Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5a/738edb-d9ff-4af5-8341-fc5cc64db749/1/ce5-1KapEFTmvCSYaT_gwvhiEB0.mft
File:                     ce5-1KapEFTmvCSYaT_gwvhiEB0.mft (raw, json)
Hash identifier:          e/huEN5CndZ6N+F3N7ZJTUknLud9/E9QwSALkQxEVxw=
Subject key identifier:   2C:30:CD:A2:8A:FD:FF:38:E9:CE:62:04:6C:70:36:1F:E0:CC:A8:8B
Authority key identifier: 71:EE:7E:D4:A6:A9:10:54:E6:BC:24:98:69:3F:E0:C2:F8:62:10:1D
Certificate issuer:       /CN=71ee7ed4a6a91054e6bc2498693fe0c2f862101d
Certificate serial:       01962DF3EDFD21D33CC9F32C1FC008F623B8
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/ce5-1KapEFTmvCSYaT_gwvhiEB0.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/5a/738edb-d9ff-4af5-8341-fc5cc64db749/1/ce5-1KapEFTmvCSYaT_gwvhiEB0.mft
Manifest number:          0BF6
Signing time:             Sun 13 Apr 2025 07:01:22 +0000
Manifest this update:     Sun 13 Apr 2025 07:01:22 +0000
Manifest next update:     Mon 14 Apr 2025 07:01:22 +0000
Files and hashes:         1: ce5-1KapEFTmvCSYaT_gwvhiEB0.crl (hash: CQgV3ksLkuRm8LkQw01Lcu2mD/BUrkXeyN0JGwU8H8o=)
                          2: dejiYWXpVyt-n4zSW5_bBe-6r0A.roa (hash: S+DqE/3RRz1xoArghf5VPCEdg1QAxwIn8VFz5upxaGc=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2d:f3:ed:fd:21:d3:3c:c9:f3:2c:1f:c0:08:f6:23:b8
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=71ee7ed4a6a91054e6bc2498693fe0c2f862101d
        Validity
            Not Before: Apr 13 07:01:22 2025 GMT
            Not After : Apr 14 07:01:22 2025 GMT
        Subject: CN=2c30cda28afdff38e9ce62046c70361fe0cca88b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c0:aa:79:77:b1:f9:a5:26:b5:6c:51:72:30:6e:
                    8e:7b:68:ae:2f:4c:13:cb:32:7c:0d:09:ea:8c:9b:
                    4f:06:2c:51:5f:2f:59:e6:2a:bb:d9:a3:67:09:b6:
                    0d:17:f2:ae:a9:41:99:c3:a2:2b:d7:08:26:26:37:
                    59:81:4d:f9:3e:67:29:45:cc:46:c0:01:d7:0b:02:
                    17:6f:cf:8e:4f:28:0a:c0:e0:6b:88:37:b0:ed:05:
                    75:b6:63:a8:53:71:eb:89:82:21:cf:36:18:5d:a3:
                    64:81:14:8d:26:f7:70:54:18:0d:2b:95:2b:dd:8a:
                    4c:ad:1a:0b:58:c6:39:ce:14:d0:e3:ad:44:15:7a:
                    e4:5e:af:06:22:b4:dd:e7:7e:da:f8:aa:89:8c:ca:
                    6f:e8:a6:96:f3:68:73:72:f6:13:48:49:fc:71:c5:
                    ac:46:fd:f5:94:1b:c1:91:5c:5e:60:5a:c2:d6:67:
                    e0:7c:f2:0e:20:6c:fb:65:43:35:77:a8:a7:2a:d4:
                    cb:5a:e6:6a:f1:e4:dc:5e:f6:d8:2c:b4:45:09:d7:
                    3e:87:7e:e7:a2:36:9c:40:cf:7d:5d:ae:90:c2:1d:
                    9b:eb:b7:f1:3b:6a:5a:5f:e3:c6:25:e9:a7:6d:0a:
                    a4:49:65:32:6b:b3:19:96:56:4b:1d:29:9e:4d:67:
                    a6:f3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2C:30:CD:A2:8A:FD:FF:38:E9:CE:62:04:6C:70:36:1F:E0:CC:A8:8B
            X509v3 Authority Key Identifier:
                keyid:71:EE:7E:D4:A6:A9:10:54:E6:BC:24:98:69:3F:E0:C2:F8:62:10:1D

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ce5-1KapEFTmvCSYaT_gwvhiEB0.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5a/738edb-d9ff-4af5-8341-fc5cc64db749/1/ce5-1KapEFTmvCSYaT_gwvhiEB0.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/5a/738edb-d9ff-4af5-8341-fc5cc64db749/1/ce5-1KapEFTmvCSYaT_gwvhiEB0.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         4f:98:b1:fe:af:e4:07:48:06:e8:22:4f:53:05:00:69:d4:e6:
         f8:53:0b:94:b2:47:f4:0f:a5:d6:ae:f2:da:fa:a8:f0:c5:8e:
         2f:dd:1e:6a:45:2f:13:c6:7f:5a:4e:af:82:e1:34:42:49:e0:
         4a:de:82:5e:eb:bc:f4:ef:1e:d4:66:5b:e6:50:7d:e5:96:52:
         d3:e8:ea:18:c9:92:61:4a:d3:b4:57:ae:6a:91:c2:2e:38:a9:
         f7:a7:de:9d:f8:ef:d7:e4:32:47:fd:db:a8:1b:ef:a5:9e:52:
         9b:a0:69:ee:89:eb:5c:7a:ee:c5:c6:e6:9a:6b:ff:07:99:92:
         b0:a8:3b:cc:44:d0:38:2b:ee:80:66:ea:7c:92:34:2e:72:70:
         04:93:ce:d9:3c:59:1b:4e:2f:af:4a:d8:02:93:36:97:c6:f1:
         b7:99:f5:f5:63:5c:f0:56:ba:f6:1b:46:41:93:a4:1e:26:7c:
         de:d0:17:98:8c:b6:3a:f1:58:f5:45:e5:83:26:67:53:01:72:
         0c:fb:33:09:e1:e2:79:9a:88:4a:38:81:d7:40:05:3c:62:28:
         27:3c:de:32:6f:f7:5d:ab:da:83:34:46:8b:26:3f:3d:4e:c5:
         8f:76:78:e9:65:e8:36:d9:aa:d6:e4:44:3b:da:b1:fe:13:30:
         fe:08:77:d9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----