Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d8/44dac0-167a-4993-b9a8-b05cffb187fa/1/2ggpHPxyjQF2DsQngQlqxrTHSl0.mft
File:                     2ggpHPxyjQF2DsQngQlqxrTHSl0.mft (raw, json)
Hash identifier:          W7V+31eMQ/kxxmp6qXEWUKudVWRrYB2FQNcDNMPSwvo=
Subject key identifier:   8B:A9:11:C3:DC:25:0F:FA:7A:68:D4:25:A2:FD:AA:0D:BC:0F:D2:1E
Authority key identifier: DA:08:29:1C:FC:72:8D:01:76:0E:C4:27:81:09:6A:C6:B4:C7:4A:5D
Certificate issuer:       /CN=da08291cfc728d01760ec42781096ac6b4c74a5d
Certificate serial:       01962E9948F5322BFD275EB77F5DF308EC04
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/2ggpHPxyjQF2DsQngQlqxrTHSl0.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/d8/44dac0-167a-4993-b9a8-b05cffb187fa/1/2ggpHPxyjQF2DsQngQlqxrTHSl0.mft
Manifest number:          14E7
Signing time:             Sun 13 Apr 2025 10:01:59 +0000
Manifest this update:     Sun 13 Apr 2025 10:01:59 +0000
Manifest next update:     Mon 14 Apr 2025 10:01:59 +0000
Files and hashes:         1: 2ggpHPxyjQF2DsQngQlqxrTHSl0.crl (hash: aIIWSe3q8ExhbnZmIP3Rj1yB1cgbPZ4TP1r/tes5XqI=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2e:99:48:f5:32:2b:fd:27:5e:b7:7f:5d:f3:08:ec:04
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=da08291cfc728d01760ec42781096ac6b4c74a5d
        Validity
            Not Before: Apr 13 10:01:59 2025 GMT
            Not After : Apr 14 10:01:59 2025 GMT
        Subject: CN=8ba911c3dc250ffa7a68d425a2fdaa0dbc0fd21e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:93:f7:40:0d:65:67:14:32:f9:d5:db:54:0b:0d:
                    be:f1:41:fc:0d:f3:9b:cd:fa:0e:9a:15:1a:ee:64:
                    dd:4f:19:ef:dc:d1:ce:9f:c4:86:59:c2:33:3d:1a:
                    53:5e:17:03:22:3b:08:a9:38:f0:db:b8:f6:41:10:
                    68:80:78:1d:57:b5:15:2f:27:17:1f:fd:76:88:b1:
                    3e:e0:0a:62:33:c9:18:5f:68:e7:a1:80:ce:f8:68:
                    34:43:ca:67:40:d3:aa:79:4f:8a:ce:2b:e7:c9:4c:
                    49:9c:da:06:f5:e0:10:52:9d:a3:68:35:8a:8a:a9:
                    f6:f1:87:77:01:c5:42:94:07:86:68:19:c8:57:ee:
                    e9:32:ee:9d:ed:f4:85:93:70:77:88:4c:da:1f:3f:
                    1f:00:71:95:3d:62:16:62:d9:28:fb:c8:92:79:81:
                    9b:06:e2:7c:8e:70:58:fb:aa:a4:2c:f0:d2:07:65:
                    3e:5c:b5:30:47:78:de:1d:75:30:bb:d2:a0:f9:df:
                    ee:eb:57:a1:05:20:a8:6a:7d:d1:9c:3a:51:92:5a:
                    d1:b3:67:3b:29:3a:06:89:1c:46:d9:a8:e7:46:c7:
                    9e:0d:05:75:38:1a:31:44:bd:a5:f3:7c:ba:f3:67:
                    e9:00:6c:b7:c8:e8:3a:7d:b9:42:14:05:97:f0:e4:
                    dd:b3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8B:A9:11:C3:DC:25:0F:FA:7A:68:D4:25:A2:FD:AA:0D:BC:0F:D2:1E
            X509v3 Authority Key Identifier:
                keyid:DA:08:29:1C:FC:72:8D:01:76:0E:C4:27:81:09:6A:C6:B4:C7:4A:5D

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/2ggpHPxyjQF2DsQngQlqxrTHSl0.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d8/44dac0-167a-4993-b9a8-b05cffb187fa/1/2ggpHPxyjQF2DsQngQlqxrTHSl0.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/d8/44dac0-167a-4993-b9a8-b05cffb187fa/1/2ggpHPxyjQF2DsQngQlqxrTHSl0.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         af:c7:92:47:b9:39:99:70:dc:b3:b1:12:62:98:89:1a:fe:d9:
         75:fe:1c:cd:0d:f6:32:ae:3b:55:c5:4f:b7:78:b2:e6:89:df:
         ac:81:7e:f9:b5:3d:13:c1:02:15:49:03:36:42:b8:c0:3b:bd:
         9e:e3:f6:1b:f1:63:76:2a:bf:ab:6e:0f:40:fa:6e:f0:ce:4c:
         03:9e:cd:9f:8a:bb:24:34:af:1a:f7:c4:bd:74:9f:f5:e0:a1:
         4a:d5:2e:f8:c7:d7:ea:24:be:a2:5b:3e:3e:5d:03:ad:dc:09:
         91:07:0e:3d:48:34:a6:aa:b1:b2:18:69:4a:1f:8e:18:45:d7:
         e1:10:8c:4f:62:37:41:cd:3b:df:b0:fa:ea:9b:29:ef:48:92:
         cc:18:ad:60:cb:ad:7d:1f:9d:08:0e:e8:5a:d5:18:c7:16:da:
         ef:40:55:8a:bd:78:f3:db:38:23:22:67:d3:61:f5:38:cd:64:
         e2:f8:be:a8:76:71:24:89:48:88:16:1e:27:26:ee:38:5b:cd:
         73:b9:a8:99:51:c2:a2:cb:12:2d:85:0a:6d:45:89:fd:1e:df:
         8c:65:3d:5f:0a:0d:60:24:63:b0:92:93:7e:ac:95:de:fa:a9:
         b3:23:38:72:57:42:82:13:35:22:ef:72:a3:3e:ee:fb:3a:1c:
         7b:eb:80:b0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----