Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/04/051035-200d-41e8-adf1-d33f08f3a48d/1/4hEKzOM6yFARyowi0gAWZuRbk3c.mft
File:                     4hEKzOM6yFARyowi0gAWZuRbk3c.mft (raw, json)
Hash identifier:          zGbUXFGXszyDQcYHg0mYmN8fNEnCfr+6fHHsD5i/MwU=
Subject key identifier:   4B:2C:51:A3:08:45:13:AD:86:39:A1:F8:36:95:67:E7:8E:13:96:47
Authority key identifier: E2:11:0A:CC:E3:3A:C8:50:11:CA:8C:22:D2:00:16:66:E4:5B:93:77
Certificate issuer:       /CN=e2110acce33ac85011ca8c22d2001666e45b9377
Certificate serial:       01962F0695307D8AD0B4CD24C92EE79A7FAB
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/4hEKzOM6yFARyowi0gAWZuRbk3c.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/04/051035-200d-41e8-adf1-d33f08f3a48d/1/4hEKzOM6yFARyowi0gAWZuRbk3c.mft
Manifest number:          14F2
Signing time:             Sun 13 Apr 2025 12:01:22 +0000
Manifest this update:     Sun 13 Apr 2025 12:01:22 +0000
Manifest next update:     Mon 14 Apr 2025 12:01:22 +0000
Files and hashes:         1: 4hEKzOM6yFARyowi0gAWZuRbk3c.crl (hash: fRb/1wJvKYxAHs5amzhJ05TQjv1v1DUHUC7LnADWalw=)
                          2: 5A2wLed6xy4LK7jvkiIkYMXSVEw.roa (hash: eL5G+05NzxZ+JGYnXx8r5lFHlGHbv8UGaYg9EhNH504=)
                          3: EeuiVBHDBppbMbvhnK9cVO-GWuY.roa (hash: RibVRzvF2zG1KnABcO1H1cwM+0LZwhWIJrVmfB+N9ZY=)
                          4: JMkLxoa9gyb522lPudXUln-VtH8.roa (hash: HGRLs3/3xdKBB32Jm7MzBkeAQwnme0p6aKkTVOkrnLU=)
                          5: UdT52qeUwfKz4cUKsNmdkQLdPTw.roa (hash: Kck1eebPn1LOtIjWwJSFOCY1FX3byBpP9hqNzAg6lBY=)
                          6: feh72HR-_mrzGLz7VSpEFnXqaJo.roa (hash: LwnQ+vMA051C/u4c2Kzemun4LSgaDWuT73rcQZC4pSM=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2f:06:95:30:7d:8a:d0:b4:cd:24:c9:2e:e7:9a:7f:ab
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e2110acce33ac85011ca8c22d2001666e45b9377
        Validity
            Not Before: Apr 13 12:01:22 2025 GMT
            Not After : Apr 14 12:01:22 2025 GMT
        Subject: CN=4b2c51a3084513ad8639a1f8369567e78e139647
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c1:3c:80:56:5a:49:b5:36:4c:f0:51:91:7c:56:
                    f7:e9:94:f3:ec:3f:38:d3:30:a3:d9:12:58:5e:19:
                    05:d8:71:ad:0d:2e:a7:47:27:ed:27:14:b7:a0:ba:
                    77:e1:29:d2:49:d9:52:92:e5:a7:ff:95:15:67:c2:
                    f1:9a:a7:ff:a4:e4:3d:d8:32:4f:45:b3:9f:35:dc:
                    1c:40:41:59:39:88:f0:8e:cc:53:5c:e7:f1:03:42:
                    8b:a7:13:99:0f:37:fd:47:b7:76:c6:2c:59:76:96:
                    3a:fe:5e:5d:fc:8e:cf:6c:22:7b:4c:8a:ae:1a:e4:
                    f2:46:12:5d:5e:da:e3:da:4c:60:6a:d1:3a:17:89:
                    31:dc:95:b7:8b:89:cd:ca:b0:b6:ed:1a:c6:7c:4c:
                    5a:fd:11:e1:50:b1:00:f8:8c:d8:15:bc:7b:c4:84:
                    24:8b:17:51:0e:33:35:98:7d:c1:fd:24:89:49:73:
                    60:e1:6c:c9:00:b2:4b:5f:ee:17:e2:af:0f:82:40:
                    f3:80:75:24:85:eb:d7:2e:4e:51:31:a4:4a:0a:3c:
                    65:ad:6f:67:bb:cd:b9:6b:36:2a:84:29:b1:08:bb:
                    e6:86:08:79:90:97:b3:e9:1e:c5:ec:c7:50:45:3a:
                    0b:9f:f8:5c:5b:70:f4:cd:c1:8b:60:f4:8d:1d:0c:
                    47:ff
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4B:2C:51:A3:08:45:13:AD:86:39:A1:F8:36:95:67:E7:8E:13:96:47
            X509v3 Authority Key Identifier:
                keyid:E2:11:0A:CC:E3:3A:C8:50:11:CA:8C:22:D2:00:16:66:E4:5B:93:77

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/4hEKzOM6yFARyowi0gAWZuRbk3c.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/04/051035-200d-41e8-adf1-d33f08f3a48d/1/4hEKzOM6yFARyowi0gAWZuRbk3c.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/04/051035-200d-41e8-adf1-d33f08f3a48d/1/4hEKzOM6yFARyowi0gAWZuRbk3c.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         07:6f:0b:ff:80:6b:97:20:0d:ba:93:75:e8:15:bc:26:8d:92:
         db:f1:a1:7d:a8:63:03:0a:d3:e3:ee:13:33:30:07:0b:f0:55:
         ee:12:0d:5a:b7:c9:37:0a:23:a3:5c:4a:d4:73:af:c6:f3:01:
         31:e3:d7:7f:f2:ec:37:54:ee:62:54:59:fa:6c:1d:3b:37:b8:
         f6:d9:3d:34:47:7b:88:ca:47:2c:96:28:62:dd:0e:6d:b4:bc:
         0d:ec:14:c5:81:2f:d7:0d:f0:cd:95:9e:7c:3c:22:78:60:ec:
         f2:58:a2:4c:dc:24:5f:f9:9c:0d:c3:e3:5b:c9:e5:9b:44:e5:
         4f:15:d0:f0:be:94:d7:b6:89:9c:05:52:46:fc:da:9d:a7:29:
         61:1d:5b:9a:7d:2b:41:b2:72:f7:4c:f4:4a:1a:04:2a:5d:39:
         18:08:df:30:bf:5f:3d:b5:f8:68:43:bb:13:00:c2:87:df:c7:
         e0:36:d4:83:f4:89:b6:4f:ff:c9:68:8d:49:76:3b:c9:f0:b3:
         7f:c6:7e:2c:18:07:ec:62:10:a3:8a:74:3a:4a:96:91:04:b1:
         91:88:9a:44:7a:87:15:7d:2c:7d:7f:d8:ef:85:7f:ad:da:e2:
         e7:5f:05:2a:8a:b7:08:4b:52:7c:09:af:bf:0b:10:6f:f2:cb:
         33:be:e3:5c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----