Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/cb/6b9ec0-9b10-4443-b5e6-c4fd53ebeb67/1/S2HMijZcxAOCox2tVPbLcj9YdYo.mft
File:                     S2HMijZcxAOCox2tVPbLcj9YdYo.mft (raw, json)
Hash identifier:          GlxW5gMZYGARapo05VKByAk3fDVNclqNsr5RCYKXLeQ=
Subject key identifier:   56:D6:48:31:FF:21:CA:EB:38:76:FC:E7:49:47:5A:21:61:30:D1:F3
Authority key identifier: 4B:61:CC:8A:36:5C:C4:03:82:A3:1D:AD:54:F6:CB:72:3F:58:75:8A
Certificate issuer:       /CN=4b61cc8a365cc40382a31dad54f6cb723f58758a
Certificate serial:       01962F06C68C106575EBB9A984AF5E5B8101
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/S2HMijZcxAOCox2tVPbLcj9YdYo.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/cb/6b9ec0-9b10-4443-b5e6-c4fd53ebeb67/1/S2HMijZcxAOCox2tVPbLcj9YdYo.mft
Manifest number:          14EB
Signing time:             Sun 13 Apr 2025 12:01:35 +0000
Manifest this update:     Sun 13 Apr 2025 12:01:35 +0000
Manifest next update:     Mon 14 Apr 2025 12:01:35 +0000
Files and hashes:         1: 5dOeHmReGHpglp9CPLficnPxbRA.roa (hash: u/adm8/lzLOzXE337fHeCi8QttPIgGUNVZ/GPwCUh0o=)
                          2: S2HMijZcxAOCox2tVPbLcj9YdYo.crl (hash: ed9bfMOT+hRvg5TUYio4+evE6sM6zUeSJDwpGkKD258=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2f:06:c6:8c:10:65:75:eb:b9:a9:84:af:5e:5b:81:01
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4b61cc8a365cc40382a31dad54f6cb723f58758a
        Validity
            Not Before: Apr 13 12:01:35 2025 GMT
            Not After : Apr 14 12:01:35 2025 GMT
        Subject: CN=56d64831ff21caeb3876fce749475a216130d1f3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c8:58:88:2c:5a:be:47:cc:ba:de:6d:25:50:97:
                    22:4b:92:7c:d9:22:0d:75:20:39:96:be:19:f4:75:
                    d9:7a:60:a2:94:78:48:39:0c:c6:95:26:45:34:93:
                    74:c2:86:26:6f:f2:1e:12:72:8a:88:67:74:9e:81:
                    18:cb:12:7d:81:55:9d:b1:22:67:4f:4e:38:8f:df:
                    d3:cf:54:78:46:a4:eb:8a:8d:91:ce:b6:d7:2a:a4:
                    3c:a1:e0:48:93:a8:01:3b:0a:47:e6:13:72:ab:95:
                    23:eb:6a:e4:66:a7:3b:d3:68:a6:fa:7f:ef:7b:cb:
                    e3:86:a3:2c:a2:02:59:0d:ed:49:5a:79:31:11:32:
                    57:7c:50:58:db:36:54:46:fa:4d:ce:b3:6d:ac:4c:
                    23:da:45:9d:55:00:cb:55:c0:7b:06:01:48:56:5d:
                    9e:31:48:a7:d9:44:8e:7e:f3:c5:51:3e:d1:60:e3:
                    a6:f7:f2:6d:c4:59:8c:6a:77:74:17:68:99:20:32:
                    b1:e2:62:96:59:b1:d1:c5:e7:d3:07:49:33:1e:28:
                    b3:a6:10:3b:3f:2d:bb:bc:89:17:c0:1d:17:c3:06:
                    a6:43:a0:c5:ca:04:1e:77:cf:c5:3f:5d:07:18:c6:
                    6e:1f:08:b2:39:ad:dc:3c:32:a3:80:d6:d9:bd:49:
                    23:09
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                56:D6:48:31:FF:21:CA:EB:38:76:FC:E7:49:47:5A:21:61:30:D1:F3
            X509v3 Authority Key Identifier:
                keyid:4B:61:CC:8A:36:5C:C4:03:82:A3:1D:AD:54:F6:CB:72:3F:58:75:8A

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/S2HMijZcxAOCox2tVPbLcj9YdYo.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/cb/6b9ec0-9b10-4443-b5e6-c4fd53ebeb67/1/S2HMijZcxAOCox2tVPbLcj9YdYo.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/cb/6b9ec0-9b10-4443-b5e6-c4fd53ebeb67/1/S2HMijZcxAOCox2tVPbLcj9YdYo.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         99:af:14:c6:e9:db:bc:61:5f:ab:d2:e0:2d:fe:4e:45:ef:41:
         10:35:bf:bf:03:50:eb:71:16:61:c9:a9:bb:b0:16:bf:16:46:
         1c:43:1d:88:0d:12:c3:db:0d:3d:60:fc:c5:67:49:23:6e:87:
         dc:a5:33:f9:f6:41:3e:dd:21:af:b2:7e:f2:ff:cf:41:1a:78:
         d5:01:11:39:78:5d:80:78:64:4c:72:3c:56:86:53:16:41:3c:
         2f:ba:e9:84:7a:dc:bd:05:97:1d:0e:ce:e2:6b:8a:c6:f8:35:
         4f:3d:76:77:90:e0:6b:7e:b0:db:0a:ac:70:1d:f1:b0:5f:9d:
         ad:b3:46:92:aa:ff:c5:81:3c:a2:22:83:1a:ee:a4:20:68:4f:
         9b:9c:a6:95:5b:75:51:80:96:17:21:cb:e6:ba:b7:3b:6b:8a:
         3e:ee:38:28:54:9f:49:45:62:70:d2:ff:b6:0c:59:a1:91:10:
         0f:6d:0e:28:fd:aa:db:eb:ec:86:d0:6c:90:f5:da:38:2c:18:
         a3:e6:5a:24:5a:ca:c8:c8:48:cf:67:1e:d1:e8:d6:04:fc:0e:
         91:5a:90:30:86:70:7d:80:45:80:68:f0:de:fa:44:af:dd:5f:
         2d:54:fa:95:43:3e:fd:88:da:c4:d2:63:6d:bc:d3:77:32:22:
         4e:bd:e6:4e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----