Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ff/cfa0b5-e1a1-41ff-88cb-029715de4c6f/1/AhfGZs2iPpINFLkK6TY3EzUKrB4.mft
File:                     AhfGZs2iPpINFLkK6TY3EzUKrB4.mft (raw, json)
Hash identifier:          WdjNPQBAx/QouiGVmeYWC20gKSVC+DD5uvOPWbFILpo=
Subject key identifier:   0D:56:A2:D1:79:B6:AB:49:D3:E2:9B:6B:06:84:BB:B8:21:0B:6B:D9
Authority key identifier: 02:17:C6:66:CD:A2:3E:92:0D:14:B9:0A:E9:36:37:13:35:0A:AC:1E
Certificate issuer:       /CN=0217c666cda23e920d14b90ae9363713350aac1e
Certificate serial:       01962F746A13930FFFB26724D4C273D44130
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/AhfGZs2iPpINFLkK6TY3EzUKrB4.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/ff/cfa0b5-e1a1-41ff-88cb-029715de4c6f/1/AhfGZs2iPpINFLkK6TY3EzUKrB4.mft
Manifest number:          14EA
Signing time:             Sun 13 Apr 2025 14:01:20 +0000
Manifest this update:     Sun 13 Apr 2025 14:01:20 +0000
Manifest next update:     Mon 14 Apr 2025 14:01:20 +0000
Files and hashes:         1: AhfGZs2iPpINFLkK6TY3EzUKrB4.crl (hash: 8pWj1OFtjEG05VxZ7UvxumzzT1v8dX2BB5gaVl/2vhQ=)
                          2: osyzbtU7GZmaeY_CNmdQy5Vz8jw.roa (hash: /Wf83f8E6EuxQUr3auZsag/VGfFdi1UD8Jonkresr4U=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2f:74:6a:13:93:0f:ff:b2:67:24:d4:c2:73:d4:41:30
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0217c666cda23e920d14b90ae9363713350aac1e
        Validity
            Not Before: Apr 13 14:01:20 2025 GMT
            Not After : Apr 14 14:01:20 2025 GMT
        Subject: CN=0d56a2d179b6ab49d3e29b6b0684bbb8210b6bd9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b5:11:d3:fa:a7:5c:97:32:a7:3a:1b:e9:92:d5:
                    d0:57:34:f7:10:49:83:ba:2e:8d:13:ac:0d:ac:82:
                    95:c4:1b:8b:99:03:29:ef:48:21:64:8a:34:db:3e:
                    be:50:99:96:f5:2b:d4:6b:c4:4a:a5:3d:1a:c5:fa:
                    fd:89:4f:7e:87:85:58:9b:48:ec:0a:cf:1a:cc:11:
                    55:d5:50:63:3b:ec:e8:2c:81:d9:23:f5:78:fd:a1:
                    eb:4a:49:47:54:06:b6:c4:52:d8:85:3f:18:ba:08:
                    8f:7a:19:78:fd:30:05:10:4c:b2:ee:19:08:f9:ed:
                    5a:28:44:ff:19:1e:82:48:ba:6a:eb:4d:28:ce:61:
                    10:f8:b2:ce:d7:09:ab:65:11:4a:e9:d3:30:d0:8e:
                    ae:e8:9d:6d:6b:0e:bc:e4:0f:06:47:07:b4:b4:84:
                    b3:e8:55:0d:32:67:b4:39:f1:cc:fa:8d:4b:50:19:
                    89:09:d7:31:99:d7:1f:25:e0:24:05:96:c6:8f:3a:
                    e4:5f:bc:57:64:da:4d:bc:26:37:7b:da:ef:06:d4:
                    25:ea:ae:5d:27:21:68:fa:59:ba:cf:33:7d:a0:75:
                    a3:97:63:5e:be:55:37:e8:43:d3:a8:04:ee:37:bb:
                    48:e6:8b:49:e0:a3:90:8c:13:ef:23:82:52:9a:47:
                    11:d5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0D:56:A2:D1:79:B6:AB:49:D3:E2:9B:6B:06:84:BB:B8:21:0B:6B:D9
            X509v3 Authority Key Identifier:
                keyid:02:17:C6:66:CD:A2:3E:92:0D:14:B9:0A:E9:36:37:13:35:0A:AC:1E

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/AhfGZs2iPpINFLkK6TY3EzUKrB4.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ff/cfa0b5-e1a1-41ff-88cb-029715de4c6f/1/AhfGZs2iPpINFLkK6TY3EzUKrB4.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/ff/cfa0b5-e1a1-41ff-88cb-029715de4c6f/1/AhfGZs2iPpINFLkK6TY3EzUKrB4.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         7e:e4:51:cb:d7:1b:84:6c:2e:a0:1b:1b:50:5d:07:5b:ca:31:
         a5:9a:ae:1c:ea:54:8c:9d:96:1f:88:94:ed:3e:5b:6f:99:c5:
         67:d7:58:af:c1:75:c7:bc:c6:10:a9:74:49:d2:72:62:f3:39:
         87:82:fd:cf:18:61:de:32:07:eb:ae:d5:99:96:8a:25:99:c9:
         56:c1:89:d3:45:78:ee:ee:bc:ce:4f:88:49:c9:b1:6d:02:43:
         5c:de:57:16:2e:7b:aa:e6:28:de:63:7b:68:4d:45:30:a3:6c:
         64:42:19:b4:61:15:09:e6:73:dc:c5:3c:01:4e:2f:de:f5:d9:
         ad:c9:f4:40:41:a8:6f:b8:e1:be:9a:7b:63:26:b5:3a:4b:35:
         05:e1:04:4e:fc:c5:12:fd:c7:c1:19:4c:cb:26:ac:fc:5f:8e:
         dd:c5:23:e4:e6:f5:a8:80:38:f6:c8:aa:e2:e7:6c:0c:2c:60:
         42:c6:8b:d1:25:4e:3d:bd:43:1d:bf:c5:3b:03:c3:45:e6:30:
         5b:b5:41:d7:6d:0c:97:fe:61:6f:44:88:d5:0c:66:a0:35:7b:
         98:3c:3b:9a:e9:aa:fb:ee:39:07:1e:59:8e:c2:dd:b1:80:57:
         50:e1:9f:c2:68:45:88:1f:3f:37:88:c0:ff:7e:36:47:4d:4d:
         5a:2b:38:77
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----