Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/70/8ab976-e53a-4c43-a8e8-2014fe0a1611/1/Mj4wCntjrU_vuuZx9Rq8JPEShxk.mft
File:                     Mj4wCntjrU_vuuZx9Rq8JPEShxk.mft (raw, json)
Hash identifier:          oJvUbE4+buU+bWS7S+atc1saMiE64EMEvH58XWBptBQ=
Subject key identifier:   5F:79:66:43:6C:AC:76:FE:08:4D:9C:94:A6:28:EA:D3:DE:1B:39:64
Authority key identifier: 32:3E:30:0A:7B:63:AD:4F:EF:BA:E6:71:F5:1A:BC:24:F1:12:87:19
Certificate issuer:       /CN=323e300a7b63ad4fefbae671f51abc24f1128719
Certificate serial:       01962F06DB3F74E3097ADB77B01C68B7572A
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/Mj4wCntjrU_vuuZx9Rq8JPEShxk.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/70/8ab976-e53a-4c43-a8e8-2014fe0a1611/1/Mj4wCntjrU_vuuZx9Rq8JPEShxk.mft
Manifest number:          14EA
Signing time:             Sun 13 Apr 2025 12:01:40 +0000
Manifest this update:     Sun 13 Apr 2025 12:01:40 +0000
Manifest next update:     Mon 14 Apr 2025 12:01:40 +0000
Files and hashes:         1: Mj4wCntjrU_vuuZx9Rq8JPEShxk.crl (hash: uSPwT5uI7gq9Joq/TLF13DGqXry5AjqR3O4HXrjLmbs=)
                          2: nG0u5JVbsOz2NWyBPT2f0id55qg.roa (hash: rcOcuJUXRrdjca7vuzAqSL0w9cdWcN3PeqOknKKlStg=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2f:06:db:3f:74:e3:09:7a:db:77:b0:1c:68:b7:57:2a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=323e300a7b63ad4fefbae671f51abc24f1128719
        Validity
            Not Before: Apr 13 12:01:40 2025 GMT
            Not After : Apr 14 12:01:40 2025 GMT
        Subject: CN=5f7966436cac76fe084d9c94a628ead3de1b3964
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a0:0d:00:59:91:f1:78:37:47:1a:cb:91:b1:67:
                    56:b3:2f:d9:14:9c:4b:42:3c:5d:41:60:0f:8d:ee:
                    b2:f5:fc:a9:55:1b:82:40:ea:53:4a:8c:d3:e8:f6:
                    dc:d5:57:6e:ca:17:17:d0:a3:57:10:52:5f:26:e7:
                    13:2b:f0:f8:9c:10:9c:ea:53:25:87:79:17:c2:c2:
                    56:06:58:7f:83:41:8c:1e:fe:50:3b:f3:64:fa:29:
                    76:cd:da:1b:32:58:8d:7c:b2:74:d6:fe:41:c2:3a:
                    0a:a3:e7:5b:d2:6a:75:5f:64:94:01:ce:f6:ad:b8:
                    be:cb:4d:7a:47:16:68:44:40:a6:51:f8:cd:c1:d1:
                    a3:9e:32:bf:1a:fb:e9:d4:8e:40:e8:ba:89:ae:3b:
                    3a:18:9e:39:04:77:70:d5:d4:88:b1:b7:38:3c:08:
                    56:3a:94:d1:a1:2d:cf:65:fb:d8:5b:de:d3:2c:73:
                    22:af:e8:13:d2:82:d1:58:5a:d9:eb:22:29:be:09:
                    0e:d2:4d:03:49:c2:45:af:00:02:c0:a6:04:e3:87:
                    f7:6e:dd:44:32:19:31:0d:7f:ec:8f:12:06:a1:f2:
                    f1:22:4a:bd:41:6b:c4:ff:6e:6a:73:d2:4b:0b:cb:
                    c4:5d:da:c7:b2:d8:7e:de:d9:7a:86:88:7e:85:08:
                    33:b1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5F:79:66:43:6C:AC:76:FE:08:4D:9C:94:A6:28:EA:D3:DE:1B:39:64
            X509v3 Authority Key Identifier:
                keyid:32:3E:30:0A:7B:63:AD:4F:EF:BA:E6:71:F5:1A:BC:24:F1:12:87:19

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Mj4wCntjrU_vuuZx9Rq8JPEShxk.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/70/8ab976-e53a-4c43-a8e8-2014fe0a1611/1/Mj4wCntjrU_vuuZx9Rq8JPEShxk.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/70/8ab976-e53a-4c43-a8e8-2014fe0a1611/1/Mj4wCntjrU_vuuZx9Rq8JPEShxk.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         92:8e:91:f4:dd:6c:e0:eb:65:2a:1b:27:12:46:35:ef:47:ed:
         8a:72:10:a2:30:b9:5d:9c:26:de:48:c7:f9:d9:6b:fa:6a:a9:
         5d:f3:c6:58:44:ff:8a:32:2c:33:8d:52:ef:ba:6c:c9:a0:3e:
         7b:84:6d:0e:df:e1:89:a3:e4:ae:da:26:fb:f5:d0:1a:31:96:
         1f:00:be:92:d2:e0:99:bb:82:de:97:f7:34:3b:1c:cc:51:5f:
         f9:ab:1b:78:78:88:ac:a0:09:b3:39:bb:94:62:7a:67:17:61:
         f5:39:2d:9b:c4:5c:0d:b6:d2:06:0c:2a:eb:2e:1d:38:d7:53:
         d1:d2:8c:86:66:d0:d4:43:fd:f9:31:f4:51:ff:13:bf:29:b4:
         01:05:8e:6b:4f:84:55:4f:38:d4:42:77:3f:88:30:4e:6a:8b:
         70:40:94:09:9d:18:92:49:5e:23:7e:ac:28:7e:93:16:51:91:
         bd:b9:c6:34:25:8f:8b:e0:20:8e:d4:a4:93:8b:9f:e3:49:da:
         c9:78:ac:fb:bf:bc:af:00:1f:6b:d3:d1:3d:9c:d8:6e:bc:71:
         f5:49:54:4f:10:06:0f:f7:af:01:17:a4:cd:89:40:f4:78:55:
         4e:30:3a:d4:60:d9:84:f3:27:87:0b:fb:fb:3c:83:e1:bd:34:
         05:5b:e4:f2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----