Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c2/8694b9-01d7-48b8-a882-94e700bd55f5/1/kTOA6LhQRU2zgd3euawsyKL2JTE.mft
File:                     kTOA6LhQRU2zgd3euawsyKL2JTE.mft (raw, json)
Hash identifier:          qdKk5iS1KXXuf8eclTWh/wz0IEpuFnPukkfnpD604Ds=
Subject key identifier:   8E:EA:68:AC:71:E2:7D:98:4F:C4:41:96:2E:D6:9F:C1:B8:8A:1B:46
Authority key identifier: 91:33:80:E8:B8:50:45:4D:B3:81:DD:DE:B9:AC:2C:C8:A2:F6:25:31
Certificate issuer:       /CN=913380e8b850454db381dddeb9ac2cc8a2f62531
Certificate serial:       01962E61B3B345E9537368C34CAB125A0B4D
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/kTOA6LhQRU2zgd3euawsyKL2JTE.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/c2/8694b9-01d7-48b8-a882-94e700bd55f5/1/kTOA6LhQRU2zgd3euawsyKL2JTE.mft
Manifest number:          03E5
Signing time:             Sun 13 Apr 2025 09:01:17 +0000
Manifest this update:     Sun 13 Apr 2025 09:01:17 +0000
Manifest next update:     Mon 14 Apr 2025 09:01:17 +0000
Files and hashes:         1: U5Y7YWVXNPPm9KoqmwsivloXzrs.roa (hash: ca5vcs2GJ+zXpmrDaBzBSEBE+1Vnejqdln+cTCo9uxU=)
                          2: kTOA6LhQRU2zgd3euawsyKL2JTE.crl (hash: Nlb5ec5jRE1X9T3OizmmpfLpTjFB1yIuDgSAcFTWY90=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2e:61:b3:b3:45:e9:53:73:68:c3:4c:ab:12:5a:0b:4d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=913380e8b850454db381dddeb9ac2cc8a2f62531
        Validity
            Not Before: Apr 13 09:01:17 2025 GMT
            Not After : Apr 14 09:01:17 2025 GMT
        Subject: CN=8eea68ac71e27d984fc441962ed69fc1b88a1b46
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:98:c0:d2:f8:25:05:65:8e:ba:45:1d:f2:ef:50:
                    31:de:54:a0:89:48:a6:a1:ea:95:df:49:6a:81:05:
                    fe:c7:c5:01:b4:22:ab:04:5b:43:ff:ec:41:8a:89:
                    21:81:cd:75:83:99:4a:00:d6:93:eb:e9:35:a3:b6:
                    40:44:2f:09:46:e2:8f:1b:94:b3:78:e2:96:8b:5c:
                    5a:00:5c:a4:93:e1:a5:f0:05:99:44:ce:d5:4c:9b:
                    92:e9:f2:9f:15:1d:a4:78:98:b0:af:fb:73:64:4b:
                    f0:97:cd:35:73:15:0f:d5:32:16:50:ec:1a:e2:6a:
                    77:00:a1:9e:5d:8f:5b:b7:69:90:fe:53:70:03:67:
                    6d:6c:22:a6:5f:24:e4:30:c7:db:78:9b:4b:b1:56:
                    59:8c:16:25:e4:15:77:6e:82:38:14:c4:9b:65:f7:
                    a1:74:27:2c:d4:91:45:bc:b9:18:a6:da:02:e5:1c:
                    49:73:b3:17:89:b1:15:c5:7f:1b:58:74:64:80:e6:
                    b4:cf:7b:48:63:1e:ff:d7:23:2a:ac:24:99:ab:d0:
                    76:36:53:7c:b1:9e:2c:a6:ea:84:60:64:93:9e:2f:
                    f5:ae:c0:b2:36:18:8f:d1:9f:39:59:a6:39:4e:f7:
                    0a:c9:2a:62:94:46:ab:96:34:70:60:96:34:e1:90:
                    36:19
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8E:EA:68:AC:71:E2:7D:98:4F:C4:41:96:2E:D6:9F:C1:B8:8A:1B:46
            X509v3 Authority Key Identifier:
                keyid:91:33:80:E8:B8:50:45:4D:B3:81:DD:DE:B9:AC:2C:C8:A2:F6:25:31

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/kTOA6LhQRU2zgd3euawsyKL2JTE.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c2/8694b9-01d7-48b8-a882-94e700bd55f5/1/kTOA6LhQRU2zgd3euawsyKL2JTE.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/c2/8694b9-01d7-48b8-a882-94e700bd55f5/1/kTOA6LhQRU2zgd3euawsyKL2JTE.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         92:c3:ca:ea:56:c3:e3:f0:71:a0:69:fd:e3:bb:37:5d:c2:b9:
         e5:ad:d1:61:e8:bd:cb:1e:3c:11:4c:70:4b:43:99:f1:ef:70:
         8d:96:21:dc:69:37:d0:3f:31:f7:25:af:2a:d5:3e:72:ff:3c:
         24:a6:aa:13:86:ff:56:ad:d9:c5:33:7f:39:de:45:8a:df:80:
         d7:ed:79:77:43:bd:b7:41:21:20:1b:e0:33:81:c3:a5:27:72:
         fc:9b:ef:e1:da:6e:e5:c8:27:e1:9c:c5:1f:1a:d3:5c:c8:ab:
         a7:0a:24:57:56:8d:30:77:b7:e5:b0:4a:a1:de:08:4c:02:ae:
         fa:c0:78:49:6b:78:97:f0:74:34:ef:9a:50:c2:30:a1:b0:5c:
         cd:5e:e5:0d:56:cd:75:85:9c:64:af:de:a0:2d:23:14:fb:1d:
         d9:69:ab:84:db:b9:d2:f9:fb:38:79:4f:62:04:81:ea:0a:00:
         a7:93:64:e0:46:e3:a8:04:3e:15:cf:73:b1:33:b9:b8:60:a0:
         45:b8:49:50:a4:dd:79:c0:cb:f7:c2:f6:58:4f:b6:c9:f9:6d:
         fa:74:5d:93:91:69:40:ab:2e:3e:38:40:30:cf:4f:b2:e3:47:
         ea:23:48:53:9c:e1:af:c3:9e:5f:58:85:5e:e0:62:42:d0:65:
         be:18:3a:9f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----