Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fe/2aa44d-3bf3-420b-ae3e-e8a6a14419d9/1/rLg4XQhXCAz8ATqlIb3mo6k-SBI.mft
File:                     rLg4XQhXCAz8ATqlIb3mo6k-SBI.mft (raw, json)
Hash identifier:          dEBrDtDGl5/4e9bGO7fxky0lx9GbtrrA3enHIFnRpO8=
Subject key identifier:   3C:21:1B:F4:F6:19:96:88:C4:8F:2F:07:25:C2:2D:40:C2:73:E5:52
Authority key identifier: AC:B8:38:5D:08:57:08:0C:FC:01:3A:A5:21:BD:E6:A3:A9:3E:48:12
Certificate issuer:       /CN=acb8385d0857080cfc013aa521bde6a3a93e4812
Certificate serial:       01962DF469336C4B58B738C707545BEBF182
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/rLg4XQhXCAz8ATqlIb3mo6k-SBI.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/fe/2aa44d-3bf3-420b-ae3e-e8a6a14419d9/1/rLg4XQhXCAz8ATqlIb3mo6k-SBI.mft
Manifest number:          019A
Signing time:             Sun 13 Apr 2025 07:01:54 +0000
Manifest this update:     Sun 13 Apr 2025 07:01:54 +0000
Manifest next update:     Mon 14 Apr 2025 07:01:54 +0000
Files and hashes:         1: rLg4XQhXCAz8ATqlIb3mo6k-SBI.crl (hash: usau2bvEU1xipJow4QeSfSDZ99aIc2+GBiZxswFWzwA=)
                          2: ymqELlMii23trp9Ry-AEB-L5Gsg.roa (hash: bg95RMRsGjw0+vtsFPQKv+EI6I0p/reBLLmPNmAd/+I=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2d:f4:69:33:6c:4b:58:b7:38:c7:07:54:5b:eb:f1:82
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=acb8385d0857080cfc013aa521bde6a3a93e4812
        Validity
            Not Before: Apr 13 07:01:54 2025 GMT
            Not After : Apr 14 07:01:54 2025 GMT
        Subject: CN=3c211bf4f6199688c48f2f0725c22d40c273e552
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ba:eb:bd:5b:df:8a:c5:78:a1:46:94:3e:d4:3e:
                    c4:91:d9:de:f1:05:90:66:d6:55:da:ec:39:d3:2a:
                    5c:c0:3a:9e:03:29:d2:bf:05:19:80:89:ce:59:72:
                    fc:e8:99:ba:df:39:6c:cf:96:23:3a:b7:1e:92:65:
                    eb:4e:e1:57:40:39:28:6a:a2:8a:ef:65:e2:27:f0:
                    d7:ef:f3:60:7a:bd:38:9e:61:e8:bd:e4:2b:3b:27:
                    16:a6:14:cb:01:18:55:4a:0c:98:99:18:dd:84:a4:
                    bf:0c:3f:82:d4:ce:de:8f:99:47:d8:fe:25:c2:c4:
                    25:94:ec:57:37:52:4e:80:ef:87:da:82:45:74:65:
                    fe:54:f6:92:4b:b9:84:a5:58:dd:f3:c6:7d:b3:fb:
                    2b:31:d9:a5:50:de:56:3d:bd:54:fd:49:41:32:d3:
                    22:67:6e:39:4b:be:de:7a:be:9c:d8:1b:da:fc:69:
                    1d:0c:3a:db:35:c5:a9:e6:41:fa:e8:e0:53:48:56:
                    4b:51:f0:20:4a:27:e3:60:af:be:d3:6d:58:89:40:
                    af:a1:a9:29:d6:ff:bf:d1:cf:df:c0:12:da:eb:75:
                    97:70:61:2e:11:49:f5:24:ab:aa:3b:51:0b:3c:5f:
                    2c:64:c2:5c:68:5c:6a:4a:97:f2:7f:83:ea:64:3f:
                    3c:61
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3C:21:1B:F4:F6:19:96:88:C4:8F:2F:07:25:C2:2D:40:C2:73:E5:52
            X509v3 Authority Key Identifier:
                keyid:AC:B8:38:5D:08:57:08:0C:FC:01:3A:A5:21:BD:E6:A3:A9:3E:48:12

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/rLg4XQhXCAz8ATqlIb3mo6k-SBI.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fe/2aa44d-3bf3-420b-ae3e-e8a6a14419d9/1/rLg4XQhXCAz8ATqlIb3mo6k-SBI.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/fe/2aa44d-3bf3-420b-ae3e-e8a6a14419d9/1/rLg4XQhXCAz8ATqlIb3mo6k-SBI.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         97:85:2f:e0:0b:cd:23:3d:69:99:fd:61:40:ae:07:35:57:7e:
         fd:95:d5:41:88:92:18:22:30:d9:57:dc:b3:59:08:bc:45:e8:
         45:c7:31:de:07:20:99:d3:1c:12:34:1b:19:41:4c:7d:e5:ec:
         db:6d:05:15:bc:40:f6:fb:b8:c1:4c:b4:8a:ea:36:a6:43:e1:
         69:7b:7b:83:7c:2f:a7:68:1d:af:da:06:2b:4f:d0:2e:00:cb:
         c9:24:3e:80:a0:44:6c:50:2d:30:19:c7:4f:84:95:15:da:b9:
         56:a4:19:a6:be:33:5c:26:f9:01:93:0a:9f:c2:0d:76:64:e8:
         76:a5:b5:dc:06:8e:21:5f:aa:73:cd:da:5e:f0:ed:5b:44:13:
         4b:43:ec:1f:74:d9:28:1c:2f:b8:3f:ac:5e:59:5a:bc:03:12:
         17:0c:bd:ec:a3:9d:5a:80:99:b1:36:b4:1d:23:fa:fa:e9:9d:
         49:d9:c8:8a:8b:11:1a:01:5b:a8:fe:5b:92:2a:8e:1e:e2:29:
         f4:c4:67:7c:8e:24:6d:48:ae:17:e8:64:27:ee:bb:33:62:a6:
         0a:eb:0e:92:5f:a4:c9:6c:b3:ff:39:6a:35:9c:55:84:4d:ac:
         a9:c6:59:a6:64:48:5d:ad:2b:ca:7c:d2:71:50:e9:0b:5f:74:
         77:47:1f:34
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----