Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/57/b4e3e4-1189-4036-8f1a-042f7dac24d5/1/ERk_jomOtvvRLFPffa0CFUPu_G4.mft
File:                     ERk_jomOtvvRLFPffa0CFUPu_G4.mft (raw, json)
Hash identifier:          pQzTpcx7O8QBE7xaZA5MBTNBMK9UmpzCAy+YvzP6br4=
Subject key identifier:   64:2B:F9:B6:BA:C2:9F:AB:3C:4C:2E:9E:13:12:E5:61:35:4B:8F:71
Authority key identifier: 11:19:3F:8E:89:8E:B6:FB:D1:2C:53:DF:7D:AD:02:15:43:EE:FC:6E
Certificate issuer:       /CN=11193f8e898eb6fbd12c53df7dad021543eefc6e
Certificate serial:       01962E2B12F3B59268DBEB61BBE3FEFD11E5
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/ERk_jomOtvvRLFPffa0CFUPu_G4.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/57/b4e3e4-1189-4036-8f1a-042f7dac24d5/1/ERk_jomOtvvRLFPffa0CFUPu_G4.mft
Manifest number:          0950
Signing time:             Sun 13 Apr 2025 08:01:36 +0000
Manifest this update:     Sun 13 Apr 2025 08:01:36 +0000
Manifest next update:     Mon 14 Apr 2025 08:01:36 +0000
Files and hashes:         1: ERk_jomOtvvRLFPffa0CFUPu_G4.crl (hash: 5sE42pPQDeMwaCdoJPPRk3BMpfj3NKMf10IsLhQLwjU=)
                          2: ZO7e_PGmOJbyLefyo1_z7BwudxU.roa (hash: qgGJbkNlWC+c5Pqt1/eJ7xg6x83bvhdBUelMm/vCnYI=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2e:2b:12:f3:b5:92:68:db:eb:61:bb:e3:fe:fd:11:e5
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=11193f8e898eb6fbd12c53df7dad021543eefc6e
        Validity
            Not Before: Apr 13 08:01:36 2025 GMT
            Not After : Apr 14 08:01:36 2025 GMT
        Subject: CN=642bf9b6bac29fab3c4c2e9e1312e561354b8f71
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9e:70:ba:56:06:94:fb:ec:fe:d6:75:b6:46:91:
                    db:e4:c3:a9:d1:45:ee:65:54:c2:19:33:e3:01:96:
                    c7:51:b7:af:32:23:09:c8:6d:be:b3:5e:c6:e7:11:
                    b4:a5:3a:cf:8f:2c:7c:b8:45:d1:17:61:bf:d5:a8:
                    32:79:8f:4d:b9:46:40:6d:0c:5a:fb:fb:90:33:77:
                    2d:63:a7:97:26:29:d4:ec:ab:f7:43:69:0b:a6:12:
                    26:6f:1a:c6:46:93:d8:0e:67:99:46:b1:50:d0:6d:
                    34:69:7d:4f:2f:fb:17:bd:36:62:c1:df:f8:cd:d1:
                    5a:3a:92:65:7f:ce:f2:c9:74:f0:46:e4:d1:38:0c:
                    a4:5e:6a:43:37:32:6f:9b:40:b4:67:13:25:30:e8:
                    35:cc:5b:e7:80:30:92:69:a0:ad:9d:2a:76:8e:c6:
                    2c:a7:bc:41:1e:70:4a:4d:f5:28:d0:3b:90:e2:da:
                    f6:0c:7a:cd:00:34:a4:d1:fc:27:de:14:9e:1e:68:
                    e1:bb:de:f6:5b:53:b6:56:3d:2d:25:bc:56:ee:5f:
                    b1:68:43:87:4d:eb:83:3f:13:ad:32:78:5f:25:52:
                    05:bc:b4:5d:62:04:f4:be:b9:74:d1:72:6d:f1:c6:
                    74:f6:ce:90:45:09:79:ba:d2:5e:ad:ab:52:df:d6:
                    3e:93
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                64:2B:F9:B6:BA:C2:9F:AB:3C:4C:2E:9E:13:12:E5:61:35:4B:8F:71
            X509v3 Authority Key Identifier:
                keyid:11:19:3F:8E:89:8E:B6:FB:D1:2C:53:DF:7D:AD:02:15:43:EE:FC:6E

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ERk_jomOtvvRLFPffa0CFUPu_G4.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/57/b4e3e4-1189-4036-8f1a-042f7dac24d5/1/ERk_jomOtvvRLFPffa0CFUPu_G4.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/57/b4e3e4-1189-4036-8f1a-042f7dac24d5/1/ERk_jomOtvvRLFPffa0CFUPu_G4.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         12:33:9f:71:57:3d:4d:df:f5:84:bd:02:6a:14:1a:ea:5b:e5:
         1e:89:a4:4e:7a:f8:36:13:1f:94:ab:4a:65:06:a0:30:30:e2:
         af:a4:2b:10:a0:c8:cf:6e:7f:89:b2:13:73:9c:ef:a6:92:7e:
         88:00:8e:04:d4:1c:fd:e8:53:0e:cf:79:3a:21:fb:e7:23:07:
         90:da:81:96:01:eb:ce:e0:43:7d:a0:c7:34:21:2c:7b:cf:c9:
         40:55:d5:4f:60:58:12:5a:df:58:d9:e5:2e:33:06:f5:4e:4f:
         09:b8:0f:f9:0f:c7:7d:db:98:d2:19:84:e6:e8:82:8f:16:fb:
         4e:47:42:b3:59:2d:27:85:24:a4:e4:97:fe:66:f9:02:74:ea:
         49:8f:50:17:14:92:1d:4b:70:b5:85:4f:40:8e:db:e2:b0:f6:
         51:a1:1f:d5:29:ef:a0:a4:f0:36:68:52:99:60:9f:4a:21:77:
         70:47:bd:a3:40:1a:1c:16:12:98:80:34:b2:de:ca:4f:1c:84:
         ff:4c:3c:81:b6:f7:f8:6b:0c:e3:50:b8:36:39:bd:97:08:56:
         32:fb:2c:43:dc:e9:a8:8f:1b:5b:37:62:0e:15:cf:a3:48:2f:
         f0:aa:31:b9:97:d6:69:4e:03:9e:81:6a:14:b6:41:dc:65:e3:
         ad:a6:5f:af
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----