Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3a/21dee2-29d7-4dad-beb9-2b226a23406a/1/T4EisJRezMsfL7mRL72GqgSmGYc.mft
File:                     T4EisJRezMsfL7mRL72GqgSmGYc.mft (raw, json)
Hash identifier:          JRL69aJnGnb25wZIwJOrVK0ZdmauzcwvYf/FQpWS7CU=
Subject key identifier:   05:14:B6:F0:1A:F6:10:07:E2:12:73:C1:6C:52:CD:0C:03:2F:7C:E9
Authority key identifier: 4F:81:22:B0:94:5E:CC:CB:1F:2F:B9:91:2F:BD:86:AA:04:A6:19:87
Certificate issuer:       /CN=4f8122b0945ecccb1f2fb9912fbd86aa04a61987
Certificate serial:       01962DF42BA4F3F27479B04C416CDB687B27
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/T4EisJRezMsfL7mRL72GqgSmGYc.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/3a/21dee2-29d7-4dad-beb9-2b226a23406a/1/T4EisJRezMsfL7mRL72GqgSmGYc.mft
Manifest number:          14E9
Signing time:             Sun 13 Apr 2025 07:01:38 +0000
Manifest this update:     Sun 13 Apr 2025 07:01:38 +0000
Manifest next update:     Mon 14 Apr 2025 07:01:38 +0000
Files and hashes:         1: T4EisJRezMsfL7mRL72GqgSmGYc.crl (hash: V5RQy0HzlWP0P01oFgp84I5HlXs+z52VI/BJVJJGeHc=)
                          2: wHg73xFUBpf9J7Sbkd5k-txeIuI.roa (hash: QbehPOAeyODx6wNG06wUci2MxVQ0h49CdhYolCy9bWQ=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2d:f4:2b:a4:f3:f2:74:79:b0:4c:41:6c:db:68:7b:27
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4f8122b0945ecccb1f2fb9912fbd86aa04a61987
        Validity
            Not Before: Apr 13 07:01:38 2025 GMT
            Not After : Apr 14 07:01:38 2025 GMT
        Subject: CN=0514b6f01af61007e21273c16c52cd0c032f7ce9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cb:eb:ff:1b:40:97:d5:8a:f7:65:d5:ae:c7:78:
                    6f:07:81:81:aa:80:91:2e:47:64:09:62:c5:65:9a:
                    d0:92:3c:d2:47:f3:fc:d4:89:6b:69:37:ad:5c:39:
                    64:00:f0:d8:83:ea:b2:8f:a9:79:9a:e7:d1:b8:a6:
                    27:06:cf:02:f1:9c:17:3b:47:a5:7e:e2:0c:34:42:
                    4f:20:d4:f2:ae:f1:d5:b7:f7:64:3d:3c:3b:45:26:
                    7e:6a:67:42:59:6a:e0:a3:bf:3c:88:b5:4d:d9:52:
                    04:cc:ac:df:81:f7:ba:0c:fb:00:8b:0d:23:ee:9c:
                    6a:1d:c9:0d:2d:be:97:1c:d2:3d:fa:c2:1f:69:ba:
                    89:ab:c6:3f:53:0b:4e:f1:72:64:12:47:7e:c7:92:
                    ab:65:54:38:de:ab:d7:1f:6b:bd:28:ce:4d:5d:66:
                    69:98:41:38:68:b3:19:38:6f:e4:81:56:0a:d4:3c:
                    2b:7d:3b:18:44:3d:d3:e6:3e:8c:6b:1b:63:be:56:
                    f7:aa:01:15:0d:bd:39:da:6b:df:42:50:55:69:4e:
                    b6:59:30:41:4f:2b:d3:e9:06:40:b6:1d:fd:47:bc:
                    a7:c8:f5:e4:92:eb:74:1a:b8:03:bb:0d:25:37:a6:
                    e6:b5:6b:e8:2d:5b:cc:72:3f:e5:0e:d1:31:73:69:
                    ba:cd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                05:14:B6:F0:1A:F6:10:07:E2:12:73:C1:6C:52:CD:0C:03:2F:7C:E9
            X509v3 Authority Key Identifier:
                keyid:4F:81:22:B0:94:5E:CC:CB:1F:2F:B9:91:2F:BD:86:AA:04:A6:19:87

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/T4EisJRezMsfL7mRL72GqgSmGYc.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3a/21dee2-29d7-4dad-beb9-2b226a23406a/1/T4EisJRezMsfL7mRL72GqgSmGYc.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/3a/21dee2-29d7-4dad-beb9-2b226a23406a/1/T4EisJRezMsfL7mRL72GqgSmGYc.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         65:f5:66:ab:93:1f:0f:f1:c6:b5:0c:af:1c:91:e1:63:55:5a:
         5e:0d:71:8e:8e:62:9f:1e:1c:96:92:f0:63:f2:48:fa:8b:08:
         f4:79:87:17:e6:90:65:7a:86:f8:06:22:52:90:59:74:ae:8a:
         b1:33:02:9c:21:c1:8c:d0:5b:25:96:4d:0b:21:a7:a7:9a:14:
         25:3e:b4:c4:66:a6:b1:ef:02:97:b3:6b:cc:75:c1:b7:7c:fa:
         68:1d:a5:db:a9:7d:65:4d:60:1e:88:b3:92:ef:61:ba:69:4e:
         04:0d:46:eb:f9:23:a5:61:52:17:b9:2e:5b:48:be:30:3f:1c:
         53:02:d0:dd:08:64:28:0c:6a:d2:f2:01:2b:5d:91:2f:9b:8f:
         4c:71:b4:f1:e9:95:4b:61:ce:53:79:3d:9f:fa:3a:3d:eb:e0:
         94:00:68:1f:75:a7:00:e8:3c:78:28:d4:92:50:f8:2a:a1:33:
         5d:ec:b8:46:48:94:0b:1e:e8:5e:c6:d4:30:e0:d3:ba:e4:f9:
         f5:51:b9:dc:47:db:25:cc:f7:25:eb:f6:e7:c3:80:18:be:4e:
         1c:7d:48:21:54:2b:25:3a:60:f5:34:4e:e8:e5:f9:75:e0:66:
         79:4b:92:4d:a3:a5:50:cc:d8:44:fb:96:da:0e:19:fa:a0:19:
         fd:be:b4:42
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----