Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/33/6e43b9-c6a7-4d51-8061-06c8bb374a58/1/4GU20rF8RcF1c58zExGb4hnTMaw.mft
File:                     4GU20rF8RcF1c58zExGb4hnTMaw.mft (raw, json)
Hash identifier:          NnA1x7S2nXhg/y/nVPfan59L52mPEQMUYCULGl9oSvY=
Subject key identifier:   1B:8E:37:AE:EE:71:99:AB:9B:85:BF:60:E4:60:0B:A3:25:4F:5E:1A
Authority key identifier: E0:65:36:D2:B1:7C:45:C1:75:73:9F:33:13:11:9B:E2:19:D3:31:AC
Certificate issuer:       /CN=e06536d2b17c45c175739f3313119be219d331ac
Certificate serial:       01962F741E844C3BAF83DA0A622F9B7C8320
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/4GU20rF8RcF1c58zExGb4hnTMaw.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/33/6e43b9-c6a7-4d51-8061-06c8bb374a58/1/4GU20rF8RcF1c58zExGb4hnTMaw.mft
Manifest number:          12FA
Signing time:             Sun 13 Apr 2025 14:01:01 +0000
Manifest this update:     Sun 13 Apr 2025 14:01:01 +0000
Manifest next update:     Mon 14 Apr 2025 14:01:01 +0000
Files and hashes:         1: 4GU20rF8RcF1c58zExGb4hnTMaw.crl (hash: t4Gg0x8jCPlSE6r31S7MyrGnIJs5yoUUXM6KkoWsf6o=)
                          2: UI1__jiZeKmutEsj1q3GQDM4G-M.roa (hash: 9sMXrW5behwUEYOSItq82zCqNDvrla3Ktrtlxw/s2dc=)
                          3: XYSwDgEDu2AsDXqJSeXTfFwYkMs.roa (hash: 4IZPclZa/Ab6eD/hUighnjIphAqh1KKYEqn+pFsOdrg=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2f:74:1e:84:4c:3b:af:83:da:0a:62:2f:9b:7c:83:20
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e06536d2b17c45c175739f3313119be219d331ac
        Validity
            Not Before: Apr 13 14:01:01 2025 GMT
            Not After : Apr 14 14:01:01 2025 GMT
        Subject: CN=1b8e37aeee7199ab9b85bf60e4600ba3254f5e1a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d0:0a:34:df:ac:2d:b8:0f:e1:24:ca:8f:54:70:
                    68:2c:e8:ad:9d:94:d0:36:88:ae:ea:46:de:6a:99:
                    43:f8:cc:4e:af:f9:b9:4c:25:4f:a6:2b:52:0b:e1:
                    10:05:e6:ad:2f:01:f9:44:a6:62:4c:19:10:e2:39:
                    0c:a8:75:f5:03:ad:c1:6d:89:d6:cb:ff:ae:cf:d3:
                    00:01:cf:e0:16:e0:0a:f9:26:32:b9:5d:7a:33:4c:
                    7c:77:93:94:f0:6e:71:0b:83:51:82:08:70:bd:a1:
                    d0:9a:26:1d:ba:70:3b:94:f3:76:56:1f:f1:fa:06:
                    3d:72:af:c0:57:a3:d6:5f:6d:0e:4b:84:51:c4:0a:
                    84:cd:da:4c:c4:13:e3:27:57:9f:da:f5:37:99:42:
                    7b:9f:82:38:05:34:5c:5e:db:b9:5f:e8:d6:15:98:
                    20:b3:53:eb:e2:91:37:af:c0:45:43:cb:eb:33:5e:
                    15:f6:bb:ee:64:8d:c6:80:d4:18:6f:6c:03:fc:b1:
                    ad:3c:15:f9:23:b2:9c:aa:e4:89:24:d7:a5:fb:5d:
                    39:49:01:74:a2:b5:34:5e:e2:1c:31:77:3b:1f:bc:
                    39:2d:29:5c:61:4f:ed:05:75:d3:0f:f3:55:ae:0a:
                    53:62:88:44:76:67:8d:6c:0e:86:64:f6:c0:55:55:
                    5f:c9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1B:8E:37:AE:EE:71:99:AB:9B:85:BF:60:E4:60:0B:A3:25:4F:5E:1A
            X509v3 Authority Key Identifier:
                keyid:E0:65:36:D2:B1:7C:45:C1:75:73:9F:33:13:11:9B:E2:19:D3:31:AC

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/4GU20rF8RcF1c58zExGb4hnTMaw.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/33/6e43b9-c6a7-4d51-8061-06c8bb374a58/1/4GU20rF8RcF1c58zExGb4hnTMaw.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/33/6e43b9-c6a7-4d51-8061-06c8bb374a58/1/4GU20rF8RcF1c58zExGb4hnTMaw.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         7a:3e:3c:1d:c0:7e:4f:8f:88:27:6b:10:94:fd:c4:39:96:b3:
         91:17:39:2c:9d:19:dc:0b:82:a1:f3:85:d6:4c:7c:10:5b:3c:
         36:aa:5a:80:a1:79:a1:06:40:85:a2:58:b1:3f:91:d9:a7:f4:
         45:8c:54:72:d6:7d:ea:02:ec:42:c5:86:3b:a0:70:6e:c3:c5:
         e8:77:d8:d4:e0:bb:08:41:8d:84:b7:59:be:8f:13:f5:6e:62:
         09:e7:88:24:84:b2:dc:c0:bd:0b:f6:1c:a3:60:06:8b:c3:5c:
         cc:7e:86:28:28:9d:d8:fe:05:08:40:a3:f4:34:10:ed:1f:2a:
         25:46:ad:2f:72:85:df:ed:f8:e4:d4:11:7d:ce:71:a3:37:e8:
         d9:ad:e1:b0:e0:63:04:41:b3:20:1c:cf:c5:6b:cf:7f:e6:13:
         51:19:e5:31:5d:77:90:ec:0d:c2:a2:3f:10:bf:43:7c:98:c1:
         cb:92:d4:3d:d3:d8:e2:ce:e6:0b:ae:7b:f6:37:36:ec:c4:91:
         af:30:a4:4e:df:75:27:0a:5b:ef:0a:7e:07:66:c0:b2:12:2d:
         11:af:63:0c:a7:58:0c:85:8d:60:0c:68:f8:be:f1:10:50:50:
         1f:de:86:9d:14:38:03:eb:cc:01:e1:e0:4a:bc:98:66:ab:2b:
         58:d9:6b:1d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----