Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/26/4ef2c3-06d8-4f11-84b7-338196935050/1/ECKCU36wATC3llH0CAAO3KVkUOo.mft
File:                     ECKCU36wATC3llH0CAAO3KVkUOo.mft (raw, json)
Hash identifier:          PNeopTMnhAsr6TZdgYD6HC+8eN/tuCBhzDep/cy7ZXI=
Subject key identifier:   12:D3:B9:DB:99:82:80:89:C2:83:80:09:26:B1:87:9D:66:C0:D5:85
Authority key identifier: 10:22:82:53:7E:B0:01:30:B7:96:51:F4:08:00:0E:DC:A5:64:50:EA
Certificate issuer:       /CN=102282537eb00130b79651f408000edca56450ea
Certificate serial:       01962FAB3B72E6776580B6A4B0E026F38BDF
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/ECKCU36wATC3llH0CAAO3KVkUOo.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/26/4ef2c3-06d8-4f11-84b7-338196935050/1/ECKCU36wATC3llH0CAAO3KVkUOo.mft
Manifest number:          0DD4
Signing time:             Sun 13 Apr 2025 15:01:13 +0000
Manifest this update:     Sun 13 Apr 2025 15:01:13 +0000
Manifest next update:     Mon 14 Apr 2025 15:01:13 +0000
Files and hashes:         1: ECKCU36wATC3llH0CAAO3KVkUOo.crl (hash: /g6XG/E2rmrwNIE1zwqwmPW9/DEv7ZNzBUFl390y4Pk=)
                          2: mNpTYlNKotcL-0Zd_8NTbLjemtY.roa (hash: fghzEiX2an8ofk9BT1CH7W5YLfyP+hGmPzrsnOAoc1M=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2f:ab:3b:72:e6:77:65:80:b6:a4:b0:e0:26:f3:8b:df
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=102282537eb00130b79651f408000edca56450ea
        Validity
            Not Before: Apr 13 15:01:13 2025 GMT
            Not After : Apr 14 15:01:13 2025 GMT
        Subject: CN=12d3b9db99828089c283800926b1879d66c0d585
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:98:2f:e9:c4:22:40:b1:5c:9b:a0:72:7d:80:79:
                    9d:89:1b:06:34:7c:12:41:08:74:cd:3e:4f:a8:37:
                    b2:63:60:3c:78:e0:8f:3f:9d:dc:b2:e0:f2:a2:c0:
                    9f:a8:78:28:34:d9:8a:cb:5e:6c:19:9c:bd:0e:b4:
                    af:f2:a9:d6:85:1d:bd:d1:36:5e:ce:e7:e7:ce:da:
                    45:91:0a:7b:95:b3:18:87:90:a8:16:8a:ac:9f:b7:
                    09:7c:be:27:79:ac:0f:62:bf:36:54:e1:71:1e:de:
                    5f:fd:48:3c:de:83:2c:ad:a0:f0:17:62:34:6a:cc:
                    d6:ca:3d:e9:ae:a7:2d:7e:29:9a:be:d8:57:05:c3:
                    68:90:a3:de:d3:55:a0:ab:de:3c:67:1b:46:f3:88:
                    66:a2:5e:d5:ba:19:3d:8f:4f:8a:53:89:d0:2d:bc:
                    38:bc:c7:b0:b7:15:f9:a3:7a:db:32:d1:fc:e7:04:
                    03:1d:a6:3c:bd:6e:71:9b:70:40:83:7b:62:a2:a7:
                    d5:bd:ce:d7:be:58:1c:8c:ee:f4:a6:dd:57:38:f2:
                    5f:14:93:0a:90:98:c2:be:3a:8f:85:1c:33:48:50:
                    51:47:6f:8d:bf:9b:9c:5c:ed:f9:9a:7c:66:35:5d:
                    53:8d:fd:3e:d6:2f:3c:26:f7:98:94:0a:1f:32:ca:
                    16:ed
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                12:D3:B9:DB:99:82:80:89:C2:83:80:09:26:B1:87:9D:66:C0:D5:85
            X509v3 Authority Key Identifier:
                keyid:10:22:82:53:7E:B0:01:30:B7:96:51:F4:08:00:0E:DC:A5:64:50:EA

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ECKCU36wATC3llH0CAAO3KVkUOo.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/26/4ef2c3-06d8-4f11-84b7-338196935050/1/ECKCU36wATC3llH0CAAO3KVkUOo.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/26/4ef2c3-06d8-4f11-84b7-338196935050/1/ECKCU36wATC3llH0CAAO3KVkUOo.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         40:a2:a9:a7:b3:52:71:77:25:7d:a0:c7:8c:25:da:c1:e0:6e:
         68:7e:96:c2:cf:8f:16:70:73:b4:c5:a3:1a:88:37:df:92:28:
         aa:25:f8:fb:38:19:91:26:f4:56:30:51:55:71:ba:d4:20:e4:
         71:9c:fe:1b:df:44:64:ec:90:93:db:42:53:5a:bc:e9:4a:ba:
         cb:f1:b9:6c:5e:5d:b2:19:7a:ec:c1:c3:cd:0b:34:6b:13:c3:
         b5:48:b8:09:73:e5:1e:fc:8d:05:68:5b:a2:b5:55:be:89:58:
         45:dd:15:ae:02:7c:4a:ba:07:c1:99:86:dd:e2:30:2d:c0:3a:
         69:db:a4:11:0c:04:ef:b7:d7:4b:bc:c6:6a:b4:7c:24:a9:0f:
         d2:25:89:8a:6c:62:89:30:9f:9b:0c:fd:fd:09:ff:96:0a:41:
         67:58:2f:fb:a2:6f:c3:e9:f0:4f:e3:93:fd:bc:05:d1:7b:5e:
         07:fd:b1:9a:3e:57:0c:31:df:70:7e:77:50:e6:c1:73:b2:89:
         e4:ca:8c:d1:2b:a6:52:9f:1f:63:f8:ae:96:eb:52:8e:3f:d5:
         f4:3c:12:ef:00:d6:3c:5d:51:be:5e:82:2f:a6:60:a1:b4:d9:
         6f:25:d6:8c:cf:3a:1d:9f:65:b2:d8:4d:a3:2f:4d:56:07:f0:
         66:0c:d4:26
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----