Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/46/e55ca1-d11c-48b9-8306-d003063ae5bb/1/SuvUVD3ynaZOQjLvN5H1NFc8EvE.mft
File:                     SuvUVD3ynaZOQjLvN5H1NFc8EvE.mft (raw, json)
Hash identifier:          JAFOZbONAfdkq1ygoFzDbwGX+7jG8HYUSQ3HVFxLplw=
Subject key identifier:   C0:D0:8B:16:52:09:30:CB:0E:13:30:2E:4F:4E:16:D2:80:1B:98:08
Authority key identifier: 4A:EB:D4:54:3D:F2:9D:A6:4E:42:32:EF:37:91:F5:34:57:3C:12:F1
Certificate issuer:       /CN=4aebd4543df29da64e4232ef3791f534573c12f1
Certificate serial:       01962F0734C2554CB5C3069A9A81AD53A889
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/SuvUVD3ynaZOQjLvN5H1NFc8EvE.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/46/e55ca1-d11c-48b9-8306-d003063ae5bb/1/SuvUVD3ynaZOQjLvN5H1NFc8EvE.mft
Manifest number:          08EE
Signing time:             Sun 13 Apr 2025 12:02:03 +0000
Manifest this update:     Sun 13 Apr 2025 12:02:03 +0000
Manifest next update:     Mon 14 Apr 2025 12:02:03 +0000
Files and hashes:         1: SuvUVD3ynaZOQjLvN5H1NFc8EvE.crl (hash: wsJSNI+8ciuwU2GRrgLLTdFszkGHs6JzjjQeM6hNqpo=)
                          2: gljPZRHD4o8JNjNIJxHbyh4kaRQ.roa (hash: ynLfSUBP+/RK0hSDUfdxyie+FGZVBwWsIpKno/W57hk=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2f:07:34:c2:55:4c:b5:c3:06:9a:9a:81:ad:53:a8:89
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4aebd4543df29da64e4232ef3791f534573c12f1
        Validity
            Not Before: Apr 13 12:02:03 2025 GMT
            Not After : Apr 14 12:02:03 2025 GMT
        Subject: CN=c0d08b16520930cb0e13302e4f4e16d2801b9808
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a4:5d:a0:62:b6:98:4e:dc:f7:8b:4b:3c:c5:02:
                    a8:8c:44:66:04:09:ae:a2:eb:62:6b:64:81:2a:05:
                    fa:7a:9d:1b:ef:38:26:2f:23:6e:cb:ca:83:a8:04:
                    5e:28:e7:9c:66:e8:98:c4:d9:c0:42:0f:08:7c:cb:
                    0d:63:d8:aa:26:63:8a:e7:83:4d:ca:56:14:6b:fd:
                    44:08:3c:db:08:c4:82:99:51:13:79:51:fc:75:af:
                    f8:04:a5:09:08:44:87:0e:2e:b2:ad:53:c4:bf:1c:
                    7b:be:d6:e7:3c:12:13:f9:20:07:14:68:b1:1e:f1:
                    3a:1d:e8:15:94:0e:81:3b:dc:ff:20:a2:11:ac:d4:
                    c2:be:7f:ad:da:1a:90:96:17:81:c1:f4:69:95:cc:
                    06:d3:3c:df:c6:e3:86:97:9a:34:2a:2d:01:e2:55:
                    4b:99:62:d0:c0:5a:00:1c:32:99:ea:34:2f:c9:84:
                    95:7e:ae:96:da:74:f5:64:a3:88:b5:d5:b4:7e:2f:
                    01:c5:e7:41:7d:4f:e6:20:86:85:fd:1f:d9:89:ce:
                    67:5e:c6:29:ca:f6:81:90:93:84:46:12:d6:aa:60:
                    db:7a:94:66:bd:3d:e2:84:d8:58:75:ef:99:53:55:
                    b1:5e:00:0f:a0:02:5c:cc:cd:c8:7c:e5:c0:0d:60:
                    76:af
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C0:D0:8B:16:52:09:30:CB:0E:13:30:2E:4F:4E:16:D2:80:1B:98:08
            X509v3 Authority Key Identifier:
                keyid:4A:EB:D4:54:3D:F2:9D:A6:4E:42:32:EF:37:91:F5:34:57:3C:12:F1

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/SuvUVD3ynaZOQjLvN5H1NFc8EvE.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/46/e55ca1-d11c-48b9-8306-d003063ae5bb/1/SuvUVD3ynaZOQjLvN5H1NFc8EvE.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/46/e55ca1-d11c-48b9-8306-d003063ae5bb/1/SuvUVD3ynaZOQjLvN5H1NFc8EvE.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         8e:61:be:b2:39:05:4b:6e:12:57:94:c8:79:1b:57:31:dc:fd:
         b9:69:23:cf:d9:16:8a:e0:10:7f:80:ef:25:a3:92:bf:6c:68:
         f4:a5:f6:ff:bf:98:05:4e:77:15:c9:43:7d:2f:c7:61:04:66:
         ee:28:e8:62:13:ce:fe:76:05:ea:6f:6b:52:9d:80:e8:62:28:
         f0:a5:05:1f:94:ef:f1:c7:53:91:5a:72:a6:79:c1:f8:ab:de:
         1f:90:d4:0d:fc:18:e4:75:37:5d:5a:35:ba:ae:27:31:4d:e3:
         e4:96:aa:1f:ba:e0:16:c5:26:0b:07:6a:b9:cd:c2:7d:fa:aa:
         16:02:35:6b:06:13:f1:fe:9a:a0:2c:4f:62:29:2b:f3:39:46:
         17:9a:1c:0d:2a:05:83:22:ab:ea:7c:b0:ff:e1:2f:30:68:0b:
         ff:cf:51:6c:4a:b5:3e:81:3b:d2:90:87:4e:4c:8e:95:1e:b1:
         93:79:08:dd:22:30:e9:9d:07:2b:bd:ab:69:8f:4c:76:0c:2b:
         16:ba:39:31:fa:fd:62:ad:cb:74:91:4e:c9:6b:19:96:ef:d1:
         2f:48:3c:20:36:e0:7b:92:fc:d7:62:75:40:bf:25:fa:84:2a:
         bd:27:4c:19:57:3f:a1:67:59:19:72:0a:8f:13:80:06:33:d4:
         87:84:a2:ce
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----