Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/62/8af518-1566-4a6b-804b-1ab5d6209f57/1/4GK7krvun23ndX0lbUj2biB_RK8.mft
File:                     4GK7krvun23ndX0lbUj2biB_RK8.mft (raw, json)
Hash identifier:          7QrHVo4JwcvokDZK6lU5MGpfSBfAsVoNQ3OTPkmsP+Q=
Subject key identifier:   3D:38:62:59:F9:2E:29:AC:99:F9:13:F8:A3:B7:5C:A4:66:53:BA:AE
Authority key identifier: E0:62:BB:92:BB:EE:9F:6D:E7:75:7D:25:6D:48:F6:6E:20:7F:44:AF
Certificate issuer:       /CN=e062bb92bbee9f6de7757d256d48f66e207f44af
Certificate serial:       01962ECFEC855E94A7E8E6D21BBC1F2237CF
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/4GK7krvun23ndX0lbUj2biB_RK8.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/62/8af518-1566-4a6b-804b-1ab5d6209f57/1/4GK7krvun23ndX0lbUj2biB_RK8.mft
Manifest number:          0410
Signing time:             Sun 13 Apr 2025 11:01:40 +0000
Manifest this update:     Sun 13 Apr 2025 11:01:40 +0000
Manifest next update:     Mon 14 Apr 2025 11:01:40 +0000
Files and hashes:         1: 4GK7krvun23ndX0lbUj2biB_RK8.crl (hash: 4xa0iFzRQNh2IMk8frf37jCKMTJGD/Uxh5YKc72VfY8=)
                          2: _tveWUzwl0rRBJDPM4rGk0Xjwr0.roa (hash: mX1Yyf8Gy2RZPiTSQJGBLTKD4Y7jjrTNhKRYdcriw7s=)
                          3: mB8BgJX73rlkXVf4rQjQxZFmQ74.roa (hash: QKAp2j6WZ6bfCIMjIxWmPLwb9wQaET9IBZN0Uj+49mM=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2e:cf:ec:85:5e:94:a7:e8:e6:d2:1b:bc:1f:22:37:cf
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e062bb92bbee9f6de7757d256d48f66e207f44af
        Validity
            Not Before: Apr 13 11:01:40 2025 GMT
            Not After : Apr 14 11:01:40 2025 GMT
        Subject: CN=3d386259f92e29ac99f913f8a3b75ca46653baae
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:92:b8:7e:11:9f:73:15:05:91:0a:19:bf:8a:82:
                    aa:ef:70:c8:1c:1b:af:31:aa:6e:58:92:68:a1:48:
                    e0:78:6f:01:69:d7:dc:36:23:42:3a:49:91:8a:2c:
                    a5:21:32:ef:0c:1e:76:0e:e2:60:20:e6:fd:65:22:
                    82:d6:47:4f:a6:f8:be:d5:0f:ee:d1:fe:c0:7a:1b:
                    1b:42:f2:34:cd:18:c0:89:68:3e:2f:63:5e:48:27:
                    84:b1:9b:21:73:91:20:ab:0f:b0:b4:23:0b:28:f8:
                    5d:22:73:42:64:b6:e5:fd:ac:59:32:17:d8:24:20:
                    9c:1f:e7:d3:68:8b:de:68:b9:55:44:5d:d3:50:cc:
                    a1:c8:af:94:51:e4:a2:02:fa:d4:4a:be:ef:0b:f1:
                    2f:1f:41:37:36:b4:17:43:67:13:57:40:cb:b3:a6:
                    2c:46:37:ef:2e:b6:2a:eb:20:db:d9:60:c1:0f:d1:
                    fc:79:37:71:e0:33:2e:4c:a6:88:e9:b8:71:b0:ca:
                    b0:c1:a6:08:a7:83:dc:65:a9:24:a0:39:c1:06:0c:
                    32:f2:0a:c6:1c:2e:7f:52:3c:d8:fd:52:d3:4b:4f:
                    a5:fe:2d:ac:67:5b:3b:c6:2e:3f:83:7c:ed:d9:3c:
                    a1:60:0c:f0:2f:72:22:b7:76:83:91:34:7d:27:00:
                    02:1f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3D:38:62:59:F9:2E:29:AC:99:F9:13:F8:A3:B7:5C:A4:66:53:BA:AE
            X509v3 Authority Key Identifier:
                keyid:E0:62:BB:92:BB:EE:9F:6D:E7:75:7D:25:6D:48:F6:6E:20:7F:44:AF

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/4GK7krvun23ndX0lbUj2biB_RK8.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/62/8af518-1566-4a6b-804b-1ab5d6209f57/1/4GK7krvun23ndX0lbUj2biB_RK8.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/62/8af518-1566-4a6b-804b-1ab5d6209f57/1/4GK7krvun23ndX0lbUj2biB_RK8.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         75:9b:ea:d7:56:c4:61:4a:cc:67:a7:11:71:96:9e:37:2f:c0:
         79:16:4e:ac:5d:12:3d:67:36:8a:3b:f4:35:49:df:e1:ed:c8:
         e4:22:05:c2:9e:41:c0:fc:b4:de:7e:5f:96:6b:66:b8:f7:7f:
         e2:4d:0b:3f:7b:42:78:60:fb:2f:87:9f:a2:4f:82:da:6b:2c:
         4c:d7:91:f9:35:d8:b5:b0:e8:94:24:06:7a:82:14:36:2c:55:
         6b:6f:48:f5:0a:b7:ea:13:ee:06:5e:9c:5c:4c:96:5b:3f:a3:
         4f:89:90:a3:c3:e9:a8:a9:1c:52:3e:08:d0:55:aa:f0:94:c4:
         61:52:d1:ad:91:79:f8:45:60:86:5d:fa:00:60:52:74:9e:c6:
         1f:b9:10:59:88:1f:f1:45:2e:9e:0a:a0:e2:7c:e3:08:29:21:
         88:b8:9e:ff:65:91:66:2c:b8:32:c0:40:65:15:27:5b:42:e3:
         3c:04:02:05:1a:85:14:cd:2d:74:5c:b7:05:89:64:4f:58:6a:
         d2:3b:99:32:68:ca:74:50:2c:8e:3b:37:ce:75:23:5d:a4:25:
         58:36:1a:8f:c6:cf:cc:73:08:48:8c:33:d6:63:20:74:47:29:
         b6:b9:3d:6d:f4:48:02:57:32:04:04:26:e6:26:dd:57:77:b3:
         8d:10:d8:7c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----