Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7a/40fe20-6ceb-45d6-aa11-ce59b0c54eea/1/E2xIMVl_4W6e4ogte1oN-KduT38.mft
File:                     E2xIMVl_4W6e4ogte1oN-KduT38.mft (raw, json)
Hash identifier:          kvWKAAr5Wv+IS5bkTs0GVN6Nu682PkJnjpjtx3QV0KM=
Subject key identifier:   74:98:A1:B1:CC:BB:69:D7:E6:CC:0C:46:61:3A:C8:82:04:5D:2E:15
Authority key identifier: 13:6C:48:31:59:7F:E1:6E:9E:E2:88:2D:7B:5A:0D:F8:A7:6E:4F:7F
Certificate issuer:       /CN=136c4831597fe16e9ee2882d7b5a0df8a76e4f7f
Certificate serial:       01962F06E74BAD3A9C36E12BF4EF1A04D1C0
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/E2xIMVl_4W6e4ogte1oN-KduT38.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/7a/40fe20-6ceb-45d6-aa11-ce59b0c54eea/1/E2xIMVl_4W6e4ogte1oN-KduT38.mft
Manifest number:          14E8
Signing time:             Sun 13 Apr 2025 12:01:43 +0000
Manifest this update:     Sun 13 Apr 2025 12:01:43 +0000
Manifest next update:     Mon 14 Apr 2025 12:01:43 +0000
Files and hashes:         1: C_P_x6vKlP69WHS2Io3yN0V9nik.roa (hash: wJLlFgwQydtIFLoCnksnZpJrvv41uQQpAj8CsBJriq4=)
                          2: E2xIMVl_4W6e4ogte1oN-KduT38.crl (hash: wqgaUO6q7sCwiO/SLY773e1TDqNeJJyYMdu12LKu6fw=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2f:06:e7:4b:ad:3a:9c:36:e1:2b:f4:ef:1a:04:d1:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=136c4831597fe16e9ee2882d7b5a0df8a76e4f7f
        Validity
            Not Before: Apr 13 12:01:43 2025 GMT
            Not After : Apr 14 12:01:43 2025 GMT
        Subject: CN=7498a1b1ccbb69d7e6cc0c46613ac882045d2e15
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b7:f0:4f:1c:f4:3b:0b:88:a6:79:9a:d5:02:d5:
                    75:93:c0:b3:dd:da:61:e5:53:f5:ae:64:17:74:9e:
                    71:df:ce:34:80:72:72:a4:cf:23:6d:21:a2:22:0e:
                    86:68:0b:da:11:f2:3c:5c:f3:2b:39:20:fb:05:1f:
                    a6:b6:71:22:f6:d7:55:91:75:91:81:d9:97:e1:bd:
                    ca:54:51:91:04:2e:c8:67:dd:85:56:b2:fa:02:70:
                    7b:12:93:8d:bd:d4:4b:17:41:8b:84:69:5e:31:9e:
                    e4:f0:50:40:b2:85:0b:a9:fa:d2:f4:67:c9:32:3b:
                    ca:22:16:ce:83:37:3b:ab:3a:8c:81:ad:cf:33:6b:
                    90:4d:98:e7:98:9a:55:3f:77:4a:3a:9f:af:54:59:
                    06:62:22:a9:3b:5b:67:8f:ae:be:74:57:54:1a:3f:
                    44:01:b4:0e:f8:b4:75:bf:07:59:22:6b:de:3b:40:
                    8a:aa:9a:20:f6:ef:b4:a5:66:bd:45:0d:ee:66:38:
                    1e:0a:e7:52:58:66:5e:c6:cf:0f:96:43:dc:13:53:
                    a8:e0:08:cb:67:26:7a:d5:24:27:7f:b4:40:19:a1:
                    16:0b:46:a0:de:ef:b5:d9:87:27:e5:7c:a5:f8:b8:
                    99:ef:ff:fc:30:9f:cf:5c:2c:39:66:fa:5e:9d:d9:
                    60:29
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                74:98:A1:B1:CC:BB:69:D7:E6:CC:0C:46:61:3A:C8:82:04:5D:2E:15
            X509v3 Authority Key Identifier:
                keyid:13:6C:48:31:59:7F:E1:6E:9E:E2:88:2D:7B:5A:0D:F8:A7:6E:4F:7F

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/E2xIMVl_4W6e4ogte1oN-KduT38.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7a/40fe20-6ceb-45d6-aa11-ce59b0c54eea/1/E2xIMVl_4W6e4ogte1oN-KduT38.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/7a/40fe20-6ceb-45d6-aa11-ce59b0c54eea/1/E2xIMVl_4W6e4ogte1oN-KduT38.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         3d:c8:0e:1f:c2:88:4f:af:ba:b7:9b:52:fe:90:3f:4b:4c:c3:
         88:ed:73:85:98:b0:97:c4:9c:0f:22:3c:0f:ea:c2:59:bf:74:
         35:0c:90:ea:d4:c6:f2:73:fa:2f:4c:cf:8a:6a:38:bf:83:66:
         c1:fc:8c:ab:72:4c:4a:c9:cf:40:e3:77:3c:11:dd:53:bf:b7:
         98:24:fb:f4:24:09:23:8a:61:12:da:35:60:68:22:d1:30:11:
         49:61:5e:8e:90:35:b7:36:2f:01:09:f6:b3:69:5d:29:33:87:
         aa:56:91:37:ef:5c:65:32:b5:3c:db:7e:f1:7d:07:33:01:de:
         14:fe:12:e6:97:52:71:bb:ca:af:99:4c:68:73:35:92:c9:e9:
         92:f0:44:1a:5a:d8:7a:06:97:2b:7a:c0:cb:c8:56:b1:69:e6:
         78:f0:dc:ac:53:8e:d4:a3:04:85:1a:92:97:43:73:a3:88:b1:
         54:ae:b7:04:0d:e2:43:1d:d3:3c:50:28:d8:5e:7e:f2:c2:73:
         c4:64:97:43:5e:92:f7:5c:26:64:72:be:51:91:8f:ae:0d:c3:
         81:af:a9:3e:0d:b2:a8:63:47:df:ff:56:cd:77:d7:0a:63:0b:
         cb:47:7f:39:85:64:9a:74:85:c0:fb:33:53:12:ea:cd:1c:1a:
         41:e6:37:6e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----