Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ce/36c2aa-2e24-44fb-9e0a-b72398070823/1/2rHAMIjr_lU4ErMVR8A8kKJdh3E.mft
File:                     2rHAMIjr_lU4ErMVR8A8kKJdh3E.mft (raw, json)
Hash identifier:          qVeA7jPxmJbWhQASxY5nA6cbnndBsACjYxiT8m8wAss=
Subject key identifier:   12:86:43:4B:4D:C0:A2:99:B8:75:E6:BC:E6:9E:49:64:B2:4B:31:05
Authority key identifier: DA:B1:C0:30:88:EB:FE:55:38:12:B3:15:47:C0:3C:90:A2:5D:87:71
Certificate issuer:       /CN=dab1c03088ebfe553812b31547c03c90a25d8771
Certificate serial:       01962F06CADF14C8EE79FBB4A4B64C519373
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/2rHAMIjr_lU4ErMVR8A8kKJdh3E.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/ce/36c2aa-2e24-44fb-9e0a-b72398070823/1/2rHAMIjr_lU4ErMVR8A8kKJdh3E.mft
Manifest number:          14E9
Signing time:             Sun 13 Apr 2025 12:01:36 +0000
Manifest this update:     Sun 13 Apr 2025 12:01:36 +0000
Manifest next update:     Mon 14 Apr 2025 12:01:36 +0000
Files and hashes:         1: 2rHAMIjr_lU4ErMVR8A8kKJdh3E.crl (hash: sA04PWKFjwBhhn2NEc7OvNjbRaeutauVpcyBdl/Ykc8=)
                          2: ev2WSyViLs_4S1tUPVrDBxIhRNA.roa (hash: 76S9MUck64w/+vCaPMsorT6TPB6jZWIo5BognypKoJ8=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2f:06:ca:df:14:c8:ee:79:fb:b4:a4:b6:4c:51:93:73
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=dab1c03088ebfe553812b31547c03c90a25d8771
        Validity
            Not Before: Apr 13 12:01:36 2025 GMT
            Not After : Apr 14 12:01:36 2025 GMT
        Subject: CN=1286434b4dc0a299b875e6bce69e4964b24b3105
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d4:1b:ac:87:c4:85:90:bf:c7:10:45:1b:28:e6:
                    62:32:9c:4c:cf:d6:97:74:f6:aa:a3:16:db:46:2e:
                    e9:6b:73:61:da:66:c7:8b:2b:9c:d3:b6:a1:f4:ba:
                    ef:b4:82:3d:3b:3c:5c:8b:a4:42:89:1e:3c:95:5a:
                    21:f5:d2:83:ef:a3:f1:19:58:af:08:53:21:92:61:
                    7e:02:10:05:11:d7:e0:0c:0e:39:0b:fc:6a:45:01:
                    92:96:85:0b:9f:20:be:22:99:05:d8:86:7c:8b:ae:
                    60:4a:72:36:7d:07:8f:3c:d5:2d:bf:ea:48:4a:54:
                    db:d0:03:d5:b5:b7:68:cf:ae:6a:0b:69:2c:ab:9e:
                    af:35:ce:55:b9:18:c9:92:93:80:8d:d1:4d:88:2c:
                    41:11:cf:34:41:6f:22:7a:ea:0e:34:f8:6e:fa:d5:
                    6c:31:81:88:48:1b:f3:23:55:0a:77:03:4e:28:0a:
                    ec:2a:93:de:23:52:53:e8:dd:4b:52:77:cb:88:82:
                    dc:f9:90:ae:46:6e:8f:fd:c1:61:01:96:53:57:7a:
                    be:c7:7d:b9:eb:27:d9:ef:7c:dc:ed:70:29:40:5d:
                    ee:f8:eb:b8:07:57:cb:7b:ad:72:e6:70:09:5e:6c:
                    47:d2:a4:2f:7e:5b:78:6b:c3:ef:b0:ee:eb:ec:47:
                    46:79
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                12:86:43:4B:4D:C0:A2:99:B8:75:E6:BC:E6:9E:49:64:B2:4B:31:05
            X509v3 Authority Key Identifier:
                keyid:DA:B1:C0:30:88:EB:FE:55:38:12:B3:15:47:C0:3C:90:A2:5D:87:71

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/2rHAMIjr_lU4ErMVR8A8kKJdh3E.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ce/36c2aa-2e24-44fb-9e0a-b72398070823/1/2rHAMIjr_lU4ErMVR8A8kKJdh3E.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/ce/36c2aa-2e24-44fb-9e0a-b72398070823/1/2rHAMIjr_lU4ErMVR8A8kKJdh3E.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         2b:42:0f:b7:87:e0:c5:35:d5:07:72:44:a2:c7:8c:bf:54:0c:
         ca:a4:48:71:15:c7:35:15:ff:13:fd:8a:d0:75:cc:b9:e1:dc:
         cf:b8:49:8f:d6:5f:8c:f4:f5:55:fd:e3:67:2e:27:4f:f5:1c:
         02:ab:5e:b9:81:1b:9d:1f:ec:02:b9:13:4b:e4:b3:f9:77:d3:
         aa:c8:e9:36:44:6b:b6:af:c5:c3:6a:0c:9c:c7:b5:cc:b7:04:
         40:9e:f8:81:96:24:8e:07:23:ae:01:a0:03:14:b4:32:c1:77:
         97:ea:75:ac:3e:4e:12:1b:8f:07:5c:6d:f1:11:27:10:c7:67:
         51:51:a6:21:e6:b5:fb:11:5b:a6:0a:b6:79:79:34:ed:b9:95:
         2d:92:b0:bc:9c:b9:d1:98:ee:11:41:00:76:27:f2:42:9f:4a:
         68:2f:a5:5c:76:b8:00:19:ad:ce:b0:0c:6e:f4:ab:62:60:0d:
         68:48:80:8b:18:66:9e:9e:c0:44:4a:9b:e1:d5:cd:19:a7:80:
         33:2c:cb:62:0b:d9:b0:fb:67:e6:77:84:71:21:78:71:98:79:
         8a:61:68:54:b3:de:da:23:0e:59:14:f8:01:d0:b1:31:83:0d:
         95:d7:9b:f6:18:a6:08:4f:53:3f:5e:84:eb:ef:2b:f3:29:e1:
         f5:0f:76:8f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----