Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b2/a565fb-50bd-4bb6-875c-0e2bbd4337aa/1/scIIojstTYe-k_idUyvG9EkIgZs.mft
File:                     scIIojstTYe-k_idUyvG9EkIgZs.mft (raw, json)
Hash identifier:          p/lGnFoAYZQ+F2DyiAwG844oZn1kbS0wNlzmuLMJt18=
Subject key identifier:   2E:EF:B5:38:B3:26:04:72:2C:EC:2B:65:A2:13:22:78:6D:11:71:1E
Authority key identifier: B1:C2:08:A2:3B:2D:4D:87:BE:93:F8:9D:53:2B:C6:F4:49:08:81:9B
Certificate issuer:       /CN=b1c208a23b2d4d87be93f89d532bc6f44908819b
Certificate serial:       01962FAB8D9B936F2639F170D3C8E3F0A1EB
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/scIIojstTYe-k_idUyvG9EkIgZs.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/b2/a565fb-50bd-4bb6-875c-0e2bbd4337aa/1/scIIojstTYe-k_idUyvG9EkIgZs.mft
Manifest number:          094E
Signing time:             Sun 13 Apr 2025 15:01:34 +0000
Manifest this update:     Sun 13 Apr 2025 15:01:34 +0000
Manifest next update:     Mon 14 Apr 2025 15:01:34 +0000
Files and hashes:         1: St1eW7huW5NWmrTlCcZNOVav4YY.roa (hash: L1r59p9it1NHOb7n3iknNAhhpFyt7umgYxP2fwKVRnQ=)
                          2: scIIojstTYe-k_idUyvG9EkIgZs.crl (hash: sHDI6jYWosNgnlwix/xh6lA3GyH90xDWZb9BD5uOuFs=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2f:ab:8d:9b:93:6f:26:39:f1:70:d3:c8:e3:f0:a1:eb
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b1c208a23b2d4d87be93f89d532bc6f44908819b
        Validity
            Not Before: Apr 13 15:01:34 2025 GMT
            Not After : Apr 14 15:01:34 2025 GMT
        Subject: CN=2eefb538b32604722cec2b65a21322786d11711e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:88:1c:af:0a:36:8f:6d:d9:ad:3c:1b:02:5d:8d:
                    40:88:08:b9:5d:40:4e:ba:e7:6c:3a:fe:22:e1:fe:
                    23:cb:4a:0a:c8:54:88:8c:21:88:4f:82:66:cd:04:
                    4b:ad:40:77:73:3b:35:df:af:eb:16:ec:7e:3e:6a:
                    bc:e5:52:15:ca:76:96:72:6d:33:e9:39:71:33:41:
                    ec:72:42:44:f1:d7:c1:14:21:65:00:59:1b:c8:43:
                    51:6a:94:4e:94:e7:6a:60:7b:83:c9:59:de:13:e2:
                    0a:29:13:88:98:5b:3f:ed:bf:d6:4a:10:e1:49:d2:
                    f3:5b:cd:df:aa:df:24:0e:67:70:f0:31:3a:f8:84:
                    49:93:99:4b:e0:21:32:23:7d:cd:ae:17:36:44:90:
                    32:8a:89:ed:d4:32:60:16:77:a1:3d:0c:19:c4:a9:
                    96:ed:75:81:f1:a0:9c:ba:e7:64:10:9a:c5:22:c7:
                    26:a4:2d:c7:59:14:d9:f3:3d:81:c0:c9:b4:ee:27:
                    61:52:1e:74:27:99:b0:dd:74:75:41:76:10:19:bd:
                    34:5d:34:e7:ad:25:32:be:65:fd:97:cb:5a:b3:04:
                    41:48:27:c6:bd:b3:1b:6b:ea:93:c3:90:82:49:58:
                    a6:17:76:fe:70:55:21:3b:9a:6a:5d:fe:01:2a:6e:
                    26:33
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2E:EF:B5:38:B3:26:04:72:2C:EC:2B:65:A2:13:22:78:6D:11:71:1E
            X509v3 Authority Key Identifier:
                keyid:B1:C2:08:A2:3B:2D:4D:87:BE:93:F8:9D:53:2B:C6:F4:49:08:81:9B

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/scIIojstTYe-k_idUyvG9EkIgZs.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b2/a565fb-50bd-4bb6-875c-0e2bbd4337aa/1/scIIojstTYe-k_idUyvG9EkIgZs.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/b2/a565fb-50bd-4bb6-875c-0e2bbd4337aa/1/scIIojstTYe-k_idUyvG9EkIgZs.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         4a:80:ed:db:7d:9a:3e:b3:04:d0:c0:33:f8:a6:21:77:76:00:
         66:ec:a5:ea:0d:d6:a8:5c:54:e8:cf:9a:e1:05:b3:c1:4e:0f:
         11:92:61:03:60:44:4f:14:9b:b5:aa:67:9f:fe:9f:f1:ed:8b:
         2c:86:cf:9c:66:54:9e:75:af:c3:1f:10:d1:2a:93:19:e1:25:
         e3:0d:af:72:e5:a6:7c:4e:a3:41:22:0a:3a:30:db:4b:82:27:
         77:7b:bc:5f:c0:e2:36:3d:b8:de:10:38:e5:3a:13:9d:68:e3:
         e0:6f:f9:e6:81:6c:d3:b6:54:6c:77:f1:c3:cb:09:5c:7f:f0:
         68:dc:96:e8:cd:b9:66:f2:a1:d6:0b:16:b0:a6:2d:4e:a8:6a:
         71:13:55:73:a0:93:1c:8f:89:46:4f:a0:72:a0:5f:65:8d:aa:
         4c:eb:b9:dd:38:bc:d3:7a:cb:fd:98:7b:b9:21:6b:f2:c4:71:
         77:86:8b:3d:66:5c:15:3a:04:9e:98:64:46:e5:11:b5:30:e2:
         30:ec:09:a9:66:12:a7:0b:e1:4d:15:49:a5:c0:6d:5c:be:7e:
         cd:94:36:01:a5:0c:c4:26:0e:c0:6f:79:2e:78:85:99:50:66:
         ba:96:24:0c:df:22:f0:02:0e:7e:9d:93:fc:2e:a3:25:bd:22:
         cd:c9:ac:95
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----