Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ff/c0d281-d40d-40e0-93ea-5bae375cf85a/1/c2Na428t9PaNPlcqMT4aGKogt1c.mft
File:                     c2Na428t9PaNPlcqMT4aGKogt1c.mft (raw, json)
Hash identifier:          HAnAl+OVvkStN6M1ojAr/I1EPjRB8SrtP1GSRRWoZtY=
Subject key identifier:   51:3A:0D:AB:DC:8D:64:48:A2:1E:A0:DA:DD:A0:F2:E1:5C:30:24:24
Authority key identifier: 73:63:5A:E3:6F:2D:F4:F6:8D:3E:57:2A:31:3E:1A:18:AA:20:B7:57
Certificate issuer:       /CN=73635ae36f2df4f68d3e572a313e1a18aa20b757
Certificate serial:       01962E61AC8E2C1F962EB5E444EA91F0D61D
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/c2Na428t9PaNPlcqMT4aGKogt1c.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/ff/c0d281-d40d-40e0-93ea-5bae375cf85a/1/c2Na428t9PaNPlcqMT4aGKogt1c.mft
Manifest number:          14EC
Signing time:             Sun 13 Apr 2025 09:01:15 +0000
Manifest this update:     Sun 13 Apr 2025 09:01:15 +0000
Manifest next update:     Mon 14 Apr 2025 09:01:15 +0000
Files and hashes:         1: c2Na428t9PaNPlcqMT4aGKogt1c.crl (hash: x2fa4xbOnUtHOmAYWcdUJcKoWSRYQpvpHooUQu+FIc8=)
                          2: itE9wE1JCUjzPQMC17zph5bag1o.roa (hash: 6Zu8xe2ZQ7G9CqeB+rTfVIr8D7nrhuN4O3af8BzjF8E=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2e:61:ac:8e:2c:1f:96:2e:b5:e4:44:ea:91:f0:d6:1d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=73635ae36f2df4f68d3e572a313e1a18aa20b757
        Validity
            Not Before: Apr 13 09:01:15 2025 GMT
            Not After : Apr 14 09:01:15 2025 GMT
        Subject: CN=513a0dabdc8d6448a21ea0dadda0f2e15c302424
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:90:27:bf:87:0a:1b:a3:47:b4:b5:c6:4b:17:cd:
                    d8:3d:a9:43:b3:d4:e3:71:a4:f2:13:0a:01:8b:d3:
                    dc:5a:e1:3a:b3:90:2f:05:e8:eb:fe:72:e4:90:b3:
                    da:64:85:d7:d0:fe:cc:7e:01:6a:a6:96:e0:15:d0:
                    86:c8:58:2c:2b:03:be:0b:fa:bf:14:32:14:5e:da:
                    5c:05:5a:c3:8f:14:9a:60:84:d8:53:c9:21:d8:f1:
                    53:66:6f:a1:47:af:52:10:7a:06:9e:63:de:e8:a5:
                    26:5e:c3:b2:62:4f:08:88:8c:a8:39:86:91:79:14:
                    38:62:15:64:ac:82:97:6b:b2:0a:ce:13:ed:ec:a2:
                    b1:45:83:b4:15:9d:13:1c:13:eb:f2:46:8b:8e:36:
                    f4:f1:38:19:05:12:eb:fd:8d:6c:ae:7d:3f:84:9e:
                    89:9c:24:e0:1c:7e:46:66:4e:5b:5e:68:f7:78:f5:
                    6d:4b:00:b9:ea:08:75:85:b6:2d:67:ea:00:14:9e:
                    77:36:1d:b5:a3:97:fc:32:40:88:a4:50:39:42:d2:
                    fa:db:13:9d:e6:45:fc:69:8e:e2:9f:02:9f:59:20:
                    d5:f3:25:ee:17:c4:f5:03:25:68:09:76:b6:01:4c:
                    7e:a9:7c:a4:3f:e5:4f:45:38:98:50:74:f0:9f:e0:
                    f5:17
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                51:3A:0D:AB:DC:8D:64:48:A2:1E:A0:DA:DD:A0:F2:E1:5C:30:24:24
            X509v3 Authority Key Identifier:
                keyid:73:63:5A:E3:6F:2D:F4:F6:8D:3E:57:2A:31:3E:1A:18:AA:20:B7:57

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/c2Na428t9PaNPlcqMT4aGKogt1c.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ff/c0d281-d40d-40e0-93ea-5bae375cf85a/1/c2Na428t9PaNPlcqMT4aGKogt1c.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/ff/c0d281-d40d-40e0-93ea-5bae375cf85a/1/c2Na428t9PaNPlcqMT4aGKogt1c.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         6a:2c:7b:6c:91:84:a7:99:7c:e5:17:17:11:17:b8:d9:1d:ec:
         20:36:a2:99:3b:4d:4c:95:ee:0d:e9:2b:38:6c:46:91:01:3e:
         7a:db:74:1a:6a:6a:77:89:2d:d4:15:b1:32:d8:6a:ad:57:63:
         99:34:14:b9:63:2e:c3:f8:b0:c4:b2:a3:dd:15:66:ce:4f:e4:
         e8:e5:b7:8f:a0:3c:ae:65:67:95:9a:93:87:52:c5:06:ef:9e:
         d2:ce:40:a2:53:c7:2a:6c:5b:73:3a:2a:3b:f9:56:ab:93:7e:
         5f:34:47:85:c7:cd:1d:16:9a:a0:94:6a:99:17:ea:7e:31:6d:
         f1:dd:8c:df:2d:81:d9:76:e9:7a:8d:1b:65:f7:36:55:4d:44:
         24:6b:03:0a:1e:e7:c8:66:51:18:c2:77:fb:cf:0f:ad:09:04:
         5b:28:43:05:41:38:81:7e:e2:15:af:f1:ec:02:b7:cc:9e:12:
         f7:f3:51:65:8d:f7:94:fa:fe:91:f9:b2:e3:e9:fe:b5:e4:4a:
         1f:48:db:49:1c:28:2d:39:47:c6:94:ae:40:08:f5:9b:8d:2e:
         31:84:cc:38:3d:96:bb:c3:44:c5:b6:f3:bb:0b:ac:4b:8b:b4:
         0d:14:40:2b:9a:2c:f9:1a:c0:64:8c:84:ad:3a:7e:ae:66:49:
         24:b0:9f:47
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----