Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c5/41a51d-4269-41a0-92df-4d29a5e2985d/1/24gOLcNLroD0K7HjhFf-GXqH1LM.mft
File:                     24gOLcNLroD0K7HjhFf-GXqH1LM.mft (raw, json)
Hash identifier:          Zw8MNfBYpSU/ghtd4MoSNBaF+gQ/KBZmlkVmrjXS9FQ=
Subject key identifier:   F0:6E:4B:BC:8E:C8:8D:0F:F3:02:F8:B6:FB:3E:7C:78:21:47:61:51
Authority key identifier: DB:88:0E:2D:C3:4B:AE:80:F4:2B:B1:E3:84:57:FE:19:7A:87:D4:B3
Certificate issuer:       /CN=db880e2dc34bae80f42bb1e38457fe197a87d4b3
Certificate serial:       01962E99107D8313AA9F7A471CE6E7D51A87
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/24gOLcNLroD0K7HjhFf-GXqH1LM.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/c5/41a51d-4269-41a0-92df-4d29a5e2985d/1/24gOLcNLroD0K7HjhFf-GXqH1LM.mft
Manifest number:          141A
Signing time:             Sun 13 Apr 2025 10:01:45 +0000
Manifest this update:     Sun 13 Apr 2025 10:01:45 +0000
Manifest next update:     Mon 14 Apr 2025 10:01:45 +0000
Files and hashes:         1: 24gOLcNLroD0K7HjhFf-GXqH1LM.crl (hash: bmWiVwv92QiLi+mvflZ/Sr02WmXZoY0lq/DYTcnSE6Y=)
                          2: 4PwJxAwKax5Reljdgs0YL3qX31Q.roa (hash: UYp5AvhZKwwfeYa3iRTnePJRJNovfCx7buPjdCyUR7I=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2e:99:10:7d:83:13:aa:9f:7a:47:1c:e6:e7:d5:1a:87
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=db880e2dc34bae80f42bb1e38457fe197a87d4b3
        Validity
            Not Before: Apr 13 10:01:45 2025 GMT
            Not After : Apr 14 10:01:45 2025 GMT
        Subject: CN=f06e4bbc8ec88d0ff302f8b6fb3e7c7821476151
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b5:4b:64:9f:3f:ac:26:c0:8c:43:49:a6:6a:91:
                    a7:98:f8:dc:09:80:f5:4a:32:29:fd:4d:f2:ec:b8:
                    ff:17:e0:b2:fb:d1:dd:db:bb:f8:fc:0e:53:19:3f:
                    2a:2c:71:f4:43:91:39:00:34:61:6d:a3:eb:88:c5:
                    84:5c:89:89:1a:e9:de:6a:0b:52:75:5f:9c:4a:fc:
                    e9:61:90:ad:4d:d3:35:bb:c4:f9:e0:bb:5f:e4:e4:
                    1f:dc:b7:63:95:01:bc:cc:df:c7:83:99:f3:06:53:
                    ce:50:b2:14:6c:bf:33:73:13:c0:cd:ba:c3:15:78:
                    8b:5a:f0:1d:b4:c7:4a:87:dd:5b:3e:ed:42:51:b5:
                    78:be:16:36:1d:0d:42:c6:b3:89:ca:62:74:5f:90:
                    33:f7:68:1a:ac:1c:0f:41:62:72:67:93:79:34:c8:
                    89:07:c9:e4:e6:8c:07:82:18:c6:0b:e6:b6:7c:42:
                    cc:32:31:d7:a8:76:65:db:7b:83:35:25:0f:77:36:
                    d8:a7:38:2d:6a:cb:cd:82:8b:90:4e:33:32:80:9d:
                    e4:a4:66:d3:d7:a6:d4:6c:d6:2c:f7:e7:50:92:6b:
                    3b:ea:0d:3c:bc:9a:d7:d0:bf:d8:5c:71:55:2d:0e:
                    67:dd:dc:c3:f7:98:50:f8:48:d5:43:09:aa:24:03:
                    8f:55
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F0:6E:4B:BC:8E:C8:8D:0F:F3:02:F8:B6:FB:3E:7C:78:21:47:61:51
            X509v3 Authority Key Identifier:
                keyid:DB:88:0E:2D:C3:4B:AE:80:F4:2B:B1:E3:84:57:FE:19:7A:87:D4:B3

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/24gOLcNLroD0K7HjhFf-GXqH1LM.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c5/41a51d-4269-41a0-92df-4d29a5e2985d/1/24gOLcNLroD0K7HjhFf-GXqH1LM.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/c5/41a51d-4269-41a0-92df-4d29a5e2985d/1/24gOLcNLroD0K7HjhFf-GXqH1LM.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         4a:c0:c6:14:88:e5:a6:99:a1:dd:3b:57:60:f4:4f:65:d2:e6:
         3f:42:02:1b:ab:22:3e:5e:b8:70:bf:48:8d:6b:8d:1b:66:b5:
         8a:f9:25:6e:ee:2e:3e:78:3f:b9:4b:d4:d3:be:30:7c:ae:a5:
         84:87:5c:51:cc:71:1b:aa:e4:a8:c4:16:af:8f:57:7e:65:8c:
         c4:54:ea:41:01:5d:75:55:3c:f0:5e:08:11:d4:bc:0c:f6:fb:
         46:f6:da:71:8d:85:2d:4f:0f:1c:6d:c6:65:42:0c:30:dd:8e:
         e2:ba:86:5e:c1:23:ca:04:31:e2:45:7a:9e:02:4c:8c:c7:22:
         da:89:03:93:37:93:37:b7:15:21:94:44:50:78:84:45:1b:9b:
         92:9d:76:30:3d:80:9a:ae:68:6e:c1:40:42:5d:16:be:b8:ba:
         af:55:a1:fb:2c:b2:f6:32:c8:78:3a:82:e9:ba:e3:ef:63:fe:
         44:41:17:a8:df:60:ca:c2:9f:4a:e5:49:22:73:13:2c:cd:7d:
         37:5c:9e:41:8b:a9:bb:db:ab:53:d2:8e:e8:8b:6c:84:fd:ec:
         84:64:f2:67:b7:59:8d:d3:cf:c8:8f:0a:c1:49:30:f6:40:6d:
         a9:08:a5:b0:c0:f5:b1:dc:e1:31:21:7b:29:0a:6a:cd:7d:e1:
         90:38:04:6c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----