Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/78/d8c4ba-1c48-480b-bb59-d2310bba0e11/1/4OvbaaM-jzrzY64UT4U1OOgDG2M.mft
File:                     4OvbaaM-jzrzY64UT4U1OOgDG2M.mft (raw, json)
Hash identifier:          d/Q9e6fVcMM9lYvT+rlHnmjl0z4Rsu/MQEKVfN2AnOg=
Subject key identifier:   1D:AF:87:6B:E3:A0:37:E0:F4:E5:DB:50:D8:65:82:0A:23:B7:E6:F2
Authority key identifier: E0:EB:DB:69:A3:3E:8F:3A:F3:63:AE:14:4F:85:35:38:E8:03:1B:63
Certificate issuer:       /CN=e0ebdb69a33e8f3af363ae144f853538e8031b63
Certificate serial:       01962ECFD0EA65A40C1911BA8950BCBB9516
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/4OvbaaM-jzrzY64UT4U1OOgDG2M.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/78/d8c4ba-1c48-480b-bb59-d2310bba0e11/1/4OvbaaM-jzrzY64UT4U1OOgDG2M.mft
Manifest number:          07C1
Signing time:             Sun 13 Apr 2025 11:01:33 +0000
Manifest this update:     Sun 13 Apr 2025 11:01:33 +0000
Manifest next update:     Mon 14 Apr 2025 11:01:33 +0000
Files and hashes:         1: 3eUay2tu69uIVC2ydoh-KNcQB3E.roa (hash: G/dDpLohr3NTC2lM78apSFe1V+YNmYFmlWqkTGl1RZw=)
                          2: 4OvbaaM-jzrzY64UT4U1OOgDG2M.crl (hash: 8RyItNoT3Shu7nSuO+ExA7m4yOjbEKNr7MIg9KA53S8=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2e:cf:d0:ea:65:a4:0c:19:11:ba:89:50:bc:bb:95:16
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e0ebdb69a33e8f3af363ae144f853538e8031b63
        Validity
            Not Before: Apr 13 11:01:33 2025 GMT
            Not After : Apr 14 11:01:33 2025 GMT
        Subject: CN=1daf876be3a037e0f4e5db50d865820a23b7e6f2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9f:46:08:80:95:d1:14:74:e0:ce:d6:19:80:70:
                    c9:ef:82:7a:a6:b2:2b:4f:58:da:61:96:88:f4:db:
                    cc:2e:8f:48:5f:92:62:ab:70:8c:51:40:4d:57:de:
                    71:d3:8c:e1:7e:ad:b9:8c:49:cc:42:c5:21:27:d1:
                    f3:a5:db:75:9a:26:ea:39:7d:8d:07:27:68:c0:59:
                    43:81:10:c9:93:1d:ce:ad:ce:5e:21:4e:37:5f:7b:
                    3d:0c:b1:05:53:b7:0e:7d:9e:65:a6:85:04:d3:48:
                    29:eb:3e:18:b1:b6:41:60:0e:26:dc:45:f4:be:ef:
                    70:1f:ae:dd:d4:29:5a:54:9e:57:c8:1b:32:f8:6a:
                    fc:69:c4:16:15:e4:50:2a:77:d7:18:ca:8e:a7:31:
                    be:fe:7d:52:e1:e0:58:49:30:d0:ac:da:0f:31:87:
                    f4:6d:4e:87:2c:f5:ac:7b:44:6f:24:4f:26:e6:cd:
                    92:71:3e:a1:7e:3e:c4:99:6b:49:38:95:26:d5:d7:
                    2c:4c:66:7d:ab:41:0d:dc:fc:65:da:21:c4:48:e7:
                    82:b4:90:6d:4f:63:9d:b9:2b:c6:19:fe:1d:6d:70:
                    f9:25:2c:40:c1:53:6e:a1:89:6e:99:52:70:32:5d:
                    cf:71:8d:d3:7f:3a:b9:ba:db:7a:29:b5:35:94:00:
                    16:b7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1D:AF:87:6B:E3:A0:37:E0:F4:E5:DB:50:D8:65:82:0A:23:B7:E6:F2
            X509v3 Authority Key Identifier:
                keyid:E0:EB:DB:69:A3:3E:8F:3A:F3:63:AE:14:4F:85:35:38:E8:03:1B:63

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/4OvbaaM-jzrzY64UT4U1OOgDG2M.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/78/d8c4ba-1c48-480b-bb59-d2310bba0e11/1/4OvbaaM-jzrzY64UT4U1OOgDG2M.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/78/d8c4ba-1c48-480b-bb59-d2310bba0e11/1/4OvbaaM-jzrzY64UT4U1OOgDG2M.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         2d:99:5f:fd:36:fb:84:bd:c5:69:74:32:e2:e1:be:d6:38:b7:
         0b:c9:bd:a5:a5:d9:4f:e4:c2:80:ac:7f:fa:66:77:e2:65:9d:
         3f:39:0f:2a:63:a2:f5:23:cf:26:e0:e2:cc:55:f0:f5:68:1c:
         c1:eb:c8:ae:bb:eb:5d:99:ef:1b:4a:41:62:54:b8:3d:c7:b8:
         9b:6b:cc:73:59:7a:97:77:a8:56:a0:2f:e3:c8:6e:0e:c8:b6:
         06:75:8f:61:eb:3e:70:54:f3:88:b0:d5:55:46:e4:fa:86:ef:
         6b:06:72:85:69:3a:fb:89:fa:b5:88:e1:82:80:4a:d2:40:a8:
         24:2b:45:8d:7f:4b:85:1e:fb:f9:12:18:39:fa:90:cf:79:71:
         3d:4c:af:58:42:00:e7:34:ac:53:50:ea:7e:fa:76:9a:af:18:
         ff:cb:c7:a1:f7:07:37:73:b4:17:23:15:a2:69:a2:d7:ee:d0:
         15:e1:61:04:9b:8d:53:4f:6b:14:6d:f5:1e:ad:72:fb:3a:ad:
         bf:ff:c3:4b:c5:64:99:fd:1f:25:25:4a:d6:80:a9:ea:92:83:
         18:5f:8e:c4:48:4c:ea:39:b6:99:f0:42:4c:59:a6:02:64:06:
         b1:a8:0f:74:2a:e5:57:61:60:39:a9:3f:51:e2:09:d6:15:19:
         8c:38:1f:6e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----