Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/23/2a727b-a745-4339-925a-4d00d6032afe/1/skTScYj-UmvXJjZzgZXR639gYzU.mft
File:                     skTScYj-UmvXJjZzgZXR639gYzU.mft (raw, json)
Hash identifier:          vkRyMJcwwZY5vGhEkb6aKwTVr9gytQCEY5IMtTHVTOE=
Subject key identifier:   F4:C1:35:79:E9:AA:1F:15:F4:82:96:33:7E:49:66:C9:97:6D:DD:6A
Authority key identifier: B2:44:D2:71:88:FE:52:6B:D7:26:36:73:81:95:D1:EB:7F:60:63:35
Certificate issuer:       /CN=b244d27188fe526bd72636738195d1eb7f606335
Certificate serial:       01962E98E97B0592041881DCD6C13CC0E85B
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/skTScYj-UmvXJjZzgZXR639gYzU.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/23/2a727b-a745-4339-925a-4d00d6032afe/1/skTScYj-UmvXJjZzgZXR639gYzU.mft
Manifest number:          14EA
Signing time:             Sun 13 Apr 2025 10:01:35 +0000
Manifest this update:     Sun 13 Apr 2025 10:01:35 +0000
Manifest next update:     Mon 14 Apr 2025 10:01:35 +0000
Files and hashes:         1: i9ojhRN5HPqLEONrX8zwsFoi9sk.roa (hash: MIYLI6ZlVjLLI/2sB5M12T0X1D0wb0+Le0eSAFyUiKg=)
                          2: skTScYj-UmvXJjZzgZXR639gYzU.crl (hash: 6f0ohzdLC6zo4gZ72P2LekvtxjlCIAvYgE4fd/5+uEM=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2e:98:e9:7b:05:92:04:18:81:dc:d6:c1:3c:c0:e8:5b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b244d27188fe526bd72636738195d1eb7f606335
        Validity
            Not Before: Apr 13 10:01:35 2025 GMT
            Not After : Apr 14 10:01:35 2025 GMT
        Subject: CN=f4c13579e9aa1f15f48296337e4966c9976ddd6a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bb:07:7d:8b:85:1e:1e:c8:48:59:e3:5a:b5:01:
                    cc:9f:83:cc:95:af:55:1c:7d:c4:84:f0:fe:3d:0e:
                    01:75:a1:41:68:3e:50:de:dc:5a:b0:bd:db:51:6f:
                    db:c9:74:7a:73:d4:55:7c:30:6f:10:f0:ed:80:a5:
                    de:53:15:91:81:97:77:8e:73:ae:87:0c:eb:d3:c8:
                    d1:6c:4e:ca:b0:50:78:cf:fd:56:1f:1b:47:b0:0e:
                    90:02:00:7b:63:01:da:0a:f7:9b:72:31:70:93:84:
                    ee:7a:65:98:5d:3d:d0:3c:e1:43:cc:8c:18:6e:a8:
                    f6:48:cb:70:ee:24:a0:8c:c0:4b:99:2c:2c:12:ae:
                    65:cd:d6:28:0f:bf:51:c5:ea:f9:be:9a:31:2e:f1:
                    e9:56:16:40:01:e1:f5:83:16:07:0f:f4:cc:f7:89:
                    c3:ae:77:52:b4:b3:e0:bd:12:b3:f0:e7:e7:f2:08:
                    6d:8e:5e:b2:fb:72:5b:48:17:04:34:b7:01:5f:44:
                    74:54:2e:6d:b6:53:da:ae:f5:c5:24:6f:e4:66:05:
                    ea:c9:9f:ca:3c:cd:59:2d:6a:20:98:89:58:2d:b1:
                    64:f7:e6:90:3c:d8:f5:3f:7b:7b:0c:e7:af:96:b0:
                    ef:5a:5f:e7:39:73:b4:97:40:4e:1a:ff:ee:cb:dd:
                    a9:9f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F4:C1:35:79:E9:AA:1F:15:F4:82:96:33:7E:49:66:C9:97:6D:DD:6A
            X509v3 Authority Key Identifier:
                keyid:B2:44:D2:71:88:FE:52:6B:D7:26:36:73:81:95:D1:EB:7F:60:63:35

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/skTScYj-UmvXJjZzgZXR639gYzU.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/23/2a727b-a745-4339-925a-4d00d6032afe/1/skTScYj-UmvXJjZzgZXR639gYzU.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/23/2a727b-a745-4339-925a-4d00d6032afe/1/skTScYj-UmvXJjZzgZXR639gYzU.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         8d:60:c1:b6:87:1d:b2:e7:42:40:ae:ac:b5:7e:5b:0c:fa:aa:
         bb:ae:a7:d4:6f:60:dc:a8:ce:ce:12:d2:2a:f7:75:49:3e:ea:
         8e:50:52:d1:3a:1c:66:b9:5d:ac:29:9a:ed:3e:77:9d:95:ac:
         bf:ff:aa:66:6e:c7:a1:a2:e5:17:8e:23:4f:68:47:06:ce:d9:
         e5:50:a7:cb:ca:56:bc:82:65:20:e0:24:b8:ef:4c:ae:e3:fc:
         1a:c5:c5:74:e5:30:68:b3:e4:ef:88:fe:99:97:c8:c2:43:31:
         e3:c5:6c:64:1d:ca:9a:f3:b5:0e:a3:51:c6:24:bd:d2:47:25:
         94:f2:02:95:46:f6:d5:31:a8:aa:51:e5:ee:01:88:6f:f3:21:
         ca:db:d4:af:b0:7a:3a:56:01:a9:b2:87:ee:11:44:b5:62:e3:
         2a:db:27:19:58:62:55:8f:5f:cd:b2:2f:15:28:de:4d:81:c7:
         23:00:9b:4b:b5:2a:8d:77:54:a7:4e:8f:d8:6b:ee:c9:70:2d:
         b2:c9:a1:fc:7a:0f:d5:9e:94:ab:06:40:7d:9f:91:22:d2:88:
         16:28:5d:0a:ec:ed:88:24:04:82:16:49:c3:a1:10:56:ea:2d:
         41:b5:06:02:ee:d2:54:a3:61:0f:cc:04:f1:dd:67:48:c8:23:
         02:3c:2e:7e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----