Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d8/82129a-5263-43d2-bc63-19620615579b/1/2VJzaCBuPppZJAgd9jiAJG5cVBo.mft
File:                     2VJzaCBuPppZJAgd9jiAJG5cVBo.mft (raw, json)
Hash identifier:          GMwQ6dTF082MYD2f6zXTQs1zIxuRpEDN3vtX49QOmZY=
Subject key identifier:   00:72:12:3C:CE:E4:82:0D:29:02:67:07:48:AD:FD:AA:AB:81:13:19
Authority key identifier: D9:52:73:68:20:6E:3E:9A:59:24:08:1D:F6:38:80:24:6E:5C:54:1A
Certificate issuer:       /CN=d9527368206e3e9a5924081df63880246e5c541a
Certificate serial:       01962F0654D00DC3E81733A058B958F85819
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/2VJzaCBuPppZJAgd9jiAJG5cVBo.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/d8/82129a-5263-43d2-bc63-19620615579b/1/2VJzaCBuPppZJAgd9jiAJG5cVBo.mft
Manifest number:          147C
Signing time:             Sun 13 Apr 2025 12:01:06 +0000
Manifest this update:     Sun 13 Apr 2025 12:01:06 +0000
Manifest next update:     Mon 14 Apr 2025 12:01:06 +0000
Files and hashes:         1: 2VJzaCBuPppZJAgd9jiAJG5cVBo.crl (hash: mlHAFTvsxUQCPaIT2YUew+/aGnxEI9rPOf/MriA0VRU=)
                          2: SIolq_1_WZM4Sl_jpV4PfGa787Q.roa (hash: j7Gukmt+3MRCWPVKoFNL04/tZ9Oo5sZf6Bgq4mKvIoA=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2f:06:54:d0:0d:c3:e8:17:33:a0:58:b9:58:f8:58:19
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d9527368206e3e9a5924081df63880246e5c541a
        Validity
            Not Before: Apr 13 12:01:06 2025 GMT
            Not After : Apr 14 12:01:06 2025 GMT
        Subject: CN=0072123ccee4820d2902670748adfdaaab811319
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e9:59:0e:0d:6e:4b:3c:be:33:80:63:6d:07:a1:
                    6d:1f:41:0d:6e:aa:7f:a0:80:08:00:90:54:53:08:
                    59:17:d9:1e:62:a8:63:d2:1d:d7:c4:cd:31:df:39:
                    d4:af:6b:70:72:e2:2d:3c:7b:f8:4a:51:5d:39:85:
                    56:1b:56:16:7e:be:18:36:30:e2:f5:79:5e:a0:00:
                    65:d1:a0:e1:34:94:56:06:33:38:0f:fe:4f:b5:40:
                    77:dd:1e:30:15:2d:ba:0b:ed:c8:fb:89:30:ec:8e:
                    2a:d6:12:e9:fc:cd:ac:80:14:37:5a:c6:ea:d8:ae:
                    45:c1:b4:ca:f7:d1:a3:4b:02:82:64:55:ac:f5:07:
                    61:63:33:37:0b:98:65:b4:4b:42:a8:4b:f9:07:6e:
                    b2:fb:cc:a9:07:b8:7e:69:85:be:ee:bf:98:0e:60:
                    fb:fb:e6:e4:85:7b:17:65:57:6b:a4:d4:cd:cd:4b:
                    dd:46:4f:71:5a:49:17:ef:80:50:ef:5b:5d:f4:63:
                    3c:e9:d4:0e:4c:2e:ae:ad:8f:18:cb:4e:c3:36:da:
                    38:9f:8b:a9:e4:7e:5b:20:c1:00:4a:ef:ba:ba:80:
                    92:aa:42:cc:2a:3a:6b:a0:70:b7:ad:69:8a:aa:b8:
                    e4:bb:2d:ae:6d:d4:55:1a:0d:61:5e:1e:0a:d6:1f:
                    41:a9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                00:72:12:3C:CE:E4:82:0D:29:02:67:07:48:AD:FD:AA:AB:81:13:19
            X509v3 Authority Key Identifier:
                keyid:D9:52:73:68:20:6E:3E:9A:59:24:08:1D:F6:38:80:24:6E:5C:54:1A

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/2VJzaCBuPppZJAgd9jiAJG5cVBo.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d8/82129a-5263-43d2-bc63-19620615579b/1/2VJzaCBuPppZJAgd9jiAJG5cVBo.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/d8/82129a-5263-43d2-bc63-19620615579b/1/2VJzaCBuPppZJAgd9jiAJG5cVBo.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         e8:b5:73:97:98:0d:fd:72:5c:07:af:59:4e:81:63:c7:3d:c1:
         b8:38:af:af:17:e1:19:3a:a0:e0:88:69:f6:1e:14:ae:b5:22:
         d8:68:6b:51:b7:d5:67:13:cb:e9:cb:d7:fa:7e:de:9c:b5:97:
         94:07:f4:c6:14:20:2f:43:1f:1b:21:8a:0c:6d:93:f3:0a:b8:
         10:57:78:75:05:2f:5b:76:39:ff:d2:e9:01:ea:72:a1:9e:3a:
         51:21:1b:dd:35:6f:e2:22:b7:14:db:3c:7e:72:13:27:06:85:
         54:d3:66:62:2b:e2:ec:d3:91:a9:25:5c:8a:ae:c7:c3:32:d5:
         59:55:29:f6:f3:21:5a:e7:01:df:00:3e:d1:04:2c:7b:a1:9c:
         f8:b0:a8:a2:a3:b6:f9:ed:5b:19:3a:4f:18:a8:a6:b5:e9:09:
         9d:9a:75:f8:de:37:54:3b:95:32:0b:e5:87:52:2d:bd:df:3a:
         6d:33:56:df:eb:16:e3:27:ed:60:61:7c:72:17:01:e0:21:e3:
         fc:61:9e:e5:27:3e:5c:0c:69:92:ec:b5:4a:50:a9:1c:28:98:
         19:d6:75:5b:bb:c4:ed:dd:d9:36:3e:07:7c:38:28:c3:ef:63:
         2d:9d:ca:e0:c9:2d:36:f4:06:72:48:a6:a8:ab:3c:cc:13:e8:
         eb:12:bc:96
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----