Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/64/660cca-c1aa-4558-ad1e-e53f904a1f58/1/N3eGgTYbH_-HzjmEAu-mOGnlv9E.mft
File:                     N3eGgTYbH_-HzjmEAu-mOGnlv9E.mft (raw, json)
Hash identifier:          UxiUWzssbqE37BjJpQ1q49rRai7Cres4/HRIg9qpUog=
Subject key identifier:   E0:2C:E2:28:EA:1C:94:C6:43:2B:EF:F4:01:84:46:86:4A:B9:34:6C
Authority key identifier: 37:77:86:81:36:1B:1F:FF:87:CE:39:84:02:EF:A6:38:69:E5:BF:D1
Certificate issuer:       /CN=37778681361b1fff87ce398402efa63869e5bfd1
Certificate serial:       01962DF42B815AD43D3D23392B15F72CD2C6
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/N3eGgTYbH_-HzjmEAu-mOGnlv9E.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/64/660cca-c1aa-4558-ad1e-e53f904a1f58/1/N3eGgTYbH_-HzjmEAu-mOGnlv9E.mft
Manifest number:          0A96
Signing time:             Sun 13 Apr 2025 07:01:38 +0000
Manifest this update:     Sun 13 Apr 2025 07:01:38 +0000
Manifest next update:     Mon 14 Apr 2025 07:01:38 +0000
Files and hashes:         1: N3eGgTYbH_-HzjmEAu-mOGnlv9E.crl (hash: 6DJxgyHUMJFSy219zgtpQBaepVbw67JcSircJx6SiNI=)
                          2: vmuvpxt5NWFRchGpjymjM-OTFyk.roa (hash: xudIwgzuBx5c488Lg5NntvMmtHShvLXZUS8ATmxeVvo=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2d:f4:2b:81:5a:d4:3d:3d:23:39:2b:15:f7:2c:d2:c6
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=37778681361b1fff87ce398402efa63869e5bfd1
        Validity
            Not Before: Apr 13 07:01:38 2025 GMT
            Not After : Apr 14 07:01:38 2025 GMT
        Subject: CN=e02ce228ea1c94c6432beff4018446864ab9346c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cf:0c:5b:a3:37:34:55:f6:a2:ff:7e:54:5d:67:
                    ca:23:37:56:c5:e4:bf:39:99:86:d9:68:81:10:3d:
                    58:91:a3:78:a0:eb:49:ac:df:0a:1b:cc:09:a1:07:
                    c2:22:9b:81:f3:d1:74:04:15:57:bc:6f:b1:a7:26:
                    0f:b4:73:d3:7c:98:d1:6c:4d:c6:38:2c:42:69:60:
                    2b:ca:84:d0:56:30:6d:2b:c3:ed:2a:7e:f2:e7:0f:
                    4b:3c:8e:1c:43:53:b7:55:0c:f7:a5:e4:27:00:12:
                    db:25:02:0f:31:50:c5:a4:7b:bf:df:6d:59:fb:42:
                    1d:e1:40:54:38:de:4c:20:c1:21:1e:bf:eb:b1:8f:
                    20:06:63:24:0c:b6:1d:aa:b5:55:13:df:db:a7:37:
                    86:a5:e7:5f:ba:d8:29:56:9c:d2:01:c0:70:89:d5:
                    d5:c6:ce:e3:c4:cb:68:13:6f:a8:33:ac:9b:95:eb:
                    db:04:65:cc:32:95:6d:47:29:98:df:c4:e5:a5:7d:
                    d0:bc:b2:c3:c2:85:b8:44:56:fe:a3:e9:7f:00:88:
                    53:29:73:a0:2c:f8:82:36:e2:0f:7f:12:3b:25:93:
                    b7:20:5f:a9:25:46:ba:4d:92:ff:aa:fc:5e:0c:76:
                    71:4e:fe:a9:bc:1c:fa:39:37:9b:4e:95:f0:b0:a8:
                    12:af
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E0:2C:E2:28:EA:1C:94:C6:43:2B:EF:F4:01:84:46:86:4A:B9:34:6C
            X509v3 Authority Key Identifier:
                keyid:37:77:86:81:36:1B:1F:FF:87:CE:39:84:02:EF:A6:38:69:E5:BF:D1

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/N3eGgTYbH_-HzjmEAu-mOGnlv9E.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/64/660cca-c1aa-4558-ad1e-e53f904a1f58/1/N3eGgTYbH_-HzjmEAu-mOGnlv9E.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/64/660cca-c1aa-4558-ad1e-e53f904a1f58/1/N3eGgTYbH_-HzjmEAu-mOGnlv9E.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         19:36:02:2e:38:d2:ad:eb:bd:bf:48:8b:b1:57:64:b7:01:62:
         97:a5:f5:db:ea:23:92:0d:b1:54:7a:ac:7e:36:00:04:1a:ab:
         75:03:c5:68:33:14:17:e8:3f:7f:2f:30:69:1c:19:f3:33:9a:
         0f:14:c2:f6:a6:32:d8:67:f5:74:b5:3d:67:b9:4a:56:a1:c5:
         b4:0e:c8:e8:31:ce:98:c3:4d:02:8b:da:69:fa:f0:c5:90:47:
         cd:b9:a3:a2:ba:ea:fd:0a:ba:21:6d:d0:81:2b:c8:b1:09:de:
         c0:bc:b6:2e:85:5a:86:30:b6:20:f8:85:73:92:5a:c3:09:bf:
         e6:39:de:58:aa:b0:c9:de:eb:46:ae:db:72:25:1d:c2:d0:dc:
         77:23:bd:c4:b4:ba:99:00:25:74:62:4d:72:a2:8b:35:0f:f8:
         9b:80:f7:99:7d:4d:ef:b8:98:92:1d:55:b6:9f:3d:b5:c5:58:
         b0:f4:30:12:5c:b5:5f:fd:34:56:c4:6d:d5:07:c0:83:a0:a6:
         be:09:82:15:97:2c:a0:fe:77:b8:d8:40:18:44:ee:a7:15:36:
         41:2c:07:81:fb:51:c1:52:3b:90:1d:17:5f:95:8b:6a:5c:89:
         c8:ea:98:aa:af:bd:a0:fd:33:5e:75:26:2a:b2:ee:7e:7e:5d:
         fe:ff:54:59
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----