Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a8/cf683e-6abd-4f5d-9943-02f3ddba1942/1/lUqTUetm2NhiTiDRafdmty9YrMA.mft
File:                     lUqTUetm2NhiTiDRafdmty9YrMA.mft (raw, json)
Hash identifier:          N9iB1+j9ZacktUz9ZSTJgh8b+0Jg6VhanGMEzQMsgNM=
Subject key identifier:   D1:9C:51:53:EF:60:D3:D4:72:BF:B5:84:26:1B:93:6D:4F:3F:2A:2F
Authority key identifier: 95:4A:93:51:EB:66:D8:D8:62:4E:20:D1:69:F7:66:B7:2F:58:AC:C0
Certificate issuer:       /CN=954a9351eb66d8d8624e20d169f766b72f58acc0
Certificate serial:       01962F06C53A1CC646365EACAAA886C61156
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/lUqTUetm2NhiTiDRafdmty9YrMA.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/a8/cf683e-6abd-4f5d-9943-02f3ddba1942/1/lUqTUetm2NhiTiDRafdmty9YrMA.mft
Manifest number:          A2
Signing time:             Sun 13 Apr 2025 12:01:34 +0000
Manifest this update:     Sun 13 Apr 2025 12:01:34 +0000
Manifest next update:     Mon 14 Apr 2025 12:01:34 +0000
Files and hashes:         1: lUqTUetm2NhiTiDRafdmty9YrMA.crl (hash: Ku8UmqCeDyHjc7HPh8CNftEhimi6R9SCjjCoSAbKbe8=)
                          2: t16PzAlvWekYsP-M8rbE-GQqrKw.roa (hash: 3vnPnuhk/OI+4T9XrhuO16OQVY7hpcxK0i/qFVmYQP8=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2f:06:c5:3a:1c:c6:46:36:5e:ac:aa:a8:86:c6:11:56
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=954a9351eb66d8d8624e20d169f766b72f58acc0
        Validity
            Not Before: Apr 13 12:01:34 2025 GMT
            Not After : Apr 14 12:01:34 2025 GMT
        Subject: CN=d19c5153ef60d3d472bfb584261b936d4f3f2a2f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c6:15:eb:46:72:9a:67:46:9b:c3:10:93:aa:ff:
                    3d:ed:c6:db:68:dd:cc:c5:d5:a6:bc:9a:81:11:8d:
                    02:ad:fe:55:50:5b:c4:65:43:5d:9e:cd:72:30:35:
                    f6:e8:7e:37:5b:1e:8f:4c:1c:c3:19:5f:2a:c6:73:
                    9f:5d:cf:e9:e1:3e:cf:60:d0:1f:50:e0:be:1e:8f:
                    a6:74:59:b7:30:77:2a:01:03:70:e1:d5:d6:72:7c:
                    aa:15:42:f7:0b:d7:e3:df:e2:da:5f:ee:0a:b4:bb:
                    aa:6b:c8:0e:9c:ff:93:e7:d0:87:2f:58:c0:dc:3c:
                    2a:06:c9:60:a5:ea:c0:36:8c:52:a6:ac:b4:fe:68:
                    84:bd:58:e0:aa:53:ba:ea:26:84:a5:60:98:3e:79:
                    d6:67:65:f1:19:53:93:e7:bf:71:4e:f1:95:38:66:
                    54:37:31:ba:9f:d5:25:47:cc:f6:20:93:7f:55:86:
                    bc:45:4d:7b:4a:21:76:bb:56:29:b2:34:bd:7d:e4:
                    84:02:ab:43:89:4a:25:56:c6:27:62:fc:14:df:f0:
                    82:5e:65:a0:c8:49:4b:b0:88:e7:5f:5e:a1:ff:65:
                    e2:2f:7a:d1:09:4c:ed:56:50:4a:b2:a6:24:b3:a8:
                    35:d1:7d:d8:1d:07:64:5e:04:9d:7b:2a:e4:e2:61:
                    a1:85
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D1:9C:51:53:EF:60:D3:D4:72:BF:B5:84:26:1B:93:6D:4F:3F:2A:2F
            X509v3 Authority Key Identifier:
                keyid:95:4A:93:51:EB:66:D8:D8:62:4E:20:D1:69:F7:66:B7:2F:58:AC:C0

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/lUqTUetm2NhiTiDRafdmty9YrMA.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a8/cf683e-6abd-4f5d-9943-02f3ddba1942/1/lUqTUetm2NhiTiDRafdmty9YrMA.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/a8/cf683e-6abd-4f5d-9943-02f3ddba1942/1/lUqTUetm2NhiTiDRafdmty9YrMA.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         6f:f1:5b:45:9b:61:01:7c:80:11:65:c1:da:5b:88:d1:97:17:
         d3:89:55:b0:75:e8:65:97:86:97:d4:af:82:ac:f1:0d:8e:eb:
         eb:07:60:a9:d0:aa:e2:b7:49:fa:52:81:32:a6:cf:9f:ac:8a:
         98:dc:b0:21:85:35:36:22:36:a2:ab:29:3e:a8:83:2e:f6:ae:
         4e:a7:b1:e6:99:c7:8a:66:4d:4d:37:e0:0a:eb:9d:83:1e:38:
         1a:f6:88:03:cb:50:5e:b2:19:2e:81:ef:6e:f6:f5:b1:cb:d1:
         03:70:77:13:9f:64:4c:0d:a9:ae:2b:e4:73:8c:12:e1:63:bd:
         a5:2b:ff:20:46:f9:4e:b6:a3:0f:3b:fd:d3:06:d6:46:f0:cb:
         47:d3:39:51:f1:d2:3e:de:06:77:61:42:66:dd:b9:55:1a:76:
         06:70:7e:1e:f6:35:10:c6:04:3e:34:b1:82:b4:77:dc:61:0c:
         76:5c:e1:47:17:f9:11:eb:70:a0:fb:96:dd:14:37:96:6b:c0:
         44:64:01:2e:cd:2b:7e:26:60:3a:54:4d:68:4a:e4:07:01:05:
         a1:3c:1c:c6:c8:91:62:63:2f:79:f5:22:c9:85:31:8e:a4:71:
         12:cd:99:7a:2a:2d:6b:af:b2:53:e2:88:60:ce:b0:48:cd:49:
         ba:7a:f1:ab
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----