Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d4/e6d062-8f77-497d-b181-2510dac32496/1/L228auC1ihFzHyGe2gIkcdHhHts.mft
File:                     L228auC1ihFzHyGe2gIkcdHhHts.mft (raw, json)
Hash identifier:          cDuQ/v3JvbF/QXwv7KuzO6QSBYnAqK+EwS4EeBuQrS4=
Subject key identifier:   FC:C8:DE:FA:DF:2E:EC:D5:E4:79:43:49:17:6E:0E:16:66:90:E7:56
Authority key identifier: 2F:6D:BC:6A:E0:B5:8A:11:73:1F:21:9E:DA:02:24:71:D1:E1:1E:DB
Certificate issuer:       /CN=2f6dbc6ae0b58a11731f219eda022471d1e11edb
Certificate serial:       01962FAB437ACF22240C9AF66B4975E7E9BE
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/L228auC1ihFzHyGe2gIkcdHhHts.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/d4/e6d062-8f77-497d-b181-2510dac32496/1/L228auC1ihFzHyGe2gIkcdHhHts.mft
Manifest number:          030E
Signing time:             Sun 13 Apr 2025 15:01:15 +0000
Manifest this update:     Sun 13 Apr 2025 15:01:15 +0000
Manifest next update:     Mon 14 Apr 2025 15:01:15 +0000
Files and hashes:         1: L228auC1ihFzHyGe2gIkcdHhHts.crl (hash: iDsyrylZkXiOfVrPyDNfBWDio3FMg2NCmD2fyOk7WFE=)
                          2: V8k0n9rqEarIEgNITkDx8oQ4w44.roa (hash: BkPM7QHIpoN+47+MwN2OB6x0pADkUYwi5FlR1ZsHikQ=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2f:ab:43:7a:cf:22:24:0c:9a:f6:6b:49:75:e7:e9:be
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2f6dbc6ae0b58a11731f219eda022471d1e11edb
        Validity
            Not Before: Apr 13 15:01:15 2025 GMT
            Not After : Apr 14 15:01:15 2025 GMT
        Subject: CN=fcc8defadf2eecd5e4794349176e0e166690e756
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b3:f1:77:f1:5c:cc:7f:28:bd:6e:d0:c8:19:57:
                    fd:2c:ac:74:b0:4d:e6:d2:0b:5c:70:60:2c:29:77:
                    ff:6e:81:e2:5e:93:0d:5a:5e:6c:7d:cd:8d:22:c2:
                    d2:9c:f0:48:2a:2c:63:bc:79:dd:5a:33:ef:d0:d0:
                    77:b4:0b:a1:4f:2e:b4:04:fa:c4:94:c1:13:7d:de:
                    dc:07:5f:1c:cf:93:86:25:2f:a7:1b:05:f5:2f:dc:
                    57:9b:44:68:d9:eb:eb:30:cb:b1:fa:27:02:dd:d0:
                    d2:99:5c:e0:ce:04:54:43:42:bf:e9:df:fe:44:0e:
                    12:3a:77:30:b6:09:ba:a9:07:bf:a3:00:ca:dd:e9:
                    0d:c8:c0:bb:12:77:64:bc:65:15:0b:c4:df:37:8c:
                    da:e6:7c:ed:3e:44:8d:8a:a6:1f:c3:7d:15:8e:aa:
                    2d:89:03:50:c9:21:31:26:d3:8d:75:98:df:b2:bf:
                    b2:e7:87:d4:ca:00:26:fd:0f:dc:1d:9e:c5:76:df:
                    eb:e5:77:48:bf:7f:c1:c4:73:80:46:67:17:0b:df:
                    79:cd:cd:64:78:76:13:5e:6c:8d:eb:da:28:e1:85:
                    01:ce:a1:9a:6f:b5:f9:a6:65:e9:61:56:0d:52:7e:
                    ee:98:26:29:5b:99:ee:ac:08:84:3d:ea:ee:53:51:
                    c8:17
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FC:C8:DE:FA:DF:2E:EC:D5:E4:79:43:49:17:6E:0E:16:66:90:E7:56
            X509v3 Authority Key Identifier:
                keyid:2F:6D:BC:6A:E0:B5:8A:11:73:1F:21:9E:DA:02:24:71:D1:E1:1E:DB

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/L228auC1ihFzHyGe2gIkcdHhHts.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d4/e6d062-8f77-497d-b181-2510dac32496/1/L228auC1ihFzHyGe2gIkcdHhHts.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/d4/e6d062-8f77-497d-b181-2510dac32496/1/L228auC1ihFzHyGe2gIkcdHhHts.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         38:fb:e9:5b:fc:77:e1:30:03:c7:86:1f:e3:ab:6a:00:14:76:
         67:b7:98:5e:cb:5d:46:e3:e1:a6:46:23:c0:04:f5:ac:05:2e:
         48:fe:2c:e5:99:6a:d6:b7:cc:12:c9:55:f7:4e:ec:b7:38:b8:
         09:39:65:74:77:42:5e:f6:00:a6:bc:a8:43:28:a2:03:ef:61:
         b8:ba:9e:a4:c2:ba:08:0f:28:5b:95:6a:56:4e:87:4d:69:63:
         4c:66:e3:5b:2a:19:b1:c0:ab:72:20:05:7a:4b:c7:65:d6:1e:
         38:78:88:9b:9c:1d:e6:b1:f1:91:0f:31:81:f9:07:e5:e4:95:
         3c:43:de:c2:6b:b9:f7:76:99:ff:e3:78:71:be:08:08:d4:80:
         ed:d4:e9:db:40:1b:f6:2d:23:da:47:92:b2:a9:75:f6:88:dc:
         e2:c8:e7:f6:5d:cb:ca:8f:62:32:96:2a:3b:f8:fd:a9:eb:55:
         c4:fd:3b:5b:57:f7:bb:c0:a0:6a:4f:e1:cd:7d:5c:78:78:56:
         cc:02:70:7d:d0:9d:4b:07:4a:a1:50:0c:2e:cd:8c:8e:90:c6:
         e0:5b:a0:42:d0:85:25:85:e8:24:c6:a8:84:8c:fc:c8:12:3e:
         71:98:e0:b6:f7:17:4b:e3:f6:c0:a8:7e:96:6a:6a:fb:8f:77:
         c3:ae:82:1b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----