Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/21/b6468d-10ed-4d48-803c-ea97665c13df/1/4oNEKXdeZVXldCSSKGJUsdqfGQM.mft
File:                     4oNEKXdeZVXldCSSKGJUsdqfGQM.mft (raw, json)
Hash identifier:          DsJhYgCNb3sl76+psWIASOWzlpE4MG3jf0lSMHu+exw=
Subject key identifier:   09:13:47:2E:65:29:DB:02:FE:36:E8:CF:B0:F6:AB:01:F4:72:18:DA
Authority key identifier: E2:83:44:29:77:5E:65:55:E5:74:24:92:28:62:54:B1:DA:9F:19:03
Certificate issuer:       /CN=e2834429775e6555e5742492286254b1da9f1903
Certificate serial:       01962DF3F5A8BA840BD26E4B82D7FB20FC18
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/4oNEKXdeZVXldCSSKGJUsdqfGQM.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/21/b6468d-10ed-4d48-803c-ea97665c13df/1/4oNEKXdeZVXldCSSKGJUsdqfGQM.mft
Manifest number:          0DA4
Signing time:             Sun 13 Apr 2025 07:01:24 +0000
Manifest this update:     Sun 13 Apr 2025 07:01:24 +0000
Manifest next update:     Mon 14 Apr 2025 07:01:24 +0000
Files and hashes:         1: 4oNEKXdeZVXldCSSKGJUsdqfGQM.crl (hash: OiE/q8PymUWgIf8euj7Ncs+eTRlGhc4kPGMr6uVn5Vc=)
                          2: ZTmydTpXIXh_aFM6lIMP1nPGi4M.roa (hash: R6dO91YPQTwtwZipE8GfozYF7WvWuk+GMp9DghrSYmY=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2d:f3:f5:a8:ba:84:0b:d2:6e:4b:82:d7:fb:20:fc:18
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e2834429775e6555e5742492286254b1da9f1903
        Validity
            Not Before: Apr 13 07:01:24 2025 GMT
            Not After : Apr 14 07:01:24 2025 GMT
        Subject: CN=0913472e6529db02fe36e8cfb0f6ab01f47218da
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b6:92:75:08:81:65:20:b8:a6:23:7f:3f:6e:ff:
                    20:c8:3d:c2:51:67:fa:96:00:3d:b0:12:30:f0:23:
                    a6:17:4e:57:01:df:9a:90:74:d8:2e:05:94:fa:75:
                    ce:0b:ce:03:72:5a:36:b1:1f:11:cb:58:12:16:80:
                    61:4c:02:58:75:9f:81:13:3c:54:48:41:6b:9f:e5:
                    4f:56:12:57:db:ae:69:14:0c:fe:65:7f:4c:8d:8c:
                    68:11:55:86:8a:d8:32:91:c4:93:9d:e4:7d:3b:f1:
                    52:e0:78:3f:75:bd:ec:a4:88:cf:99:d3:0c:90:47:
                    b3:2b:c9:1c:e5:32:52:de:c0:59:48:a3:e4:8f:22:
                    74:89:3e:c7:f8:ed:15:85:27:2f:2e:43:e5:65:d4:
                    d9:35:dd:98:0b:c6:62:4c:a2:5b:bd:75:65:ce:d7:
                    cc:62:dd:4a:f9:7b:cd:f5:b9:cc:1b:ba:f6:39:5d:
                    0e:1a:c8:5d:cb:1c:dd:a3:10:42:15:de:5b:78:a8:
                    7f:ac:1c:ef:b8:e3:85:e5:5d:21:1d:05:6d:04:88:
                    65:5e:eb:82:5e:10:e6:67:4c:16:2e:77:f6:2f:74:
                    1b:6b:a8:f7:4c:c9:06:09:e9:3d:2a:a4:08:0f:c5:
                    c7:92:32:1b:87:df:60:12:08:6a:d2:71:2c:e0:a3:
                    ca:6b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                09:13:47:2E:65:29:DB:02:FE:36:E8:CF:B0:F6:AB:01:F4:72:18:DA
            X509v3 Authority Key Identifier:
                keyid:E2:83:44:29:77:5E:65:55:E5:74:24:92:28:62:54:B1:DA:9F:19:03

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/4oNEKXdeZVXldCSSKGJUsdqfGQM.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/21/b6468d-10ed-4d48-803c-ea97665c13df/1/4oNEKXdeZVXldCSSKGJUsdqfGQM.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/21/b6468d-10ed-4d48-803c-ea97665c13df/1/4oNEKXdeZVXldCSSKGJUsdqfGQM.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         42:98:59:9e:ac:63:df:3a:8c:28:8b:16:a4:f4:1c:24:70:56:
         51:96:c6:2b:64:43:12:39:e8:d3:cb:5a:1a:5d:cd:9a:7f:9d:
         cd:5c:5e:66:28:2f:14:1b:67:f8:ba:92:6f:63:e8:27:30:e8:
         55:5d:3b:9e:b2:94:5c:fd:6e:9e:b3:43:8a:c9:5a:d1:0e:8e:
         1d:a4:87:9d:b3:d9:2d:f1:42:9b:08:bd:5b:d7:72:ab:19:63:
         9a:91:cf:5f:bd:e9:f8:3e:01:31:c8:8b:97:f9:26:7c:8b:8b:
         df:ac:5c:38:ad:64:e6:c7:a0:43:7a:0b:17:0e:ca:ec:2e:08:
         74:89:ab:b8:2b:f3:ec:8a:11:27:79:8c:6a:d3:e2:c0:96:71:
         c9:6d:d6:04:f7:4b:fa:b0:4b:53:25:dd:f6:bc:24:6f:61:64:
         64:f2:7e:e1:fd:34:45:b8:e1:da:9d:bb:ed:1a:a7:1e:b7:54:
         4e:3b:f2:91:cc:0e:c7:89:54:65:bb:82:6f:dd:38:c9:fa:7a:
         bb:ad:64:c9:41:18:ee:ca:51:59:53:6f:48:bf:1f:69:28:3c:
         6c:90:9b:78:d2:2b:15:1f:2b:1a:ec:e6:3e:bd:a3:af:45:ab:
         89:58:40:ed:79:92:8a:aa:57:05:44:1a:a9:10:8d:e9:40:46:
         48:2a:0c:86
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----