Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/22/31fded-6fde-45ce-b358-a26889ee22c2/1/S6eyT4fqUURtUZr9T-YEGRmOwBI.mft
File:                     S6eyT4fqUURtUZr9T-YEGRmOwBI.mft (raw, json)
Hash identifier:          TSBllChOeM4qoHeillEmp8FGu8iRYIJrf3xMxYmeUQY=
Subject key identifier:   46:14:CC:6D:88:7E:FB:33:61:35:81:71:38:FE:01:2E:D4:71:FE:D8
Authority key identifier: 4B:A7:B2:4F:87:EA:51:44:6D:51:9A:FD:4F:E6:04:19:19:8E:C0:12
Certificate issuer:       /CN=4ba7b24f87ea51446d519afd4fe60419198ec012
Certificate serial:       01962FAB07354A2EBD776C81171255B7BA5D
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/S6eyT4fqUURtUZr9T-YEGRmOwBI.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/22/31fded-6fde-45ce-b358-a26889ee22c2/1/S6eyT4fqUURtUZr9T-YEGRmOwBI.mft
Manifest number:          14EB
Signing time:             Sun 13 Apr 2025 15:00:59 +0000
Manifest this update:     Sun 13 Apr 2025 15:00:59 +0000
Manifest next update:     Mon 14 Apr 2025 15:00:59 +0000
Files and hashes:         1: S6eyT4fqUURtUZr9T-YEGRmOwBI.crl (hash: Ive7VHoQYgFal3NTQ21Ez8kiL/GoHbVob5e2lJBuyts=)
                          2: k-8joWHq0IXSAeF06EYlGj2AITA.roa (hash: OrXpbU3ZTRNxide1ly7PEoXo5UOkEqSaVuBCmUkwkxg=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2f:ab:07:35:4a:2e:bd:77:6c:81:17:12:55:b7:ba:5d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4ba7b24f87ea51446d519afd4fe60419198ec012
        Validity
            Not Before: Apr 13 15:00:59 2025 GMT
            Not After : Apr 14 15:00:59 2025 GMT
        Subject: CN=4614cc6d887efb336135817138fe012ed471fed8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e9:17:b1:f8:2f:69:c4:d5:3a:2c:81:85:18:03:
                    7f:69:95:15:4f:e8:7a:b2:5c:74:47:51:5e:81:12:
                    bf:ed:7d:50:7c:3b:85:e6:fc:71:45:69:09:e6:cb:
                    32:07:fa:21:3a:e4:bf:1c:49:55:24:8f:73:65:9d:
                    75:42:de:60:e7:69:0b:57:90:f8:97:8e:dd:9d:95:
                    5b:ee:72:b2:3f:5d:d1:0c:58:a1:a1:21:3c:7a:80:
                    c1:6a:a3:b0:08:d0:91:c4:5f:56:bc:01:28:2e:bd:
                    53:0e:81:fd:c9:1a:c9:11:c3:6e:74:bd:9d:b1:25:
                    6f:53:02:70:03:16:79:53:a5:b6:23:d8:4a:7c:a5:
                    d3:e9:e4:e8:65:a4:59:9d:1d:97:a6:f1:1e:17:1a:
                    87:7c:3e:39:19:13:10:1d:7a:59:3e:3d:45:05:23:
                    fc:64:8f:fb:7d:3c:cf:0a:57:ec:5f:f9:0e:ae:c7:
                    73:af:60:8f:93:52:0e:20:e3:5f:5e:6f:40:06:86:
                    af:d6:ee:06:ad:84:9c:76:5e:d1:58:f3:84:44:77:
                    c0:7b:b6:3c:06:e7:62:94:22:13:ac:0c:c4:cf:02:
                    41:fa:ff:f7:c7:0a:4b:17:9d:00:af:be:74:cf:2a:
                    58:0f:cb:67:9c:6d:54:c1:8f:b3:f2:c6:77:10:a7:
                    08:9d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                46:14:CC:6D:88:7E:FB:33:61:35:81:71:38:FE:01:2E:D4:71:FE:D8
            X509v3 Authority Key Identifier:
                keyid:4B:A7:B2:4F:87:EA:51:44:6D:51:9A:FD:4F:E6:04:19:19:8E:C0:12

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/S6eyT4fqUURtUZr9T-YEGRmOwBI.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/22/31fded-6fde-45ce-b358-a26889ee22c2/1/S6eyT4fqUURtUZr9T-YEGRmOwBI.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/22/31fded-6fde-45ce-b358-a26889ee22c2/1/S6eyT4fqUURtUZr9T-YEGRmOwBI.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         95:bd:c6:52:e0:c4:63:9b:9c:24:9b:c8:6d:84:5f:57:3d:ad:
         5b:64:7d:b3:bc:ff:f8:27:b7:fc:a6:43:75:83:a7:dc:f0:90:
         24:8a:a3:b4:eb:13:ba:02:b5:d9:57:b2:be:5a:37:4f:4b:3b:
         79:5a:44:35:58:fa:a7:1f:90:0a:8c:14:5f:2d:4f:97:b1:53:
         91:26:8e:20:1e:48:32:5d:6a:fc:7c:e8:94:d7:fa:42:45:59:
         a0:97:03:76:09:82:92:ab:f2:77:b6:ff:46:35:a4:a1:b5:5e:
         24:8f:19:47:2e:dc:dc:fc:86:0b:7f:bd:16:a9:fc:9c:25:f9:
         5e:ba:f7:ea:eb:0c:d4:e7:86:57:d2:af:64:b7:9d:5a:90:a3:
         18:cd:e5:1c:b9:e9:c7:8f:82:6f:c5:fd:c6:53:27:eb:3b:46:
         bb:53:33:4b:94:11:64:4c:5b:6d:ba:6f:e5:1e:61:38:c5:b5:
         a7:a8:09:38:f5:b9:17:a1:84:6e:95:ac:6a:70:db:45:13:ff:
         65:3e:4f:8e:6d:7b:57:61:dd:fa:ba:30:4c:0b:dd:59:f0:0e:
         e5:21:db:d7:cb:c5:14:a9:09:1f:66:63:1e:fa:e3:fc:e1:1b:
         ce:af:f6:15:7d:e1:91:15:fc:14:a7:30:8c:84:fb:38:6d:75:
         3a:ef:15:7b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----