Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ab/87a9d9-667f-41f3-aec9-8098205f872e/1/2lTIIO5UFUMsaLATYZJ1_0xubqU.mft
File:                     2lTIIO5UFUMsaLATYZJ1_0xubqU.mft (raw, json)
Hash identifier:          QftqcTWgbe/r7L6Ea+tZnEQTIMd1RcTP+k8P0B7lw0Y=
Subject key identifier:   30:AB:B8:17:1E:BB:22:67:CC:53:63:EC:5D:D3:81:0C:72:34:84:F2
Authority key identifier: DA:54:C8:20:EE:54:15:43:2C:68:B0:13:61:92:75:FF:4C:6E:6E:A5
Certificate issuer:       /CN=da54c820ee5415432c68b013619275ff4c6e6ea5
Certificate serial:       01962E990988B8FAB6EF407C0FEF38C60FD8
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/2lTIIO5UFUMsaLATYZJ1_0xubqU.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/ab/87a9d9-667f-41f3-aec9-8098205f872e/1/2lTIIO5UFUMsaLATYZJ1_0xubqU.mft
Manifest number:          056E
Signing time:             Sun 13 Apr 2025 10:01:43 +0000
Manifest this update:     Sun 13 Apr 2025 10:01:43 +0000
Manifest next update:     Mon 14 Apr 2025 10:01:43 +0000
Files and hashes:         1: 2lTIIO5UFUMsaLATYZJ1_0xubqU.crl (hash: Tnw4ROb8EG6EyVyT+aBWXbiVCQPfZEro1nfP5didWpY=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2e:99:09:88:b8:fa:b6:ef:40:7c:0f:ef:38:c6:0f:d8
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=da54c820ee5415432c68b013619275ff4c6e6ea5
        Validity
            Not Before: Apr 13 10:01:43 2025 GMT
            Not After : Apr 14 10:01:43 2025 GMT
        Subject: CN=30abb8171ebb2267cc5363ec5dd3810c723484f2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b8:1d:49:54:01:80:c4:b7:71:50:bb:0f:e0:e7:
                    dd:95:b9:74:2d:22:46:23:22:27:05:65:a0:a6:39:
                    44:b9:c8:e2:5d:96:91:d1:c5:8d:75:b7:f8:05:63:
                    b1:16:83:e1:8d:34:5d:cb:b4:66:39:0e:b8:60:22:
                    c4:ce:e8:42:40:54:e2:02:90:f8:c6:ff:30:d5:54:
                    1e:84:c0:7b:47:50:f4:41:09:ed:af:9a:29:2c:cf:
                    19:06:73:50:a2:49:93:26:8e:38:f1:51:d7:fc:0e:
                    a8:2c:2f:5e:28:5e:a6:47:09:b8:bc:fd:d5:b8:19:
                    f5:5c:a0:6a:b7:17:fb:84:f1:1a:ea:63:ac:b1:39:
                    9e:63:68:46:31:b1:c3:42:0c:b4:17:01:98:8a:80:
                    38:12:89:95:72:18:d9:70:9b:0d:6c:a1:78:40:ee:
                    2c:3c:8e:42:4c:dd:71:e0:7a:67:2b:77:ce:d4:97:
                    38:3e:1d:9f:d6:4d:49:9f:c0:98:e2:16:88:2a:52:
                    2f:a0:31:4c:29:9b:7e:bc:40:27:1a:06:5b:d8:dd:
                    48:6b:ba:e8:37:03:bd:fc:5d:b7:38:09:cf:74:ee:
                    5f:a0:a3:9c:16:bf:db:de:bd:26:17:d2:68:1c:49:
                    96:6f:0d:6c:e3:a6:ab:74:cc:bb:44:62:65:55:1e:
                    27:27
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                30:AB:B8:17:1E:BB:22:67:CC:53:63:EC:5D:D3:81:0C:72:34:84:F2
            X509v3 Authority Key Identifier:
                keyid:DA:54:C8:20:EE:54:15:43:2C:68:B0:13:61:92:75:FF:4C:6E:6E:A5

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/2lTIIO5UFUMsaLATYZJ1_0xubqU.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ab/87a9d9-667f-41f3-aec9-8098205f872e/1/2lTIIO5UFUMsaLATYZJ1_0xubqU.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/ab/87a9d9-667f-41f3-aec9-8098205f872e/1/2lTIIO5UFUMsaLATYZJ1_0xubqU.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         4e:ab:1a:6d:52:bb:64:5c:b3:ba:ed:ef:ee:ff:8d:07:fd:26:
         f2:d1:f7:af:a1:30:10:3c:24:c4:31:72:2d:11:99:b7:63:19:
         64:9c:31:fa:dd:20:97:66:54:74:dc:57:65:1e:a6:9a:a1:59:
         27:b0:ba:8d:f5:fd:eb:10:5f:a9:fc:26:72:8d:bb:38:fd:a0:
         94:7d:27:12:8a:d1:03:81:ba:81:97:89:c7:e8:2e:0c:66:5c:
         e9:c5:99:ff:16:05:a5:dd:fb:5b:18:c6:9c:6c:d6:9b:3d:6c:
         cd:9b:2e:88:4e:71:cd:34:4b:42:ae:c7:57:9a:c5:ff:24:c4:
         91:f8:0e:8e:60:b0:d6:55:37:02:e3:99:51:37:13:78:35:12:
         73:e4:97:c2:5d:87:c5:65:fe:d5:37:57:3b:64:0e:ed:75:90:
         54:42:2e:fa:77:e4:08:57:59:8c:4c:85:a6:07:ad:38:bb:82:
         94:6f:77:15:81:c2:30:0c:b4:5a:11:20:24:40:aa:7a:07:b5:
         6e:31:a1:63:bf:cd:41:9e:ce:16:62:b0:82:f2:9e:0d:d7:4e:
         c7:2d:d3:08:d4:c5:85:18:18:81:1e:22:57:9e:ff:ee:8d:d0:
         c7:bf:73:d4:01:b8:4a:c9:db:e7:96:73:eb:35:77:29:87:79:
         c8:2a:95:9a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----