Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c0/7cab15-c904-4236-89af-2093b6dffa64/1/l8dX8vOyKQu8KNZfm98AFvYfE5c.mft
File:                     l8dX8vOyKQu8KNZfm98AFvYfE5c.mft (raw, json)
Hash identifier:          muMzPe4Tz2kIqYtPGamFUOeViHZNO9/TfET9zBoFPWg=
Subject key identifier:   EF:4F:F1:40:58:52:79:64:5C:D1:63:DA:70:EA:83:D9:25:89:55:A1
Authority key identifier: 97:C7:57:F2:F3:B2:29:0B:BC:28:D6:5F:9B:DF:00:16:F6:1F:13:97
Certificate issuer:       /CN=97c757f2f3b2290bbc28d65f9bdf0016f61f1397
Certificate serial:       01962E98ACC173291AE7A42F2CC7DCE72D85
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/l8dX8vOyKQu8KNZfm98AFvYfE5c.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/c0/7cab15-c904-4236-89af-2093b6dffa64/1/l8dX8vOyKQu8KNZfm98AFvYfE5c.mft
Manifest number:          1492
Signing time:             Sun 13 Apr 2025 10:01:19 +0000
Manifest this update:     Sun 13 Apr 2025 10:01:19 +0000
Manifest next update:     Mon 14 Apr 2025 10:01:19 +0000
Files and hashes:         1: jrvc6kmWjKHmuF_8SsZy0ZuPTP8.roa (hash: Z+xoWww5SsoPK3NcXFL/FecEhSX4cgiZ8Poe3txV32s=)
                          2: l8dX8vOyKQu8KNZfm98AFvYfE5c.crl (hash: LDi5x6boN8F6eIEvGUypef4im2gV0MQnCZjcIuhTTPM=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2e:98:ac:c1:73:29:1a:e7:a4:2f:2c:c7:dc:e7:2d:85
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=97c757f2f3b2290bbc28d65f9bdf0016f61f1397
        Validity
            Not Before: Apr 13 10:01:19 2025 GMT
            Not After : Apr 14 10:01:19 2025 GMT
        Subject: CN=ef4ff140585279645cd163da70ea83d9258955a1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:85:7d:21:fe:1a:9c:1d:b0:b0:eb:d3:92:97:27:
                    ba:e8:13:17:de:4d:d0:20:e2:41:73:92:02:e2:76:
                    e9:bd:6e:ef:ec:ab:25:bd:a5:34:00:b1:a6:e0:24:
                    25:e9:6d:ba:93:6a:62:d3:6f:42:d0:7b:93:47:bb:
                    6a:48:b0:f4:da:74:06:12:53:02:67:09:95:08:19:
                    b2:68:03:81:a2:97:41:63:e0:3e:98:16:bb:00:76:
                    29:41:95:44:86:21:81:7e:c0:0c:80:8a:64:b0:01:
                    03:ad:e2:8d:d9:fb:fd:1e:b3:3b:d3:34:e6:86:a6:
                    f7:a5:49:34:f2:03:02:5f:6a:76:b4:92:da:e0:64:
                    8b:3b:9d:45:2e:5a:db:71:ee:04:e6:a9:57:e8:32:
                    4c:5b:88:70:84:11:e3:15:81:b0:3b:5f:02:2a:d1:
                    49:c2:cb:66:5f:42:e9:2d:3e:03:ad:d6:6a:70:21:
                    25:65:ca:58:9b:c0:57:7b:47:c0:93:95:a2:1d:cd:
                    e5:1b:57:cf:d4:c4:40:99:ea:73:7e:8c:ed:8f:b2:
                    2d:4f:3c:60:99:70:aa:d6:b8:d4:88:9a:a8:7c:61:
                    32:34:b8:72:55:d8:e6:b4:b7:d6:42:50:64:bf:d5:
                    da:65:a5:71:31:39:fc:7f:d5:18:17:73:e6:e4:51:
                    37:99
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                EF:4F:F1:40:58:52:79:64:5C:D1:63:DA:70:EA:83:D9:25:89:55:A1
            X509v3 Authority Key Identifier:
                keyid:97:C7:57:F2:F3:B2:29:0B:BC:28:D6:5F:9B:DF:00:16:F6:1F:13:97

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/l8dX8vOyKQu8KNZfm98AFvYfE5c.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c0/7cab15-c904-4236-89af-2093b6dffa64/1/l8dX8vOyKQu8KNZfm98AFvYfE5c.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/c0/7cab15-c904-4236-89af-2093b6dffa64/1/l8dX8vOyKQu8KNZfm98AFvYfE5c.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         a2:9b:cb:e9:b2:37:69:9e:7c:b7:d9:4d:0b:c1:c7:3a:c7:2f:
         dc:3e:1c:f2:93:db:08:ad:30:de:39:18:e7:f0:a4:f5:40:20:
         e8:a0:d3:ca:ed:7a:94:f5:4a:b2:65:c7:2e:3e:06:e1:b5:ff:
         19:92:00:93:8c:6e:a2:4d:75:82:f9:80:1b:0a:0b:c4:cc:45:
         0e:96:03:13:90:b0:c1:a8:4e:9f:62:4f:fb:59:a1:cd:ec:e4:
         d7:0f:1e:13:9c:a5:fa:44:3c:0b:cb:3f:4d:c6:7b:27:09:64:
         02:cc:7b:be:08:ed:3b:1b:20:bd:0f:fa:c1:29:8c:05:7b:bd:
         02:86:b4:47:1b:21:4c:04:90:4a:58:f6:e9:a9:1b:2b:c7:22:
         bb:c5:bd:b8:31:e3:68:b2:6b:c0:08:2a:31:3e:15:68:80:78:
         cd:13:53:92:00:b1:12:a4:70:8c:f8:01:59:bb:e5:7c:a6:65:
         25:1b:9e:ce:4f:59:02:a4:a2:fd:22:40:26:0c:78:28:94:32:
         81:31:21:23:5b:d2:bc:00:8f:77:a0:d6:69:85:9f:a4:76:4d:
         53:9f:0d:1d:ff:2d:51:cf:49:f6:ed:a5:58:8b:39:40:27:68:
         11:5d:81:46:63:a9:35:39:58:b1:56:65:e6:b7:b3:6e:e6:6f:
         24:96:9b:77
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----