Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/46/0a4bc4-da4b-4f18-b4be-afc1ee4611a1/1/00vPISevCy4KJGrkV0MEx653Fek.mft
File:                     00vPISevCy4KJGrkV0MEx653Fek.mft (raw, json)
Hash identifier:          Jl963lhF4seHfkpUwo5+ETTnULgNYeZ16Bv35X/JNXs=
Subject key identifier:   88:00:BB:CA:30:63:5A:A4:6E:50:CC:F8:4A:E4:DB:28:9B:CA:10:A3
Authority key identifier: D3:4B:CF:21:27:AF:0B:2E:0A:24:6A:E4:57:43:04:C7:AE:77:15:E9
Certificate issuer:       /CN=d34bcf2127af0b2e0a246ae4574304c7ae7715e9
Certificate serial:       01962E98EED4E0E8AB3C17B8F05B1DF108DC
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/00vPISevCy4KJGrkV0MEx653Fek.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/46/0a4bc4-da4b-4f18-b4be-afc1ee4611a1/1/00vPISevCy4KJGrkV0MEx653Fek.mft
Manifest number:          14EB
Signing time:             Sun 13 Apr 2025 10:01:36 +0000
Manifest this update:     Sun 13 Apr 2025 10:01:36 +0000
Manifest next update:     Mon 14 Apr 2025 10:01:36 +0000
Files and hashes:         1: 00vPISevCy4KJGrkV0MEx653Fek.crl (hash: qhuHnHCyxu0niQTKbNZC/QJ+0uwSvDGXayEuewQdMOc=)
                          2: SqjmPfaLrtBpjmBn0-LK2-XYK6E.roa (hash: oP41hXDxiX++ad4HH6tMbCxCouHbTfiMX6JPBOFqfjw=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2e:98:ee:d4:e0:e8:ab:3c:17:b8:f0:5b:1d:f1:08:dc
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d34bcf2127af0b2e0a246ae4574304c7ae7715e9
        Validity
            Not Before: Apr 13 10:01:36 2025 GMT
            Not After : Apr 14 10:01:36 2025 GMT
        Subject: CN=8800bbca30635aa46e50ccf84ae4db289bca10a3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:92:85:7e:a7:5f:ce:87:1e:67:28:e1:03:7b:33:
                    03:93:49:26:5b:7f:6b:27:f8:b1:c5:0b:87:54:7d:
                    e8:28:e0:b6:d2:9e:23:ce:cd:6d:23:bb:2f:75:6a:
                    1c:d4:ac:9f:a4:68:e9:2f:07:51:1a:57:48:5d:7d:
                    76:31:bd:24:02:19:4c:0b:fd:1e:ab:09:5c:65:bf:
                    22:85:70:ec:07:50:12:e2:5a:68:fc:37:b0:95:28:
                    74:36:87:a2:c5:e7:84:6b:a5:0f:b8:77:ec:91:4f:
                    88:82:61:c5:be:54:b1:fa:bc:70:ad:57:49:67:11:
                    d9:df:5c:64:1e:ed:d3:ce:8c:17:30:f5:61:47:6f:
                    60:32:ef:4b:f3:61:c3:83:bd:a4:fb:71:95:14:55:
                    85:98:a2:8c:c1:98:bf:cf:e5:13:e5:41:73:d6:36:
                    23:70:b5:6c:46:1d:81:1c:79:a1:bb:95:5c:ba:c4:
                    74:f1:f0:77:1e:2a:15:17:96:30:1c:be:93:1d:52:
                    bf:ef:ba:61:14:eb:cc:26:cb:ee:09:ed:bd:23:3d:
                    03:fb:ef:50:27:1f:6f:fb:24:79:ea:28:96:60:62:
                    2f:ff:81:c5:2d:cf:e6:95:b8:e2:2c:cd:44:80:b3:
                    39:e4:b4:f9:d6:1d:86:6b:72:3b:ca:8c:5f:2a:2c:
                    38:7f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                88:00:BB:CA:30:63:5A:A4:6E:50:CC:F8:4A:E4:DB:28:9B:CA:10:A3
            X509v3 Authority Key Identifier:
                keyid:D3:4B:CF:21:27:AF:0B:2E:0A:24:6A:E4:57:43:04:C7:AE:77:15:E9

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/00vPISevCy4KJGrkV0MEx653Fek.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/46/0a4bc4-da4b-4f18-b4be-afc1ee4611a1/1/00vPISevCy4KJGrkV0MEx653Fek.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/46/0a4bc4-da4b-4f18-b4be-afc1ee4611a1/1/00vPISevCy4KJGrkV0MEx653Fek.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         81:5e:ab:a1:94:3c:d8:f1:c7:ba:d0:4b:5d:a7:46:84:69:90:
         61:1a:5d:b7:c4:f7:3e:d7:c8:9b:75:35:23:b0:d7:25:dc:89:
         63:c8:0a:36:ba:35:17:3b:0d:f6:b7:17:05:ac:c6:a1:43:98:
         26:4b:ce:ad:6e:55:a0:68:38:1b:c6:b3:6e:5e:09:4d:ee:fb:
         b7:c9:6d:d2:26:0c:89:4e:58:85:22:0d:08:30:84:c0:db:d2:
         5a:56:c2:de:3a:ef:16:04:be:2d:93:cc:ab:22:01:34:e9:35:
         fe:da:68:cc:62:9c:c4:6e:f6:a6:9f:29:11:f2:87:ff:9b:a4:
         6d:57:3d:1f:c5:81:3f:de:9f:97:5d:1e:4c:f0:b7:b0:92:7f:
         bb:68:95:13:96:70:13:b7:b7:b8:ba:fa:69:7a:af:e0:7d:2b:
         90:46:79:84:bb:95:30:dc:b4:b4:dd:dd:21:31:cf:75:fb:59:
         ae:c4:da:d1:0a:79:1a:7b:ce:49:10:d4:72:83:aa:15:31:fd:
         6d:f2:5b:d0:e9:aa:7a:1a:d4:14:d0:eb:a3:21:d3:05:93:11:
         c6:1a:2d:09:78:bc:e9:1e:68:3a:01:08:10:af:ea:25:ba:0f:
         e5:35:39:82:79:66:b4:f4:04:cd:ef:69:cd:1c:8d:88:91:b3:
         6d:1c:24:e0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----