Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a5/f7a6a3-71f3-4482-b0c5-fac346400369/1/is2ygftl8Ci3zcq5xHBup8RZQCI.mft
File:                     is2ygftl8Ci3zcq5xHBup8RZQCI.mft (raw, json)
Hash identifier:          CukaLb2VEq732L5qnh6wW36QjwfQe4asuXztrYsIbUE=
Subject key identifier:   1F:D6:71:DC:AC:29:46:CC:35:3A:87:F3:2D:D2:0B:E5:FC:F9:07:4A
Authority key identifier: 8A:CD:B2:81:FB:65:F0:28:B7:CD:CA:B9:C4:70:6E:A7:C4:59:40:22
Certificate issuer:       /CN=8acdb281fb65f028b7cdcab9c4706ea7c4594022
Certificate serial:       01962F06FF62A5DB10DA55BBCA376467B8D0
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/is2ygftl8Ci3zcq5xHBup8RZQCI.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/a5/f7a6a3-71f3-4482-b0c5-fac346400369/1/is2ygftl8Ci3zcq5xHBup8RZQCI.mft
Manifest number:          14ED
Signing time:             Sun 13 Apr 2025 12:01:49 +0000
Manifest this update:     Sun 13 Apr 2025 12:01:49 +0000
Manifest next update:     Mon 14 Apr 2025 12:01:49 +0000
Files and hashes:         1: is2ygftl8Ci3zcq5xHBup8RZQCI.crl (hash: +hA/pMxgd7hKIJgvZjLsehvCBjwn43+9YVUYYWcnaiY=)
                          2: uTaWQEqkT3VDsjoAhq5gw8mVwOQ.roa (hash: xB2IQW+JC30VMfZ+n3Kl+A7lkKJJ7MAH//Df7ex6gzs=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2f:06:ff:62:a5:db:10:da:55:bb:ca:37:64:67:b8:d0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8acdb281fb65f028b7cdcab9c4706ea7c4594022
        Validity
            Not Before: Apr 13 12:01:49 2025 GMT
            Not After : Apr 14 12:01:49 2025 GMT
        Subject: CN=1fd671dcac2946cc353a87f32dd20be5fcf9074a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8e:97:a3:96:03:38:41:ce:8f:63:98:a7:6e:9a:
                    63:92:86:24:28:89:31:90:55:04:e8:34:f9:38:d9:
                    c2:38:ff:2a:1f:75:47:91:cd:75:08:1e:94:de:ee:
                    ef:47:2b:6a:81:81:04:35:4b:ed:d0:0a:ba:68:0e:
                    c6:3f:97:5f:a2:26:3b:2e:0a:aa:5c:cc:6c:64:9d:
                    d6:47:7e:9e:3f:cd:35:1b:52:4d:96:c1:26:56:9c:
                    5e:f0:2d:cd:c1:05:bb:2a:24:73:4e:31:00:76:d3:
                    1d:72:26:7c:55:d2:4c:ab:e5:7e:63:7c:b7:02:a1:
                    d1:dd:23:38:6b:0b:09:53:bd:7c:dc:f0:1b:dc:7b:
                    7a:d3:53:20:2a:09:6c:68:94:a7:ca:39:eb:99:01:
                    9b:bc:ae:e0:35:f2:4e:88:f1:1c:af:fe:c1:e9:0a:
                    06:2d:e6:7a:c9:0f:16:5f:2c:c3:f2:97:e5:c2:a2:
                    10:c8:fc:6b:73:a3:5c:58:c8:65:e8:73:43:0b:d7:
                    db:0c:b1:47:6e:85:cb:cc:0e:c6:6c:34:3a:b1:2e:
                    0d:a2:2b:14:3e:2c:d2:64:1c:0e:fe:bd:05:11:ab:
                    7b:a4:bb:da:07:8b:8d:1a:94:d0:a5:a2:35:56:4c:
                    e2:02:90:92:b7:f1:3d:d0:68:66:81:03:24:c6:95:
                    b3:75
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1F:D6:71:DC:AC:29:46:CC:35:3A:87:F3:2D:D2:0B:E5:FC:F9:07:4A
            X509v3 Authority Key Identifier:
                keyid:8A:CD:B2:81:FB:65:F0:28:B7:CD:CA:B9:C4:70:6E:A7:C4:59:40:22

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/is2ygftl8Ci3zcq5xHBup8RZQCI.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a5/f7a6a3-71f3-4482-b0c5-fac346400369/1/is2ygftl8Ci3zcq5xHBup8RZQCI.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/a5/f7a6a3-71f3-4482-b0c5-fac346400369/1/is2ygftl8Ci3zcq5xHBup8RZQCI.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         2f:4f:f3:0e:e2:af:f9:4c:64:9f:d7:49:64:98:04:1c:73:e9:
         2d:34:90:10:fc:fc:8f:51:ce:27:57:64:24:98:15:3f:a9:e9:
         59:8b:d1:15:7a:2a:4c:7a:fd:17:2b:1e:bf:66:85:f7:71:28:
         38:64:ad:c2:57:03:f2:25:d9:c8:a5:68:f1:42:52:72:61:27:
         d5:b4:bb:f5:41:4b:6b:5a:9a:86:9a:43:ad:ed:44:d5:43:e2:
         14:9a:4d:5f:05:c4:d6:1d:25:43:05:c9:83:96:69:11:da:0b:
         aa:de:b5:e5:63:20:db:12:5a:69:06:96:51:4a:95:4a:d2:4b:
         72:0f:3f:b8:33:89:da:ae:80:ad:e1:da:9f:da:e7:17:f7:84:
         0e:0d:43:ea:09:1b:9f:9f:f5:de:42:04:e7:b8:98:88:2c:8b:
         a4:2d:37:bf:b4:81:08:d0:b0:b4:fe:4f:d7:25:37:e1:5b:10:
         aa:e2:ac:66:da:6a:63:36:1e:d1:53:c0:e4:7e:78:77:d9:bf:
         4d:23:48:bd:82:72:e8:e1:a4:2d:2b:08:3f:c6:d6:7d:b7:16:
         5d:79:da:d6:a2:2a:79:d6:de:2b:0f:53:e7:15:79:10:6b:ff:
         ff:c5:4f:1b:ed:41:28:f3:29:76:d7:4d:f8:af:1d:3b:82:83:
         d7:5d:c2:8b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----