Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/38/ba4766-7b3f-4e57-83de-37bfcb80f618/1/ERxtryd8JzXN7koMheNshcJdPD0.mft
File:                     ERxtryd8JzXN7koMheNshcJdPD0.mft (raw, json)
Hash identifier:          FvlwDt/2y/+KW2r8FBuAcWVoziflqZMDZwuDTkKNkS4=
Subject key identifier:   77:75:3B:74:CF:F5:F2:CF:86:4F:BE:05:C9:DE:A5:C9:12:C3:B4:CC
Authority key identifier: 11:1C:6D:AF:27:7C:27:35:CD:EE:4A:0C:85:E3:6C:85:C2:5D:3C:3D
Certificate issuer:       /CN=111c6daf277c2735cdee4a0c85e36c85c25d3c3d
Certificate serial:       01962DF39684EA86433FEA61D3663B7EC9BC
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/ERxtryd8JzXN7koMheNshcJdPD0.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/38/ba4766-7b3f-4e57-83de-37bfcb80f618/1/ERxtryd8JzXN7koMheNshcJdPD0.mft
Manifest number:          A1
Signing time:             Sun 13 Apr 2025 07:01:00 +0000
Manifest this update:     Sun 13 Apr 2025 07:01:00 +0000
Manifest next update:     Mon 14 Apr 2025 07:01:00 +0000
Files and hashes:         1: ERxtryd8JzXN7koMheNshcJdPD0.crl (hash: KAg7rzCKtgJnOALh/j5mOwUsizdCIYENre/aED5gcDo=)
                          2: MWfGbekGdiIlL_QnOkQ9r-npSTo.roa (hash: NlhTGNa3FSPX/6OYQDRDJHu85zHjDwDvfSYqtIACw6M=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2d:f3:96:84:ea:86:43:3f:ea:61:d3:66:3b:7e:c9:bc
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=111c6daf277c2735cdee4a0c85e36c85c25d3c3d
        Validity
            Not Before: Apr 13 07:01:00 2025 GMT
            Not After : Apr 14 07:01:00 2025 GMT
        Subject: CN=77753b74cff5f2cf864fbe05c9dea5c912c3b4cc
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b4:36:80:0f:27:98:6e:d8:86:2a:53:19:03:ba:
                    95:e5:ec:46:6f:2d:6b:01:4f:41:77:8d:2b:48:27:
                    ff:82:ae:89:d4:41:3b:d8:a1:13:b9:b8:39:dc:68:
                    dd:53:1f:1f:4a:ca:28:1f:0c:b2:ab:aa:36:e7:13:
                    12:fd:07:64:b5:62:0b:ea:70:e3:20:51:c5:9e:fc:
                    98:b9:a0:a4:f0:01:e7:e6:67:4c:7d:36:a6:b7:97:
                    01:5c:aa:f7:5f:16:89:25:65:ea:14:e0:3e:01:a2:
                    f8:92:81:e7:2e:21:c9:ef:5a:cc:54:57:05:9d:f0:
                    59:1a:dc:d3:f4:e6:95:89:33:bc:be:40:51:58:e7:
                    b0:75:aa:5a:23:4c:1e:d7:7b:ea:d5:59:d2:29:57:
                    0a:58:89:cb:a5:61:fc:da:31:c1:0c:5a:05:5c:88:
                    ed:c8:f1:b5:55:d6:f5:bc:3a:c1:83:e0:44:4a:87:
                    34:01:60:df:86:26:9c:7a:cd:5f:d3:4b:2f:ad:64:
                    8d:1d:1b:77:ca:1c:ac:04:91:62:42:ec:01:c6:6c:
                    7d:7f:51:57:a6:e0:a8:4c:78:bd:b1:9e:05:aa:31:
                    cb:1b:05:53:bb:a9:b0:aa:a5:86:26:81:40:a8:50:
                    24:4e:1c:2f:42:d9:81:45:38:18:58:c3:6f:c3:32:
                    bb:f9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                77:75:3B:74:CF:F5:F2:CF:86:4F:BE:05:C9:DE:A5:C9:12:C3:B4:CC
            X509v3 Authority Key Identifier:
                keyid:11:1C:6D:AF:27:7C:27:35:CD:EE:4A:0C:85:E3:6C:85:C2:5D:3C:3D

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ERxtryd8JzXN7koMheNshcJdPD0.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/38/ba4766-7b3f-4e57-83de-37bfcb80f618/1/ERxtryd8JzXN7koMheNshcJdPD0.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/38/ba4766-7b3f-4e57-83de-37bfcb80f618/1/ERxtryd8JzXN7koMheNshcJdPD0.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         68:83:80:3e:41:2a:28:b5:c3:c3:59:b3:46:18:6a:fa:ba:0c:
         77:38:43:ad:1b:38:9d:5a:95:b3:ff:9e:a7:64:b3:71:7e:96:
         ac:69:e6:83:c0:21:f1:17:db:69:39:ff:de:9a:d5:94:f9:7b:
         24:61:07:c2:8a:11:b3:35:2e:ab:6b:9b:21:ea:16:90:ea:8d:
         71:1c:40:5e:83:3d:63:09:1f:ab:8c:7d:ed:05:be:cf:d2:40:
         cf:f6:28:ac:ef:db:d6:9d:8e:1e:9b:ef:38:b5:79:2f:1a:a6:
         88:03:a5:4f:ba:c4:9f:e8:89:69:36:49:6c:5a:24:3d:a6:67:
         97:e1:ea:9b:d6:ad:20:07:81:83:ee:fe:72:10:0d:9e:ce:d8:
         ec:32:05:52:38:39:9b:d4:c9:b8:d2:9b:6c:fe:e7:df:61:db:
         12:f5:a0:cf:16:1b:22:a5:e8:41:8a:41:b3:b9:e8:c3:ec:1d:
         66:83:d2:d0:c7:72:9e:d5:f4:27:ca:75:0a:b9:9b:ad:62:3b:
         58:1a:4e:07:1c:46:e8:a4:e8:00:79:c8:2a:b4:5c:a3:1a:5e:
         b3:32:23:c7:1f:1c:69:b0:2b:09:3c:ee:95:3c:ec:9c:08:90:
         49:ac:77:64:b3:7c:55:f5:c7:ac:4e:89:aa:1b:67:10:a1:4b:
         50:a9:4b:89
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----