Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/50/06b8f5-1a76-45f8-b97a-ac8647d0558a/1/h4q7KZd6ZbFAystucqskzt3U6MU.mft
File:                     h4q7KZd6ZbFAystucqskzt3U6MU.mft (raw, json)
Hash identifier:          UmJRqjy4g95ZhT6mE2fHKz+EoXjkNcdSj9c36uqbfBA=
Subject key identifier:   0D:9E:FF:AA:D6:0E:0B:8B:00:06:78:A2:04:41:4B:43:55:B0:FF:10
Authority key identifier: 87:8A:BB:29:97:7A:65:B1:40:CA:CB:6E:72:AB:24:CE:DD:D4:E8:C5
Certificate issuer:       /CN=878abb29977a65b140cacb6e72ab24ceddd4e8c5
Certificate serial:       01962E98F497833AEFF5144E74384E243EFF
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/h4q7KZd6ZbFAystucqskzt3U6MU.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/50/06b8f5-1a76-45f8-b97a-ac8647d0558a/1/h4q7KZd6ZbFAystucqskzt3U6MU.mft
Manifest number:          015E
Signing time:             Sun 13 Apr 2025 10:01:38 +0000
Manifest this update:     Sun 13 Apr 2025 10:01:38 +0000
Manifest next update:     Mon 14 Apr 2025 10:01:38 +0000
Files and hashes:         1: h4q7KZd6ZbFAystucqskzt3U6MU.crl (hash: yC6oKKDTNUXjEqYt4qQHweaCv6J3JY3Uxuf7AER5ZRg=)
                          2: mvYs-hlLQyMdKxgPw0g_jo2b_pY.roa (hash: 0QeO5mI8uGOMSEPrjMS+fRkkFQOtOiLS9tRis3ZfEow=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2e:98:f4:97:83:3a:ef:f5:14:4e:74:38:4e:24:3e:ff
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=878abb29977a65b140cacb6e72ab24ceddd4e8c5
        Validity
            Not Before: Apr 13 10:01:38 2025 GMT
            Not After : Apr 14 10:01:38 2025 GMT
        Subject: CN=0d9effaad60e0b8b000678a204414b4355b0ff10
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:98:02:a1:55:68:e0:14:fb:1e:31:08:b8:80:51:
                    e9:1e:d1:ed:14:7f:6d:0e:2f:a2:b8:13:00:d5:c5:
                    6d:f6:48:fc:6e:2e:39:68:fe:b8:b0:59:d3:b3:e0:
                    d5:af:4c:14:2c:a4:69:85:03:4d:7f:38:ee:cb:a1:
                    b7:ef:73:16:73:48:2b:01:09:0a:fa:b7:1b:ef:e1:
                    b6:3d:c7:54:93:65:bb:df:55:3d:58:2b:f5:bf:62:
                    28:06:e9:c9:f9:c2:0b:c0:22:57:d0:41:3c:2f:7e:
                    a0:b9:eb:11:53:d4:65:51:eb:50:36:23:d4:eb:99:
                    2e:13:88:a1:37:6b:34:51:9b:8f:2b:9f:82:ef:12:
                    c6:9f:b6:62:0b:df:a8:60:a1:ee:89:c9:00:53:eb:
                    5a:2d:d4:1c:fc:0b:d9:14:ac:5d:b5:91:4c:35:f8:
                    23:7d:9d:40:2e:13:fc:41:0d:3a:fd:7e:08:be:aa:
                    14:90:64:10:76:51:46:e8:64:a5:5a:11:53:dd:05:
                    88:92:d9:09:31:67:dc:f4:7e:0a:2c:81:e0:2a:59:
                    be:49:ea:b0:68:f9:2b:16:24:da:2d:fc:5c:77:88:
                    8a:30:aa:57:41:e3:82:ca:4a:58:08:1b:b8:b3:39:
                    73:a9:24:35:66:ef:e8:eb:f6:0d:dd:64:7a:66:d9:
                    da:a5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0D:9E:FF:AA:D6:0E:0B:8B:00:06:78:A2:04:41:4B:43:55:B0:FF:10
            X509v3 Authority Key Identifier:
                keyid:87:8A:BB:29:97:7A:65:B1:40:CA:CB:6E:72:AB:24:CE:DD:D4:E8:C5

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/h4q7KZd6ZbFAystucqskzt3U6MU.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/50/06b8f5-1a76-45f8-b97a-ac8647d0558a/1/h4q7KZd6ZbFAystucqskzt3U6MU.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/50/06b8f5-1a76-45f8-b97a-ac8647d0558a/1/h4q7KZd6ZbFAystucqskzt3U6MU.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         bb:19:d3:cb:a6:db:5f:db:98:65:ef:1d:8e:05:21:6d:59:9d:
         57:0d:5d:ec:11:eb:90:74:d0:a8:ab:19:8d:45:c2:07:34:e1:
         34:95:af:25:77:52:c0:38:cb:a1:38:07:37:de:45:1c:eb:40:
         f5:93:6b:92:82:fb:7e:b3:13:dd:9e:2f:1e:a1:d4:4c:f0:cc:
         2b:b5:bc:50:ac:20:30:d4:90:48:16:ae:b9:3f:67:69:ad:93:
         cb:89:a3:83:90:17:82:17:a8:03:06:c9:28:07:a4:2d:ee:d1:
         f3:f9:39:8f:0b:f8:d9:93:30:b3:56:48:7f:6a:61:16:47:d8:
         a2:9c:b9:d5:3e:3d:67:03:77:28:04:b3:c7:c6:30:c5:b4:31:
         2c:a4:ad:d3:15:ce:ed:64:7c:19:73:df:4f:ec:a8:4a:ac:2b:
         fc:04:cd:e8:91:5c:bf:bd:31:42:8b:d3:6f:16:95:99:54:b9:
         30:3a:05:a9:45:a6:fe:ad:02:a9:ec:b5:dd:de:0b:a4:95:43:
         99:db:c1:b9:55:78:fc:89:3e:75:29:83:75:03:25:7b:20:f1:
         03:d7:75:e5:33:d1:bd:e7:79:09:84:4a:98:43:4e:58:81:7d:
         df:b6:f8:7d:03:43:6f:97:4f:20:9e:9a:ab:d0:aa:8a:07:b2:
         e5:d4:4d:b1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----