Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/79/a91afe-9651-4de3-ad88-d8393e185732/1/4rRFsAqGALgzTB06rfHvcZFOaMk.mft
File:                     4rRFsAqGALgzTB06rfHvcZFOaMk.mft (raw, json)
Hash identifier:          fTZWpNNBckA5DWTquABcn81d4P78sq9LaL274dAGQbg=
Subject key identifier:   8F:AB:55:D5:9B:64:42:9F:FD:86:6B:37:D7:F6:27:F1:0D:3D:DC:E2
Authority key identifier: E2:B4:45:B0:0A:86:00:B8:33:4C:1D:3A:AD:F1:EF:71:91:4E:68:C9
Certificate issuer:       /CN=e2b445b00a8600b8334c1d3aadf1ef71914e68c9
Certificate serial:       01962ECFE91BA7BE27514167C304425AD588
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/4rRFsAqGALgzTB06rfHvcZFOaMk.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/79/a91afe-9651-4de3-ad88-d8393e185732/1/4rRFsAqGALgzTB06rfHvcZFOaMk.mft
Manifest number:          14E9
Signing time:             Sun 13 Apr 2025 11:01:39 +0000
Manifest this update:     Sun 13 Apr 2025 11:01:39 +0000
Manifest next update:     Mon 14 Apr 2025 11:01:39 +0000
Files and hashes:         1: 4rRFsAqGALgzTB06rfHvcZFOaMk.crl (hash: afJtMq6ljorP8Ewc4DDlZiIBZut0t3e6jfD5EsAejCE=)
                          2: 8LUgcOoiwyxAy7v4r-Iu6BnRjQM.roa (hash: bhDJBeMXd7WyfIdgyXkUTipM9MJXycedE6ysXMdh0sE=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2e:cf:e9:1b:a7:be:27:51:41:67:c3:04:42:5a:d5:88
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e2b445b00a8600b8334c1d3aadf1ef71914e68c9
        Validity
            Not Before: Apr 13 11:01:39 2025 GMT
            Not After : Apr 14 11:01:39 2025 GMT
        Subject: CN=8fab55d59b64429ffd866b37d7f627f10d3ddce2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:af:4b:96:3d:09:6a:80:ee:97:a8:32:65:01:43:
                    ab:0c:64:49:3f:48:7e:ab:65:b1:ee:95:fd:f9:78:
                    bd:4f:3f:b0:a6:c1:1b:23:cc:cf:44:3a:00:d8:2a:
                    74:0b:14:94:e7:ae:d0:74:09:46:7b:1d:b9:31:c9:
                    46:e7:8f:fd:77:1f:17:d3:40:77:67:b0:73:1e:92:
                    7c:18:ac:de:1b:76:3c:8e:c9:0a:a7:05:4a:11:20:
                    af:0a:fd:b3:69:db:89:82:e3:5c:85:f0:a6:e5:2e:
                    84:57:7e:4d:4c:7e:12:40:f5:51:aa:3f:bc:e1:f3:
                    fb:2d:65:42:74:4b:1a:1b:1c:1b:82:9f:05:1b:cc:
                    9c:b8:b5:25:d4:74:64:b2:bf:cb:5a:f7:9d:2a:aa:
                    a8:49:f8:32:c4:07:f3:eb:52:84:91:eb:48:54:7f:
                    09:95:86:ca:a0:2e:a3:85:b3:df:af:05:f3:db:9d:
                    1f:7e:42:cc:64:5c:45:33:c5:09:74:4b:a5:f4:74:
                    13:36:f9:4d:77:38:77:db:ea:ed:2d:23:6d:1b:0a:
                    12:c8:68:3b:25:02:af:e2:c5:8f:95:a2:4d:59:28:
                    2b:d5:2d:ef:14:93:ef:64:8b:fc:ec:5c:58:61:8a:
                    17:6c:e9:39:5c:0f:3a:8f:43:d9:ed:5e:16:4d:eb:
                    10:41
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8F:AB:55:D5:9B:64:42:9F:FD:86:6B:37:D7:F6:27:F1:0D:3D:DC:E2
            X509v3 Authority Key Identifier:
                keyid:E2:B4:45:B0:0A:86:00:B8:33:4C:1D:3A:AD:F1:EF:71:91:4E:68:C9

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/4rRFsAqGALgzTB06rfHvcZFOaMk.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/79/a91afe-9651-4de3-ad88-d8393e185732/1/4rRFsAqGALgzTB06rfHvcZFOaMk.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/79/a91afe-9651-4de3-ad88-d8393e185732/1/4rRFsAqGALgzTB06rfHvcZFOaMk.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         35:ab:cd:08:2a:d0:dd:0c:0a:a1:93:c8:45:9d:0f:3e:55:5b:
         71:7b:9c:27:02:00:69:68:66:1b:ae:43:88:73:fd:b6:c3:16:
         e1:0d:51:e5:b9:0e:71:0b:85:44:33:05:91:84:0d:66:39:bd:
         cd:b7:9d:66:d7:57:49:7f:7f:91:69:70:08:d8:89:af:2f:56:
         da:5e:2a:d9:c4:3b:10:fd:87:64:f8:69:ed:59:89:1b:2e:4a:
         b0:d9:bd:d7:c8:ae:29:fc:23:b8:3d:4f:ec:0b:4b:7c:4a:7a:
         95:43:74:d5:56:67:56:f9:8e:39:0a:32:49:4d:f5:5f:1e:be:
         ea:3b:17:9c:07:c9:8b:8c:a8:04:45:7d:96:9f:02:ab:0a:12:
         5f:ba:5c:ff:bf:5a:e8:9c:ec:4d:22:2a:eb:31:5b:11:c7:e6:
         8a:73:19:46:55:9c:e7:cb:ce:19:c4:b6:ee:99:29:20:cc:a1:
         6a:85:c1:7c:09:8a:d7:02:d8:a8:49:49:a0:3f:b2:43:cc:80:
         55:2d:b4:b1:50:0d:bc:12:e1:77:0d:f8:aa:06:25:99:5b:56:
         7a:04:31:e4:96:36:98:6b:25:04:0d:b9:49:c9:41:04:09:a5:
         d6:b9:e5:fb:eb:2b:ce:1a:20:16:fb:6c:6b:4c:1b:50:6a:98:
         8a:59:29:91
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----