Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c4/a08520-7f06-4f12-8640-49785fcdd9c4/1/rX2N6MoGHqFk5nHDTrM3f1c2u8M.mft
File:                     rX2N6MoGHqFk5nHDTrM3f1c2u8M.mft (raw, json)
Hash identifier:          s1Zsq4/APjt579fMk01JSgtbD+JjD732adu3jIXP9kY=
Subject key identifier:   54:AD:36:C8:BB:E1:1C:F4:04:24:89:71:7F:94:E7:FD:75:8B:23:16
Authority key identifier: AD:7D:8D:E8:CA:06:1E:A1:64:E6:71:C3:4E:B3:37:7F:57:36:BB:C3
Certificate issuer:       /CN=ad7d8de8ca061ea164e671c34eb3377f5736bbc3
Certificate serial:       01962FAB175A6565E9EC2E18AACCB652B567
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/rX2N6MoGHqFk5nHDTrM3f1c2u8M.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/c4/a08520-7f06-4f12-8640-49785fcdd9c4/1/rX2N6MoGHqFk5nHDTrM3f1c2u8M.mft
Manifest number:          10E1
Signing time:             Sun 13 Apr 2025 15:01:03 +0000
Manifest this update:     Sun 13 Apr 2025 15:01:03 +0000
Manifest next update:     Mon 14 Apr 2025 15:01:03 +0000
Files and hashes:         1: 0_n0dJGdGPC54n6Su3XhjRpEGaE.roa (hash: ecsdCD7tgZtKRsUvKu336lhnysfVM1v2m6QNHH0P3gg=)
                          2: rX2N6MoGHqFk5nHDTrM3f1c2u8M.crl (hash: VoPDQTxS/YjgDQOXIgFc+wH675k46pwA33xguiQOhPs=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2f:ab:17:5a:65:65:e9:ec:2e:18:aa:cc:b6:52:b5:67
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=ad7d8de8ca061ea164e671c34eb3377f5736bbc3
        Validity
            Not Before: Apr 13 15:01:03 2025 GMT
            Not After : Apr 14 15:01:03 2025 GMT
        Subject: CN=54ad36c8bbe11cf4042489717f94e7fd758b2316
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bf:92:fc:8c:70:d0:61:9f:eb:bd:ad:7c:a2:da:
                    89:f1:43:0b:39:b6:a4:b9:fc:11:5f:ac:e3:5a:98:
                    cc:eb:82:e0:68:30:a7:29:e4:80:05:e0:55:a7:cb:
                    34:d6:b0:6c:a2:22:60:2d:55:74:a9:18:3e:af:ba:
                    e8:3b:79:11:1b:9d:c8:8d:dd:d9:2c:bb:24:3a:61:
                    a3:64:1c:63:4d:5d:29:03:ab:5d:ea:3b:1e:6b:8f:
                    74:7a:6a:0a:6b:dd:a3:4a:fc:fc:fe:1f:ed:5f:d8:
                    24:1e:f9:dc:95:ff:af:1c:03:8d:eb:7f:4a:07:9d:
                    e1:3e:f6:f6:6e:0f:cb:b9:fa:f0:35:1e:99:c3:52:
                    5f:88:de:7f:7d:17:eb:77:dc:d6:41:4f:23:12:25:
                    10:eb:3b:da:fa:6e:d6:dc:64:0c:69:38:6e:6a:15:
                    cf:39:ac:2e:33:a5:d0:69:d9:49:8f:d8:b2:11:5d:
                    ec:17:dd:f9:0f:5c:29:40:a4:92:08:16:6c:61:9a:
                    be:40:26:3d:28:71:86:3f:e1:01:21:a9:f1:a4:0d:
                    5f:25:e4:cd:c8:ad:eb:70:fc:99:3d:86:51:1f:13:
                    6b:91:cd:37:2b:3e:62:fa:19:49:2c:8e:82:bc:ea:
                    f7:3a:6b:5a:cc:57:e8:5a:88:b2:90:3e:cb:23:c3:
                    ca:85
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                54:AD:36:C8:BB:E1:1C:F4:04:24:89:71:7F:94:E7:FD:75:8B:23:16
            X509v3 Authority Key Identifier:
                keyid:AD:7D:8D:E8:CA:06:1E:A1:64:E6:71:C3:4E:B3:37:7F:57:36:BB:C3

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/rX2N6MoGHqFk5nHDTrM3f1c2u8M.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c4/a08520-7f06-4f12-8640-49785fcdd9c4/1/rX2N6MoGHqFk5nHDTrM3f1c2u8M.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/c4/a08520-7f06-4f12-8640-49785fcdd9c4/1/rX2N6MoGHqFk5nHDTrM3f1c2u8M.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         80:96:ca:55:f9:56:f1:af:94:b5:26:00:41:5a:eb:cd:5c:9f:
         57:0f:9a:97:9c:b6:95:ac:de:3a:72:94:70:46:4b:94:c7:f8:
         35:ec:dd:03:5a:ba:2e:7c:4b:96:59:a8:2b:8c:e3:3e:96:b4:
         15:1b:ee:77:78:b1:93:3c:db:d0:b4:35:c7:7d:88:f1:1c:14:
         31:4b:4f:c2:6b:54:44:54:d5:7a:fa:a9:75:dc:2f:40:55:4f:
         28:4d:dc:2d:e1:2d:b6:21:fc:e8:85:fd:86:23:b6:56:05:e4:
         95:e5:0d:df:af:af:69:e0:9c:0b:44:e4:12:b5:e6:fd:cf:b4:
         f3:54:7f:4b:95:ca:d8:3c:f3:a1:71:20:92:59:20:03:9e:4e:
         48:8a:fe:9c:46:e5:7c:3d:0e:1b:fb:ab:72:1f:67:19:e2:48:
         a9:51:f0:4c:2e:d7:83:bd:2d:d2:ec:b0:a6:5a:5c:05:61:38:
         8c:59:40:5a:19:5f:04:f9:65:0f:ad:83:09:93:04:8a:c8:df:
         6a:2d:93:b0:ab:d4:42:a5:67:85:b1:3a:50:13:b0:a0:02:49:
         42:78:91:ee:a4:91:f7:03:9d:e2:85:10:c5:95:1e:93:d0:b6:
         2e:b6:e7:d3:c9:ab:59:dd:98:cc:ba:ba:a3:35:53:1b:64:70:
         e1:2d:89:ae
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----