Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/55/18b690-c5ae-4fb4-8bf8-63a0be6a8e5f/1/rujl3-xoOuXxoOvg-5b6JWswR2I.mft
File:                     rujl3-xoOuXxoOvg-5b6JWswR2I.mft (raw, json)
Hash identifier:          wXaaPCEh0kspp1M50y0VLESSabWu8wNUm1rxZqord3Q=
Subject key identifier:   F4:47:D4:80:04:A2:DC:49:19:F7:6E:62:C1:43:CC:1F:AB:DD:7F:67
Authority key identifier: AE:E8:E5:DF:EC:68:3A:E5:F1:A0:EB:E0:FB:96:FA:25:6B:30:47:62
Certificate issuer:       /CN=aee8e5dfec683ae5f1a0ebe0fb96fa256b304762
Certificate serial:       01962F069D661ED5AAF135375F7F57FD25D8
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/rujl3-xoOuXxoOvg-5b6JWswR2I.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/55/18b690-c5ae-4fb4-8bf8-63a0be6a8e5f/1/rujl3-xoOuXxoOvg-5b6JWswR2I.mft
Manifest number:          0DA7
Signing time:             Sun 13 Apr 2025 12:01:24 +0000
Manifest this update:     Sun 13 Apr 2025 12:01:24 +0000
Manifest next update:     Mon 14 Apr 2025 12:01:24 +0000
Files and hashes:         1: I1hQSc_aI8nnk6g1vpjyTdXYNJI.roa (hash: h2IeKZyMJz7T7nR3ubhVngPyKXqYp/CJM8eA4imhJCk=)
                          2: rujl3-xoOuXxoOvg-5b6JWswR2I.crl (hash: TEjU7KMbQbMEeQP3XMhMQwo/QXsH1fNFAm3ejp22O8E=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2f:06:9d:66:1e:d5:aa:f1:35:37:5f:7f:57:fd:25:d8
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=aee8e5dfec683ae5f1a0ebe0fb96fa256b304762
        Validity
            Not Before: Apr 13 12:01:24 2025 GMT
            Not After : Apr 14 12:01:24 2025 GMT
        Subject: CN=f447d48004a2dc4919f76e62c143cc1fabdd7f67
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b3:b9:00:ce:48:c8:ae:18:ab:ea:e4:0f:6f:c4:
                    6d:ba:ed:ce:67:e7:7b:ae:73:ed:ec:fc:42:36:ba:
                    70:06:39:e4:95:49:2a:09:61:bb:6f:53:30:eb:e7:
                    cc:dc:6f:04:55:a5:5e:48:c3:d5:e5:da:bb:4f:17:
                    35:48:0a:be:5d:18:ab:4a:a5:00:7d:e6:7b:19:4e:
                    65:e0:56:09:db:c4:80:78:6c:76:c9:e7:89:c2:87:
                    40:fd:84:f1:5a:69:74:f0:95:bd:c4:88:63:a8:fd:
                    24:30:58:61:1e:ed:a2:39:1c:19:d7:d0:3a:34:b5:
                    fa:05:48:d9:de:18:e0:dd:5a:f3:ef:c2:37:8f:23:
                    fe:4c:48:c0:2c:b5:2d:a0:c2:3e:92:6d:07:7e:2e:
                    62:ea:a6:82:5e:9f:ee:27:fd:c7:37:bc:fa:3b:9b:
                    98:a7:8c:ae:cb:66:6a:dd:16:cc:52:20:f8:6d:b9:
                    9b:26:6d:bd:20:17:02:e4:e8:c9:3e:98:4f:2c:80:
                    8e:39:fb:d7:c4:59:5c:37:5a:66:3f:f9:97:6d:a9:
                    24:6a:f1:99:94:c0:5e:68:0f:f0:09:a8:5a:0e:35:
                    6d:58:d8:30:30:9a:8a:f1:d4:b8:d1:20:df:fb:8d:
                    46:ca:e8:12:78:ae:76:2b:e1:91:e8:96:a4:43:55:
                    8e:51
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F4:47:D4:80:04:A2:DC:49:19:F7:6E:62:C1:43:CC:1F:AB:DD:7F:67
            X509v3 Authority Key Identifier:
                keyid:AE:E8:E5:DF:EC:68:3A:E5:F1:A0:EB:E0:FB:96:FA:25:6B:30:47:62

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/rujl3-xoOuXxoOvg-5b6JWswR2I.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/55/18b690-c5ae-4fb4-8bf8-63a0be6a8e5f/1/rujl3-xoOuXxoOvg-5b6JWswR2I.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/55/18b690-c5ae-4fb4-8bf8-63a0be6a8e5f/1/rujl3-xoOuXxoOvg-5b6JWswR2I.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         e5:da:c9:73:e5:3c:b8:2a:a5:36:e4:75:40:0a:10:15:86:7c:
         05:35:67:83:b2:a3:23:8b:c4:bd:48:3a:f9:13:ad:59:00:68:
         f8:66:89:ca:9c:6b:44:19:f2:66:d3:31:1f:5f:c4:68:41:7a:
         8b:37:29:f9:bf:4f:78:83:10:07:45:87:96:15:81:d6:53:a9:
         cc:47:22:fa:30:4c:4b:11:2b:a7:10:0f:04:f3:2b:92:94:76:
         28:0c:61:bb:e5:4e:de:d2:c2:21:b4:f2:01:ed:53:42:03:83:
         41:0b:a8:b0:96:e5:c9:a6:fa:48:a4:75:10:49:2b:dc:46:6a:
         4c:6c:e6:04:eb:70:76:ca:be:08:35:70:56:27:0c:7d:49:55:
         e7:f2:03:44:16:89:55:58:e3:f0:f3:5f:4f:cf:d0:36:04:9d:
         53:53:bc:53:38:04:95:30:a1:c3:e8:54:c0:07:e5:a1:c2:e7:
         ba:70:2f:08:fd:96:12:7a:58:1b:93:70:cd:98:4f:a3:7f:5f:
         f8:dc:a3:e7:4e:8b:e3:bd:6f:de:02:21:56:9e:4b:14:11:f8:
         f9:cd:8e:1f:36:48:6a:d6:d7:5d:75:45:5d:9b:f1:01:46:c4:
         a0:18:17:d6:3f:b9:4d:16:c4:d9:dd:19:c8:ba:63:66:30:7e:
         ac:12:65:6c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----