Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4e/5f3e21-6b41-4964-bfda-cbbfda92419d/1/4VuQ_9-gqyhUheeERrhxmYsk3MA.mft
File:                     4VuQ_9-gqyhUheeERrhxmYsk3MA.mft (raw, json)
Hash identifier:          ebL4QySDmP6HnwQBUlbnC1ySr4mh4GuxT3Bd0s0EE98=
Subject key identifier:   07:4D:8E:FC:EB:79:A6:99:75:5D:99:BD:EE:FF:E2:1F:A4:6E:3D:04
Authority key identifier: E1:5B:90:FF:DF:A0:AB:28:54:85:E7:84:46:B8:71:99:8B:24:DC:C0
Certificate issuer:       /CN=e15b90ffdfa0ab285485e78446b871998b24dcc0
Certificate serial:       01962E61B9E6A4B074DE280454AC208E12BB
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/4VuQ_9-gqyhUheeERrhxmYsk3MA.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/4e/5f3e21-6b41-4964-bfda-cbbfda92419d/1/4VuQ_9-gqyhUheeERrhxmYsk3MA.mft
Manifest number:          BF
Signing time:             Sun 13 Apr 2025 09:01:18 +0000
Manifest this update:     Sun 13 Apr 2025 09:01:18 +0000
Manifest next update:     Mon 14 Apr 2025 09:01:18 +0000
Files and hashes:         1: 2wr3VnHPGzlL2arFNUC9_MLTdaY.roa (hash: riabhN7uUC9dX01WplUZkRt4qxUdWnv+rCQJ9LvkhhE=)
                          2: 4VuQ_9-gqyhUheeERrhxmYsk3MA.crl (hash: /REbDkodK7EawpS1JYXfOhrWL9NBA1yVN3Pv2pRd63g=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2e:61:b9:e6:a4:b0:74:de:28:04:54:ac:20:8e:12:bb
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e15b90ffdfa0ab285485e78446b871998b24dcc0
        Validity
            Not Before: Apr 13 09:01:18 2025 GMT
            Not After : Apr 14 09:01:18 2025 GMT
        Subject: CN=074d8efceb79a699755d99bdeeffe21fa46e3d04
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bd:a2:6c:51:19:79:8b:26:88:b7:7d:10:56:2f:
                    6f:d1:b2:fa:3f:68:1d:81:13:98:7c:7b:15:83:64:
                    ee:12:72:b6:7f:ce:b3:32:db:c2:54:e1:4c:13:22:
                    a1:e8:5b:ca:b0:77:3d:6c:ee:a3:5e:d9:63:65:70:
                    ac:cd:b0:1d:39:68:8c:18:63:1e:23:7b:bb:98:a6:
                    f2:ec:98:f0:5f:a5:27:5a:59:9f:02:dc:7b:b6:f8:
                    cc:4d:04:1f:0b:66:fd:1d:71:12:b7:d2:b1:d5:37:
                    16:f3:8e:0a:8a:88:c4:04:1a:c2:1e:88:b4:76:5d:
                    6f:e7:01:c2:e0:2b:1e:d4:22:4e:b3:6a:dc:e0:65:
                    bc:78:a0:4a:df:48:c2:eb:86:3a:99:90:bb:51:31:
                    64:2c:6d:16:37:ab:34:9b:be:5b:85:0e:08:8e:ce:
                    fa:08:e1:d7:2e:8e:c7:4a:42:d7:fd:b5:88:21:0e:
                    22:e2:29:20:f4:d2:54:23:89:43:7f:c8:6b:0b:1b:
                    1b:06:4a:c8:3e:3d:23:e1:97:20:50:fd:57:e5:29:
                    d3:c8:0e:f2:27:66:af:87:80:5a:a6:a5:85:48:df:
                    d7:38:59:30:4f:82:ac:db:d8:33:19:ee:f5:5b:36:
                    8b:75:b6:34:34:02:eb:da:4b:7b:7a:5b:5f:49:81:
                    ad:87
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                07:4D:8E:FC:EB:79:A6:99:75:5D:99:BD:EE:FF:E2:1F:A4:6E:3D:04
            X509v3 Authority Key Identifier:
                keyid:E1:5B:90:FF:DF:A0:AB:28:54:85:E7:84:46:B8:71:99:8B:24:DC:C0

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/4VuQ_9-gqyhUheeERrhxmYsk3MA.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4e/5f3e21-6b41-4964-bfda-cbbfda92419d/1/4VuQ_9-gqyhUheeERrhxmYsk3MA.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/4e/5f3e21-6b41-4964-bfda-cbbfda92419d/1/4VuQ_9-gqyhUheeERrhxmYsk3MA.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         b6:77:cc:cd:fe:f2:d9:28:3a:c9:b9:e2:36:bf:27:ef:83:f5:
         1c:c9:53:ec:be:4a:7f:c3:7d:36:e9:37:34:7a:db:37:cd:ee:
         7d:27:62:e4:b5:56:e4:8f:5d:dd:ad:ce:19:ce:eb:4e:96:63:
         6b:6c:07:e8:fd:d9:8e:4c:8b:0f:3b:cd:43:d4:27:11:c8:e9:
         81:71:b0:0c:47:86:49:61:47:13:21:30:be:d2:af:88:a6:cb:
         07:f0:37:05:00:29:34:82:38:6e:7d:7d:93:9b:37:6f:3b:f4:
         4c:cd:c8:9d:52:db:83:0e:7f:8e:fb:af:3e:72:c9:5e:ad:e3:
         97:54:36:d8:98:62:0e:10:9f:a4:90:5a:77:02:2a:f5:59:df:
         86:40:dd:79:fc:fa:56:ca:61:26:9e:18:e0:02:21:bd:66:07:
         b6:19:33:27:f7:7f:e7:59:bb:75:04:96:fe:a3:9f:0d:28:63:
         08:16:f5:0c:4c:ce:fb:7a:28:d7:22:71:eb:5b:96:ed:90:ff:
         fc:64:21:b1:87:f3:2f:8a:a9:73:f0:20:f6:ca:7f:5a:fb:8e:
         1e:d9:15:53:7d:57:21:de:a9:0d:da:6c:0a:d4:5b:bf:42:50:
         53:4c:1f:49:6f:ad:da:e1:f4:8c:98:71:4f:89:89:88:ec:91:
         9f:55:2e:88
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----