Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/51/6b169d-7f1f-4214-a25b-8c498077578f/1/18pTroRCI2dXp4Bm5OIXM_dYQHo.mft
File:                     18pTroRCI2dXp4Bm5OIXM_dYQHo.mft (raw, json)
Hash identifier:          FZ2psgjcBPgqIN0lc5P6I5NvvL8OOlO22/LAoHLP4+s=
Subject key identifier:   5C:33:0D:0C:71:28:48:FB:D8:17:D0:7E:8B:EA:AD:1F:79:7D:2D:95
Authority key identifier: D7:CA:53:AE:84:42:23:67:57:A7:80:66:E4:E2:17:33:F7:58:40:7A
Certificate issuer:       /CN=d7ca53ae8442236757a78066e4e21733f758407a
Certificate serial:       01962E98EC9644E04213BBEBAB39C86EF102
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/18pTroRCI2dXp4Bm5OIXM_dYQHo.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/51/6b169d-7f1f-4214-a25b-8c498077578f/1/18pTroRCI2dXp4Bm5OIXM_dYQHo.mft
Manifest number:          1072
Signing time:             Sun 13 Apr 2025 10:01:35 +0000
Manifest this update:     Sun 13 Apr 2025 10:01:35 +0000
Manifest next update:     Mon 14 Apr 2025 10:01:35 +0000
Files and hashes:         1: 18pTroRCI2dXp4Bm5OIXM_dYQHo.crl (hash: MjHMA28pXDqv1xILkbc7ahjdbRMPR6YzuDbnMQ93MKg=)
                          2: 38s2EfLKTKzwDnKrug63iitVwN4.roa (hash: e5mS3BLPFSR7Y2uJcSkAUNlVQiD5b7eKpGpMN+urBn0=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2e:98:ec:96:44:e0:42:13:bb:eb:ab:39:c8:6e:f1:02
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d7ca53ae8442236757a78066e4e21733f758407a
        Validity
            Not Before: Apr 13 10:01:35 2025 GMT
            Not After : Apr 14 10:01:35 2025 GMT
        Subject: CN=5c330d0c712848fbd817d07e8beaad1f797d2d95
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c7:03:f4:22:d0:43:e4:be:2e:71:e4:44:51:4b:
                    dd:34:20:ab:b2:0a:f4:42:a0:51:79:4c:21:26:b7:
                    dd:98:4e:90:7e:d9:b2:26:ab:de:82:5e:7a:85:d3:
                    16:b9:72:0d:22:9c:08:6c:bc:fd:9d:ce:27:18:a1:
                    94:a1:93:a0:21:01:e5:28:f8:d0:e5:a2:fa:66:d7:
                    a9:85:c2:83:a8:ae:cc:d8:b7:1f:72:7b:1e:df:f9:
                    a6:9d:c3:60:aa:8f:36:91:5a:cb:e0:bb:f4:26:2d:
                    7e:0b:3e:1d:08:29:55:71:7a:31:52:9c:05:dd:23:
                    d9:28:61:57:c4:06:f5:f4:22:64:77:68:bc:e7:6b:
                    8d:13:99:f4:79:18:7d:12:2e:3b:35:2f:f2:6f:92:
                    36:1c:f4:34:b0:b3:9e:af:5b:22:0e:5f:17:4d:2e:
                    b1:a7:ac:86:9f:c1:12:c8:5c:b3:ed:77:b2:65:0a:
                    91:d9:1a:3d:69:e7:81:a6:73:67:c8:83:cb:08:48:
                    d9:58:89:89:36:7e:ad:f9:b6:2a:dd:dc:7e:72:fe:
                    15:04:ae:35:2a:50:e3:e1:27:13:3f:c6:93:3e:21:
                    c1:7c:ca:af:aa:1b:7e:4f:c0:fb:5f:3a:07:f9:60:
                    62:4c:dc:2f:4d:97:7f:c0:5c:75:32:cd:b2:a6:78:
                    ef:a7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5C:33:0D:0C:71:28:48:FB:D8:17:D0:7E:8B:EA:AD:1F:79:7D:2D:95
            X509v3 Authority Key Identifier:
                keyid:D7:CA:53:AE:84:42:23:67:57:A7:80:66:E4:E2:17:33:F7:58:40:7A

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/18pTroRCI2dXp4Bm5OIXM_dYQHo.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/51/6b169d-7f1f-4214-a25b-8c498077578f/1/18pTroRCI2dXp4Bm5OIXM_dYQHo.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/51/6b169d-7f1f-4214-a25b-8c498077578f/1/18pTroRCI2dXp4Bm5OIXM_dYQHo.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         9e:2a:19:25:10:41:7a:09:ac:d4:92:b2:9e:69:0f:0a:4f:f1:
         b3:e2:e2:76:ec:2d:a5:1e:9f:48:85:e7:5d:eb:3a:01:0f:18:
         a7:85:2a:b3:01:f7:1e:af:97:50:12:83:c5:f7:eb:69:78:30:
         ba:f7:e8:f4:e2:b6:54:c8:2d:b5:0c:65:93:7c:c1:6a:11:38:
         88:8e:02:ed:39:dc:b6:03:bb:e8:15:c2:3e:c7:55:79:c0:19:
         19:2a:16:21:cf:64:68:d8:eb:ee:f2:74:f1:f7:e6:0f:f8:65:
         06:80:1f:68:9a:a0:97:fe:41:ad:46:84:4b:93:af:fa:e0:b1:
         b6:34:c3:8a:ef:ef:4d:bc:e5:78:9a:73:a4:71:f5:3d:cc:a9:
         7b:d0:56:6d:61:26:fe:34:9f:ed:0e:db:da:22:67:8c:bc:d5:
         e5:bd:75:35:51:8c:98:b8:cd:f9:3e:0a:21:4c:a8:61:84:db:
         15:7a:1a:57:12:c9:47:79:1d:7e:e4:75:98:64:35:6a:91:e5:
         02:6d:a2:84:a7:bf:b7:01:f8:b3:9f:93:ee:f3:d7:e2:3b:40:
         78:8f:76:d6:4f:eb:62:ad:e6:dd:df:87:9f:6a:8a:de:ac:da:
         c8:3c:b2:22:dd:be:19:65:d8:60:c1:b5:39:72:06:61:4c:51:
         2c:17:97:66
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----