Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/dd/1f2c8f-8ed9-4b7e-aa1e-d3c4f5dcbe4c/1/i4r2r1fd_Fx6qCjPIl-Y3OlZBKA.mft
File:                     i4r2r1fd_Fx6qCjPIl-Y3OlZBKA.mft (raw, json)
Hash identifier:          rPJwc4Y8s/jtTQY63bwoZw3oHkj9/6DuFL64iXP0g6E=
Subject key identifier:   BA:63:8A:27:AC:F7:FB:8B:EA:A0:B1:93:47:6B:71:55:02:CE:8A:16
Authority key identifier: 8B:8A:F6:AF:57:DD:FC:5C:7A:A8:28:CF:22:5F:98:DC:E9:59:04:A0
Certificate issuer:       /CN=8b8af6af57ddfc5c7aa828cf225f98dce95904a0
Certificate serial:       01962ECF7CAC52C670927BACDC34EA314E10
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/i4r2r1fd_Fx6qCjPIl-Y3OlZBKA.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/dd/1f2c8f-8ed9-4b7e-aa1e-d3c4f5dcbe4c/1/i4r2r1fd_Fx6qCjPIl-Y3OlZBKA.mft
Manifest number:          07F2
Signing time:             Sun 13 Apr 2025 11:01:11 +0000
Manifest this update:     Sun 13 Apr 2025 11:01:11 +0000
Manifest next update:     Mon 14 Apr 2025 11:01:11 +0000
Files and hashes:         1: i4r2r1fd_Fx6qCjPIl-Y3OlZBKA.crl (hash: +FcoQv+VtTEj7w5SYyKWKxuIh2q6l5JU8rbqSGgImFY=)
                          2: stIrfyQj0_eTZw5LKQkMNxuFxgI.roa (hash: eqwBV8CXGai5haR4OF0T1dC++87tM0y7pi8XDxr8OrQ=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2e:cf:7c:ac:52:c6:70:92:7b:ac:dc:34:ea:31:4e:10
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8b8af6af57ddfc5c7aa828cf225f98dce95904a0
        Validity
            Not Before: Apr 13 11:01:11 2025 GMT
            Not After : Apr 14 11:01:11 2025 GMT
        Subject: CN=ba638a27acf7fb8beaa0b193476b715502ce8a16
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:85:a1:1f:4c:b4:34:db:1a:c8:e3:cc:98:d0:ea:
                    b7:f2:d0:ba:b7:fa:69:2f:f5:34:e9:9e:1a:5a:2f:
                    45:fa:e5:7c:d8:d8:98:40:b4:b7:bc:6a:ad:1a:90:
                    5e:8d:dd:9d:7d:cd:ab:94:d8:52:2f:56:ee:9e:78:
                    b2:b3:f2:a8:01:f0:fa:e4:82:cf:a2:d2:5d:a8:5f:
                    d0:1a:5e:88:bf:25:91:8c:78:c8:9a:45:39:24:f1:
                    05:b0:26:e5:90:bf:be:43:3b:9e:42:94:93:e6:04:
                    df:64:de:d1:a6:e9:8a:1c:f0:5e:84:08:fd:c9:b9:
                    59:84:9c:cd:c5:ca:b1:61:d3:ba:25:14:dd:63:49:
                    b3:00:df:9d:92:68:0b:16:87:4f:68:cb:6a:42:fe:
                    30:6d:45:10:84:83:d0:aa:3b:32:6f:12:d2:7d:87:
                    20:9d:d3:48:0d:3c:b3:02:65:7e:89:19:c1:3b:0e:
                    18:a8:59:67:0e:21:d2:b3:ad:f8:43:8f:8c:fb:35:
                    be:f2:81:19:26:b4:c0:7f:8b:85:6e:ef:73:7d:0a:
                    e5:8e:42:e8:f6:49:6b:2f:45:9d:48:62:ed:63:c6:
                    22:06:91:06:c2:d1:11:6b:e7:68:1a:6e:42:eb:6f:
                    c8:3d:f7:92:2c:a7:43:3c:16:92:44:a3:e6:46:34:
                    57:01
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BA:63:8A:27:AC:F7:FB:8B:EA:A0:B1:93:47:6B:71:55:02:CE:8A:16
            X509v3 Authority Key Identifier:
                keyid:8B:8A:F6:AF:57:DD:FC:5C:7A:A8:28:CF:22:5F:98:DC:E9:59:04:A0

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/i4r2r1fd_Fx6qCjPIl-Y3OlZBKA.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/dd/1f2c8f-8ed9-4b7e-aa1e-d3c4f5dcbe4c/1/i4r2r1fd_Fx6qCjPIl-Y3OlZBKA.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/dd/1f2c8f-8ed9-4b7e-aa1e-d3c4f5dcbe4c/1/i4r2r1fd_Fx6qCjPIl-Y3OlZBKA.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         6b:4e:10:cc:eb:96:94:ef:9b:55:9d:6f:e8:c4:3f:ac:d7:1e:
         04:05:61:40:e1:b4:f6:4e:aa:85:b6:f4:45:9d:36:32:1b:2d:
         a3:ea:65:1e:93:98:69:1b:32:f9:cc:21:c8:0d:71:cf:c6:21:
         c6:18:d8:b6:ca:e9:8f:52:39:44:b9:5f:e9:92:59:0f:1e:12:
         80:66:2a:0d:93:dc:f5:06:af:46:0d:34:ff:a9:19:ec:26:9f:
         03:e0:66:33:c3:87:6f:77:88:b6:72:4f:62:f1:88:fc:d1:f9:
         f5:c2:99:62:64:d4:da:e2:39:70:cd:68:c1:cf:66:df:4a:29:
         b7:57:93:79:e5:8a:6d:3d:32:bb:fe:3c:40:80:33:92:e2:7d:
         81:2c:10:6e:4a:9e:52:8e:ca:e2:22:e9:c0:97:f2:02:3b:58:
         48:f6:75:3c:6d:cd:3b:8c:3d:7d:6b:2a:6f:7c:17:a6:cb:ee:
         80:34:d1:5c:09:23:4d:68:25:5c:fe:44:a1:48:49:32:86:e6:
         b4:e6:a2:6c:8b:b9:65:2d:1c:03:f7:4a:89:89:a8:c7:f2:0d:
         67:85:97:a7:23:c7:2f:18:c5:08:cb:de:ba:d1:20:62:86:2e:
         21:5d:86:81:f1:48:11:72:a3:f1:9f:e9:a2:e6:db:c4:f8:f2:
         ca:1e:7e:bd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----