Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/14/3f9b7d-ab5b-4e99-af47-ef61a614142d/1/8kP46q2E7AkehwanyYZsGt5WXts.mft
File:                     8kP46q2E7AkehwanyYZsGt5WXts.mft (raw, json)
Hash identifier:          6wa8uDyB5TZVfjUrsoLfdPgnNgD/Ep9B4YYNgOmkueY=
Subject key identifier:   48:E4:5E:B6:50:C2:E3:64:00:CA:B6:76:DA:51:B7:8A:03:05:C7:B8
Authority key identifier: F2:43:F8:EA:AD:84:EC:09:1E:87:06:A7:C9:86:6C:1A:DE:56:5E:DB
Certificate issuer:       /CN=f243f8eaad84ec091e8706a7c9866c1ade565edb
Certificate serial:       01962ECFCA7F0427BCBD5A51ACE47590B117
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/8kP46q2E7AkehwanyYZsGt5WXts.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/14/3f9b7d-ab5b-4e99-af47-ef61a614142d/1/8kP46q2E7AkehwanyYZsGt5WXts.mft
Manifest number:          14EB
Signing time:             Sun 13 Apr 2025 11:01:31 +0000
Manifest this update:     Sun 13 Apr 2025 11:01:31 +0000
Manifest next update:     Mon 14 Apr 2025 11:01:31 +0000
Files and hashes:         1: 8kP46q2E7AkehwanyYZsGt5WXts.crl (hash: dsz4y9YqmhN9ajJXAPvAhzHIwpVd1KokPpd+fgswU0I=)
                          2: tZdMpKDB98hJ9pZj681_6AcpB6s.roa (hash: i6o9Pghma18l7gMu2eMNZU5hQVcsb4HmVOsk/64sqkU=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2e:cf:ca:7f:04:27:bc:bd:5a:51:ac:e4:75:90:b1:17
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=f243f8eaad84ec091e8706a7c9866c1ade565edb
        Validity
            Not Before: Apr 13 11:01:31 2025 GMT
            Not After : Apr 14 11:01:31 2025 GMT
        Subject: CN=48e45eb650c2e36400cab676da51b78a0305c7b8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e0:56:e7:07:30:f7:21:35:b3:92:9a:10:bf:e6:
                    c1:34:56:2a:f2:fb:cd:da:f5:04:32:d4:63:86:34:
                    52:aa:56:7a:f4:cb:2a:33:48:25:fb:24:4e:78:7e:
                    95:b8:a4:68:09:50:a7:1f:e4:5f:0e:6f:36:64:b3:
                    1a:32:01:1f:03:c3:44:36:e5:01:5f:57:c3:a7:19:
                    4c:7e:9f:77:28:f2:39:63:b7:d5:bf:14:f6:40:6d:
                    91:94:f4:e4:6e:7f:bb:ba:3e:65:5b:1e:34:45:c3:
                    23:11:ad:38:66:d3:33:68:db:c7:a3:22:87:a7:08:
                    45:d4:bb:76:9b:9c:81:51:1f:0d:4e:09:08:83:c5:
                    06:9a:ad:d5:e1:a4:ec:c9:83:b3:1c:80:14:cd:13:
                    7e:94:b2:13:83:73:76:39:ba:f0:86:81:20:0b:d8:
                    e9:27:ac:cf:62:01:f8:2c:1a:97:79:1c:7a:72:7f:
                    57:fb:fb:b8:7c:92:df:44:1d:5b:5c:d5:d4:01:27:
                    72:40:32:2a:c5:d6:b1:de:ab:9e:86:dd:c3:65:8e:
                    c2:b1:b1:e1:f9:15:2b:5f:6e:7e:b8:2d:df:81:ef:
                    8d:71:b1:e1:30:4a:9b:19:19:93:bb:81:70:36:f5:
                    12:ff:58:4d:bf:a2:34:ca:39:73:df:9c:56:d4:13:
                    da:fd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                48:E4:5E:B6:50:C2:E3:64:00:CA:B6:76:DA:51:B7:8A:03:05:C7:B8
            X509v3 Authority Key Identifier:
                keyid:F2:43:F8:EA:AD:84:EC:09:1E:87:06:A7:C9:86:6C:1A:DE:56:5E:DB

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/8kP46q2E7AkehwanyYZsGt5WXts.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/14/3f9b7d-ab5b-4e99-af47-ef61a614142d/1/8kP46q2E7AkehwanyYZsGt5WXts.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/14/3f9b7d-ab5b-4e99-af47-ef61a614142d/1/8kP46q2E7AkehwanyYZsGt5WXts.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         29:9b:b9:ec:9b:ad:a5:88:a5:14:f2:a5:e0:ee:6e:ee:6b:ba:
         29:42:e7:94:d4:ba:b9:48:50:f9:8a:57:6f:96:ef:84:51:1b:
         05:f9:35:7f:7b:50:99:26:89:b8:06:5d:3d:2f:aa:9e:17:3f:
         9c:57:2b:c4:27:5c:9a:c8:85:e1:a5:78:d8:58:15:5d:16:35:
         f0:5d:a9:86:f7:1f:75:15:99:93:7f:9b:02:3a:07:fc:53:40:
         c1:ca:44:c3:bd:b2:84:59:62:98:74:e3:92:6f:7c:28:e5:6b:
         8f:6d:8f:d0:b8:fb:3f:5c:0a:68:da:a5:12:1b:b9:27:92:a6:
         a7:d5:6b:7a:b3:1e:26:24:4c:47:08:ef:01:2c:f2:fd:92:6a:
         80:fe:b4:1d:7b:ad:06:6e:63:44:2c:99:77:c8:0a:8b:14:8e:
         fb:72:6b:06:3e:4e:a4:0f:6c:57:45:ba:35:f7:05:fd:0a:73:
         da:76:78:18:6f:2f:51:24:27:cd:57:82:0b:27:8d:ae:84:89:
         8b:d0:b7:1d:ce:23:3f:6a:bd:9a:66:25:2c:15:b7:d5:f8:e9:
         0b:89:c0:4c:e3:8a:77:a7:9a:4b:35:ef:3e:63:fd:98:6d:36:
         3e:c6:c5:db:20:2d:fb:d5:ac:85:a6:7b:40:b6:48:f8:e1:f4:
         b1:2d:4d:6d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----