Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c0/126c9e-4fa7-49d4-928c-9107c912d7d8/1/8lap7bLZreIE2CMTzOmLZiOp2Kw.mft
File:                     8lap7bLZreIE2CMTzOmLZiOp2Kw.mft (raw, json)
Hash identifier:          Xhovh3oCIuSqpiSdFDm96Hftqy3RyUylFmTLJZr0PIc=
Subject key identifier:   87:9C:8C:F1:EF:00:89:87:2B:AC:53:51:E0:DA:77:BF:8A:90:24:BE
Authority key identifier: F2:56:A9:ED:B2:D9:AD:E2:04:D8:23:13:CC:E9:8B:66:23:A9:D8:AC
Certificate issuer:       /CN=f256a9edb2d9ade204d82313cce98b6623a9d8ac
Certificate serial:       01962E617F5A11CFD9EA5FF1892610FD093E
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/8lap7bLZreIE2CMTzOmLZiOp2Kw.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/c0/126c9e-4fa7-49d4-928c-9107c912d7d8/1/8lap7bLZreIE2CMTzOmLZiOp2Kw.mft
Manifest number:          14ED
Signing time:             Sun 13 Apr 2025 09:01:03 +0000
Manifest this update:     Sun 13 Apr 2025 09:01:03 +0000
Manifest next update:     Mon 14 Apr 2025 09:01:03 +0000
Files and hashes:         1: 8lap7bLZreIE2CMTzOmLZiOp2Kw.crl (hash: ty6pW+eFuhGffLiQMlfPhMd1gjPNo10zTGLOXcLXSYg=)
                          2: m61Skl38qNd_z8iy_icAt6gZ-a0.roa (hash: agPnne36nNKEttk3MarLpGi1Y49vXcfn+4zgZdtH3ck=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2e:61:7f:5a:11:cf:d9:ea:5f:f1:89:26:10:fd:09:3e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=f256a9edb2d9ade204d82313cce98b6623a9d8ac
        Validity
            Not Before: Apr 13 09:01:03 2025 GMT
            Not After : Apr 14 09:01:03 2025 GMT
        Subject: CN=879c8cf1ef0089872bac5351e0da77bf8a9024be
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b7:f8:36:fd:66:bf:89:2b:e8:ed:94:c4:c0:35:
                    a8:f5:9f:c7:bd:99:04:33:c0:b3:0a:91:1b:8f:19:
                    49:da:7d:a0:41:22:fa:7d:0b:47:6f:ef:7b:ae:cf:
                    b2:90:2e:fe:26:e4:6c:c5:85:b3:52:6b:f4:5a:64:
                    42:0a:c1:ec:4e:a7:02:9e:ca:20:7e:c4:6f:67:a5:
                    91:5d:0d:fd:1f:d2:f2:6e:a8:10:c3:e3:14:bd:8b:
                    f1:23:75:58:ee:66:68:68:c7:4f:d3:f8:3a:23:6b:
                    57:33:6d:c0:26:d3:34:06:6d:c9:34:02:a8:37:a2:
                    1e:78:cf:67:f2:20:d1:39:e1:33:9c:49:6e:2d:86:
                    49:92:63:37:56:e6:b1:85:7a:2b:ea:9a:d4:cc:0b:
                    85:5f:a6:40:69:0b:51:83:40:d3:97:2a:5c:95:eb:
                    e9:3e:a9:88:3c:d7:25:45:7d:56:88:88:ce:97:cf:
                    30:a7:64:eb:e4:bc:7b:a1:12:5c:32:a9:81:22:5d:
                    ff:fc:01:00:22:30:84:12:5d:6c:9a:73:92:64:75:
                    0e:c8:60:f5:a3:f2:87:54:4c:08:6d:24:60:8d:a7:
                    b3:fd:9c:08:c8:fc:c7:11:10:c7:de:02:94:8e:f7:
                    1e:b2:7e:7a:54:4c:f2:db:f7:39:f2:1a:7b:6a:d7:
                    a0:95
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                87:9C:8C:F1:EF:00:89:87:2B:AC:53:51:E0:DA:77:BF:8A:90:24:BE
            X509v3 Authority Key Identifier:
                keyid:F2:56:A9:ED:B2:D9:AD:E2:04:D8:23:13:CC:E9:8B:66:23:A9:D8:AC

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/8lap7bLZreIE2CMTzOmLZiOp2Kw.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c0/126c9e-4fa7-49d4-928c-9107c912d7d8/1/8lap7bLZreIE2CMTzOmLZiOp2Kw.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/c0/126c9e-4fa7-49d4-928c-9107c912d7d8/1/8lap7bLZreIE2CMTzOmLZiOp2Kw.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         5e:36:8d:1a:71:b4:d4:fd:65:84:3c:47:a1:69:51:7a:1e:e1:
         28:23:8b:a5:52:62:20:75:ee:68:02:f1:21:ff:6e:60:22:30:
         30:21:91:b3:82:97:93:b5:6a:f9:f4:15:3b:d5:2c:61:db:57:
         70:f8:95:04:73:cb:85:a7:e8:f7:7f:9c:28:74:42:c4:6c:91:
         a6:1b:3e:f3:58:fb:6f:b3:33:06:26:d0:c5:64:c3:f8:79:fb:
         5a:17:16:b2:b7:0b:47:9e:85:13:0f:6f:64:dd:a4:51:5c:eb:
         49:85:38:d2:9d:3a:70:a5:63:80:79:58:38:48:57:7f:59:43:
         9d:48:17:08:82:6d:47:ad:22:1c:2a:17:c1:7c:f3:f3:5a:69:
         5b:19:c0:fb:c6:dd:c0:63:58:76:53:3c:f8:d0:8b:8d:38:99:
         62:59:0e:22:39:08:19:67:c4:5b:29:a3:8f:93:00:fb:c1:9c:
         9c:a2:b5:72:96:f0:4a:b1:58:63:dc:4c:cd:a1:e7:7c:02:ab:
         bc:7e:70:0f:85:a0:e8:2a:dc:70:13:8a:df:b2:c6:9a:a9:fd:
         78:3a:fe:46:46:d3:6d:2c:42:08:c4:e7:fa:43:a8:8a:d1:40:
         3f:c2:0c:19:52:75:ab:4c:7f:b5:ab:49:78:d2:bd:3f:68:de:
         13:e9:85:5b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----