Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d4/27ed2d-07c7-41d8-9c24-12b4ebc41451/1/2_W8uRxkCgo0KQXlpRcHUo9aM6E.mft
File:                     2_W8uRxkCgo0KQXlpRcHUo9aM6E.mft (raw, json)
Hash identifier:          HLaZGBBgAC9hdhM0zpjMTjZpDoVnlVVb23RDfu2J0Ig=
Subject key identifier:   49:AC:1C:CA:32:EE:F5:04:D7:A4:7B:9D:01:5F:BC:84:DF:65:71:1B
Authority key identifier: DB:F5:BC:B9:1C:64:0A:0A:34:29:05:E5:A5:17:07:52:8F:5A:33:A1
Certificate issuer:       /CN=dbf5bcb91c640a0a342905e5a51707528f5a33a1
Certificate serial:       01962E992D6004FB821CD0952029A2E79144
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/2_W8uRxkCgo0KQXlpRcHUo9aM6E.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/d4/27ed2d-07c7-41d8-9c24-12b4ebc41451/1/2_W8uRxkCgo0KQXlpRcHUo9aM6E.mft
Manifest number:          12DA
Signing time:             Sun 13 Apr 2025 10:01:52 +0000
Manifest this update:     Sun 13 Apr 2025 10:01:52 +0000
Manifest next update:     Mon 14 Apr 2025 10:01:52 +0000
Files and hashes:         1: 2_W8uRxkCgo0KQXlpRcHUo9aM6E.crl (hash: wx4+LlT4Ga/E/G/g+lgT0NKXVUAQbXiKotVpqbaspt8=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2e:99:2d:60:04:fb:82:1c:d0:95:20:29:a2:e7:91:44
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=dbf5bcb91c640a0a342905e5a51707528f5a33a1
        Validity
            Not Before: Apr 13 10:01:52 2025 GMT
            Not After : Apr 14 10:01:52 2025 GMT
        Subject: CN=49ac1cca32eef504d7a47b9d015fbc84df65711b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c3:ae:e3:a7:2c:31:99:b6:6d:44:20:9e:04:05:
                    c7:67:bb:2b:c6:bf:50:c7:04:99:3e:b5:02:cb:7e:
                    38:7d:cf:00:da:a5:27:55:1d:0b:67:30:be:ed:62:
                    b8:ad:95:5f:62:7a:d6:ec:ab:f0:fd:a7:9b:5d:3a:
                    07:73:ce:92:5d:ea:f8:03:e9:d1:a0:f3:e9:ae:56:
                    4e:aa:af:db:ff:db:e9:f4:7a:32:21:42:68:83:d2:
                    60:fb:57:0a:4e:33:7d:ba:e3:4d:37:c2:59:3b:34:
                    f3:4b:0d:f3:59:15:da:53:f1:8e:4d:c5:fb:24:3d:
                    10:6d:cd:9e:bd:37:9b:26:eb:4e:28:6c:10:05:fc:
                    a8:ae:00:9c:4f:6e:4d:56:4a:49:07:43:56:a7:c9:
                    ab:65:9c:90:7d:be:19:29:18:e0:13:63:c0:1d:3e:
                    e6:44:d0:81:da:87:a5:92:5d:b6:17:d9:f4:66:20:
                    d8:bb:d4:72:ab:0a:94:b4:2a:c2:ac:a8:26:9e:e2:
                    34:df:e3:ea:7c:ff:80:a9:38:3f:75:28:8d:45:11:
                    f3:60:8e:7a:21:3d:24:56:cf:45:bc:50:8f:eb:17:
                    95:2d:28:f8:f7:a1:9a:7e:ff:5d:87:15:b0:9b:23:
                    b4:f2:ac:f8:f3:4f:4f:97:5d:f2:6e:64:6e:d7:d1:
                    b7:af
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                49:AC:1C:CA:32:EE:F5:04:D7:A4:7B:9D:01:5F:BC:84:DF:65:71:1B
            X509v3 Authority Key Identifier:
                keyid:DB:F5:BC:B9:1C:64:0A:0A:34:29:05:E5:A5:17:07:52:8F:5A:33:A1

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/2_W8uRxkCgo0KQXlpRcHUo9aM6E.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d4/27ed2d-07c7-41d8-9c24-12b4ebc41451/1/2_W8uRxkCgo0KQXlpRcHUo9aM6E.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/d4/27ed2d-07c7-41d8-9c24-12b4ebc41451/1/2_W8uRxkCgo0KQXlpRcHUo9aM6E.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         4f:b7:a4:ad:09:0e:ec:1b:76:1f:31:76:05:0c:69:a0:c2:6f:
         a0:21:cc:61:fc:da:80:72:ff:50:6f:0c:10:2b:85:60:ff:66:
         a6:78:9e:18:9c:7c:a0:2f:0c:13:70:47:08:f3:ce:a7:50:e6:
         a0:6c:ac:6b:65:07:b0:d0:32:23:29:49:37:9d:1d:a2:b2:b2:
         63:ae:a8:52:0b:8c:31:89:7f:53:3a:46:78:d8:8a:5d:d5:c2:
         8f:16:8c:d9:e4:93:26:7a:61:f3:8e:80:63:3a:72:f0:4a:79:
         fd:3a:7c:09:b4:16:16:72:12:3a:62:33:4e:cc:1c:3c:df:a0:
         88:b4:e2:85:cf:89:05:4a:d6:06:a5:23:f2:a0:d5:04:46:4a:
         16:bf:e0:b5:3b:2f:20:b8:d5:41:68:db:62:a4:ce:fa:a6:85:
         40:cc:a7:46:68:3f:5a:85:ad:b9:f8:67:f7:bd:16:b5:82:d8:
         e1:a3:29:40:c0:b7:d2:04:f7:42:71:5b:06:d0:66:de:25:5f:
         83:c7:c1:26:d9:c3:04:e0:dd:45:1b:39:b8:61:b3:a0:3f:f5:
         9b:0c:e3:04:0b:f1:77:c0:c9:5a:5f:46:e2:a1:b5:84:5c:b3:
         2d:55:5a:7a:48:44:93:de:cd:d9:2a:ae:78:1d:c5:11:14:73:
         d0:81:86:61
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----