Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/38/6a99dc-9555-46cd-ab2d-14655c03c033/1/cCFOfqyx0k4hHi8l_uStdX5sll0.mft
File:                     cCFOfqyx0k4hHi8l_uStdX5sll0.mft (raw, json)
Hash identifier:          w1O5P63sOeiT+VRWR9zzDHlhprcx3ROVP+5xfl8rk3Y=
Subject key identifier:   AE:96:39:7F:C3:77:9F:96:5C:29:73:98:8F:6E:FA:65:AF:EB:4E:60
Authority key identifier: 70:21:4E:7E:AC:B1:D2:4E:21:1E:2F:25:FE:E4:AD:75:7E:6C:96:5D
Certificate issuer:       /CN=70214e7eacb1d24e211e2f25fee4ad757e6c965d
Certificate serial:       01962F3D50F42787FBC9A395BBB19FE4C9AD
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/cCFOfqyx0k4hHi8l_uStdX5sll0.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/38/6a99dc-9555-46cd-ab2d-14655c03c033/1/cCFOfqyx0k4hHi8l_uStdX5sll0.mft
Manifest number:          0492
Signing time:             Sun 13 Apr 2025 13:01:09 +0000
Manifest this update:     Sun 13 Apr 2025 13:01:09 +0000
Manifest next update:     Mon 14 Apr 2025 13:01:09 +0000
Files and hashes:         1: Ur1p6KL9NTfFRBrJ7C7-zJCCRXo.roa (hash: lsHocd823a47v2/eGKZz1waiHC7kKATLJJz6RHG9Ic0=)
                          2: cCFOfqyx0k4hHi8l_uStdX5sll0.crl (hash: uVyB3qh0xl6Gy8WIVcfv3tCVhol0vn8d0dbJLfh7xeo=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2f:3d:50:f4:27:87:fb:c9:a3:95:bb:b1:9f:e4:c9:ad
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=70214e7eacb1d24e211e2f25fee4ad757e6c965d
        Validity
            Not Before: Apr 13 13:01:09 2025 GMT
            Not After : Apr 14 13:01:09 2025 GMT
        Subject: CN=ae96397fc3779f965c2973988f6efa65afeb4e60
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c0:17:0e:b5:5d:44:e0:3c:83:09:b9:d2:88:6b:
                    38:6f:05:4a:13:f3:25:6d:e0:65:b7:fd:51:ca:50:
                    10:b7:36:86:ef:67:96:14:48:85:83:09:3c:f4:c3:
                    7a:28:ff:a9:a8:5f:32:e8:6f:e8:c3:06:c3:b3:20:
                    c8:c1:ee:09:6a:aa:74:c5:02:71:8a:e7:cd:6e:89:
                    77:fa:2b:d9:1a:67:b3:6d:91:f9:33:f5:20:aa:64:
                    c0:de:04:bf:f7:1b:33:26:7d:51:b0:ee:89:70:dc:
                    23:2a:20:02:ed:05:ea:ac:8c:94:1b:90:14:f5:0b:
                    19:da:0c:c1:2d:67:ac:40:56:91:92:e1:5c:f2:e0:
                    0d:98:08:05:02:8f:a2:f4:ec:09:f0:5d:22:a3:85:
                    f5:10:de:2e:b6:c9:59:0b:d9:53:d4:25:1c:87:de:
                    74:be:1c:c7:ac:29:9c:9d:13:d0:c8:3a:4a:44:45:
                    1f:16:66:ab:3c:70:a4:ab:8d:2e:9c:30:3e:bc:aa:
                    c1:9f:23:8d:b2:57:ae:d6:31:3b:5f:40:e9:7c:c4:
                    7e:14:47:a9:74:f0:99:e5:c7:97:cf:ee:12:cc:d0:
                    01:93:ba:51:fd:d5:10:9d:6b:5e:97:4f:1d:be:b3:
                    e5:08:b2:8a:61:db:b7:23:b0:1d:67:b1:dc:37:bc:
                    79:0d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AE:96:39:7F:C3:77:9F:96:5C:29:73:98:8F:6E:FA:65:AF:EB:4E:60
            X509v3 Authority Key Identifier:
                keyid:70:21:4E:7E:AC:B1:D2:4E:21:1E:2F:25:FE:E4:AD:75:7E:6C:96:5D

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cCFOfqyx0k4hHi8l_uStdX5sll0.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/38/6a99dc-9555-46cd-ab2d-14655c03c033/1/cCFOfqyx0k4hHi8l_uStdX5sll0.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/38/6a99dc-9555-46cd-ab2d-14655c03c033/1/cCFOfqyx0k4hHi8l_uStdX5sll0.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         82:ad:d0:4a:3b:7a:b3:91:76:35:8b:32:ff:be:a7:e7:d2:9a:
         59:08:01:04:6a:55:68:02:91:e9:71:5b:91:a9:5e:32:3c:1b:
         94:6a:99:3d:1f:67:0a:f4:fb:90:ca:a3:60:63:fa:10:b4:cf:
         d1:d2:e2:aa:d2:ca:d9:9b:8c:5b:fc:e8:cd:06:c0:e8:45:48:
         df:6e:a3:7f:81:92:17:68:56:8b:06:83:d4:78:5d:8f:97:8e:
         5b:24:db:7b:50:b3:71:b7:5f:90:dd:a1:7b:d5:b2:18:b3:72:
         0d:b4:22:f0:e6:ea:52:9f:06:d0:0f:f4:9d:c1:ca:3a:03:fd:
         e1:b2:33:b8:de:1f:06:50:fc:9e:77:2d:82:61:73:be:eb:f7:
         71:e2:d8:8c:f7:a2:11:77:48:fb:e9:9d:b2:54:da:e8:63:c9:
         ed:07:3c:e2:c8:b8:ea:35:1d:5b:f0:c9:3e:d8:91:fb:c4:9a:
         af:9f:10:63:1b:01:f5:3c:bb:8d:c7:71:3c:74:53:7b:cb:59:
         1a:dc:79:c7:1a:bb:6a:40:f1:6d:46:a6:f8:fd:50:8a:1d:4d:
         23:28:16:5e:e7:27:ec:80:51:2b:6a:90:21:31:d6:e5:d2:16:
         63:5b:36:22:36:6c:11:d2:25:26:3e:df:65:cf:8f:dd:3c:bc:
         99:de:3b:ce
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----