Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/03/d2bbf6-3b69-442e-b490-7e54c32abed8/1/CFeH5l60_NZuM0C2Kt5HygCRnc4.mft
File:                     CFeH5l60_NZuM0C2Kt5HygCRnc4.mft (raw, json)
Hash identifier:          kFlzvCvPPQ2nyLbolQRvHrBYhIDWFq6mTwEfeVEP4HY=
Subject key identifier:   BA:7C:67:10:41:08:0C:73:FD:71:70:75:FC:2D:08:65:B0:9D:2F:30
Authority key identifier: 08:57:87:E6:5E:B4:FC:D6:6E:33:40:B6:2A:DE:47:CA:00:91:9D:CE
Certificate issuer:       /CN=085787e65eb4fcd66e3340b62ade47ca00919dce
Certificate serial:       01962E9987F3870464DE05649B34A7109E7C
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/CFeH5l60_NZuM0C2Kt5HygCRnc4.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/03/d2bbf6-3b69-442e-b490-7e54c32abed8/1/CFeH5l60_NZuM0C2Kt5HygCRnc4.mft
Manifest number:          045A
Signing time:             Sun 13 Apr 2025 10:02:15 +0000
Manifest this update:     Sun 13 Apr 2025 10:02:15 +0000
Manifest next update:     Mon 14 Apr 2025 10:02:15 +0000
Files and hashes:         1: CFeH5l60_NZuM0C2Kt5HygCRnc4.crl (hash: wCVbgu5aHoHmhn/jGwSNZJnJ0o3sPHTUfRo2aPFl5hU=)
                          2: IZ-nCDCZ_WFPQrV4b51Gvn4a1GU.roa (hash: 1zcxhGAttFQP5ld0bDKnJ/ztckFUeO0GInmPR3RRBiI=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2e:99:87:f3:87:04:64:de:05:64:9b:34:a7:10:9e:7c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=085787e65eb4fcd66e3340b62ade47ca00919dce
        Validity
            Not Before: Apr 13 10:02:15 2025 GMT
            Not After : Apr 14 10:02:15 2025 GMT
        Subject: CN=ba7c671041080c73fd717075fc2d0865b09d2f30
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a0:c2:00:67:c8:12:81:83:e7:25:ee:9a:80:1d:
                    a3:b7:c8:6e:9a:b9:ba:c6:a4:10:7b:d5:fa:86:93:
                    86:d1:d5:2e:73:dc:ff:41:24:9a:9a:ee:95:cc:4c:
                    57:61:b2:71:d7:5d:3a:c9:27:3c:5a:09:9d:92:5a:
                    62:47:71:5f:24:97:00:78:d1:a1:c0:46:d8:8e:64:
                    bb:05:62:59:5e:bb:72:06:ae:72:9c:6f:03:0c:0b:
                    a8:e0:79:de:1b:e6:75:9d:42:58:5a:93:f9:ea:ac:
                    8e:23:cb:93:bb:2b:f0:57:60:86:06:94:ac:26:ef:
                    13:38:6d:6d:27:a0:d3:95:12:0c:dc:64:fe:1f:c4:
                    cf:a9:1e:2c:30:ac:86:b7:cd:36:5e:d8:d0:31:f7:
                    96:13:15:75:76:d1:07:95:d1:86:94:23:c1:93:04:
                    53:39:69:7f:5c:fd:bf:2d:9d:ed:f0:fd:35:ff:f9:
                    f0:45:55:80:c7:73:dc:cd:12:1f:2e:42:7e:59:ee:
                    d1:4e:7b:e0:84:9d:bd:de:c9:d9:17:94:d9:d1:ae:
                    39:af:97:47:5a:a5:d0:71:89:12:f5:91:cf:bc:4e:
                    bc:be:38:f1:14:b7:21:ec:72:c8:47:db:99:3b:0d:
                    15:94:af:9a:0d:38:ab:10:3b:92:e8:08:7a:37:55:
                    a4:03
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BA:7C:67:10:41:08:0C:73:FD:71:70:75:FC:2D:08:65:B0:9D:2F:30
            X509v3 Authority Key Identifier:
                keyid:08:57:87:E6:5E:B4:FC:D6:6E:33:40:B6:2A:DE:47:CA:00:91:9D:CE

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CFeH5l60_NZuM0C2Kt5HygCRnc4.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/03/d2bbf6-3b69-442e-b490-7e54c32abed8/1/CFeH5l60_NZuM0C2Kt5HygCRnc4.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/03/d2bbf6-3b69-442e-b490-7e54c32abed8/1/CFeH5l60_NZuM0C2Kt5HygCRnc4.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         c4:71:05:91:cb:6b:87:82:36:78:a5:23:49:9d:71:29:88:8d:
         b3:f6:5e:f0:e0:bc:7d:04:b1:7d:7b:e0:80:49:b3:47:af:da:
         80:5f:66:96:8c:fa:1b:25:dc:bd:88:2c:66:c6:3f:b4:70:1a:
         0e:a8:08:28:75:d0:a1:11:e9:1e:48:c6:d3:21:b9:f1:4a:70:
         1e:12:d9:51:8f:03:ff:dc:22:4b:3a:9a:73:d5:29:d5:af:e9:
         2d:0f:25:7d:7b:d4:f9:e2:33:fd:4f:10:46:48:76:9e:df:66:
         cd:b2:08:53:7a:de:3a:13:3b:7b:e2:31:53:a8:57:11:00:a0:
         4c:04:24:4d:c2:ba:19:2c:fa:37:d9:bd:9d:2a:ab:63:0a:39:
         4f:9c:a7:2d:de:f9:85:0f:1e:b1:7f:84:55:a6:07:b7:7f:98:
         ab:75:b1:ec:f2:bc:7f:f9:f7:79:d3:7d:a9:7d:aa:83:61:16:
         ad:08:56:2e:6b:7f:37:c7:59:56:a3:a0:28:cd:76:b9:e7:84:
         57:d8:42:35:ed:d3:61:81:20:3e:ea:82:ed:d5:5e:a5:b0:fe:
         ce:27:44:74:2c:0b:3a:11:65:18:b0:53:9f:8a:fb:9b:f6:d2:
         8c:3e:9b:d7:03:bb:52:81:43:be:c4:3d:df:a8:56:2a:63:96:
         02:94:78:ce
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----