13 Apr 2025 10:02:03 +0000
Manifest next update:     Mon 14 Apr 2025 10:02:03 +0000
Files and hashes:         1: 3s8R9sRZRUNgHAycT7iMGkpoqeI.roa (hash: LAbsSBnsWLcRul98ZPfO4H8aiix0SGvDORk1UP26ViE=)
                          2: XS8h5aT74BUgX2zviK-uGc0GphI.crl (hash: VJsSfUYI4nIJgH0r5bFY20niz0rWia0ZUOtJFB0n8ZA=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2e:99:56:c4:6b:77:d6:8a:de:1e:d3:3c:66:a3:08:f9
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5d2f21e5a4fbe015205f6cef88afae19cd06a612
        Validity
            Not Before: Apr 13 10:02:03 2025 GMT
            Not After : Apr 14 10:02:03 2025 GMT
        Subject: CN=3365e9b79db89f638eee24c2cff149ce7cc34826
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a8:b8:5d:a4:34:49:f0:53:67:a4:87:ae:d6:e9:
                    4a:a7:43:c7:66:f0:57:5a:8c:b0:38:bc:17:bd:70:
                    a4:f5:c2:32:ec:22:a4:22:09:77:d3:f4:67:20:da:
                    a6:2a:da:ff:be:f4:18:b6:b7:dc:b6:4c:fc:f2:65:
                    61:bc:f8:20:c1:58:17:e7:6b:97:93:d4:2a:0f:37:
                    fb:2e:a9:36:92:df:e4:fa:eb:e6:0a:13:1b:38:cb:
                    d3:ed:ff:0d:09:34:45:f6:55:85:15:be:15:e0:77:
                    20:a6:98:98:e2:43:62:7e:8c:6f:4e:5a:d3:29:ce:
                    29:4e:84:c0:29:cf:ab:41:3f:3a:be:59:ff:fe:22:
                    06:41:c9:fb:2f:ff:2b:61:24:54:90:8e:31:8b:56:
                    20:c6:a0:fc:7a:da:c7:41:cf:1c:5b:3b:8e:66:6b:
                    47:5a:95:07:2f:69:dd:b5:85:d2:4c:3d:8f:45:56:
                    f7:fa:98:29:b6:ca:59:70:f1:a2:b6:b3:be:20:5f:
                    90:4b:3b:1e:ec:63:41:8f:84:f2:a8:b1:de:00:e0:
                    7a:8b:f9:22:7d:dd:01:49:4c:6b:fd:b9:d6:24:26:
                    3b:63:95:67:2f:86:65:9a:56:f4:d7:e1:6b:56:89:
                    58:de:b1:e4:8d:93:65:df:d4:8f:d6:0e:f1:d5:29:
                    e2:ff
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                33:65:E9:B7:9D:B8:9F:63:8E:EE:24:C2:CF:F1:49:CE:7C:C3:48:26
            X509v3 Authority Key Identifier:
                keyid:5D:2F:21:E5:A4:FB:E0:15:20:5F:6C:EF:88:AF:AE:19:CD:06:A6:12

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/XS8h5aT74BUgX2zviK-uGc0GphI.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9f/49e36c-74b6-4547-88ab-214a76210fd6/1/XS8h5aT74BUgX2zviK-uGc0GphI.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/9f/49e36c-74b6-4547-88ab-214a76210fd6/1/XS8h5aT74BUgX2zviK-uGc0GphI.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         4a:5a:be:bc:7b:b2:75:96:8a:39:0a:37:37:55:ec:b0:7e:42:
         d6:80:95:ce:5c:44:82:db:e4:5d:af:85:13:79:99:51:a9:74:
         e5:d9:f6:57:e1:11:fa:8a:e8:94:f0:ba:87:51:0e:70:4e:4a:
         f9:2e:3b:fa:2e:8a:9d:02:bb:da:99:4f:f5:91:eb:aa:50:9f:
         dd:17:32:63:39:30:d7:9f:a7:87:c1:3d:57:f1:fd:41:1f:30:
         b3:ab:c6:dc:33:95:9d:f3:2a:64:0c:1b:1a:4c:01:5b:3e:8f:
         d0:28:78:01:ea:45:0d:15:ea:cb:37:26:fc:cb:69:cd:98:b0:
         d0:aa:05:6d:1d:dd:5f:42:e5:42:77:af:39:0b:2c:d9:6d:bd:
         0e:e4:a9:51:be:14:3f:44:0d:7c:4e:ae:06:0e:11:1e:9d:4e:
         ae:31:43:20:dd:16:b0:42:b7:2f:74:41:1b:02:f8:a0:af:02:
         4c:a5:d8:ca:ee:d8:ff:8a:9e:cf:23:c6:51:96:97:57:2d:5f:
         1f:72:89:e0:00:6c:96:9f:a9:2d:75:3a:8b:ba:14:7a:d0:c4:
         a5:1f:b5:64:5f:ad:69:9f:0f:32:59:72:2b:10:d0:98:97:ee:
         09:6c:44:84:5f:91:07:1f:fe:3d:f4:45:91:35:d4:27:8f:0c:
         0e:c7:04:6b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----