Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2d/3fba05-daed-43b7-b870-fa02c1265d5e/1/4g-H2rlrUPdu6kmxgeqU0mogUyc.mft
File:                     4g-H2rlrUPdu6kmxgeqU0mogUyc.mft (raw, json)
Hash identifier:          UFfP2OkHQ+VWBlXMaXWm6t6XMUnDiXB7RzIjnfTNpU8=
Subject key identifier:   42:9E:EA:EB:3A:C7:47:61:06:56:FC:95:92:84:D6:13:D3:26:E3:31
Authority key identifier: E2:0F:87:DA:B9:6B:50:F7:6E:EA:49:B1:81:EA:94:D2:6A:20:53:27
Certificate issuer:       /CN=e20f87dab96b50f76eea49b181ea94d26a205327
Certificate serial:       01962DF40E3A31DB5F8F7EE9BCBC9B4130B3
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/4g-H2rlrUPdu6kmxgeqU0mogUyc.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/2d/3fba05-daed-43b7-b870-fa02c1265d5e/1/4g-H2rlrUPdu6kmxgeqU0mogUyc.mft
Manifest number:          14EC
Signing time:             Sun 13 Apr 2025 07:01:31 +0000
Manifest this update:     Sun 13 Apr 2025 07:01:31 +0000
Manifest next update:     Mon 14 Apr 2025 07:01:31 +0000
Files and hashes:         1: 4g-H2rlrUPdu6kmxgeqU0mogUyc.crl (hash: 534AC+CO6Qj+0DBUf1vRCRwwgPsHXE4fBz4J5+wpjQM=)
                          2: 8e6EuYvdvJ1TbEt2w_l--VFTSVE.roa (hash: lEOGzvYRz251FXAafldpzBiZsWV7u1gV99thpvyYuY4=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2d:f4:0e:3a:31:db:5f:8f:7e:e9:bc:bc:9b:41:30:b3
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e20f87dab96b50f76eea49b181ea94d26a205327
        Validity
            Not Before: Apr 13 07:01:31 2025 GMT
            Not After : Apr 14 07:01:31 2025 GMT
        Subject: CN=429eeaeb3ac747610656fc959284d613d326e331
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b7:4c:86:f5:36:f4:58:08:1f:87:0a:35:28:0f:
                    79:5a:47:88:f0:8d:1f:b5:68:ec:e3:1c:04:d7:c5:
                    13:8d:dc:1e:89:b6:f6:4b:40:ed:38:9a:1b:3c:37:
                    98:e9:24:c6:97:a9:4f:f0:c1:bc:5f:a3:e4:51:a0:
                    aa:67:95:2e:13:84:04:6c:c3:c2:15:0d:b5:61:ff:
                    8f:00:13:2d:5c:c3:48:4c:ce:1a:f0:06:ae:af:bb:
                    9f:4f:03:52:15:58:f1:47:4e:85:bc:d9:7b:90:a5:
                    6c:c0:63:c4:1f:eb:39:41:0d:95:36:68:0f:a6:c8:
                    10:56:2c:55:7a:23:73:d0:60:81:af:a0:36:7c:cf:
                    b0:94:cd:16:43:ab:e5:fd:ed:4c:25:82:43:2d:f5:
                    95:78:3f:1d:7b:b3:50:29:18:9d:a7:a5:cd:ed:fa:
                    0f:9f:00:fd:c2:61:62:b7:af:13:c2:87:6d:37:6c:
                    7e:a3:76:21:95:9f:dc:7c:e4:b9:39:03:24:35:7e:
                    03:37:dc:82:58:fa:fa:91:f7:81:dd:a4:37:16:d7:
                    7e:18:b5:1d:a4:e9:0c:35:8e:9b:2f:6a:6a:7b:73:
                    f9:3a:ad:16:62:ab:68:37:3a:02:ca:b0:71:e9:3e:
                    fb:96:e8:42:20:ec:31:d4:bd:6d:9e:fd:ed:9f:4c:
                    80:e3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                42:9E:EA:EB:3A:C7:47:61:06:56:FC:95:92:84:D6:13:D3:26:E3:31
            X509v3 Authority Key Identifier:
                keyid:E2:0F:87:DA:B9:6B:50:F7:6E:EA:49:B1:81:EA:94:D2:6A:20:53:27

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/4g-H2rlrUPdu6kmxgeqU0mogUyc.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2d/3fba05-daed-43b7-b870-fa02c1265d5e/1/4g-H2rlrUPdu6kmxgeqU0mogUyc.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/2d/3fba05-daed-43b7-b870-fa02c1265d5e/1/4g-H2rlrUPdu6kmxgeqU0mogUyc.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         29:84:de:df:fd:4e:0e:03:6f:0c:15:16:16:5d:42:81:56:2e:
         80:92:eb:d8:f6:0f:f9:a8:1f:5e:e4:70:2f:40:87:e2:2c:95:
         6e:a6:3f:29:10:8e:14:3f:06:c4:f7:5e:5c:40:bd:31:29:8f:
         c5:10:0b:72:dd:53:a1:78:77:a3:59:69:84:9d:a9:0b:56:c3:
         6b:6d:22:ee:39:81:64:e9:70:f8:7e:b9:3f:1d:9e:e1:c6:47:
         39:2c:64:b1:3c:03:8f:56:58:27:18:8f:05:92:33:a9:8d:b3:
         05:64:cb:03:3b:31:61:29:05:68:38:11:15:d6:d3:3e:2b:39:
         ac:d8:e7:48:8b:26:dc:29:af:a1:66:80:c2:57:ff:30:5e:37:
         3a:29:17:5d:7f:28:58:36:46:fc:4c:ad:04:c9:e7:d6:fb:60:
         59:72:91:13:98:52:92:32:72:84:2f:e9:85:a0:57:71:77:c6:
         7e:ec:73:eb:72:c7:fc:33:e3:a1:60:18:6d:c2:6e:e7:42:4e:
         7e:77:f1:ca:59:29:5c:be:e4:40:42:ee:4f:76:ef:3a:9b:c2:
         f7:43:c1:e3:b3:f7:55:f3:66:64:b3:63:87:43:b5:96:f3:d1:
         3a:02:e3:fb:d6:c7:6a:5e:e3:66:f9:5a:52:62:4a:a7:35:cd:
         62:1e:a2:af
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----