Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d2/e08318-2975-417a-b863-85ea63c24474/1/h5kgiOdlXLE0AgypWw5X1Oba9A8.mft
File:                     h5kgiOdlXLE0AgypWw5X1Oba9A8.mft (raw, json)
Hash identifier:          KyH5gPizFkRd17Pgepv+9TDUErQVSfYdrlwDxAdIFXQ=
Subject key identifier:   2F:B3:F7:CE:15:F5:A5:99:B9:CC:06:5C:61:81:6F:82:00:9B:6A:4D
Authority key identifier: 87:99:20:88:E7:65:5C:B1:34:02:0C:A9:5B:0E:57:D4:E6:DA:F4:0F
Certificate issuer:       /CN=87992088e7655cb134020ca95b0e57d4e6daf40f
Certificate serial:       01962E990336E269846D2BDE9DFD94BC4DCF
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/h5kgiOdlXLE0AgypWw5X1Oba9A8.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/d2/e08318-2975-417a-b863-85ea63c24474/1/h5kgiOdlXLE0AgypWw5X1Oba9A8.mft
Manifest number:          14EB
Signing time:             Sun 13 Apr 2025 10:01:41 +0000
Manifest this update:     Sun 13 Apr 2025 10:01:41 +0000
Manifest next update:     Mon 14 Apr 2025 10:01:41 +0000
Files and hashes:         1: h5kgiOdlXLE0AgypWw5X1Oba9A8.crl (hash: ggiVtkXNlRALPocJilqyyF0d49I+VH/RmwSXa+rpXts=)
                          2: vH-eK3MDkjfjQIWGcNruZ1gYj6o.roa (hash: X8Ll3xNOyDNsY8OoD7P2fm6g2ckrfD35bOMThe6H4RM=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2e:99:03:36:e2:69:84:6d:2b:de:9d:fd:94:bc:4d:cf
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=87992088e7655cb134020ca95b0e57d4e6daf40f
        Validity
            Not Before: Apr 13 10:01:41 2025 GMT
            Not After : Apr 14 10:01:41 2025 GMT
        Subject: CN=2fb3f7ce15f5a599b9cc065c61816f82009b6a4d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b9:ad:3a:2b:d0:11:0c:76:10:13:55:31:cc:e4:
                    39:3c:d3:26:ee:44:ed:fd:c7:b8:cf:ce:e3:18:15:
                    b1:52:b3:76:fd:05:1e:d4:c3:e8:cb:b5:29:5d:d6:
                    99:84:93:06:18:46:94:9a:b0:78:20:c3:3b:00:c6:
                    75:94:29:cd:ee:3e:41:dd:8c:95:46:5a:d6:db:d5:
                    95:da:75:ac:c2:8f:46:e6:20:63:1b:20:90:cf:69:
                    de:c4:ca:6d:ce:8a:a7:c8:42:89:b8:ef:97:ef:93:
                    d9:1c:95:c0:fe:7b:68:10:af:fb:28:86:46:b6:75:
                    bd:f4:fc:c5:64:c3:07:ce:82:a2:92:1b:47:2b:0f:
                    ae:2b:25:a8:5e:59:5d:b7:29:e1:e6:a9:18:92:6c:
                    ce:13:fe:28:7b:9f:f0:b6:7a:ee:94:08:1e:2e:7d:
                    02:c7:7d:15:23:ca:01:d5:58:fa:59:4c:ce:d8:70:
                    8c:f2:82:b9:b2:32:36:22:bd:b8:67:9a:d6:19:38:
                    cd:31:e1:95:14:ae:38:66:44:c9:29:1a:2b:49:e9:
                    67:da:9a:25:a5:49:16:92:b9:48:8c:0c:76:7c:24:
                    ca:34:f1:81:40:09:77:6a:3f:65:c1:50:24:7e:17:
                    9b:62:bc:d0:69:c4:33:35:9a:5c:db:18:d6:44:22:
                    f5:b7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2F:B3:F7:CE:15:F5:A5:99:B9:CC:06:5C:61:81:6F:82:00:9B:6A:4D
            X509v3 Authority Key Identifier:
                keyid:87:99:20:88:E7:65:5C:B1:34:02:0C:A9:5B:0E:57:D4:E6:DA:F4:0F

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/h5kgiOdlXLE0AgypWw5X1Oba9A8.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d2/e08318-2975-417a-b863-85ea63c24474/1/h5kgiOdlXLE0AgypWw5X1Oba9A8.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/d2/e08318-2975-417a-b863-85ea63c24474/1/h5kgiOdlXLE0AgypWw5X1Oba9A8.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         07:d6:13:2b:76:3d:3e:5e:25:ff:51:1b:b0:76:6e:de:c9:d1:
         c8:c2:96:0c:66:34:88:3a:e7:94:36:d4:3e:4a:63:ab:76:5c:
         0f:0a:42:1a:eb:e9:ac:50:83:1a:42:a3:c3:80:f9:3b:8b:c8:
         97:ae:72:37:91:29:14:e2:50:4c:01:99:2d:5a:dc:d7:1b:28:
         84:e8:2e:7a:ac:53:ab:ef:41:ee:40:da:84:b1:74:de:25:6d:
         39:fb:01:91:19:04:f5:1e:e6:e2:8a:fe:c8:e5:d9:bb:32:38:
         95:8b:78:9a:a9:11:b7:8d:5d:49:af:bc:d0:e1:a9:a2:c9:f9:
         81:2c:76:7b:07:f5:75:66:d8:3d:ee:79:64:b3:b6:ab:b3:35:
         e1:88:97:3b:1a:c1:1a:cf:57:0f:97:25:60:f8:c8:39:12:85:
         6a:06:94:09:97:3a:72:3c:15:3b:93:73:75:95:e7:a9:7b:b3:
         40:38:e8:89:32:66:14:08:42:cb:5f:dc:6a:5e:5f:16:02:15:
         34:12:5d:c4:11:f9:69:52:c0:b3:a4:b9:81:ef:b7:37:98:8f:
         90:b1:db:ce:fc:2a:11:ab:e2:7d:27:57:ff:d4:fc:d9:36:d0:
         df:e0:12:40:4f:d9:20:4c:e8:99:05:40:0c:aa:13:f3:28:2e:
         8d:be:99:16
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----