Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e4/b06956-e733-4564-9781-d0c4c86bb5fe/1/st8cE314lMzbp2jOuXHE099Z_pY.mft
File:                     st8cE314lMzbp2jOuXHE099Z_pY.mft (raw, json)
Hash identifier:          lXTShYifm0aR0U7vdg81TzHecoNZu44a7E4IvwUzMRQ=
Subject key identifier:   FF:18:FF:86:65:BA:E0:30:3E:9B:6F:C6:D6:61:B1:81:E3:D1:C6:4C
Authority key identifier: B2:DF:1C:13:7D:78:94:CC:DB:A7:68:CE:B9:71:C4:D3:DF:59:FE:96
Certificate issuer:       /CN=b2df1c137d7894ccdba768ceb971c4d3df59fe96
Certificate serial:       01962FAB8CBD25B49FBC2C2018FF3122B50F
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/st8cE314lMzbp2jOuXHE099Z_pY.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/e4/b06956-e733-4564-9781-d0c4c86bb5fe/1/st8cE314lMzbp2jOuXHE099Z_pY.mft
Manifest number:          14ED
Signing time:             Sun 13 Apr 2025 15:01:33 +0000
Manifest this update:     Sun 13 Apr 2025 15:01:33 +0000
Manifest next update:     Mon 14 Apr 2025 15:01:33 +0000
Files and hashes:         1: st8cE314lMzbp2jOuXHE099Z_pY.crl (hash: ND22+43fK/ILu+YGGh3wcMXd47QkUFpoUAQW4b4wVio=)
                          2: utentqqy5GUX6xjOO70Zx55fsK0.roa (hash: Z4JeWyzB0L9+u00qmx46AQ9h8ajUGAFCIAhK67ja97c=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2f:ab:8c:bd:25:b4:9f:bc:2c:20:18:ff:31:22:b5:0f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b2df1c137d7894ccdba768ceb971c4d3df59fe96
        Validity
            Not Before: Apr 13 15:01:33 2025 GMT
            Not After : Apr 14 15:01:33 2025 GMT
        Subject: CN=ff18ff8665bae0303e9b6fc6d661b181e3d1c64c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a1:ee:80:60:79:a4:bf:91:31:d4:c8:86:cf:d1:
                    b2:0c:da:22:e1:28:d4:a8:08:8b:ac:41:87:fb:9c:
                    b5:89:9c:d4:57:18:0d:c8:e3:9b:b6:00:8f:73:6f:
                    c2:f7:e2:75:1f:91:20:a3:fd:88:de:2d:42:ea:75:
                    e0:dd:50:2a:a7:33:66:86:7b:49:98:3d:40:c3:ab:
                    86:af:be:5e:53:1d:55:bf:58:4e:77:0f:34:08:fd:
                    78:48:07:18:2f:55:ba:c0:ab:d4:1b:ec:1e:5e:da:
                    8e:42:aa:8e:3e:88:a3:c2:c3:2d:a6:c2:17:1b:b8:
                    85:28:40:f0:00:a0:41:97:1c:44:4a:65:b7:28:7a:
                    e1:43:7c:2e:32:df:c8:d6:17:f1:f1:82:85:8c:72:
                    4e:28:56:b6:81:7c:96:ea:ea:de:57:84:cc:85:5b:
                    31:e8:87:a6:b1:70:ac:21:04:87:7d:66:48:ea:de:
                    9f:21:61:c3:1b:d7:1b:50:79:95:b7:2a:a1:5b:73:
                    52:f6:ac:e9:ab:82:04:6c:46:00:53:a6:a1:8d:22:
                    09:43:e3:ad:e0:07:00:b2:84:85:2d:44:1b:1d:ef:
                    ec:a2:62:43:fe:06:aa:1b:29:58:2c:c1:d6:b4:1c:
                    1e:fe:d9:15:46:34:37:5e:14:1d:c3:72:b3:ee:0b:
                    ac:d1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FF:18:FF:86:65:BA:E0:30:3E:9B:6F:C6:D6:61:B1:81:E3:D1:C6:4C
            X509v3 Authority Key Identifier:
                keyid:B2:DF:1C:13:7D:78:94:CC:DB:A7:68:CE:B9:71:C4:D3:DF:59:FE:96

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/st8cE314lMzbp2jOuXHE099Z_pY.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e4/b06956-e733-4564-9781-d0c4c86bb5fe/1/st8cE314lMzbp2jOuXHE099Z_pY.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/e4/b06956-e733-4564-9781-d0c4c86bb5fe/1/st8cE314lMzbp2jOuXHE099Z_pY.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         52:8c:b3:3c:13:6a:e9:10:23:16:44:f9:e5:ca:36:eb:a1:e3:
         69:de:e6:2b:6e:90:2b:d7:09:90:61:0c:40:ba:c8:81:90:81:
         5e:57:41:3d:59:21:c2:1e:b2:c4:e3:97:a4:37:ff:f6:54:fc:
         d9:9b:3e:9a:eb:ad:74:c6:78:3a:93:93:15:53:22:b3:37:50:
         92:d1:56:fb:a1:5d:13:9c:8d:ad:2c:63:02:c2:91:32:2d:b8:
         ac:3f:5d:7f:69:da:bc:50:f1:c8:fd:9d:c6:4b:b6:48:c3:f7:
         27:c0:f4:db:0c:77:a0:a0:ff:db:cf:a5:ef:7b:47:3b:ec:90:
         2d:fe:9c:1c:bf:a3:e9:df:4e:6b:8a:45:6b:6a:a8:b4:56:60:
         0d:a6:62:dc:72:e4:25:7e:53:c3:5c:ec:9d:ff:60:fd:7b:3d:
         2b:6b:81:db:51:43:50:f6:61:74:3c:0f:ef:49:48:8f:1d:d9:
         7d:97:e0:83:c2:ea:f9:8a:11:60:a0:26:3a:36:54:24:dc:21:
         15:5d:64:cb:b6:65:b8:b8:ee:58:7b:c6:51:7f:e8:90:ba:7d:
         31:b7:55:a8:cb:aa:9e:72:21:e4:80:bf:76:ea:13:e3:37:5d:
         8d:8d:37:9f:f9:7c:52:9b:68:ee:8c:9f:7a:61:71:16:f9:fe:
         4c:80:8f:7e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----