Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/aa/5729fa-59dd-4346-8c00-2dd11984b35f/1/sTI2xNBokx4LRMmLKQqPqlVKA7k.mft
File:                     sTI2xNBokx4LRMmLKQqPqlVKA7k.mft (raw, json)
Hash identifier:          urDXKaPE1M5FW5yx4FFn78cFBshEBN7eiWts1q2xfNY=
Subject key identifier:   E1:43:A7:BC:83:88:D1:03:0F:95:22:28:F7:94:8B:E9:C8:1F:4C:D7
Authority key identifier: B1:32:36:C4:D0:68:93:1E:0B:44:C9:8B:29:0A:8F:AA:55:4A:03:B9
Certificate issuer:       /CN=b13236c4d068931e0b44c98b290a8faa554a03b9
Certificate serial:       01962F074581893D007616DBFED492474611
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/sTI2xNBokx4LRMmLKQqPqlVKA7k.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/aa/5729fa-59dd-4346-8c00-2dd11984b35f/1/sTI2xNBokx4LRMmLKQqPqlVKA7k.mft
Manifest number:          02B1
Signing time:             Sun 13 Apr 2025 12:02:07 +0000
Manifest this update:     Sun 13 Apr 2025 12:02:07 +0000
Manifest next update:     Mon 14 Apr 2025 12:02:07 +0000
Files and hashes:         1: sTI2xNBokx4LRMmLKQqPqlVKA7k.crl (hash: 0jhx7EjLt1UFJW0DyJ+yRA0SY/T8YBEg5WTqtNnnmG0=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2f:07:45:81:89:3d:00:76:16:db:fe:d4:92:47:46:11
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b13236c4d068931e0b44c98b290a8faa554a03b9
        Validity
            Not Before: Apr 13 12:02:07 2025 GMT
            Not After : Apr 14 12:02:07 2025 GMT
        Subject: CN=e143a7bc8388d1030f952228f7948be9c81f4cd7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a8:5f:03:0e:fc:81:f2:45:3d:46:91:6b:79:de:
                    6b:29:1f:f5:a9:75:2a:da:20:eb:97:d6:d0:8f:66:
                    78:f5:3c:bc:d8:0e:83:6d:9c:bf:42:1d:45:8a:85:
                    2f:33:84:32:fb:a2:c6:b6:82:cb:66:43:a6:7a:40:
                    83:96:8a:fe:40:0f:1a:4a:60:fb:21:5d:90:06:4a:
                    90:4b:cf:f6:0b:75:04:6a:4d:ca:e5:c3:70:ee:ec:
                    2d:48:55:84:4a:0f:e6:a6:0d:eb:ef:74:06:0a:1e:
                    dd:06:d1:e1:b2:71:74:7e:31:6c:90:53:82:e7:2d:
                    94:7b:e3:98:98:ce:4f:3e:cf:5d:56:ce:ba:b1:33:
                    4b:0e:dc:de:92:30:7e:4b:48:30:0c:42:b4:fc:b5:
                    1a:4f:32:45:79:da:dc:f9:ce:5a:e4:92:bd:08:d8:
                    68:cb:e8:89:90:14:b6:3e:ba:be:77:12:0e:8f:c6:
                    6d:0e:76:8d:67:8a:5e:a4:6f:7c:e0:b8:87:93:ee:
                    e1:4f:de:8e:63:a3:3b:f3:70:5c:8c:3e:ac:f3:cf:
                    3f:78:80:d9:4e:03:f0:fb:9b:c2:84:b6:20:83:d6:
                    a3:39:65:8c:1f:48:87:c2:be:1a:3d:a2:d9:90:b7:
                    fd:53:c0:78:2d:82:07:56:d0:53:a9:71:11:57:ae:
                    5e:ed
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E1:43:A7:BC:83:88:D1:03:0F:95:22:28:F7:94:8B:E9:C8:1F:4C:D7
            X509v3 Authority Key Identifier:
                keyid:B1:32:36:C4:D0:68:93:1E:0B:44:C9:8B:29:0A:8F:AA:55:4A:03:B9

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/sTI2xNBokx4LRMmLKQqPqlVKA7k.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/aa/5729fa-59dd-4346-8c00-2dd11984b35f/1/sTI2xNBokx4LRMmLKQqPqlVKA7k.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/aa/5729fa-59dd-4346-8c00-2dd11984b35f/1/sTI2xNBokx4LRMmLKQqPqlVKA7k.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         b0:98:f8:0d:de:c9:5f:46:27:69:db:02:9f:b6:1a:1f:9b:77:
         55:5d:6a:6a:ea:63:8b:50:aa:8b:4b:b6:e3:ed:cf:87:c4:8d:
         15:ad:cb:2b:7d:28:61:cb:ec:40:1b:1b:5e:21:64:49:a1:6f:
         2a:54:2f:ca:78:0a:c9:d4:54:64:b5:3e:89:aa:d6:06:66:5e:
         58:f6:d8:68:ac:93:44:e1:69:45:71:0b:09:55:7c:3d:ce:57:
         fb:a6:74:15:82:7c:df:17:3f:4e:fe:02:da:38:32:99:4b:7e:
         49:ea:7c:fd:91:07:f5:8e:11:4d:2a:52:20:f2:7d:ef:32:4f:
         e9:14:ff:80:e6:5e:ff:29:4f:3c:bb:c0:7e:be:4c:d8:39:41:
         ba:b4:7e:f9:77:42:fb:4d:19:ae:88:b1:75:de:d3:fa:6a:71:
         69:f4:cf:56:7e:f3:0f:71:0e:0f:6d:ea:66:83:ed:82:ce:d9:
         02:c6:1a:e2:5d:d8:76:f0:26:81:12:0c:e2:f1:7c:7c:97:62:
         f9:6f:f3:6f:b0:4e:4e:62:5d:73:72:27:9e:86:00:d7:4a:7d:
         4b:a9:55:cc:bf:51:83:9c:9c:c0:4c:f2:58:b7:67:77:31:ae:
         c0:57:29:ba:be:ff:ca:7f:1e:c4:ff:65:2b:55:6e:6b:01:eb:
         d7:3a:20:2e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----