Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d1/c3fcd9-00c8-436b-8c01-a5fea604ad53/1/c_2uFQUEnkRtWw0USsyGDWwYFnw.mft
File:                     c_2uFQUEnkRtWw0USsyGDWwYFnw.mft (raw, json)
Hash identifier:          2nyGS5NKXRClIrMiOY4/36gFbkgZ4Z5Nh0qid6Uq3E4=
Subject key identifier:   CD:65:07:4B:88:69:C6:27:87:E6:8C:7B:FB:1F:87:C7:F9:11:A0:48
Authority key identifier: 73:FD:AE:15:05:04:9E:44:6D:5B:0D:14:4A:CC:86:0D:6C:18:16:7C
Certificate issuer:       /CN=73fdae1505049e446d5b0d144acc860d6c18167c
Certificate serial:       01962ECF8376A2BE46251557FAC97055BE7E
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/c_2uFQUEnkRtWw0USsyGDWwYFnw.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/d1/c3fcd9-00c8-436b-8c01-a5fea604ad53/1/c_2uFQUEnkRtWw0USsyGDWwYFnw.mft
Manifest number:          14EF
Signing time:             Sun 13 Apr 2025 11:01:13 +0000
Manifest this update:     Sun 13 Apr 2025 11:01:13 +0000
Manifest next update:     Mon 14 Apr 2025 11:01:13 +0000
Files and hashes:         1: TTDv1twa5Oq2wS4kqb31Wa4mKwc.roa (hash: kNwC0HcE7BSu6NKB5QfTvVm3I8iIUDuBU4W9LJhw8AE=)
                          2: c_2uFQUEnkRtWw0USsyGDWwYFnw.crl (hash: qQCLr7iPnac58BL9f+uVs78ddLWXzze6piP42aa+IBE=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2e:cf:83:76:a2:be:46:25:15:57:fa:c9:70:55:be:7e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=73fdae1505049e446d5b0d144acc860d6c18167c
        Validity
            Not Before: Apr 13 11:01:13 2025 GMT
            Not After : Apr 14 11:01:13 2025 GMT
        Subject: CN=cd65074b8869c62787e68c7bfb1f87c7f911a048
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b3:2a:42:00:64:ce:b6:97:26:55:45:af:4c:8d:
                    d1:c8:79:c6:61:b9:9d:31:7a:94:82:f5:0e:40:29:
                    8e:7c:4f:91:ce:e9:23:e5:55:c4:b2:19:44:9a:8c:
                    87:d1:a5:0d:a7:74:7f:e3:27:82:e9:e0:0f:f8:a7:
                    9e:0a:e6:4c:88:7d:82:bc:fe:10:86:62:57:5f:1e:
                    db:1b:19:74:c9:e5:ea:ed:54:b7:ab:af:cd:ec:d4:
                    29:51:f1:49:76:b5:e0:46:2d:7b:d7:20:c1:1f:bc:
                    2e:ed:6f:8e:2d:89:1e:70:b9:a8:c7:1e:49:a9:c6:
                    2d:d2:e4:43:68:86:c4:18:28:c9:09:e8:01:0b:2c:
                    38:53:2d:e0:9f:10:1b:f9:3a:40:a8:d6:09:b1:04:
                    cf:f1:59:46:28:11:d7:90:87:44:f1:99:8e:9b:d7:
                    62:da:42:0d:70:c1:19:6d:ce:5c:75:0b:7a:ee:ff:
                    47:a2:59:fd:9f:50:21:19:74:08:ab:cf:28:69:1c:
                    fc:74:9e:74:f6:6b:a7:11:27:70:b6:b4:cb:0f:dc:
                    53:2d:f5:d7:ff:c7:54:4e:7c:60:b0:53:32:b4:15:
                    f1:a2:fd:bc:83:42:01:75:12:ef:f1:85:cc:10:a8:
                    b7:4d:48:f3:c2:e4:c6:18:5a:7a:96:44:e4:d1:a1:
                    2f:69
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CD:65:07:4B:88:69:C6:27:87:E6:8C:7B:FB:1F:87:C7:F9:11:A0:48
            X509v3 Authority Key Identifier:
                keyid:73:FD:AE:15:05:04:9E:44:6D:5B:0D:14:4A:CC:86:0D:6C:18:16:7C

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/c_2uFQUEnkRtWw0USsyGDWwYFnw.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d1/c3fcd9-00c8-436b-8c01-a5fea604ad53/1/c_2uFQUEnkRtWw0USsyGDWwYFnw.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/d1/c3fcd9-00c8-436b-8c01-a5fea604ad53/1/c_2uFQUEnkRtWw0USsyGDWwYFnw.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         d8:f2:c0:1a:a4:a3:71:20:40:3f:58:86:37:f7:47:a6:07:64:
         73:02:45:70:55:02:40:61:b4:d9:4e:dd:4a:6d:8b:11:3e:15:
         89:ef:99:ad:2f:57:d0:1f:ce:87:6d:3b:a5:ef:80:85:ec:c7:
         bf:0a:9d:22:cc:1b:22:cb:e3:8d:29:f5:6f:96:13:69:29:83:
         f6:e0:14:ae:59:85:d8:fe:e8:62:fe:f8:70:c2:60:b2:6c:1e:
         c2:4d:80:ad:10:c7:d3:64:c2:64:52:3a:1b:8b:f2:de:17:fd:
         14:5d:f7:7e:52:c2:5d:89:70:35:fb:c1:0d:2e:f1:d9:b2:65:
         59:40:04:69:a0:7c:a0:43:41:4d:c9:7e:12:84:34:da:8a:85:
         4e:7f:d5:86:b3:e3:38:a2:47:16:fc:32:0d:7e:95:99:cd:66:
         81:a7:53:58:e0:fc:d7:be:41:a1:26:19:8b:d8:0a:33:2d:dd:
         39:02:cc:27:ed:65:54:ad:aa:d4:f3:75:fc:6f:76:7b:63:9c:
         ec:67:81:bd:e0:f7:c5:3d:03:e8:30:14:c0:f4:c2:05:eb:d0:
         33:c2:30:62:01:bd:6a:ab:e1:53:78:08:a8:6d:4a:41:f0:3d:
         ad:7e:a9:29:d0:3c:22:cb:6a:8b:6d:45:ae:1f:94:97:ef:12:
         25:5f:fb:06
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----