Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/26/1cd134-4d03-4fcd-b229-7bf0356a6bab/1/ERsJcQrNtyCG1ljpDY8CX6ahEbE.mft
File:                     ERsJcQrNtyCG1ljpDY8CX6ahEbE.mft (raw, json)
Hash identifier:          xJBKv0/gVPWIMv3/MX2EF9GY6yNMTEKR6Ic/AnGFkvk=
Subject key identifier:   68:DB:95:CC:3B:4A:E4:CF:61:90:31:2D:3F:7B:27:40:38:36:92:A2
Authority key identifier: 11:1B:09:71:0A:CD:B7:20:86:D6:58:E9:0D:8F:02:5F:A6:A1:11:B1
Certificate issuer:       /CN=111b09710acdb72086d658e90d8f025fa6a111b1
Certificate serial:       01962FAB4B055A68595FEC2FF2BD86C74F4F
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/ERsJcQrNtyCG1ljpDY8CX6ahEbE.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/26/1cd134-4d03-4fcd-b229-7bf0356a6bab/1/ERsJcQrNtyCG1ljpDY8CX6ahEbE.mft
Manifest number:          0788
Signing time:             Sun 13 Apr 2025 15:01:17 +0000
Manifest this update:     Sun 13 Apr 2025 15:01:17 +0000
Manifest next update:     Mon 14 Apr 2025 15:01:17 +0000
Files and hashes:         1: 4HntnwbwwM5vMcJuIab-USv0aos.roa (hash: D4Y8oo/1p1CfNZ78xGazKWpJcNpM6vsLdZIWby5+wsA=)
                          2: ERsJcQrNtyCG1ljpDY8CX6ahEbE.crl (hash: qbON2m7eP4cZZu3OeDPmbNNTUZSPKA0yF2U7STFXfhQ=)
                          3: xqQfiVZ1kttrOCR7xRSiCiiX2fY.roa (hash: 9+bsofjuuct5WmR8AYlK+fsU9sOrJTXhdDVACpV84ik=)
                          4: z6m9WxpDgDoLf4lFQ6-3riSMGBo.roa (hash: DdTxEazjHwj9S4/2pF5uXHejE6sdQfki7PScehxeU80=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2f:ab:4b:05:5a:68:59:5f:ec:2f:f2:bd:86:c7:4f:4f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=111b09710acdb72086d658e90d8f025fa6a111b1
        Validity
            Not Before: Apr 13 15:01:17 2025 GMT
            Not After : Apr 14 15:01:17 2025 GMT
        Subject: CN=68db95cc3b4ae4cf6190312d3f7b2740383692a2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:94:f4:2c:69:6c:b1:9f:dc:49:3c:cb:8f:14:57:
                    9a:8d:8b:96:a0:65:f4:43:9e:4a:2b:d2:95:b5:14:
                    ad:a9:5d:13:f1:a7:77:06:ad:41:c0:af:9d:85:bd:
                    21:1e:c9:c6:70:3f:bc:c0:bf:ce:e8:58:a9:c6:74:
                    5c:a9:8d:7a:a7:48:91:d0:fc:f1:83:16:15:31:46:
                    ce:c5:ff:a4:9e:66:b8:ad:66:2a:aa:7b:e8:40:7c:
                    67:20:c9:b5:05:b6:a4:53:b0:d8:f7:24:22:34:31:
                    47:2a:6e:8f:e4:51:d1:1d:23:9e:4d:6e:d4:36:ec:
                    05:43:cc:a7:42:85:a1:92:79:d9:1b:2a:96:10:da:
                    b0:73:49:1a:d8:10:64:4f:16:c1:32:ad:7e:1a:68:
                    e6:0b:50:0e:29:9e:b5:5b:3a:19:82:96:34:a2:e4:
                    57:b1:3a:29:8a:62:8d:b2:39:50:0e:c8:b1:49:08:
                    04:2f:36:ac:21:0f:37:1c:86:5d:b0:c1:57:2f:97:
                    b7:83:06:83:ad:86:6b:50:d3:80:e6:07:5e:cc:d5:
                    9f:bb:6b:c5:03:31:9f:47:78:85:13:e0:2c:59:ae:
                    5c:b9:6d:a4:41:93:b7:cc:52:b1:32:6f:fe:42:69:
                    de:36:b5:e0:5f:91:bf:b0:9c:52:57:f6:81:8e:91:
                    df:c9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                68:DB:95:CC:3B:4A:E4:CF:61:90:31:2D:3F:7B:27:40:38:36:92:A2
            X509v3 Authority Key Identifier:
                keyid:11:1B:09:71:0A:CD:B7:20:86:D6:58:E9:0D:8F:02:5F:A6:A1:11:B1

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ERsJcQrNtyCG1ljpDY8CX6ahEbE.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/26/1cd134-4d03-4fcd-b229-7bf0356a6bab/1/ERsJcQrNtyCG1ljpDY8CX6ahEbE.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/26/1cd134-4d03-4fcd-b229-7bf0356a6bab/1/ERsJcQrNtyCG1ljpDY8CX6ahEbE.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         7d:5f:c2:32:0c:b3:d1:a8:d0:32:9c:8b:16:c2:64:11:f2:d7:
         50:ab:02:bd:71:63:cc:a1:94:d5:82:ac:ad:6e:4c:c4:89:5f:
         e6:b8:b3:87:c6:c1:70:5b:91:95:eb:74:09:6f:01:89:5d:ed:
         b6:98:3e:50:ee:0e:bf:aa:cd:f8:4b:22:d8:ff:b9:d1:01:8d:
         07:39:cd:2b:66:f9:33:3f:35:60:c8:78:9a:c7:13:4c:5e:2c:
         d2:72:66:6d:4f:29:bf:83:9c:d6:91:4c:f7:5f:03:d1:a4:78:
         26:31:a1:89:f8:7c:4b:4d:71:91:4d:68:5f:50:b0:8d:8a:9a:
         87:65:a9:d4:d5:3b:e7:01:b3:c7:58:54:9f:0a:12:d2:fd:f0:
         62:a5:03:50:3d:36:75:36:0a:ce:4e:14:74:6d:fa:77:9a:07:
         5e:17:e0:fa:60:bf:3a:44:d2:af:c5:55:b5:5e:a9:c9:69:59:
         95:37:a4:08:cd:ff:ef:10:bc:49:19:79:5f:b4:f0:a7:dd:7c:
         fb:94:e7:0e:a9:83:a0:79:3b:cb:dd:83:30:5b:36:6e:ab:88:
         de:cf:d8:74:44:a9:7c:8d:6a:bb:9c:71:30:98:e4:79:79:79:
         95:0d:3c:d3:b9:36:c1:d2:05:03:f9:34:11:90:4a:d0:c4:17:
         97:46:bd:b5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----