Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/31/7cf42e-2ae8-4f13-a0c4-4e1fb76c847a/1/SmN2zpIIfkx85TZoZTd2nizDQFk.mft
File:                     SmN2zpIIfkx85TZoZTd2nizDQFk.mft (raw, json)
Hash identifier:          zuOHjY7ZQ36PuyICTbony6rD83QZGxH+d+S+UclvgTU=
Subject key identifier:   7B:09:B0:72:0A:9C:0C:84:B0:B3:71:CD:39:80:58:7D:4A:90:4B:23
Authority key identifier: 4A:63:76:CE:92:08:7E:4C:7C:E5:36:68:65:37:76:9E:2C:C3:40:59
Certificate issuer:       /CN=4a6376ce92087e4c7ce536686537769e2cc34059
Certificate serial:       01962FAB5DB0B83424871F9E82E85B71A4B0
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/SmN2zpIIfkx85TZoZTd2nizDQFk.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/31/7cf42e-2ae8-4f13-a0c4-4e1fb76c847a/1/SmN2zpIIfkx85TZoZTd2nizDQFk.mft
Manifest number:          14EC
Signing time:             Sun 13 Apr 2025 15:01:21 +0000
Manifest this update:     Sun 13 Apr 2025 15:01:21 +0000
Manifest next update:     Mon 14 Apr 2025 15:01:21 +0000
Files and hashes:         1: SmN2zpIIfkx85TZoZTd2nizDQFk.crl (hash: sp8my1P/SHZbFJB0o2A3z0mz/cvjvExdKM1WfuH9Gvw=)
                          2: ZCwrk3DUvn-uZjo3WgvhoOWpHv0.roa (hash: AtdbQHHLI0H407seskZvbBq2HBK/6vTqf2YFUILBHxY=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2f:ab:5d:b0:b8:34:24:87:1f:9e:82:e8:5b:71:a4:b0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4a6376ce92087e4c7ce536686537769e2cc34059
        Validity
            Not Before: Apr 13 15:01:21 2025 GMT
            Not After : Apr 14 15:01:21 2025 GMT
        Subject: CN=7b09b0720a9c0c84b0b371cd3980587d4a904b23
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e4:a0:05:a9:8a:91:e8:8f:3d:7f:86:6d:eb:64:
                    8a:84:77:ef:cd:0a:06:5b:d6:07:b9:95:58:23:21:
                    14:4d:cf:b4:17:0c:6f:da:15:dc:49:ec:ee:6d:c0:
                    9f:69:53:08:3c:94:2b:0f:f5:09:92:b4:b5:f8:d5:
                    4d:6b:38:63:eb:fd:e2:62:4d:73:75:6e:da:1f:b1:
                    ef:b1:2c:aa:b7:01:14:48:20:fc:44:b5:b2:4e:10:
                    5f:ac:d3:61:43:3a:5c:cd:32:b1:dd:5f:5f:ef:e5:
                    b5:c0:36:a3:58:00:9e:7e:99:ec:47:cf:dd:31:3c:
                    bf:ae:05:da:2a:7b:82:21:7e:e5:a8:f1:90:b9:12:
                    b2:72:2e:2e:1e:8a:83:a8:5a:47:bc:ea:90:f4:51:
                    d0:6e:b2:aa:d0:a8:3b:22:f0:42:58:bf:ef:86:74:
                    7a:53:1f:6f:59:dd:cf:02:b7:70:de:1d:39:be:b3:
                    de:83:0c:fe:f4:cc:0a:cb:79:5b:a9:06:4e:43:c3:
                    ea:6b:9e:d7:69:cb:f8:b9:cd:a1:3a:8b:0b:e2:67:
                    84:1a:e8:48:b0:1d:a1:7d:7a:ac:b5:93:fa:fd:f4:
                    eb:ed:9d:86:54:8f:e3:3c:e9:c1:80:44:e6:77:d3:
                    22:4f:ea:ae:8f:6a:1e:94:cf:86:9a:43:6b:bc:94:
                    9d:6d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7B:09:B0:72:0A:9C:0C:84:B0:B3:71:CD:39:80:58:7D:4A:90:4B:23
            X509v3 Authority Key Identifier:
                keyid:4A:63:76:CE:92:08:7E:4C:7C:E5:36:68:65:37:76:9E:2C:C3:40:59

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/SmN2zpIIfkx85TZoZTd2nizDQFk.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/31/7cf42e-2ae8-4f13-a0c4-4e1fb76c847a/1/SmN2zpIIfkx85TZoZTd2nizDQFk.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/31/7cf42e-2ae8-4f13-a0c4-4e1fb76c847a/1/SmN2zpIIfkx85TZoZTd2nizDQFk.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         48:e5:65:8b:08:23:c2:0a:e8:4b:85:82:00:68:b6:94:d4:b7:
         ac:38:09:3c:98:56:7f:e5:12:51:06:9b:47:d8:69:bd:bb:2e:
         09:c3:95:9e:2e:57:73:1e:ff:a7:f9:d0:7e:92:75:2f:97:22:
         4d:05:1e:67:31:db:71:47:5d:e7:e0:c5:e2:4a:b5:50:b1:f9:
         77:db:89:51:97:9f:57:9c:1c:56:bc:82:ff:40:77:92:48:15:
         77:5b:0d:7e:b5:a4:30:6f:a4:61:a8:c2:bd:bd:b0:9b:aa:99:
         93:ba:84:f4:2b:07:17:11:05:55:62:b6:bd:60:90:d1:d0:8d:
         17:07:bb:7d:10:ff:52:83:71:e1:ab:9f:44:02:1a:38:91:8e:
         15:59:5d:f8:e3:37:84:9e:5c:41:52:1b:a3:3b:27:7c:b8:eb:
         36:c1:82:bc:24:46:1e:4b:ed:97:65:4b:12:d4:12:af:0a:bf:
         ca:cd:4a:56:60:00:3b:31:4e:ff:9d:21:c2:cd:96:65:dc:96:
         86:39:da:2a:7d:cd:d8:d0:f6:69:28:99:3b:f3:6e:f6:54:56:
         02:6e:6e:2b:9d:62:46:1b:17:63:1c:8f:53:a7:7c:57:f9:5d:
         a3:d0:37:82:f6:b6:97:a2:42:34:3f:85:47:c0:a0:42:bd:d1:
         c4:cd:5e:48
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----