Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/aa/537267-b243-4657-99ff-94b514433c11/1/8nisvMRvEz79OT9RFg_bt2B-HhY.mft
File:                     8nisvMRvEz79OT9RFg_bt2B-HhY.mft (raw, json)
Hash identifier:          a9JqM/wuD+h4G4/acTsnoYh+AMTAL6oLxppq087RDHk=
Subject key identifier:   87:52:F0:14:49:F1:49:D1:14:CF:5D:CD:91:52:E8:10:9C:96:31:8C
Authority key identifier: F2:78:AC:BC:C4:6F:13:3E:FD:39:3F:51:16:0F:DB:B7:60:7E:1E:16
Certificate issuer:       /CN=f278acbcc46f133efd393f51160fdbb7607e1e16
Certificate serial:       01962F06E45BA086343E2F7C6295C17622F5
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/8nisvMRvEz79OT9RFg_bt2B-HhY.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/aa/537267-b243-4657-99ff-94b514433c11/1/8nisvMRvEz79OT9RFg_bt2B-HhY.mft
Manifest number:          0EAF
Signing time:             Sun 13 Apr 2025 12:01:42 +0000
Manifest this update:     Sun 13 Apr 2025 12:01:42 +0000
Manifest next update:     Mon 14 Apr 2025 12:01:42 +0000
Files and hashes:         1: 8nisvMRvEz79OT9RFg_bt2B-HhY.crl (hash: ksGxFX07rxNRHrQYMEUXRya+Pt9EQF7+4RsEJn/jKe8=)
                          2: Mkl44sEh_I1NJhSRpZogcHN-KpQ.roa (hash: UFBdvkUQHMElnZ7pMex1cDJSyxO3mce2NK6vzaKBwPg=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2f:06:e4:5b:a0:86:34:3e:2f:7c:62:95:c1:76:22:f5
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=f278acbcc46f133efd393f51160fdbb7607e1e16
        Validity
            Not Before: Apr 13 12:01:42 2025 GMT
            Not After : Apr 14 12:01:42 2025 GMT
        Subject: CN=8752f01449f149d114cf5dcd9152e8109c96318c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:98:5b:d3:78:04:11:e2:c2:c4:a3:38:8c:21:6d:
                    c1:91:60:7b:85:e6:d4:4f:f0:44:67:8b:27:f2:f3:
                    aa:4c:c4:a3:53:06:44:b2:d3:6c:c2:a1:60:1d:aa:
                    b5:4f:8c:ea:ee:25:fb:d8:2d:18:41:fc:b7:43:80:
                    07:84:54:b4:d3:9b:a4:f4:bf:77:4f:3b:10:31:e7:
                    7b:9a:2b:10:05:00:69:db:76:4f:ba:7c:2a:3b:8d:
                    b0:5a:2e:1d:7e:77:f7:ef:48:7a:76:01:fe:88:c2:
                    d2:76:b1:5e:10:62:0a:59:71:76:77:45:f7:6b:28:
                    2f:69:37:23:2d:8a:29:5b:95:8c:46:95:0b:df:89:
                    61:ee:0f:46:3f:89:bc:a7:66:b0:e3:74:af:09:e5:
                    a1:0c:62:72:b2:35:91:9c:2f:84:c5:52:4a:85:61:
                    44:a7:0c:a2:5f:0f:23:fa:07:10:47:ec:2b:35:ac:
                    4a:95:6f:15:69:ff:a3:06:ed:f6:09:f6:72:56:a0:
                    2b:a9:84:50:7f:c7:b9:fb:71:7d:b8:89:45:c8:04:
                    fb:9c:33:c6:24:8f:04:0d:95:c1:b4:be:56:b8:9a:
                    25:67:3b:e7:5b:6e:b5:bc:be:23:d7:a6:0a:2b:d6:
                    0a:93:83:9a:ce:5f:d0:b8:e2:dc:97:eb:e8:e6:52:
                    7b:93
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                87:52:F0:14:49:F1:49:D1:14:CF:5D:CD:91:52:E8:10:9C:96:31:8C
            X509v3 Authority Key Identifier:
                keyid:F2:78:AC:BC:C4:6F:13:3E:FD:39:3F:51:16:0F:DB:B7:60:7E:1E:16

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/8nisvMRvEz79OT9RFg_bt2B-HhY.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/aa/537267-b243-4657-99ff-94b514433c11/1/8nisvMRvEz79OT9RFg_bt2B-HhY.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/aa/537267-b243-4657-99ff-94b514433c11/1/8nisvMRvEz79OT9RFg_bt2B-HhY.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         01:5b:e0:b9:89:db:d3:07:d8:52:25:18:1e:77:3a:b6:97:75:
         4a:73:db:2d:f1:0b:22:85:e1:e5:ed:55:f6:87:e4:1f:73:1a:
         a8:e8:de:51:f1:7a:af:ee:24:d7:d9:65:9f:dc:5e:63:88:6e:
         ee:7b:a0:8f:e4:0e:32:11:43:38:79:3b:ff:33:35:67:1a:19:
         c3:51:52:e4:2d:42:ec:68:28:3c:d1:fa:e4:3e:41:8a:80:97:
         2d:8c:46:a4:8a:43:c0:9d:e5:f5:23:9f:1f:88:4d:1e:f1:a1:
         76:c1:e3:6d:e5:71:5a:a1:d7:ce:d4:db:ef:f2:29:96:45:e8:
         bb:b6:67:dd:2f:21:dd:be:11:e6:61:57:14:2e:40:a3:80:0b:
         65:36:1b:9f:1f:51:7c:ac:67:7e:2c:38:04:5f:70:40:56:af:
         93:a6:6a:c1:3d:78:1d:84:94:3f:cb:0a:43:25:c9:ad:a9:93:
         1c:d4:01:8c:4a:61:66:e9:55:0e:c5:1d:bd:0e:23:57:ce:67:
         be:1f:0c:22:00:df:4b:48:c8:80:b6:5b:1f:7f:63:ea:1d:fc:
         17:e7:7f:61:fb:f6:fa:f1:8d:89:25:61:82:78:c2:d8:2e:25:
         da:02:fc:2b:79:a9:89:5e:ea:7e:96:d5:fd:c4:5d:8d:58:2a:
         42:d3:55:da
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----