Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6c/4159c3-814d-4001-8527-139043749c48/1/4U8mT6SkyQ3LSpnMzsUMVQj0RJg.mft
File:                     4U8mT6SkyQ3LSpnMzsUMVQj0RJg.mft (raw, json)
Hash identifier:          hYD06Yv3orZs+lisxPmRxjRfBddTkhAH1solGEycITQ=
Subject key identifier:   76:BE:90:FE:AF:24:45:9E:DA:1A:FD:B5:6C:1E:5C:67:3C:5C:DB:87
Authority key identifier: E1:4F:26:4F:A4:A4:C9:0D:CB:4A:99:CC:CE:C5:0C:55:08:F4:44:98
Certificate issuer:       /CN=e14f264fa4a4c90dcb4a99cccec50c5508f44498
Certificate serial:       01962F7428ADFC0355F1C5F8FE3D8C2C7866
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/4U8mT6SkyQ3LSpnMzsUMVQj0RJg.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/6c/4159c3-814d-4001-8527-139043749c48/1/4U8mT6SkyQ3LSpnMzsUMVQj0RJg.mft
Manifest number:          14EC
Signing time:             Sun 13 Apr 2025 14:01:03 +0000
Manifest this update:     Sun 13 Apr 2025 14:01:03 +0000
Manifest next update:     Mon 14 Apr 2025 14:01:03 +0000
Files and hashes:         1: 4U8mT6SkyQ3LSpnMzsUMVQj0RJg.crl (hash: AyT9OcmbJG05dkVuQEce5jlbLOL/MMiGggKnZkM2bWA=)
                          2: Bc91mt-aFwpn9DwtZ394zqgnwAk.roa (hash: 4bDq/638WIm11nNJQQb6YF/e7JLWlty4w4akKWg+wAI=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2f:74:28:ad:fc:03:55:f1:c5:f8:fe:3d:8c:2c:78:66
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e14f264fa4a4c90dcb4a99cccec50c5508f44498
        Validity
            Not Before: Apr 13 14:01:03 2025 GMT
            Not After : Apr 14 14:01:03 2025 GMT
        Subject: CN=76be90feaf24459eda1afdb56c1e5c673c5cdb87
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cd:82:bc:f7:22:cc:2a:d7:d4:6f:8a:c4:23:02:
                    8f:a9:84:d3:33:db:e3:7b:a7:dd:1a:a2:c8:20:57:
                    be:f5:e4:4c:ce:6e:13:78:8a:16:2b:5b:4d:3c:06:
                    2a:ec:d6:b1:6c:e9:de:1a:48:23:83:e4:53:86:6f:
                    f0:6a:20:4f:f0:52:81:f9:6d:42:bc:e0:be:ad:20:
                    70:5d:5c:85:6e:40:b8:e6:89:a4:4b:67:d2:c2:bf:
                    57:1e:cb:b6:c0:1f:7f:b8:58:82:0a:6b:f0:1a:ad:
                    e3:e9:73:a3:c3:63:f6:96:c6:1c:e6:8f:f3:27:2a:
                    91:9b:5f:49:29:2b:58:e0:ba:73:51:00:c6:b2:ee:
                    ee:97:6c:7a:44:2f:9c:0a:3d:90:cc:e1:b2:19:bd:
                    b0:bf:7c:ca:41:d6:45:51:8d:9e:ba:2f:fb:28:3a:
                    55:e4:2d:91:ac:90:84:66:7c:aa:dc:b2:7a:8b:6c:
                    51:d5:0c:d4:8f:e4:dd:a5:26:82:3e:c6:94:3e:72:
                    f3:0b:28:4a:0d:72:22:ed:85:47:db:8c:79:ea:21:
                    ab:70:e6:da:e3:e1:b2:1b:0a:b5:6f:64:8e:80:1b:
                    03:4b:a8:f5:02:77:09:86:36:46:7b:a0:a9:a1:bb:
                    5f:9a:fe:cf:20:a4:f8:11:1c:11:1f:d7:d5:53:f9:
                    0f:2f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                76:BE:90:FE:AF:24:45:9E:DA:1A:FD:B5:6C:1E:5C:67:3C:5C:DB:87
            X509v3 Authority Key Identifier:
                keyid:E1:4F:26:4F:A4:A4:C9:0D:CB:4A:99:CC:CE:C5:0C:55:08:F4:44:98

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/4U8mT6SkyQ3LSpnMzsUMVQj0RJg.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6c/4159c3-814d-4001-8527-139043749c48/1/4U8mT6SkyQ3LSpnMzsUMVQj0RJg.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/6c/4159c3-814d-4001-8527-139043749c48/1/4U8mT6SkyQ3LSpnMzsUMVQj0RJg.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         0f:08:3f:7e:08:03:f6:ad:ad:3f:1b:1d:0d:10:05:3d:e2:48:
         45:08:df:bc:00:0a:ac:24:e4:95:37:4c:c0:3c:1c:5c:31:26:
         e1:31:ba:a2:eb:0a:34:df:5c:0d:98:9b:5a:a9:06:ad:f3:cd:
         61:d3:b7:8a:93:4b:d6:6f:d0:7b:66:e6:e6:15:e3:11:12:4e:
         4a:99:b1:9c:b6:2c:a6:39:58:b6:8c:a9:cc:3d:d3:df:6d:df:
         97:be:de:d6:82:f2:8f:02:24:83:7c:eb:61:a4:1a:ec:d7:98:
         20:09:72:38:dc:36:04:14:f4:8c:7b:06:c9:35:61:64:2b:db:
         c3:8f:8b:cb:5d:ed:98:eb:82:58:48:98:c9:e3:6b:ae:e0:12:
         90:04:30:48:7f:95:1d:ac:04:7e:68:32:5f:7c:4b:46:7f:77:
         b3:72:f5:10:f8:20:4f:71:ef:f2:2c:9f:1c:70:95:aa:f4:c1:
         c9:a7:9d:e7:d8:4c:e6:a1:03:84:28:d8:23:ac:1f:ba:99:0e:
         65:b8:19:33:00:a4:34:ce:8e:3a:c1:96:07:4c:f3:07:e8:bd:
         28:14:e2:c1:67:72:4a:6f:d1:26:9d:1d:e1:1d:2d:68:a8:f8:
         a1:70:12:f1:06:ae:73:c9:df:04:16:bc:d7:bf:a9:5f:1d:80:
         ef:58:86:bd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----