Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/67/c3c3c4-27a1-4c79-b7de-b9403f64ba60/1/Ety44UEMjNGOUkV_fhqVgNbaUiY.mft
File:                     Ety44UEMjNGOUkV_fhqVgNbaUiY.mft (raw, json)
Hash identifier:          7WcGrJ0BhaAtp2/kU3z4ZYu4tByEk/E+6NCv90HF3eY=
Subject key identifier:   89:1E:BE:B9:6C:15:24:D1:76:D4:FA:5E:1B:0F:1E:35:5B:BA:7E:77
Authority key identifier: 12:DC:B8:E1:41:0C:8C:D1:8E:52:45:7F:7E:1A:95:80:D6:DA:52:26
Certificate issuer:       /CN=12dcb8e1410c8cd18e52457f7e1a9580d6da5226
Certificate serial:       01962FABAE6C88F0AE405884B8A69B1886F3
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/Ety44UEMjNGOUkV_fhqVgNbaUiY.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/67/c3c3c4-27a1-4c79-b7de-b9403f64ba60/1/Ety44UEMjNGOUkV_fhqVgNbaUiY.mft
Manifest number:          042C
Signing time:             Sun 13 Apr 2025 15:01:42 +0000
Manifest this update:     Sun 13 Apr 2025 15:01:42 +0000
Manifest next update:     Mon 14 Apr 2025 15:01:42 +0000
Files and hashes:         1: Ety44UEMjNGOUkV_fhqVgNbaUiY.crl (hash: ddtTZwlM4FqokAylFzNOkgEOM08eouCy1N29cvpc8HI=)
                          2: jEDgNY90eysDT0Y1G-THT17h3-Q.roa (hash: RQYyUb9Y/6KY2/ltxA8FrdBGYW0gmfS1ieQyM7fG8UY=)
                          3: xjaKNbUWdjhuGKz557km09J85CQ.roa (hash: 3QMey7VrmUqxE6MUlNjFiwNKaAhFddLFlNFaj03POhg=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2f:ab:ae:6c:88:f0:ae:40:58:84:b8:a6:9b:18:86:f3
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=12dcb8e1410c8cd18e52457f7e1a9580d6da5226
        Validity
            Not Before: Apr 13 15:01:42 2025 GMT
            Not After : Apr 14 15:01:42 2025 GMT
        Subject: CN=891ebeb96c1524d176d4fa5e1b0f1e355bba7e77
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:95:4b:fe:f7:66:71:8d:47:20:06:aa:7c:f8:77:
                    6a:17:59:8f:a3:a2:33:f6:c6:ad:1b:e2:bc:bb:7c:
                    b2:60:dc:a4:21:08:6d:05:55:ba:70:6e:a0:3b:80:
                    e7:b3:a1:2a:0c:77:03:09:10:ed:35:37:99:46:94:
                    a9:55:07:3a:ac:7d:83:68:7b:5a:90:01:ff:93:25:
                    92:fd:bf:7b:81:ba:03:c8:72:f4:1d:a1:e8:d4:fc:
                    2e:25:68:70:59:96:3f:df:aa:0f:24:c7:74:aa:3d:
                    c2:07:13:2e:55:4d:77:28:79:f4:4a:6a:37:34:4e:
                    c2:3c:41:2c:7e:22:66:2f:59:9d:a9:0c:f2:ae:ba:
                    2a:62:46:76:ea:25:b4:7c:11:13:bc:e5:f8:61:9b:
                    3c:86:2b:02:0c:3c:fe:de:63:8a:5c:2a:a2:dc:a0:
                    99:52:92:67:4f:f5:4a:7d:b6:c3:1f:00:6a:e2:1c:
                    14:85:ae:38:21:bc:40:6b:62:5b:b0:4b:fc:f4:4d:
                    03:fe:ce:ba:27:64:d0:d7:7e:c0:39:11:d5:24:7b:
                    14:9e:1b:dc:6c:65:c2:39:7e:24:5d:50:a3:77:96:
                    30:ac:8c:05:69:55:22:b7:88:bf:5b:ee:76:58:b3:
                    66:a6:01:c6:5f:1f:80:e1:c1:90:7d:a1:3c:21:68:
                    6c:b3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                89:1E:BE:B9:6C:15:24:D1:76:D4:FA:5E:1B:0F:1E:35:5B:BA:7E:77
            X509v3 Authority Key Identifier:
                keyid:12:DC:B8:E1:41:0C:8C:D1:8E:52:45:7F:7E:1A:95:80:D6:DA:52:26

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Ety44UEMjNGOUkV_fhqVgNbaUiY.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/67/c3c3c4-27a1-4c79-b7de-b9403f64ba60/1/Ety44UEMjNGOUkV_fhqVgNbaUiY.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/67/c3c3c4-27a1-4c79-b7de-b9403f64ba60/1/Ety44UEMjNGOUkV_fhqVgNbaUiY.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         62:93:89:27:7d:e7:05:36:fd:98:89:7a:33:1b:58:73:e2:41:
         18:89:d6:69:7f:eb:ba:2a:6e:e6:8b:86:89:89:79:7c:97:1a:
         d3:72:63:93:83:0c:6e:11:2a:f1:a8:63:6d:53:a8:94:7d:ff:
         51:55:5d:b3:42:dd:49:06:42:22:59:e3:b8:f9:2b:d0:1e:54:
         9f:10:4c:8b:a6:32:02:a6:20:c1:fb:f8:0b:2a:4b:d2:c6:67:
         e0:94:9e:46:8d:8f:2c:e7:4f:56:45:4f:d3:87:16:a6:e0:45:
         d6:b6:1d:ce:48:df:18:92:cc:84:07:22:09:38:d0:ff:fa:69:
         62:ff:18:fd:e6:b3:42:e9:43:40:32:54:45:bb:ec:20:5a:14:
         27:58:c4:29:4f:36:06:b4:75:a3:66:e4:b5:a5:90:a1:7d:fb:
         05:aa:2f:30:3d:d5:c7:64:76:f5:87:17:ff:5a:1a:12:d6:f4:
         79:17:26:fd:d3:ba:4c:5f:6d:44:24:8b:75:30:c0:59:88:4d:
         91:f3:de:22:4f:e1:c3:05:f2:1c:48:a3:8b:80:a9:f5:6a:1a:
         c4:8a:58:d0:7f:ab:ec:70:8c:8c:6a:4e:eb:95:8a:d1:30:bf:
         2f:19:c1:0c:37:f0:3f:12:f8:e3:b5:4d:f1:9f:5b:cf:70:17:
         8d:39:76:c7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----