Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/79/dfc10c-f889-455a-82a0-b30408948cce/1/435f8SPqfS6DzidSDJh9A35knQM.mft
File:                     435f8SPqfS6DzidSDJh9A35knQM.mft (raw, json)
Hash identifier:          AoTo8XXgddr+/lU1yCH5F9/wcSAywNA5HSne/QGod5c=
Subject key identifier:   28:9C:D0:D6:75:A8:93:58:FD:E1:8F:BF:F3:7B:BC:4B:38:9E:B1:0D
Authority key identifier: E3:7E:5F:F1:23:EA:7D:2E:83:CE:27:52:0C:98:7D:03:7E:64:9D:03
Certificate issuer:       /CN=e37e5ff123ea7d2e83ce27520c987d037e649d03
Certificate serial:       01962F3D582904454E5D58C697685435DEB0
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/435f8SPqfS6DzidSDJh9A35knQM.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/79/dfc10c-f889-455a-82a0-b30408948cce/1/435f8SPqfS6DzidSDJh9A35knQM.mft
Manifest number:          0F8D
Signing time:             Sun 13 Apr 2025 13:01:11 +0000
Manifest this update:     Sun 13 Apr 2025 13:01:11 +0000
Manifest next update:     Mon 14 Apr 2025 13:01:11 +0000
Files and hashes:         1: 435f8SPqfS6DzidSDJh9A35knQM.crl (hash: A+A94jXJKll+DcXBOh2nprJqe19AcG+wNWMJjZQndhk=)
                          2: tCjXyqFlakOJKQogp8h2votSD1A.roa (hash: m/O4S6Sl2dQY6fRE2qRWrRG8qwZhPhRAmDPSjwX0exE=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2f:3d:58:29:04:45:4e:5d:58:c6:97:68:54:35:de:b0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e37e5ff123ea7d2e83ce27520c987d037e649d03
        Validity
            Not Before: Apr 13 13:01:11 2025 GMT
            Not After : Apr 14 13:01:11 2025 GMT
        Subject: CN=289cd0d675a89358fde18fbff37bbc4b389eb10d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ac:7a:95:8d:7b:cd:e3:71:51:d5:5c:95:2f:cd:
                    3e:de:4b:2a:8d:d7:5f:52:83:f9:c0:ed:f2:d7:39:
                    d1:7f:cc:bb:4a:00:42:b8:b8:8c:cd:2f:b5:c1:ce:
                    67:63:42:73:02:60:8f:64:40:ec:59:c9:6f:78:37:
                    91:fa:b3:f5:e9:ec:3b:28:c2:c4:d5:44:5e:d3:cb:
                    d1:57:bd:b0:37:2e:00:2d:cf:4d:82:d6:b6:ea:60:
                    f2:db:db:b2:8c:97:4b:52:2d:53:56:ce:ad:1d:ba:
                    9f:37:1a:e9:07:6f:aa:a9:56:38:05:a0:43:79:c1:
                    b0:46:ed:93:c1:c1:41:2f:af:09:a8:56:f7:47:0d:
                    4c:29:13:25:d8:c4:fe:be:a8:5d:0b:84:ab:02:f1:
                    3a:12:0b:52:89:b1:e4:49:c0:52:94:b2:66:21:3b:
                    aa:46:13:14:d6:78:45:c4:c2:90:ef:06:1e:14:67:
                    10:1d:1e:ae:dd:60:0f:b8:74:5e:ec:38:2b:05:f0:
                    4d:87:be:87:a1:0f:d6:21:f0:f1:d0:55:96:bd:3f:
                    0d:fd:c3:05:d2:6d:4f:f5:cd:e6:85:29:f5:e6:f1:
                    13:7f:81:4d:da:90:18:97:76:dc:0f:97:b9:d5:49:
                    a4:a0:2c:34:29:73:8a:4b:a1:3c:9e:63:4c:36:e6:
                    5a:75
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                28:9C:D0:D6:75:A8:93:58:FD:E1:8F:BF:F3:7B:BC:4B:38:9E:B1:0D
            X509v3 Authority Key Identifier:
                keyid:E3:7E:5F:F1:23:EA:7D:2E:83:CE:27:52:0C:98:7D:03:7E:64:9D:03

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/435f8SPqfS6DzidSDJh9A35knQM.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/79/dfc10c-f889-455a-82a0-b30408948cce/1/435f8SPqfS6DzidSDJh9A35knQM.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/79/dfc10c-f889-455a-82a0-b30408948cce/1/435f8SPqfS6DzidSDJh9A35knQM.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         34:0d:29:9e:6e:24:6f:42:7e:74:18:b8:56:76:7d:28:d6:5f:
         06:2e:c1:69:82:d2:c0:f6:24:1a:92:aa:b0:dc:37:66:b5:14:
         ae:a3:e2:b3:fd:c5:ec:7b:7c:cb:8a:25:1b:60:54:31:09:74:
         6c:5f:b8:d5:2c:42:0f:39:7a:2c:e7:a3:fc:e6:89:44:52:6b:
         36:c8:cb:d9:03:c8:30:6d:b9:ca:39:3d:42:57:57:87:38:90:
         31:3d:0b:d3:a2:76:80:44:cb:96:e8:4c:1b:a3:2d:d8:8f:a1:
         e0:f0:c6:c4:60:5b:a9:9d:cc:e1:5a:bb:ec:83:ed:d4:02:e1:
         e0:2c:c4:e3:3e:5d:05:58:59:0c:5e:70:82:16:91:92:7d:94:
         3e:5f:a1:dd:b2:fb:0f:e6:6c:fe:10:45:40:2a:64:6a:8e:90:
         cf:f9:a4:22:9a:1e:48:93:d7:7b:48:33:a3:83:0f:1b:51:c7:
         17:a2:36:bb:54:a4:c0:cb:86:bb:c8:95:a0:4d:d3:a5:d2:aa:
         24:38:23:10:dd:f2:f8:64:71:42:9c:0d:3b:37:2f:ed:19:fd:
         23:d2:e0:50:bb:0c:04:aa:fc:91:eb:31:a1:01:67:02:17:fd:
         b7:34:39:14:db:41:91:13:a2:3f:bc:2d:c0:d8:36:aa:72:5f:
         29:21:9a:a5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----