Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/53/5429d8-f411-4692-b0a7-155fd0b43f9f/1/13eW4WtWXXJzZphsycqcpj0aTlg.mft
File:                     13eW4WtWXXJzZphsycqcpj0aTlg.mft (raw, json)
Hash identifier:          vh9+m2oKRfIZ3ILX1ExCZE7UTY1b8ESrW934VMd+fC4=
Subject key identifier:   42:F5:43:8E:70:E1:FA:1A:D3:AF:62:3E:9E:06:FF:4D:D1:93:35:13
Authority key identifier: D7:77:96:E1:6B:56:5D:72:73:66:98:6C:C9:CA:9C:A6:3D:1A:4E:58
Certificate issuer:       /CN=d77796e16b565d727366986cc9ca9ca63d1a4e58
Certificate serial:       01962E62039DF3C6F1A5839F1FF065BD049C
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/13eW4WtWXXJzZphsycqcpj0aTlg.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/53/5429d8-f411-4692-b0a7-155fd0b43f9f/1/13eW4WtWXXJzZphsycqcpj0aTlg.mft
Manifest number:          020B
Signing time:             Sun 13 Apr 2025 09:01:37 +0000
Manifest this update:     Sun 13 Apr 2025 09:01:37 +0000
Manifest next update:     Mon 14 Apr 2025 09:01:37 +0000
Files and hashes:         1: 13eW4WtWXXJzZphsycqcpj0aTlg.crl (hash: jpP2jE2rxGrG3+IdXhFadaiWboxZkdwzwlBK8vRjh7c=)
                          2: NWVCp8Y4Yrwt2l5OQ2N28tAv5Vs.roa (hash: F9PS4+2YWZWixXX0triEKsctJpMJlaT/3wjK6G1EJGE=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2e:62:03:9d:f3:c6:f1:a5:83:9f:1f:f0:65:bd:04:9c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d77796e16b565d727366986cc9ca9ca63d1a4e58
        Validity
            Not Before: Apr 13 09:01:37 2025 GMT
            Not After : Apr 14 09:01:37 2025 GMT
        Subject: CN=42f5438e70e1fa1ad3af623e9e06ff4dd1933513
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:86:7e:f5:71:32:eb:47:75:86:87:bc:ed:88:a4:
                    ac:bb:17:7c:41:fb:1a:81:ae:60:ee:9d:29:db:7f:
                    bc:36:65:bf:e3:2d:04:d9:09:c6:9a:96:03:3f:cf:
                    c8:6a:ba:60:55:8e:88:11:12:56:2c:17:a9:de:44:
                    2e:93:6c:da:72:95:e3:98:18:42:3a:7f:3b:5a:79:
                    e6:d7:f1:b3:f6:ca:75:8d:0c:87:f0:73:55:9d:bb:
                    1a:00:13:92:d9:59:bf:87:be:2e:14:63:b8:b2:12:
                    37:5b:c1:e4:b3:12:e5:48:ff:09:a8:79:be:61:2c:
                    ec:50:d5:3a:77:b0:47:f2:05:ce:9d:ee:a9:27:68:
                    6d:40:46:0b:9b:f2:5e:dc:ad:43:2e:6c:55:e2:6c:
                    b3:ca:af:9d:71:6e:de:8d:07:8c:b6:1e:c3:fa:96:
                    58:62:d2:87:16:92:98:38:f3:ce:34:e3:d0:4f:9a:
                    d6:59:8e:9c:81:12:c2:53:18:1c:02:bd:98:f9:4f:
                    7e:c8:72:1b:a0:5e:b7:35:03:fd:11:e7:df:6c:a8:
                    22:a5:60:cf:8c:67:af:67:e6:a5:66:27:b8:3f:a3:
                    0b:a9:06:d4:27:88:11:51:df:5b:31:8a:6a:c6:ed:
                    af:ab:d0:6a:b9:87:32:40:8b:71:e8:4f:56:a0:04:
                    82:03
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                42:F5:43:8E:70:E1:FA:1A:D3:AF:62:3E:9E:06:FF:4D:D1:93:35:13
            X509v3 Authority Key Identifier:
                keyid:D7:77:96:E1:6B:56:5D:72:73:66:98:6C:C9:CA:9C:A6:3D:1A:4E:58

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/13eW4WtWXXJzZphsycqcpj0aTlg.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/53/5429d8-f411-4692-b0a7-155fd0b43f9f/1/13eW4WtWXXJzZphsycqcpj0aTlg.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/53/5429d8-f411-4692-b0a7-155fd0b43f9f/1/13eW4WtWXXJzZphsycqcpj0aTlg.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         95:f8:33:8f:a5:80:15:17:7c:ad:38:cf:9d:e4:67:26:47:9c:
         65:83:b0:dd:02:ca:71:dd:f1:e1:18:ba:96:ac:63:2e:f6:1c:
         53:ba:84:73:3f:40:16:b2:b8:07:74:e6:a7:94:d8:09:da:52:
         31:30:93:e8:ed:3f:04:5b:1c:5e:60:e1:e8:f1:0a:87:cf:1d:
         86:3c:6e:8b:c0:03:0e:28:09:db:b5:8e:88:1e:53:c4:93:1a:
         02:9b:33:95:62:29:f2:d0:b6:4b:61:87:8d:7d:a5:ae:78:c7:
         f5:9d:b9:5c:f4:52:0a:cd:f8:11:7d:4a:ec:14:f2:e9:82:53:
         a7:a4:fd:e2:3a:87:62:c6:0b:8c:d0:b8:9f:f1:ad:a3:05:ce:
         fd:9f:fb:92:21:03:b8:51:a0:8e:96:73:b0:66:af:2c:a1:dc:
         dc:d6:f5:34:15:c7:56:cb:45:3e:2c:b0:8c:f8:3c:bc:df:cb:
         fc:bf:98:60:53:99:0a:6f:c6:f4:49:cf:3a:23:19:b0:ae:01:
         16:16:12:aa:01:93:df:fa:d8:6a:9b:83:02:e4:a7:93:2b:18:
         34:bc:85:cd:aa:6d:85:89:41:61:8b:18:de:0e:0d:81:7a:b8:
         24:e5:49:01:44:ad:47:f9:5b:9a:c0:57:ea:02:02:cc:ae:e8:
         d1:e0:3d:d4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----