Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/65/4ee85e-22cb-42ed-9071-4651fd802737/1/4hW-RTLpWIxAUxp_Mx6r-_R3Cl4.mft
File:                     4hW-RTLpWIxAUxp_Mx6r-_R3Cl4.mft (raw, json)
Hash identifier:          7OQ0pZ5BDW5EZ1vhHv4LUClRvhwQf+2Wr2wOJQ4lIgU=
Subject key identifier:   D7:D1:E4:49:79:E5:EA:F8:27:F1:DC:65:59:D4:32:8C:3D:62:DA:8E
Authority key identifier: E2:15:BE:45:32:E9:58:8C:40:53:1A:7F:33:1E:AB:FB:F4:77:0A:5E
Certificate issuer:       /CN=e215be4532e9588c40531a7f331eabfbf4770a5e
Certificate serial:       01962FAB572E6E45D83BF95C3F43F3A786A2
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/4hW-RTLpWIxAUxp_Mx6r-_R3Cl4.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/65/4ee85e-22cb-42ed-9071-4651fd802737/1/4hW-RTLpWIxAUxp_Mx6r-_R3Cl4.mft
Manifest number:          14EC
Signing time:             Sun 13 Apr 2025 15:01:20 +0000
Manifest this update:     Sun 13 Apr 2025 15:01:20 +0000
Manifest next update:     Mon 14 Apr 2025 15:01:20 +0000
Files and hashes:         1: 4hW-RTLpWIxAUxp_Mx6r-_R3Cl4.crl (hash: pEB6GvrZdZzKRDOBrabu3iy3KOh4y8Ac2yG+GrmtPZs=)
                          2: MiDFo4hvMWm2LnOXchY-qMjiF4I.roa (hash: 9GhdLgk27HafhbXSH87ygI5j9h8CqnJUJSkfSDeoTo8=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2f:ab:57:2e:6e:45:d8:3b:f9:5c:3f:43:f3:a7:86:a2
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e215be4532e9588c40531a7f331eabfbf4770a5e
        Validity
            Not Before: Apr 13 15:01:20 2025 GMT
            Not After : Apr 14 15:01:20 2025 GMT
        Subject: CN=d7d1e44979e5eaf827f1dc6559d4328c3d62da8e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b4:8a:c3:86:cd:73:65:85:8c:12:39:09:6c:65:
                    6f:78:d3:ed:d4:75:d8:20:7e:40:f6:7b:b7:83:c7:
                    30:c4:c8:3a:3c:67:2a:13:5b:58:9f:3a:22:87:a5:
                    ba:04:38:f6:14:d3:12:9c:28:ec:f6:06:6f:ca:37:
                    d0:fd:fd:79:7e:77:18:e5:70:a7:af:27:46:07:40:
                    45:c8:75:7f:ab:13:5a:e7:25:f4:f8:61:98:30:69:
                    e4:18:5c:ae:75:32:d7:83:7a:54:18:8f:6a:30:43:
                    ac:5a:02:74:ee:15:52:d1:08:66:fe:ec:fa:e9:e6:
                    2a:f8:48:c6:85:23:6e:8e:f6:72:50:05:71:3b:8b:
                    2f:d8:a8:7c:f3:14:fb:84:11:43:07:99:13:af:e4:
                    d4:da:81:ce:d3:e0:bb:b3:74:dc:43:5f:31:a3:97:
                    a9:66:f9:7c:68:b3:41:39:a3:ec:93:75:e5:e0:73:
                    f4:37:b1:f6:5c:2d:37:73:df:6f:d4:8d:a6:c7:71:
                    23:1a:79:fd:c5:ab:f9:8b:1b:fd:d1:92:9d:01:91:
                    f9:ba:d7:bd:85:b7:ee:af:f2:c8:33:10:d7:53:b8:
                    b8:67:39:da:8c:41:a4:5f:96:52:46:b3:ec:25:89:
                    42:8c:f2:15:2f:b1:12:b5:ba:b9:5a:b6:2d:e5:4d:
                    e8:2b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D7:D1:E4:49:79:E5:EA:F8:27:F1:DC:65:59:D4:32:8C:3D:62:DA:8E
            X509v3 Authority Key Identifier:
                keyid:E2:15:BE:45:32:E9:58:8C:40:53:1A:7F:33:1E:AB:FB:F4:77:0A:5E

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/4hW-RTLpWIxAUxp_Mx6r-_R3Cl4.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/65/4ee85e-22cb-42ed-9071-4651fd802737/1/4hW-RTLpWIxAUxp_Mx6r-_R3Cl4.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/65/4ee85e-22cb-42ed-9071-4651fd802737/1/4hW-RTLpWIxAUxp_Mx6r-_R3Cl4.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         1a:1f:c9:a4:fd:55:b5:11:3c:6d:00:26:0f:09:5b:85:48:6f:
         7c:1c:dc:5e:d4:0b:13:85:87:53:5f:da:6a:51:41:13:a2:11:
         49:34:23:ab:04:43:32:89:f9:82:be:54:50:08:14:21:b6:4a:
         e2:c2:ce:fb:38:de:3e:b1:e9:a1:52:65:05:98:57:a6:85:6e:
         c1:a3:5f:62:2f:9a:46:78:19:aa:db:60:f1:b7:9c:b0:b2:f2:
         61:30:8a:37:d0:a8:f5:f0:57:45:8a:bb:b1:52:63:34:ef:29:
         d3:65:29:70:76:b5:6d:82:8e:47:75:9a:67:62:fe:d1:78:7a:
         11:d9:0c:98:98:e0:ff:a7:1e:9a:80:99:f4:a1:e7:e3:3c:a7:
         2f:84:08:54:67:b8:b7:99:76:7f:b5:78:83:e3:a4:7b:f5:c5:
         4c:74:71:d0:4e:7d:1e:76:e6:7c:52:99:b5:88:17:e8:d5:31:
         cf:5a:49:9d:2e:30:60:8d:a5:6f:b3:2a:8e:54:0c:bb:02:9b:
         13:53:78:b6:7e:24:b3:29:b1:f1:f6:e4:10:84:8b:02:68:ac:
         5a:d7:41:43:c2:fa:9d:04:1b:e2:07:d8:36:02:31:3a:58:6e:
         5e:e9:38:a3:ed:61:a0:c8:ed:2a:e5:27:dd:62:d2:d5:c3:ee:
         e8:76:b7:0f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----