Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/cd/7d7e1d-33c0-4342-b259-a7bf3bf902d8/1/V2cFtVe4IwhralMjJL-7o2mVyxw.mft
File:                     V2cFtVe4IwhralMjJL-7o2mVyxw.mft (raw, json)
Hash identifier:          XAKQjrTmUoD/ndXGu6jB1ifV/1xREOLDgtrhNjAfZx4=
Subject key identifier:   A6:0F:16:F3:0C:5F:A0:20:FD:26:95:C3:7F:1A:1D:B6:4E:A5:5A:AB
Authority key identifier: 57:67:05:B5:57:B8:23:08:6B:6A:53:23:24:BF:BB:A3:69:95:CB:1C
Certificate issuer:       /CN=576705b557b823086b6a532324bfbba36995cb1c
Certificate serial:       01962E2B0A3DCA3A95C185C63A994582451E
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/V2cFtVe4IwhralMjJL-7o2mVyxw.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/cd/7d7e1d-33c0-4342-b259-a7bf3bf902d8/1/V2cFtVe4IwhralMjJL-7o2mVyxw.mft
Manifest number:          0212
Signing time:             Sun 13 Apr 2025 08:01:34 +0000
Manifest this update:     Sun 13 Apr 2025 08:01:34 +0000
Manifest next update:     Mon 14 Apr 2025 08:01:34 +0000
Files and hashes:         1: V2cFtVe4IwhralMjJL-7o2mVyxw.crl (hash: tq05iKoZdW6GAtxpNc9c6A5nArKP/DoK5nTf40H+hjc=)
                          2: Vsy2tppwZlto33QPcfaHiVfHozM.roa (hash: 18caMVQ1E5BJKp7FjnT6unU3mICAktVVg2IQqu7LHxI=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2e:2b:0a:3d:ca:3a:95:c1:85:c6:3a:99:45:82:45:1e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=576705b557b823086b6a532324bfbba36995cb1c
        Validity
            Not Before: Apr 13 08:01:34 2025 GMT
            Not After : Apr 14 08:01:34 2025 GMT
        Subject: CN=a60f16f30c5fa020fd2695c37f1a1db64ea55aab
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b9:2e:bb:9f:e8:f8:bd:b2:d5:7b:06:e8:ed:3c:
                    00:49:ee:3f:ba:4a:e3:83:14:7e:0c:ac:e9:dc:2e:
                    11:b5:a4:c8:cb:63:34:69:48:e5:6d:e5:07:73:56:
                    f6:14:db:d3:90:e1:bd:7b:b5:10:91:a8:e5:a4:30:
                    0a:85:d2:f4:85:ea:67:2a:e2:59:1b:c5:51:5d:72:
                    f5:e5:2e:7d:d2:5d:c1:14:81:62:6c:4a:87:2a:a1:
                    24:40:54:6e:eb:71:1d:10:b7:b5:4c:bb:0d:87:90:
                    52:12:a3:c4:c2:a8:21:e3:95:d6:41:af:92:ce:07:
                    3d:16:f0:02:d5:0b:14:d1:cb:d1:25:a1:63:cd:e9:
                    05:42:7a:bb:76:f1:4f:19:e9:75:5b:64:ea:65:1b:
                    44:4b:6e:be:00:c9:7c:80:c1:85:22:7d:01:03:75:
                    01:a6:cf:f8:57:16:fb:05:06:26:b1:75:2d:51:e5:
                    75:bd:d0:29:dd:7a:12:98:ae:54:cc:a6:0d:ce:c5:
                    80:41:51:3b:57:be:23:48:53:84:93:f1:6c:d3:65:
                    9f:70:3e:6d:58:e4:2c:7f:bf:ab:0d:4f:d9:33:7f:
                    9d:37:b3:2f:d6:6e:90:31:53:8d:ee:94:07:ba:c9:
                    4a:d7:0e:d4:d6:5c:3b:33:4f:1a:24:77:1b:a7:c8:
                    0c:3f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A6:0F:16:F3:0C:5F:A0:20:FD:26:95:C3:7F:1A:1D:B6:4E:A5:5A:AB
            X509v3 Authority Key Identifier:
                keyid:57:67:05:B5:57:B8:23:08:6B:6A:53:23:24:BF:BB:A3:69:95:CB:1C

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/V2cFtVe4IwhralMjJL-7o2mVyxw.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/cd/7d7e1d-33c0-4342-b259-a7bf3bf902d8/1/V2cFtVe4IwhralMjJL-7o2mVyxw.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/cd/7d7e1d-33c0-4342-b259-a7bf3bf902d8/1/V2cFtVe4IwhralMjJL-7o2mVyxw.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         ad:2e:4d:50:60:aa:e2:bd:30:9d:53:3c:14:67:4d:0e:07:1a:
         5c:fa:db:df:f5:6f:7f:53:43:a4:a1:6c:67:83:ba:a9:0c:54:
         2c:43:2c:1a:20:01:62:db:ec:ac:51:62:c2:16:31:6c:a8:91:
         7e:56:3a:eb:01:0f:b4:b7:5d:a1:da:d5:57:c9:e7:b7:b6:18:
         0f:e9:c8:b6:9a:2b:fe:5a:bb:20:44:d9:92:54:4a:be:55:a4:
         e8:3e:d5:5a:72:2e:2b:47:77:ea:98:22:0c:c1:66:20:34:32:
         4d:4c:86:9a:4b:fd:c7:8f:b0:39:bd:26:d4:da:b1:8e:6b:98:
         4c:f3:db:27:16:3c:52:d6:74:41:da:de:19:74:b1:f8:44:cc:
         44:41:30:b1:6c:39:27:c9:4c:55:c7:3a:c6:68:c1:5d:9a:96:
         0e:33:0c:b5:6f:4c:45:01:49:75:d1:d3:b1:ff:78:07:93:af:
         fc:40:8f:9c:27:68:13:ea:2f:00:f7:4a:91:83:4c:34:c5:45:
         a3:a3:6e:80:a7:cc:74:66:3e:a2:02:36:44:d5:a3:a6:91:cc:
         5e:98:ab:99:f3:81:93:d6:55:93:35:cf:c4:ca:c7:92:6c:01:
         b4:c5:a8:a7:3d:82:48:70:03:9e:28:76:01:5b:ad:b3:3c:d7:
         04:1a:63:ec
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----