Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/dc/2fa86f-7f4e-4aab-9dfd-1b3d98bef1e9/1/bRULQ4zGj2LcFdNZWTFh95neU68.mft
File:                     bRULQ4zGj2LcFdNZWTFh95neU68.mft (raw, json)
Hash identifier:          tVUGQxaMCNz882azeHBccYb++eFBlA2b3fyhnlLxBw8=
Subject key identifier:   5E:99:67:5A:86:39:D3:EA:5C:3A:D1:14:A7:F9:EF:01:D7:3D:D4:86
Authority key identifier: 6D:15:0B:43:8C:C6:8F:62:DC:15:D3:59:59:31:61:F7:99:DE:53:AF
Certificate issuer:       /CN=6d150b438cc68f62dc15d359593161f799de53af
Certificate serial:       01962E2B45B0A00F812A22B720F9905F9C0E
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/bRULQ4zGj2LcFdNZWTFh95neU68.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/dc/2fa86f-7f4e-4aab-9dfd-1b3d98bef1e9/1/bRULQ4zGj2LcFdNZWTFh95neU68.mft
Manifest number:          14EF
Signing time:             Sun 13 Apr 2025 08:01:49 +0000
Manifest this update:     Sun 13 Apr 2025 08:01:49 +0000
Manifest next update:     Mon 14 Apr 2025 08:01:49 +0000
Files and hashes:         1: bRULQ4zGj2LcFdNZWTFh95neU68.crl (hash: /PD+Yv5j4LApPuhNavI0xYiw8xvrt1NXeCtJp+MA6pU=)
                          2: eOJh9jPF2rg62QTnhjhlK1Lrg1w.roa (hash: r7IjyXmhMKmvdhLF1sofBUJOM+GxOvLawDA1jM5V0lA=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2e:2b:45:b0:a0:0f:81:2a:22:b7:20:f9:90:5f:9c:0e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6d150b438cc68f62dc15d359593161f799de53af
        Validity
            Not Before: Apr 13 08:01:49 2025 GMT
            Not After : Apr 14 08:01:49 2025 GMT
        Subject: CN=5e99675a8639d3ea5c3ad114a7f9ef01d73dd486
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:aa:af:32:2c:13:5c:48:d6:78:f9:9c:39:3f:61:
                    12:74:d1:66:0b:6f:1c:08:37:8e:b2:36:30:b2:78:
                    b9:c3:05:9a:36:ce:87:e9:78:f8:a1:dd:9f:f7:f5:
                    e4:7b:f9:64:dc:07:4a:a3:a3:10:d0:37:90:c0:ef:
                    74:a9:c9:89:be:42:e5:25:fa:7c:e6:9c:bb:35:36:
                    fa:ce:30:f6:31:b1:4e:42:ae:db:d9:8a:f1:61:bc:
                    7d:69:4a:40:94:41:85:13:39:0c:e9:75:f2:23:ea:
                    81:b6:4d:4e:b9:78:dd:f4:b0:54:4d:f1:e6:b4:27:
                    ed:5b:a6:38:8b:4f:78:b5:7d:20:3d:a4:09:17:11:
                    08:d7:a5:59:73:52:b6:2e:b8:b2:6a:86:57:48:bf:
                    c9:5e:f3:8b:5d:9f:be:d3:0e:a1:58:b0:55:ab:c1:
                    3f:c3:cf:ef:5c:a9:1d:5b:92:67:d8:72:c9:91:97:
                    8c:59:46:ee:6e:0a:a1:cd:60:f9:56:0c:7c:73:49:
                    94:70:70:02:f0:b6:56:ce:96:b7:7e:67:60:ca:96:
                    5e:4a:75:6e:08:6b:81:e2:54:ed:77:f0:97:e5:f0:
                    cd:a0:bc:d4:81:b2:4c:a1:40:7b:b9:9c:47:a0:87:
                    ee:de:13:e4:2e:72:54:51:0c:02:21:c4:56:cd:38:
                    1c:a1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5E:99:67:5A:86:39:D3:EA:5C:3A:D1:14:A7:F9:EF:01:D7:3D:D4:86
            X509v3 Authority Key Identifier:
                keyid:6D:15:0B:43:8C:C6:8F:62:DC:15:D3:59:59:31:61:F7:99:DE:53:AF

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/bRULQ4zGj2LcFdNZWTFh95neU68.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/dc/2fa86f-7f4e-4aab-9dfd-1b3d98bef1e9/1/bRULQ4zGj2LcFdNZWTFh95neU68.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/dc/2fa86f-7f4e-4aab-9dfd-1b3d98bef1e9/1/bRULQ4zGj2LcFdNZWTFh95neU68.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         a2:51:6e:64:10:7c:d3:c7:dc:f5:03:c5:81:ff:a6:ce:0d:f8:
         77:5b:ec:12:85:44:8b:7f:88:b2:a1:22:1a:5d:7d:23:8d:3c:
         4b:38:4d:e1:5f:c8:e3:85:bb:01:7c:ee:7d:73:a9:a5:6c:49:
         b1:b7:3f:ce:7d:24:58:c9:a8:5b:7b:2a:b1:01:aa:14:eb:dc:
         00:c4:1c:3f:de:ff:4b:5b:8c:12:20:82:12:1b:51:d9:63:95:
         64:ab:a6:83:55:de:c6:5d:ca:9b:a2:cb:26:1c:1d:78:9a:71:
         63:17:1d:da:50:73:10:89:f6:77:52:35:e1:08:54:77:93:89:
         9f:dc:b3:b2:ac:99:50:ca:bc:f4:e5:20:6c:2d:05:fa:a7:85:
         4a:76:c5:72:4d:ab:6b:e8:9b:14:30:9e:74:22:f1:19:5a:9b:
         a1:3d:12:06:75:0a:9c:4f:d5:05:da:6b:5f:8d:7e:27:f8:53:
         3d:ad:86:62:10:7c:e6:d7:33:70:fd:4d:cb:19:64:9b:bf:fb:
         e5:5a:26:07:8f:3b:f1:d3:a1:c3:f2:c2:50:26:ea:8c:aa:a6:
         09:1a:10:0e:12:e3:78:cc:76:e2:66:60:d7:e1:d7:03:70:13:
         a7:63:29:aa:7c:83:a8:26:b2:fe:27:7d:97:df:70:d5:fd:4c:
         9c:4d:07:21
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----