Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ad/e22192-be00-48c0-a711-7f96c9f05f54/1/C8v3SOn0mYaF0Mll0t_fDzYqUFI.mft
File:                     C8v3SOn0mYaF0Mll0t_fDzYqUFI.mft (raw, json)
Hash identifier:          OtFvDNh8cdEpLCovq+JyJ4ED12mGDXL7c6PIHK4bsn0=
Subject key identifier:   24:E7:22:E7:6C:A6:42:30:48:AA:22:B0:BF:4D:DE:63:4E:08:F4:11
Authority key identifier: 0B:CB:F7:48:E9:F4:99:86:85:D0:C9:65:D2:DF:DF:0F:36:2A:50:52
Certificate issuer:       /CN=0bcbf748e9f4998685d0c965d2dfdf0f362a5052
Certificate serial:       01962DF42A323D07811741A97BA0ED364BBA
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/C8v3SOn0mYaF0Mll0t_fDzYqUFI.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/ad/e22192-be00-48c0-a711-7f96c9f05f54/1/C8v3SOn0mYaF0Mll0t_fDzYqUFI.mft
Manifest number:          11C6
Signing time:             Sun 13 Apr 2025 07:01:38 +0000
Manifest this update:     Sun 13 Apr 2025 07:01:38 +0000
Manifest next update:     Mon 14 Apr 2025 07:01:38 +0000
Files and hashes:         1: C8v3SOn0mYaF0Mll0t_fDzYqUFI.crl (hash: 2n/4SXvt245ju1uBRurSiUB6V0Mp/UN/E62ginwQ3DY=)
                          2: VDV2mgvPqpRmmoenb9SaX1u1440.roa (hash: ivvVUYPgums0E545lnqR4Wp+TXCXyBK6qgVWasD11m0=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2d:f4:2a:32:3d:07:81:17:41:a9:7b:a0:ed:36:4b:ba
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0bcbf748e9f4998685d0c965d2dfdf0f362a5052
        Validity
            Not Before: Apr 13 07:01:38 2025 GMT
            Not After : Apr 14 07:01:38 2025 GMT
        Subject: CN=24e722e76ca6423048aa22b0bf4dde634e08f411
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a8:65:fb:95:e1:1f:b8:36:b3:7d:eb:38:68:48:
                    b9:b3:f6:49:91:a3:89:93:5d:4b:39:ca:a1:a1:59:
                    2a:eb:3f:c9:cc:71:f8:3d:a1:67:e4:73:92:bb:ad:
                    ee:c7:3f:4e:d3:81:df:6c:9d:5a:1c:e5:c4:50:eb:
                    af:07:3f:22:79:f9:5c:9f:f5:95:ea:77:d8:23:1f:
                    96:c1:28:b3:4e:02:3c:a3:bd:c4:5b:e9:57:2f:b2:
                    c5:3b:0f:5a:97:33:d8:ac:64:8a:77:a4:21:f6:d0:
                    71:8b:7d:e5:f8:5e:6f:e5:39:3c:2b:c7:4a:64:18:
                    48:74:86:dd:2a:33:13:94:6d:50:03:ac:8c:b0:94:
                    f5:3a:44:2e:b2:4a:b5:62:e5:f4:e0:8d:6f:60:fa:
                    f1:7d:5a:cf:bc:56:f7:be:69:47:33:d6:56:6c:73:
                    87:63:20:3b:59:ab:3f:37:e7:20:25:ee:8c:7e:c2:
                    8d:28:02:2f:0d:7a:7e:2d:50:87:cc:ac:a4:27:63:
                    1b:47:34:91:ea:96:2c:84:3a:17:97:35:7c:64:31:
                    89:8a:de:3a:35:66:fd:78:23:66:48:ed:77:7c:a8:
                    ea:75:9d:2f:0e:22:fe:5f:9a:32:77:7a:34:7d:ef:
                    cf:7f:b4:0f:de:8c:d2:25:a5:0d:e9:2b:6c:24:5c:
                    41:47
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                24:E7:22:E7:6C:A6:42:30:48:AA:22:B0:BF:4D:DE:63:4E:08:F4:11
            X509v3 Authority Key Identifier:
                keyid:0B:CB:F7:48:E9:F4:99:86:85:D0:C9:65:D2:DF:DF:0F:36:2A:50:52

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/C8v3SOn0mYaF0Mll0t_fDzYqUFI.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ad/e22192-be00-48c0-a711-7f96c9f05f54/1/C8v3SOn0mYaF0Mll0t_fDzYqUFI.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/ad/e22192-be00-48c0-a711-7f96c9f05f54/1/C8v3SOn0mYaF0Mll0t_fDzYqUFI.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         59:1c:b9:47:3d:78:5c:bd:5b:73:06:d1:bb:a1:cd:4b:4a:18:
         9b:ec:ff:03:67:70:86:9c:7e:67:41:cd:57:72:d4:ea:16:49:
         fa:03:c6:9f:e2:81:04:0e:da:30:90:20:90:58:2b:b3:9e:8e:
         c2:8a:94:58:d6:ab:38:b4:a2:f1:f8:ce:d0:61:95:d0:2a:21:
         81:66:9a:f9:9a:4e:e4:99:47:c9:7c:24:b8:1b:c9:ac:a3:1c:
         a6:8f:43:9a:4f:9e:ee:8c:79:a9:48:50:53:3c:ad:3d:38:b3:
         80:3f:31:3d:22:a7:28:ed:81:c0:0f:b0:70:07:52:3b:10:00:
         de:ac:b1:d0:3a:1b:1e:5c:b1:d8:5e:c7:59:62:56:a9:64:b6:
         1d:75:10:0e:e6:6c:0d:87:ac:bc:95:8c:7c:07:2d:4b:6c:01:
         04:fb:b9:53:6d:11:77:cd:bd:09:9e:ce:53:82:36:aa:95:48:
         95:d9:6f:e0:96:36:e0:26:17:0c:b3:1f:e0:5e:cf:aa:29:15:
         a0:a5:f2:c2:ee:27:55:a9:78:5f:d2:f3:94:63:c3:c0:4c:c9:
         f1:ae:01:a8:0b:3c:c1:06:6b:89:d4:0e:72:4e:9c:aa:0b:ad:
         06:25:b9:66:16:36:a5:b4:85:10:55:66:c0:e9:35:12:38:cf:
         e2:15:67:3b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----