Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/af/626525-6ac4-4ad3-b8d2-9c3000245676/1/L5INmRKzpyi5SBgYjvPj5X-NP5w.mft
File:                     L5INmRKzpyi5SBgYjvPj5X-NP5w.mft (raw, json)
Hash identifier:          02QixKGEyP3hA/J78Se5Q68DFjL9S4gxoLduI1dPbhc=
Subject key identifier:   D7:A1:F5:D0:0C:B9:57:20:EF:F3:7A:58:5F:51:00:71:1A:7E:05:32
Authority key identifier: 2F:92:0D:99:12:B3:A7:28:B9:48:18:18:8E:F3:E3:E5:7F:8D:3F:9C
Certificate issuer:       /CN=2f920d9912b3a728b94818188ef3e3e57f8d3f9c
Certificate serial:       01962F746D7D9D218FE70450EB9F14080E4B
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/L5INmRKzpyi5SBgYjvPj5X-NP5w.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/af/626525-6ac4-4ad3-b8d2-9c3000245676/1/L5INmRKzpyi5SBgYjvPj5X-NP5w.mft
Manifest number:          1226
Signing time:             Sun 13 Apr 2025 14:01:21 +0000
Manifest this update:     Sun 13 Apr 2025 14:01:21 +0000
Manifest next update:     Mon 14 Apr 2025 14:01:21 +0000
Files and hashes:         1: L5INmRKzpyi5SBgYjvPj5X-NP5w.crl (hash: pG60y8ivZO3086zBBV/yqmFHIgyOZgngJDTRh/goQgc=)
                          2: UHmcnjZPkdlcmPvf9kU9gEvRzu8.roa (hash: o/ZBiu0sM0QxdL8NohBvSpb6XFjAawutUac+NbV8PeM=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2f:74:6d:7d:9d:21:8f:e7:04:50:eb:9f:14:08:0e:4b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2f920d9912b3a728b94818188ef3e3e57f8d3f9c
        Validity
            Not Before: Apr 13 14:01:21 2025 GMT
            Not After : Apr 14 14:01:21 2025 GMT
        Subject: CN=d7a1f5d00cb95720eff37a585f5100711a7e0532
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b2:ba:29:6e:60:0d:10:72:7d:8b:c0:ac:11:7d:
                    e7:ce:55:30:fd:d9:f7:11:e6:78:b6:c4:fb:84:14:
                    39:56:23:5a:97:29:49:da:a0:60:3a:5d:dc:41:0c:
                    60:08:a6:5f:7f:58:79:4b:da:cc:64:e2:b3:48:92:
                    a7:5b:01:37:4d:99:84:5e:bc:28:9b:93:08:26:d4:
                    ae:57:76:ba:ad:99:3f:cf:35:2f:5b:b9:16:79:5f:
                    d4:2e:67:fe:bd:d5:c3:65:a8:d1:35:ec:28:42:c5:
                    9e:ef:33:aa:ac:e4:69:eb:a2:8a:bd:de:76:77:58:
                    e5:81:3b:81:28:79:d8:cc:2c:47:bc:fc:cf:12:7d:
                    f1:00:5f:d4:2b:b1:2e:55:e2:a8:ca:43:7b:b2:d4:
                    09:5a:90:92:6b:a2:74:92:9a:8e:c5:6b:04:45:0a:
                    9c:a2:a8:04:8a:21:3b:98:14:c8:65:c0:30:f7:bd:
                    8c:27:e0:a3:99:40:5b:00:f7:16:42:62:d0:40:03:
                    a4:e7:99:6d:44:22:15:38:a3:e5:70:1b:67:64:05:
                    90:91:d1:5d:60:93:65:eb:bc:e5:4c:f5:8b:9d:6c:
                    77:26:94:6e:33:da:9c:c0:ba:eb:d3:f0:c9:91:c6:
                    81:99:ee:11:78:3c:6a:66:61:ee:9a:33:98:80:7e:
                    05:03
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D7:A1:F5:D0:0C:B9:57:20:EF:F3:7A:58:5F:51:00:71:1A:7E:05:32
            X509v3 Authority Key Identifier:
                keyid:2F:92:0D:99:12:B3:A7:28:B9:48:18:18:8E:F3:E3:E5:7F:8D:3F:9C

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/L5INmRKzpyi5SBgYjvPj5X-NP5w.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/af/626525-6ac4-4ad3-b8d2-9c3000245676/1/L5INmRKzpyi5SBgYjvPj5X-NP5w.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/af/626525-6ac4-4ad3-b8d2-9c3000245676/1/L5INmRKzpyi5SBgYjvPj5X-NP5w.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         10:78:8d:b9:df:0b:54:0f:a4:e6:35:61:51:1f:44:16:ae:3c:
         53:55:88:65:63:bf:88:e5:7d:84:d4:39:45:a8:e9:fd:1c:39:
         0a:87:a3:a4:ac:f2:60:c1:09:63:85:f6:d7:8e:d0:d3:e1:69:
         e2:9b:aa:6d:ef:16:e8:a1:f8:27:f8:17:70:2e:e0:77:4f:de:
         3f:b7:53:66:f2:74:57:67:4c:1b:5b:fb:45:11:7c:c0:be:02:
         36:4a:f1:c5:72:c4:5f:db:2a:ba:17:ee:20:73:fe:80:8b:7b:
         65:a8:59:78:03:8e:80:d0:4b:36:a2:0c:96:0e:27:87:9f:66:
         c9:29:ca:22:8c:94:c3:49:74:95:fa:9a:55:ed:bd:6e:cb:86:
         4e:b8:9f:ee:52:3f:6b:f4:2c:2d:9f:03:f2:f6:92:5f:04:80:
         f2:bf:de:bf:85:dc:d3:b6:88:db:b9:0e:92:da:01:8e:13:e4:
         63:40:0a:5a:28:19:dc:ce:c6:f5:e6:3f:c2:66:17:5e:cb:65:
         47:74:a7:50:04:ef:fb:be:ba:bc:20:21:eb:a0:fc:62:07:70:
         cb:53:dd:c1:7d:fc:71:fa:b1:79:55:07:c6:1d:e7:68:1f:6c:
         99:e0:dd:f3:31:b1:46:33:22:f1:95:77:d3:59:a2:3d:89:13:
         8f:b2:66:2d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----