Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/cb/543221-f267-4731-a7ad-987173b9e987/1/siDZG06dcPA0-hahaoh9QlV5Kt4.mft
File:                     siDZG06dcPA0-hahaoh9QlV5Kt4.mft (raw, json)
Hash identifier:          tItXIgrJYFmlsOXRlTG1QgC9p8mBVB5+fW0gezF0UEk=
Subject key identifier:   2E:04:AF:F6:5F:8A:E4:96:A3:CC:CB:34:AF:F6:37:30:97:AE:16:EB
Authority key identifier: B2:20:D9:1B:4E:9D:70:F0:34:FA:16:A1:6A:88:7D:42:55:79:2A:DE
Certificate issuer:       /CN=b220d91b4e9d70f034fa16a16a887d4255792ade
Certificate serial:       01962FAB31025A13BD4D31383F433AA9CDCE
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/siDZG06dcPA0-hahaoh9QlV5Kt4.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/cb/543221-f267-4731-a7ad-987173b9e987/1/siDZG06dcPA0-hahaoh9QlV5Kt4.mft
Manifest number:          14EB
Signing time:             Sun 13 Apr 2025 15:01:10 +0000
Manifest this update:     Sun 13 Apr 2025 15:01:10 +0000
Manifest next update:     Mon 14 Apr 2025 15:01:10 +0000
Files and hashes:         1: mCm-KBIMQ6gtgsW9oEUxZqdGcRM.roa (hash: ItOlCehgUekOH/ud/IMp3e9dVCyKMOt54wV1YDUzoCg=)
                          2: siDZG06dcPA0-hahaoh9QlV5Kt4.crl (hash: AJUaKCai0AvkgVKDNtCDppiI9r6D16McOWBmzvl0U8M=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2f:ab:31:02:5a:13:bd:4d:31:38:3f:43:3a:a9:cd:ce
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b220d91b4e9d70f034fa16a16a887d4255792ade
        Validity
            Not Before: Apr 13 15:01:10 2025 GMT
            Not After : Apr 14 15:01:10 2025 GMT
        Subject: CN=2e04aff65f8ae496a3cccb34aff6373097ae16eb
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d0:5f:6e:db:c0:d2:35:b6:71:35:8f:bb:3b:cd:
                    f6:23:96:a4:d3:62:d6:f0:2e:e9:14:bd:63:61:20:
                    5f:e3:bb:fd:6e:79:a5:86:74:10:bc:26:e7:2f:ea:
                    3d:c6:29:a1:2d:37:87:c5:a5:0d:93:5e:a5:46:18:
                    b4:79:8a:88:3d:fa:97:f6:ff:cd:5c:04:a5:46:68:
                    20:0a:31:3c:e1:0e:59:ea:6b:fd:0d:c2:24:34:e8:
                    d4:f3:5e:c1:84:58:0e:e2:a8:c4:f2:bb:b2:d2:34:
                    a4:f5:3d:0b:70:81:ec:63:82:56:e8:39:ff:b7:d0:
                    93:62:f5:b5:a1:19:35:7f:35:ef:a1:c0:8b:ce:db:
                    f0:07:aa:c3:bc:b8:83:6d:b4:4e:9d:15:1e:9a:9c:
                    97:8a:70:58:bd:61:9d:ef:37:b8:07:f6:64:5e:c4:
                    55:35:d0:26:b4:f9:ae:d0:c8:b9:a8:e7:88:25:44:
                    73:96:45:82:95:77:bd:26:76:3f:fc:60:bb:f2:88:
                    90:35:65:78:f9:48:62:a5:fe:09:86:7f:6e:7f:ee:
                    da:be:c5:80:1f:06:56:39:8d:6c:0a:35:7e:46:af:
                    dd:22:39:e0:43:fe:9e:13:c1:7c:80:a2:31:67:17:
                    53:2c:9c:3b:ce:eb:cb:13:b6:ef:d8:2c:5b:cf:6e:
                    4c:27
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2E:04:AF:F6:5F:8A:E4:96:A3:CC:CB:34:AF:F6:37:30:97:AE:16:EB
            X509v3 Authority Key Identifier:
                keyid:B2:20:D9:1B:4E:9D:70:F0:34:FA:16:A1:6A:88:7D:42:55:79:2A:DE

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/siDZG06dcPA0-hahaoh9QlV5Kt4.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/cb/543221-f267-4731-a7ad-987173b9e987/1/siDZG06dcPA0-hahaoh9QlV5Kt4.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/cb/543221-f267-4731-a7ad-987173b9e987/1/siDZG06dcPA0-hahaoh9QlV5Kt4.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         55:1f:26:c6:f5:8f:a5:4b:91:70:59:2f:eb:60:a3:01:91:00:
         fa:40:92:ee:97:5b:43:ef:53:1a:32:a9:34:d8:b6:e7:6d:e9:
         e9:73:0a:2b:ae:c4:4c:ed:bd:85:42:b6:dc:55:f2:27:c9:c9:
         0d:00:6c:e0:52:b7:1f:42:e8:ca:a4:61:94:ef:f0:a2:51:3a:
         7b:0b:9a:38:45:15:5e:39:07:63:b6:84:dc:73:d8:e6:5d:61:
         18:2a:c4:7e:ad:91:1d:7d:46:e3:b3:74:9c:23:5a:7a:86:af:
         83:8f:7d:89:ea:3a:7e:96:ae:8b:c6:aa:46:a2:7d:b0:d3:94:
         76:c8:90:f2:4f:d9:69:52:dc:0b:62:31:c7:7f:38:56:1b:29:
         62:7d:ef:d7:ee:7a:2f:3c:9b:7f:69:a4:e8:78:e6:ce:c4:ab:
         8f:89:6f:bc:63:9b:cd:cf:9b:e1:35:48:67:3c:60:29:9f:d9:
         49:f9:b0:7a:ef:7c:db:d6:ae:aa:fb:b5:96:76:23:63:ef:65:
         4c:a8:55:b7:09:79:22:f9:2d:f0:07:24:cd:19:7b:b8:55:11:
         fe:96:6f:93:8f:96:6b:80:c0:3a:36:58:b8:1f:7c:20:b9:e6:
         98:42:e1:5c:57:70:90:41:29:be:dc:0c:06:c2:6d:ea:9c:9b:
         70:5b:7e:e0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----