Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e6/af31ab-2e34-47fb-9611-223a4d94709e/1/syu38vqMQUxnGIvau_t2IVaTuoc.mft
File:                     syu38vqMQUxnGIvau_t2IVaTuoc.mft (raw, json)
Hash identifier:          IKjLfvSj7W/EaMyYd17MtTo0vteapDjk/Zjk0HuuWu0=
Subject key identifier:   3C:CA:EE:8C:C3:64:0A:29:65:A5:9E:E3:D7:A7:3E:C7:EA:61:F7:73
Authority key identifier: B3:2B:B7:F2:FA:8C:41:4C:67:18:8B:DA:BB:FB:76:21:56:93:BA:87
Certificate issuer:       /CN=b32bb7f2fa8c414c67188bdabbfb76215693ba87
Certificate serial:       01962E2B079F4194212C62AAE8CB0096DB9A
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/syu38vqMQUxnGIvau_t2IVaTuoc.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/e6/af31ab-2e34-47fb-9611-223a4d94709e/1/syu38vqMQUxnGIvau_t2IVaTuoc.mft
Manifest number:          02E5
Signing time:             Sun 13 Apr 2025 08:01:34 +0000
Manifest this update:     Sun 13 Apr 2025 08:01:34 +0000
Manifest next update:     Mon 14 Apr 2025 08:01:34 +0000
Files and hashes:         1: dlFU-VFKr3DcjZAchl6XqyqKK5c.roa (hash: neVLf32lP2kuQND5P5wXOeNSgGn0qOcZGwTsUoY1fZs=)
                          2: syu38vqMQUxnGIvau_t2IVaTuoc.crl (hash: uQJKoKXhVVG/nD2yZ/wKEV4EtzhrBdiF1MK77o7JRyU=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2e:2b:07:9f:41:94:21:2c:62:aa:e8:cb:00:96:db:9a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b32bb7f2fa8c414c67188bdabbfb76215693ba87
        Validity
            Not Before: Apr 13 08:01:34 2025 GMT
            Not After : Apr 14 08:01:34 2025 GMT
        Subject: CN=3ccaee8cc3640a2965a59ee3d7a73ec7ea61f773
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d3:aa:33:28:0c:1d:39:e4:0d:5d:f3:ba:42:9c:
                    68:6a:08:cc:6d:52:36:09:fd:1a:a2:82:69:56:ac:
                    4f:9c:34:3f:03:2d:35:e6:c5:b9:b6:88:20:be:64:
                    cf:44:ca:cf:36:d0:83:78:17:02:85:d8:6f:7f:85:
                    4a:b5:5a:a5:f9:95:b4:09:85:25:6f:ba:4e:0d:71:
                    12:56:2e:af:34:6c:e7:2a:02:41:eb:6a:33:15:4f:
                    b9:0b:12:2c:be:40:7d:d4:54:de:7c:55:d9:57:c9:
                    e7:7a:fd:18:1e:15:36:c8:d0:8b:b7:de:1f:68:2c:
                    1c:c9:f4:92:4b:79:cd:89:fc:de:b0:56:52:b2:30:
                    4b:25:4d:fa:4a:9e:a1:7d:0a:85:18:2c:74:d4:0d:
                    89:cd:68:74:ba:fa:d6:de:72:f2:32:ae:d2:15:e7:
                    fc:5a:34:6c:0f:df:d0:ee:ca:4f:00:af:d2:c9:5b:
                    25:5f:3e:1c:a6:e6:d6:f5:8e:34:27:cf:6f:50:38:
                    cc:29:61:39:0b:24:ac:17:5f:fe:f3:d8:94:32:dc:
                    df:bf:b0:26:a4:2e:bd:ab:71:bb:86:f8:8f:0a:a9:
                    8a:22:ad:80:8f:b7:64:2d:9a:35:83:07:5a:76:6c:
                    8a:dc:e2:36:8d:22:45:30:fd:ef:0e:b2:c6:ab:18:
                    b5:15
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3C:CA:EE:8C:C3:64:0A:29:65:A5:9E:E3:D7:A7:3E:C7:EA:61:F7:73
            X509v3 Authority Key Identifier:
                keyid:B3:2B:B7:F2:FA:8C:41:4C:67:18:8B:DA:BB:FB:76:21:56:93:BA:87

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/syu38vqMQUxnGIvau_t2IVaTuoc.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e6/af31ab-2e34-47fb-9611-223a4d94709e/1/syu38vqMQUxnGIvau_t2IVaTuoc.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/e6/af31ab-2e34-47fb-9611-223a4d94709e/1/syu38vqMQUxnGIvau_t2IVaTuoc.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         0c:20:2e:47:97:df:87:88:40:6d:c9:df:80:ef:45:79:ef:70:
         a4:e5:f1:d2:84:e2:ea:11:be:0a:37:54:b8:9e:9e:35:e6:7d:
         b5:15:c5:4e:9b:5b:4c:0f:05:77:97:65:55:63:aa:e6:23:db:
         95:e3:83:8c:85:a4:a0:b9:2f:eb:66:44:12:a8:9f:1b:3f:bf:
         67:a1:97:f0:16:15:99:f0:cf:03:a0:65:fd:32:72:19:4e:4d:
         c7:46:03:de:54:c6:1f:33:28:cf:c6:5a:1e:bb:28:44:d3:e6:
         bf:2d:ab:b7:a2:d0:7c:20:40:c9:4c:4d:2b:40:33:d8:a7:fd:
         85:2f:35:e3:68:28:80:3f:0e:0c:6f:7c:55:d6:94:b1:00:4d:
         b8:e2:36:a2:4d:13:1c:3f:1b:54:de:3a:61:8c:be:17:b6:62:
         e3:d5:39:e5:36:b4:37:0f:24:61:61:83:13:6f:c7:3d:64:cf:
         8d:5e:cd:da:72:8d:6f:f3:5f:38:e4:26:dc:dd:d7:35:70:2d:
         6c:2b:78:ab:01:f0:b2:d4:67:58:7d:85:b5:5a:d0:c4:d9:0f:
         b1:29:a9:d4:96:f8:2d:b0:6b:9c:bd:a6:c8:5d:84:04:40:98:
         31:67:2f:f1:f3:eb:08:1d:29:2b:30:1c:a4:7a:28:e1:3a:08:
         7f:a4:6b:fd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----