Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/61/da2276-6dbf-422e-9ebb-561175f04d8e/1/4COOIod_cwOWQAfOPjQG9frZSWI.mft
File:                     4COOIod_cwOWQAfOPjQG9frZSWI.mft (raw, json)
Hash identifier:          7GhT3VpqUi5IVNYhaEjRvUD0vZN9NQSM3QTUdgLHaoA=
Subject key identifier:   CD:98:AD:46:76:9C:BA:DB:2F:59:41:54:24:FD:3B:56:24:29:00:78
Authority key identifier: E0:23:8E:22:87:7F:73:03:96:40:07:CE:3E:34:06:F5:FA:D9:49:62
Certificate issuer:       /CN=e0238e22877f7303964007ce3e3406f5fad94962
Certificate serial:       01962E98768B1D84A7916CABDBC5CE7C327E
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/4COOIod_cwOWQAfOPjQG9frZSWI.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/61/da2276-6dbf-422e-9ebb-561175f04d8e/1/4COOIod_cwOWQAfOPjQG9frZSWI.mft
Manifest number:          14EB
Signing time:             Sun 13 Apr 2025 10:01:05 +0000
Manifest this update:     Sun 13 Apr 2025 10:01:05 +0000
Manifest next update:     Mon 14 Apr 2025 10:01:05 +0000
Files and hashes:         1: 4COOIod_cwOWQAfOPjQG9frZSWI.crl (hash: eBvu6rH2xj3skIi2+KyGtKek2WqN2XOvj60ZLgGLK7g=)
                          2: VBkUSdd8HhC9ylebW4iiyCK4E-Q.roa (hash: /Z8ymu6jIj7elvCMahyZD4nXriuKXl4fYbvc0S8rJdE=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2e:98:76:8b:1d:84:a7:91:6c:ab:db:c5:ce:7c:32:7e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e0238e22877f7303964007ce3e3406f5fad94962
        Validity
            Not Before: Apr 13 10:01:05 2025 GMT
            Not After : Apr 14 10:01:05 2025 GMT
        Subject: CN=cd98ad46769cbadb2f59415424fd3b5624290078
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9d:d9:a1:96:f9:04:18:b1:d4:ae:7e:fe:d4:c1:
                    69:76:e9:c0:72:1c:db:7c:f3:c8:a2:0f:db:5f:4f:
                    78:5b:24:b4:f1:51:dd:0e:4d:57:1a:7a:14:0c:84:
                    ab:95:7a:4c:46:39:39:8a:d8:06:86:1c:9d:84:97:
                    9c:90:11:c4:39:e2:1a:1d:01:1a:4e:c9:6e:d8:2c:
                    bd:5a:a9:82:83:8d:7d:c4:51:97:b7:d6:80:9e:a2:
                    68:6b:9b:a9:ff:6b:e7:f5:af:a2:66:37:5f:14:f1:
                    5c:47:4e:4d:5a:69:6a:f9:57:26:83:f4:73:95:74:
                    8d:20:4c:d7:99:eb:ae:38:8a:ac:61:54:0e:66:70:
                    a7:39:20:a9:a3:d1:f4:d7:39:2b:ff:95:2e:e1:bb:
                    a3:c2:d3:80:9a:7b:7a:25:ef:88:53:cd:8c:a6:db:
                    6c:cf:be:35:0b:b0:b6:5f:3a:ad:85:39:ec:19:10:
                    14:19:a3:f6:dc:ea:18:e1:8e:db:39:24:c7:26:f1:
                    e6:48:d9:ae:4a:45:bf:0a:6b:55:b3:3b:21:c0:c7:
                    09:9a:e3:b6:c1:de:cf:04:ce:82:f4:17:70:dc:11:
                    f3:d3:6c:e3:44:1b:2c:9b:73:3f:d6:39:e3:97:ed:
                    fb:42:af:a9:e2:b8:b0:19:33:17:8b:9b:58:51:e1:
                    45:59
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CD:98:AD:46:76:9C:BA:DB:2F:59:41:54:24:FD:3B:56:24:29:00:78
            X509v3 Authority Key Identifier:
                keyid:E0:23:8E:22:87:7F:73:03:96:40:07:CE:3E:34:06:F5:FA:D9:49:62

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/4COOIod_cwOWQAfOPjQG9frZSWI.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/61/da2276-6dbf-422e-9ebb-561175f04d8e/1/4COOIod_cwOWQAfOPjQG9frZSWI.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/61/da2276-6dbf-422e-9ebb-561175f04d8e/1/4COOIod_cwOWQAfOPjQG9frZSWI.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         29:3f:a8:9a:de:3a:b0:17:e1:24:f3:82:05:75:ed:fd:25:61:
         57:36:66:d7:f4:a3:ec:5f:82:cd:56:e9:cb:b6:fb:82:aa:97:
         51:59:27:01:e7:c2:16:f3:c3:ff:85:2b:ab:49:06:59:7d:ce:
         e6:9c:02:e0:5d:35:09:60:44:58:be:55:ec:6c:37:a0:ba:76:
         5d:1b:1f:f9:49:4a:4e:9b:83:fa:aa:77:09:26:6d:91:74:9c:
         09:10:d3:75:b9:66:5d:ff:8e:8a:26:b0:f8:1d:df:8a:04:ad:
         bc:1b:2f:ef:21:fa:8a:7f:ec:ec:65:a0:ae:ec:57:b7:92:89:
         4c:2d:a4:ed:dc:87:c5:8c:06:48:8d:2a:87:c7:f7:f1:be:a5:
         65:4a:83:33:a2:b3:2b:0a:a7:eb:92:26:7e:08:a3:ee:75:99:
         b9:dd:d6:b2:d6:73:f7:83:15:74:29:22:98:61:aa:db:5d:2a:
         e0:33:3c:00:34:ff:5a:6f:85:0e:5a:4e:f0:65:a4:69:44:80:
         af:e9:1f:b6:93:2a:21:99:41:52:6c:4c:03:ff:97:e4:b8:e4:
         c2:f4:21:d1:e2:3a:cb:29:85:3e:b8:dd:89:72:b6:50:fd:52:
         9c:23:a9:e5:13:58:7c:f2:21:e2:c2:56:45:c1:04:d6:e3:24:
         b2:e3:6c:cf
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----