Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f1/51608f-fd4b-4268-a6e3-5ecb21fcfa75/1/8l2dskSP6XudF6RL5dZEhI-gGOE.mft
File:                     8l2dskSP6XudF6RL5dZEhI-gGOE.mft (raw, json)
Hash identifier:          hipuveZWxxeHsyFlRFo4y51d5XAAEs0yc6T5gQZ7Dzg=
Subject key identifier:   E6:8C:4E:A0:49:06:A2:6B:29:65:CF:72:21:41:D9:65:DB:F8:F7:A3
Authority key identifier: F2:5D:9D:B2:44:8F:E9:7B:9D:17:A4:4B:E5:D6:44:84:8F:A0:18:E1
Certificate issuer:       /CN=f25d9db2448fe97b9d17a44be5d644848fa018e1
Certificate serial:       01962E61C39402F9E6945B91344760EF8E53
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/8l2dskSP6XudF6RL5dZEhI-gGOE.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/f1/51608f-fd4b-4268-a6e3-5ecb21fcfa75/1/8l2dskSP6XudF6RL5dZEhI-gGOE.mft
Manifest number:          14EB
Signing time:             Sun 13 Apr 2025 09:01:21 +0000
Manifest this update:     Sun 13 Apr 2025 09:01:21 +0000
Manifest next update:     Mon 14 Apr 2025 09:01:21 +0000
Files and hashes:         1: 8l2dskSP6XudF6RL5dZEhI-gGOE.crl (hash: mrnVSmb4/aZTCDTK1vGNE3y8C004T+Yw1jAUJ+TFd4c=)
                          2: Mp26SDBIvgVqZ2UGJotoJUFrQYY.roa (hash: EI7XvBXkkd55hdBHcnfva3vB3xf9LKxoCK2MkhKmBG0=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2e:61:c3:94:02:f9:e6:94:5b:91:34:47:60:ef:8e:53
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=f25d9db2448fe97b9d17a44be5d644848fa018e1
        Validity
            Not Before: Apr 13 09:01:21 2025 GMT
            Not After : Apr 14 09:01:21 2025 GMT
        Subject: CN=e68c4ea04906a26b2965cf722141d965dbf8f7a3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:97:ab:bc:15:26:9c:c7:86:a8:da:f6:4b:ef:91:
                    ea:8c:d2:f8:c8:18:9a:80:16:76:92:a5:fc:cb:59:
                    b5:5a:25:34:df:a4:35:33:d5:2d:12:8c:0e:13:8f:
                    50:6b:db:85:72:78:8a:72:cf:25:01:e0:78:93:36:
                    60:d8:f5:36:2f:4d:9b:93:97:b5:a0:0c:d6:eb:09:
                    3a:ba:3a:3c:63:b4:21:df:ff:8a:fa:27:2f:00:73:
                    21:ef:29:71:75:ce:8f:14:a6:70:e0:29:fb:83:cc:
                    bc:ba:1c:b4:30:4b:73:9a:dc:b2:21:28:12:10:c7:
                    d8:f3:5a:a3:c2:48:da:21:f5:40:d7:76:2e:18:32:
                    f3:4f:3b:65:d5:32:24:49:40:90:42:dd:0b:f0:b9:
                    f9:f2:66:02:f5:29:ea:a4:68:d4:32:91:6c:ea:ca:
                    57:bf:0e:22:3d:56:a6:d8:c9:20:5e:96:34:0e:9c:
                    e7:c4:3d:65:3f:eb:61:e6:a2:ed:ab:02:0f:37:e6:
                    d2:09:c4:c8:bb:fa:4c:c8:88:fa:1a:73:99:54:a1:
                    ec:a6:16:b8:61:09:7d:51:52:31:9f:57:6c:43:0f:
                    3d:a7:ce:4b:31:2f:78:50:15:4f:1e:35:f5:31:06:
                    be:0b:8d:47:72:36:d2:d4:97:31:5a:20:2a:fa:0e:
                    32:29
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E6:8C:4E:A0:49:06:A2:6B:29:65:CF:72:21:41:D9:65:DB:F8:F7:A3
            X509v3 Authority Key Identifier:
                keyid:F2:5D:9D:B2:44:8F:E9:7B:9D:17:A4:4B:E5:D6:44:84:8F:A0:18:E1

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/8l2dskSP6XudF6RL5dZEhI-gGOE.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f1/51608f-fd4b-4268-a6e3-5ecb21fcfa75/1/8l2dskSP6XudF6RL5dZEhI-gGOE.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/f1/51608f-fd4b-4268-a6e3-5ecb21fcfa75/1/8l2dskSP6XudF6RL5dZEhI-gGOE.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         97:01:b8:d1:e9:cd:b1:5c:b4:97:4d:c4:bb:ac:05:42:ff:38:
         67:b7:2a:fd:c0:86:a1:2c:51:2c:76:1f:e8:3b:4f:6b:a2:ae:
         2c:f2:9b:31:86:0c:a3:16:02:4f:90:34:2f:cc:b4:df:54:4b:
         e2:07:af:d0:20:6e:ec:0d:f2:51:e1:29:4c:93:d0:12:bb:67:
         c7:95:81:5d:9c:c0:82:d5:5f:fe:33:dc:2a:48:af:43:4a:36:
         42:50:d6:8c:9a:e6:81:8b:ef:83:ef:0e:77:a2:24:5f:37:82:
         04:6f:03:c5:2b:5c:df:54:56:37:bb:b0:04:9a:20:fe:e3:0d:
         cd:50:ae:5d:d1:c2:74:64:b3:89:fe:d9:ef:01:f4:bb:3e:97:
         ec:ff:cd:00:4a:0c:32:56:f5:13:0d:f2:bb:56:e1:66:2e:bf:
         da:3d:ea:3c:aa:55:da:05:93:e5:e4:46:d3:58:f1:be:dc:41:
         23:ec:b5:5f:d5:94:cb:0b:8a:86:ca:3f:82:14:55:f9:be:38:
         57:66:d2:19:5a:f5:c9:0c:33:20:ce:6c:1d:3b:50:80:1c:71:
         25:69:8c:78:64:8b:fd:77:72:6d:b7:9b:75:51:ef:65:76:04:
         f9:be:cb:4f:75:2a:56:dd:21:ab:e7:55:db:bc:bb:47:51:19:
         d7:7e:fc:68
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----