Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a8/3a5258-989d-400b-b7b7-454c93c065a0/1/1O219t5yQ2FIs1pZA38jNBUN2zY.mft
File:                     1O219t5yQ2FIs1pZA38jNBUN2zY.mft (raw, json)
Hash identifier:          EYKaIUnXPRk7sVj/Y6FRI22CfnQPUdXzpQRYQoZuNXw=
Subject key identifier:   1D:4D:CB:19:9B:A6:0B:2E:55:C9:B4:92:F7:84:DF:18:3F:2E:76:31
Authority key identifier: D4:ED:B5:F6:DE:72:43:61:48:B3:5A:59:03:7F:23:34:15:0D:DB:36
Certificate issuer:       /CN=d4edb5f6de72436148b35a59037f2334150ddb36
Certificate serial:       01962FAB6379AB283D345FBDDC805DFD1C99
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/1O219t5yQ2FIs1pZA38jNBUN2zY.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/a8/3a5258-989d-400b-b7b7-454c93c065a0/1/1O219t5yQ2FIs1pZA38jNBUN2zY.mft
Manifest number:          147D
Signing time:             Sun 13 Apr 2025 15:01:23 +0000
Manifest this update:     Sun 13 Apr 2025 15:01:23 +0000
Manifest next update:     Mon 14 Apr 2025 15:01:23 +0000
Files and hashes:         1: 1O219t5yQ2FIs1pZA38jNBUN2zY.crl (hash: vkMHHrqo+z54eexMFLuxHxDhbefN8xb/W1lnP3jqF+o=)
                          2: CUxoxoHUFgCcWdXLBL1XTZtblHU.roa (hash: nuVV0ajPUp0XSEkxw4hsRxKF9YmW1aG+8tY3rAw4VUA=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2f:ab:63:79:ab:28:3d:34:5f:bd:dc:80:5d:fd:1c:99
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d4edb5f6de72436148b35a59037f2334150ddb36
        Validity
            Not Before: Apr 13 15:01:23 2025 GMT
            Not After : Apr 14 15:01:23 2025 GMT
        Subject: CN=1d4dcb199ba60b2e55c9b492f784df183f2e7631
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b5:2b:c4:0f:4e:20:61:6f:3a:7f:03:6c:d8:2e:
                    ec:00:00:77:1f:fb:9d:15:74:75:ad:5c:eb:1c:17:
                    d5:ad:e7:03:02:3b:8c:b0:2b:5c:9d:3f:93:a0:cf:
                    b2:d9:b2:f7:a7:78:1b:6f:58:ed:0b:84:b7:26:83:
                    2a:3e:6a:2b:f2:db:71:86:b2:e4:32:77:b5:7a:e9:
                    ca:8f:45:c4:d2:8f:6f:e3:30:87:65:e7:8a:47:36:
                    df:c6:91:55:2d:81:2e:09:cf:7a:be:2e:83:46:ed:
                    76:3e:a6:39:a4:45:2c:a3:49:94:80:f4:7a:d6:55:
                    dc:f7:cb:4c:73:2d:f3:6d:ef:77:29:af:4e:f5:c1:
                    27:0f:ac:10:26:50:78:c4:67:95:4a:28:14:a7:a2:
                    a4:2f:88:c4:d6:e5:99:1e:01:6d:61:6a:b9:e9:f3:
                    49:e3:9f:c8:aa:6c:e3:bc:25:5a:6e:9b:e8:ae:14:
                    e7:d0:a9:b4:0a:c8:8e:ef:da:7b:a9:7e:2b:c1:e9:
                    a4:db:aa:3e:f4:b3:9b:42:6f:72:d1:67:9c:7d:be:
                    cc:b5:cc:1c:63:fd:ec:5b:89:37:c8:d4:b0:d3:fc:
                    43:b2:cb:e2:54:12:51:cf:72:af:66:99:39:2f:b4:
                    50:b8:f5:b7:76:83:08:29:f0:6d:08:26:1e:84:9c:
                    e2:df
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1D:4D:CB:19:9B:A6:0B:2E:55:C9:B4:92:F7:84:DF:18:3F:2E:76:31
            X509v3 Authority Key Identifier:
                keyid:D4:ED:B5:F6:DE:72:43:61:48:B3:5A:59:03:7F:23:34:15:0D:DB:36

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1O219t5yQ2FIs1pZA38jNBUN2zY.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a8/3a5258-989d-400b-b7b7-454c93c065a0/1/1O219t5yQ2FIs1pZA38jNBUN2zY.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/a8/3a5258-989d-400b-b7b7-454c93c065a0/1/1O219t5yQ2FIs1pZA38jNBUN2zY.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         73:e6:a5:bb:bf:a9:93:6e:3f:49:08:a1:a7:3b:22:64:ef:25:
         63:f7:47:d0:de:eb:57:e6:b1:31:1c:fe:16:d6:5a:be:27:4e:
         89:61:46:46:e0:56:c1:e4:f7:f5:75:f4:3e:b0:bc:db:96:db:
         34:f3:6d:2c:5b:76:e5:07:50:25:71:41:ca:5b:5f:60:3d:44:
         e9:94:31:b3:2d:77:24:16:1c:c3:3d:c8:8a:10:ba:6e:19:d8:
         e1:49:8f:38:63:af:14:82:39:d5:ad:ff:cb:1b:50:d7:01:00:
         5e:99:6b:97:df:50:3d:54:6a:f8:79:fe:96:99:fd:d6:43:b0:
         58:b3:2a:05:5b:d0:18:99:32:e6:4a:82:91:23:b0:43:55:c1:
         72:59:fb:72:5a:9c:02:28:f0:5e:64:ce:e2:7e:71:33:11:11:
         cb:96:ac:82:d0:0d:67:0a:72:f7:f4:de:f5:94:7e:7b:e2:a6:
         6b:68:da:54:3b:ff:08:9a:f5:ba:3a:87:87:0e:aa:39:c5:c9:
         ce:b5:b3:37:fb:1b:6f:08:be:d6:bc:5a:dc:ef:7f:26:1b:ce:
         44:03:b7:2b:57:81:0f:aa:78:e3:78:9c:18:e1:5b:ef:d5:5a:
         70:8a:e7:79:2b:89:9d:36:ac:36:60:71:92:8a:72:13:e4:4b:
         f4:34:74:67
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----