Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/43/0cc042-cf2b-4616-92e0-af0556c47a37/1/5Bv3i3CsJ2y_ZbuQn5k0CC9NLXk.mft
File:                     5Bv3i3CsJ2y_ZbuQn5k0CC9NLXk.mft (raw, json)
Hash identifier:          tDZ6uu4L11onY9qa7TL0gE9DylQmSHztKoplRJ7+1O4=
Subject key identifier:   15:13:1D:46:42:0C:78:81:DE:6F:A8:60:02:85:DA:F2:1E:A7:2C:11
Authority key identifier: E4:1B:F7:8B:70:AC:27:6C:BF:65:BB:90:9F:99:34:08:2F:4D:2D:79
Certificate issuer:       /CN=e41bf78b70ac276cbf65bb909f9934082f4d2d79
Certificate serial:       01962F063C945D9025637922F42A930D984D
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/5Bv3i3CsJ2y_ZbuQn5k0CC9NLXk.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/43/0cc042-cf2b-4616-92e0-af0556c47a37/1/5Bv3i3CsJ2y_ZbuQn5k0CC9NLXk.mft
Manifest number:          117D
Signing time:             Sun 13 Apr 2025 12:00:59 +0000
Manifest this update:     Sun 13 Apr 2025 12:00:59 +0000
Manifest next update:     Mon 14 Apr 2025 12:00:59 +0000
Files and hashes:         1: 5Bv3i3CsJ2y_ZbuQn5k0CC9NLXk.crl (hash: TjzbYgvR9m/cYs0dJ5FOKtOQLOb/epAPOqFP0jKqjzQ=)
                          2: zKYpcRfJ0yCrd-f2baj9-TyNLi8.roa (hash: T7q7FvhXmWHJ0yC6vmc/dnmnSYNoJL5+7o5GUV51uGY=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2f:06:3c:94:5d:90:25:63:79:22:f4:2a:93:0d:98:4d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e41bf78b70ac276cbf65bb909f9934082f4d2d79
        Validity
            Not Before: Apr 13 12:00:59 2025 GMT
            Not After : Apr 14 12:00:59 2025 GMT
        Subject: CN=15131d46420c7881de6fa8600285daf21ea72c11
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:f8:93:ef:ff:86:ee:5f:05:21:c3:87:29:17:8e:
                    1d:42:06:ad:be:a4:62:2d:ae:51:92:39:13:35:f6:
                    5c:02:4d:86:89:fb:f1:9c:f4:86:81:2a:6d:82:ce:
                    6c:12:36:73:30:e8:1a:9f:06:f2:56:0c:93:97:49:
                    b0:8c:54:32:19:65:09:14:a5:e6:a2:b7:c4:d2:a8:
                    b2:0a:44:12:af:b5:ad:02:94:af:79:84:91:bc:9d:
                    7b:3a:f3:4b:a1:32:b4:c1:e2:c1:4b:40:28:cc:0c:
                    83:02:c3:ea:9a:a1:9e:3e:01:e6:64:7e:8b:78:3f:
                    e3:8e:dc:c9:f1:02:07:53:61:3d:56:d0:b9:79:4a:
                    3f:fa:d2:95:f2:6d:6f:64:b4:b8:e1:e4:dd:3c:79:
                    4f:e9:a2:ff:fe:08:ad:42:a7:4b:23:3a:26:eb:9b:
                    be:a8:df:a8:d1:09:7f:0b:73:53:d9:ed:96:ed:0e:
                    64:bd:fd:19:37:74:10:2f:a0:77:8c:71:ab:c1:93:
                    b6:51:62:95:d7:48:d0:19:c0:14:0f:c6:e5:9b:2f:
                    89:c0:d9:9e:a2:16:27:0c:4c:62:01:82:07:54:f2:
                    ef:6c:cf:05:43:2c:32:88:cb:7c:90:bb:cc:93:83:
                    96:f5:08:71:12:2e:a4:b3:c1:f9:ed:c8:cc:42:e9:
                    bb:83
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                15:13:1D:46:42:0C:78:81:DE:6F:A8:60:02:85:DA:F2:1E:A7:2C:11
            X509v3 Authority Key Identifier:
                keyid:E4:1B:F7:8B:70:AC:27:6C:BF:65:BB:90:9F:99:34:08:2F:4D:2D:79

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/5Bv3i3CsJ2y_ZbuQn5k0CC9NLXk.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/43/0cc042-cf2b-4616-92e0-af0556c47a37/1/5Bv3i3CsJ2y_ZbuQn5k0CC9NLXk.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/43/0cc042-cf2b-4616-92e0-af0556c47a37/1/5Bv3i3CsJ2y_ZbuQn5k0CC9NLXk.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         8c:53:6f:35:e2:21:0a:5d:06:81:9e:91:b8:89:ff:92:ab:64:
         b6:bc:10:1a:46:fc:95:59:1b:66:ea:7a:a9:4d:1f:2c:ac:f7:
         84:bf:62:06:b1:b6:01:01:a1:21:88:e8:8a:8a:0c:1d:b6:7e:
         c5:09:56:b3:6b:56:d0:06:14:35:db:41:9d:7c:ce:02:6c:0f:
         26:b5:fa:51:98:d4:91:4d:01:be:63:1b:d9:70:b9:dc:f0:23:
         0a:f4:e3:04:17:c0:47:d1:c2:48:f2:e4:d0:85:14:87:58:ce:
         95:04:c1:4f:84:d7:4e:28:e2:7e:b5:4d:53:12:f2:bc:15:75:
         29:85:f8:82:18:78:56:cb:b9:7f:43:05:66:fa:43:f0:27:0e:
         86:37:6d:64:1c:9e:e8:86:3f:ea:f1:d6:98:9e:22:85:ab:32:
         47:35:f6:da:8d:78:7a:51:3b:83:77:5c:ab:6a:d9:43:26:b7:
         8f:94:06:0d:a8:b8:85:25:44:1c:5c:e0:3c:98:70:b4:c2:21:
         f6:de:6c:fe:10:16:32:83:d0:c1:8c:fd:5c:31:f6:a4:f7:d8:
         91:7f:34:1d:82:62:15:5f:f0:ce:89:a9:7f:1a:d7:c2:69:5b:
         05:6a:73:cb:16:3b:23:62:5e:8b:60:00:af:0b:84:6b:69:d0:
         75:9c:be:b6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----