Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/14/d5daf8-4924-4bec-8518-aefc189fd851/1/SxzcuQuYMgFnSKfiaMwe_yOSYvg.mft
File:                     SxzcuQuYMgFnSKfiaMwe_yOSYvg.mft (raw, json)
Hash identifier:          ul+hmC5iUF07kO+PaQrpHf8MqeuAaTRMvPPJKkzBtwk=
Subject key identifier:   AB:BE:37:12:5B:D0:81:F6:57:B3:A1:C3:6E:FB:7B:A1:1F:09:3D:36
Authority key identifier: 4B:1C:DC:B9:0B:98:32:01:67:48:A7:E2:68:CC:1E:FF:23:92:62:F8
Certificate issuer:       /CN=4b1cdcb90b9832016748a7e268cc1eff239262f8
Certificate serial:       01962E61D57A85A03E1CA57E121DCF6EEE74
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/SxzcuQuYMgFnSKfiaMwe_yOSYvg.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/14/d5daf8-4924-4bec-8518-aefc189fd851/1/SxzcuQuYMgFnSKfiaMwe_yOSYvg.mft
Manifest number:          1226
Signing time:             Sun 13 Apr 2025 09:01:25 +0000
Manifest this update:     Sun 13 Apr 2025 09:01:25 +0000
Manifest next update:     Mon 14 Apr 2025 09:01:25 +0000
Files and hashes:         1: SxzcuQuYMgFnSKfiaMwe_yOSYvg.crl (hash: mBbT+96Xpd/K/1e/fM9qSZLA8HonPs0SeVyaVFramgQ=)
                          2: eiFnEmDTPMfL3dAfRXolzkxp_i4.roa (hash: 4dzfRJYq125S/BqKfHbwTEsWNU4YgfgsuuliSEpx9eU=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2e:61:d5:7a:85:a0:3e:1c:a5:7e:12:1d:cf:6e:ee:74
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4b1cdcb90b9832016748a7e268cc1eff239262f8
        Validity
            Not Before: Apr 13 09:01:25 2025 GMT
            Not After : Apr 14 09:01:25 2025 GMT
        Subject: CN=abbe37125bd081f657b3a1c36efb7ba11f093d36
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c1:a2:1f:fe:8e:69:fc:46:8b:bf:b6:8d:b7:66:
                    b7:f1:b6:fc:7f:1c:4b:22:15:f4:26:d2:5a:1b:85:
                    a6:42:5c:97:56:59:9b:9e:94:ed:8a:42:ca:79:30:
                    77:11:ab:91:ab:85:b4:56:44:93:1e:d7:3e:b3:91:
                    73:08:ca:97:c0:c3:d7:b9:66:a3:79:3c:75:a3:2d:
                    b6:cd:38:75:d8:b6:d5:69:4d:c0:f5:7f:6e:24:69:
                    d7:88:41:79:4e:76:99:05:0f:e7:fa:5f:13:61:f2:
                    75:91:39:a7:db:67:1f:88:cd:10:21:19:4e:07:00:
                    49:08:21:b2:7d:2e:46:3a:3a:fc:dd:f3:2e:73:78:
                    e8:8f:83:c9:3c:ac:9b:14:fa:e5:59:90:a2:c2:fa:
                    b3:5e:f1:79:65:df:dd:07:b5:03:77:3e:cf:e4:79:
                    93:cf:45:9c:cb:79:77:07:7a:b7:d7:67:95:04:80:
                    cd:82:e1:c0:19:4b:fc:86:38:52:48:02:62:52:bb:
                    ad:22:1d:89:5f:c2:aa:d6:71:26:84:9d:57:a2:8f:
                    c2:3a:2c:79:ae:d7:4a:78:4d:9e:e3:81:5d:76:40:
                    01:a0:d2:1c:03:a1:40:fb:43:51:1a:05:09:4c:94:
                    cd:63:44:92:2e:69:ab:07:26:16:4c:b0:59:1d:83:
                    8d:f1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AB:BE:37:12:5B:D0:81:F6:57:B3:A1:C3:6E:FB:7B:A1:1F:09:3D:36
            X509v3 Authority Key Identifier:
                keyid:4B:1C:DC:B9:0B:98:32:01:67:48:A7:E2:68:CC:1E:FF:23:92:62:F8

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/SxzcuQuYMgFnSKfiaMwe_yOSYvg.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/14/d5daf8-4924-4bec-8518-aefc189fd851/1/SxzcuQuYMgFnSKfiaMwe_yOSYvg.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/14/d5daf8-4924-4bec-8518-aefc189fd851/1/SxzcuQuYMgFnSKfiaMwe_yOSYvg.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         7a:3a:63:2c:60:e0:51:bf:ec:06:5f:d8:f6:91:48:8c:08:82:
         10:ba:cb:b3:48:c7:da:93:e6:fe:33:cc:73:63:04:24:b5:23:
         c5:a5:4a:73:07:3f:c8:4d:15:e6:5e:97:fc:b7:21:c4:95:cf:
         41:bf:44:03:5e:bc:a1:3e:f9:fb:f1:69:a5:d8:ad:55:76:ee:
         84:fc:3a:3e:2c:5b:c0:66:03:4f:8c:52:28:90:e7:1d:18:b7:
         fd:b3:6d:a5:4d:4f:80:fb:cc:8b:0a:6f:08:81:1b:42:ce:6c:
         4d:ee:5a:76:e5:06:8e:2d:b3:c3:96:d4:59:60:07:7b:dd:9c:
         6d:98:34:ff:09:45:d4:0a:c4:f8:b6:88:0b:d2:47:4a:97:62:
         7b:59:53:e4:cd:f1:48:64:d6:0e:ed:48:e7:d5:38:1a:9e:0c:
         44:3a:5f:90:53:7f:17:a2:a0:33:13:3b:a7:ac:7d:54:82:b0:
         e1:ad:2f:f4:7e:8a:b2:23:ef:f2:f1:64:a9:a1:ba:c4:24:c3:
         34:c1:72:c1:0b:5e:7d:ca:5f:91:f9:69:83:e6:92:f2:db:26:
         f7:91:ff:59:0d:a8:db:dd:5f:be:e6:23:25:e9:44:d6:ed:df:
         80:13:a7:b0:df:dc:e1:69:6c:8d:e2:24:25:b4:e0:2d:75:5d:
         f1:35:5d:44
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----