Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/29/c06937-93b3-442e-8676-fc43391988f7/1/4njEqqAhvti5JuNZH99QyN9rwXI.mft
File:                     4njEqqAhvti5JuNZH99QyN9rwXI.mft (raw, json)
Hash identifier:          GbDvQQtNgXXtnJGUNEhtZ7ZHwbjFGChgRPeB+PfqGMQ=
Subject key identifier:   F9:4C:24:07:42:4E:36:40:82:15:00:CD:8A:A9:B8:5F:C2:A9:9B:DE
Authority key identifier: E2:78:C4:AA:A0:21:BE:D8:B9:26:E3:59:1F:DF:50:C8:DF:6B:C1:72
Certificate issuer:       /CN=e278c4aaa021bed8b926e3591fdf50c8df6bc172
Certificate serial:       01962ECF590438DEB9363FB535C8C8AA20CB
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/4njEqqAhvti5JuNZH99QyN9rwXI.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/29/c06937-93b3-442e-8676-fc43391988f7/1/4njEqqAhvti5JuNZH99QyN9rwXI.mft
Manifest number:          075F
Signing time:             Sun 13 Apr 2025 11:01:02 +0000
Manifest this update:     Sun 13 Apr 2025 11:01:02 +0000
Manifest next update:     Mon 14 Apr 2025 11:01:02 +0000
Files and hashes:         1: 1ypxGUz02dU-GrVHnawwOGAtbp8.roa (hash: s/FzoESG6FigLmQ9qVLEYvChgXRxC5KQ8IrkGKlYCxY=)
                          2: 4njEqqAhvti5JuNZH99QyN9rwXI.crl (hash: eFzV4n8le+pMy9HOAfbWK6vLPXwaZaU4p9UKf56CXMY=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2e:cf:59:04:38:de:b9:36:3f:b5:35:c8:c8:aa:20:cb
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e278c4aaa021bed8b926e3591fdf50c8df6bc172
        Validity
            Not Before: Apr 13 11:01:02 2025 GMT
            Not After : Apr 14 11:01:02 2025 GMT
        Subject: CN=f94c2407424e3640821500cd8aa9b85fc2a99bde
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a9:0e:09:d1:6f:96:b6:59:80:4a:8e:57:0b:87:
                    23:a8:bf:05:0e:66:9a:06:0c:59:74:6a:41:82:21:
                    53:6a:f1:a0:40:d6:92:e3:d6:1a:b9:6c:2c:22:46:
                    9b:7a:54:c1:1e:73:f0:6a:82:43:d2:99:fa:1c:af:
                    c1:52:db:15:f5:76:a5:29:cf:bf:16:30:aa:b1:31:
                    2f:c7:e8:8e:73:7a:ea:0e:cc:d9:7d:5c:3a:f0:2f:
                    c8:3a:a6:b4:70:66:09:ec:e6:e8:a4:f7:c1:7f:29:
                    e2:c7:2b:2b:40:31:b9:71:ef:1d:74:ee:bc:6d:e5:
                    64:04:23:e1:4f:a7:61:73:74:26:8f:be:bf:32:2f:
                    67:e7:d6:b6:0b:46:04:04:d1:14:eb:ab:23:4c:3e:
                    87:3d:31:60:4b:e2:56:20:c0:c9:be:30:1b:aa:ce:
                    33:a2:ec:90:95:d5:ac:78:82:d3:0d:db:3b:19:95:
                    2b:88:04:9f:43:72:74:70:27:b9:a6:79:f6:bb:13:
                    f9:d6:b5:fb:7d:74:4d:0f:49:c9:1d:ed:64:82:8d:
                    31:3c:f9:bf:85:f0:af:1e:f5:d9:9a:80:d7:01:4f:
                    1b:df:68:65:3c:e7:0f:db:b4:94:b6:73:5f:36:9d:
                    22:13:b6:0a:59:0a:93:fd:c0:42:6e:79:16:56:b1:
                    65:7b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F9:4C:24:07:42:4E:36:40:82:15:00:CD:8A:A9:B8:5F:C2:A9:9B:DE
            X509v3 Authority Key Identifier:
                keyid:E2:78:C4:AA:A0:21:BE:D8:B9:26:E3:59:1F:DF:50:C8:DF:6B:C1:72

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/4njEqqAhvti5JuNZH99QyN9rwXI.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/29/c06937-93b3-442e-8676-fc43391988f7/1/4njEqqAhvti5JuNZH99QyN9rwXI.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/29/c06937-93b3-442e-8676-fc43391988f7/1/4njEqqAhvti5JuNZH99QyN9rwXI.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         31:02:37:67:bb:70:7b:6e:ef:34:c0:fa:8a:45:fd:d2:58:62:
         36:17:45:78:3e:70:b4:52:76:6f:28:88:67:69:d1:bc:4e:c6:
         67:73:fc:18:db:45:4b:30:54:4c:bb:8a:e3:c5:12:f1:c2:49:
         bd:97:a3:67:51:1a:43:66:bf:6e:06:98:fe:70:84:a3:f4:4e:
         3b:7a:80:1a:5b:79:1a:98:71:16:1d:f8:65:a3:48:cc:a7:6a:
         64:b0:bb:27:3e:f4:6c:68:bc:2d:74:91:d5:91:b0:c6:56:57:
         2c:a2:2e:62:13:f7:01:08:ec:f2:6c:fd:88:e5:4e:89:ee:a5:
         1f:ee:40:6d:78:df:77:c7:61:fd:6b:d9:9b:8e:69:9b:d5:15:
         95:fd:fa:07:9c:e2:e5:0c:51:0e:94:fb:7e:ab:00:46:b4:6b:
         a4:37:96:26:42:83:06:03:6e:c4:f6:7c:3c:5c:20:63:4a:01:
         9d:0b:09:25:f3:5d:9e:1e:41:14:cb:3b:f8:80:1e:84:94:5e:
         47:27:02:38:d3:53:7a:d8:ec:53:3e:a3:fc:6d:39:1d:8e:7d:
         02:ce:d7:db:fc:13:bf:1a:4d:f7:6f:ff:f4:60:e3:a3:ed:49:
         e1:58:e8:d5:f8:a2:cd:02:91:85:b4:17:ab:01:8c:36:b0:ac:
         a7:01:ff:ea
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----