Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7d/d31e5f-0f52-4623-867a-543d6182e294/1/4rHi5MUIxsepi2WYUodFyBP60x0.mft
File:                     4rHi5MUIxsepi2WYUodFyBP60x0.mft (raw, json)
Hash identifier:          Oc+ZFo2cWOhxlneWMPYYuQafdSURPwMEuryYL8In5PE=
Subject key identifier:   85:B4:4C:B7:46:ED:39:93:54:56:77:CF:8C:79:BD:58:77:EB:07:46
Authority key identifier: E2:B1:E2:E4:C5:08:C6:C7:A9:8B:65:98:52:87:45:C8:13:FA:D3:1D
Certificate issuer:       /CN=e2b1e2e4c508c6c7a98b6598528745c813fad31d
Certificate serial:       01962F07311426EE39F9E495CD90DD26BDEF
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/4rHi5MUIxsepi2WYUodFyBP60x0.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/7d/d31e5f-0f52-4623-867a-543d6182e294/1/4rHi5MUIxsepi2WYUodFyBP60x0.mft
Manifest number:          14EF
Signing time:             Sun 13 Apr 2025 12:02:02 +0000
Manifest this update:     Sun 13 Apr 2025 12:02:02 +0000
Manifest next update:     Mon 14 Apr 2025 12:02:02 +0000
Files and hashes:         1: 4rHi5MUIxsepi2WYUodFyBP60x0.crl (hash: Xixg2zzls3OP0Ljmw796leNDYFfwYkHetA8RCHgXlSA=)
                          2: 883carP1hhWb3_MmiKGn80hphf0.roa (hash: cPZWjDagkqb5tEO5wfwI807e/U08AzhpwxGlaqpcxgI=)
                          3: AnftS6a3tNRTfwARV2obSQtU-1Q.roa (hash: 1O5FkUYkHZKrQKTSneyG+jslWvu7oIHqq1i+yTKMvxI=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2f:07:31:14:26:ee:39:f9:e4:95:cd:90:dd:26:bd:ef
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e2b1e2e4c508c6c7a98b6598528745c813fad31d
        Validity
            Not Before: Apr 13 12:02:02 2025 GMT
            Not After : Apr 14 12:02:02 2025 GMT
        Subject: CN=85b44cb746ed3993545677cf8c79bd5877eb0746
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:89:c9:9f:61:67:f5:df:ce:98:83:dd:39:8e:3b:
                    84:d4:c2:79:45:0d:df:39:29:34:32:24:1f:c0:d8:
                    5e:67:df:3f:21:34:21:e1:00:59:4c:06:8c:a0:3f:
                    9d:c7:5f:fe:a7:00:09:09:96:e9:a5:10:c5:04:bf:
                    e2:99:00:e7:52:7e:35:46:25:ae:43:22:fa:fb:9f:
                    1e:9f:ee:45:94:01:03:3f:fd:63:80:48:28:ec:cd:
                    6e:c4:4a:b6:8a:4c:de:0a:51:72:f2:e7:f1:5b:2f:
                    40:2f:4f:70:f7:48:91:79:4e:54:f3:6b:b9:db:94:
                    a7:28:da:75:3f:ab:b7:38:42:96:11:24:d9:14:80:
                    89:9d:89:32:ef:f2:5c:b5:89:13:7d:4a:13:a8:92:
                    06:d2:c4:3c:63:21:76:61:a4:4f:e6:e9:f9:7c:0d:
                    0d:b3:fc:90:bc:9c:ba:ea:ac:11:d6:af:6f:e4:28:
                    c6:46:71:f9:bb:1b:84:65:22:92:6e:d8:6e:88:44:
                    fa:f3:ea:b2:b2:f2:f6:cb:1c:3b:76:71:7e:4c:51:
                    17:47:a4:6a:a6:51:57:41:dc:fd:b6:8b:78:1c:59:
                    7c:76:7e:61:18:07:1f:23:0c:8f:7b:11:2e:69:af:
                    2d:b2:59:fa:87:b5:68:dd:de:73:26:3f:3b:6a:f3:
                    17:05
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                85:B4:4C:B7:46:ED:39:93:54:56:77:CF:8C:79:BD:58:77:EB:07:46
            X509v3 Authority Key Identifier:
                keyid:E2:B1:E2:E4:C5:08:C6:C7:A9:8B:65:98:52:87:45:C8:13:FA:D3:1D

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/4rHi5MUIxsepi2WYUodFyBP60x0.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7d/d31e5f-0f52-4623-867a-543d6182e294/1/4rHi5MUIxsepi2WYUodFyBP60x0.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/7d/d31e5f-0f52-4623-867a-543d6182e294/1/4rHi5MUIxsepi2WYUodFyBP60x0.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         bb:95:02:06:d5:be:ef:48:37:1c:f0:90:2d:a9:a6:7b:75:a1:
         f9:b1:83:ce:85:1d:54:c1:56:af:ba:df:e8:a9:10:af:6f:a3:
         29:cb:4a:5a:ad:e5:10:4c:5b:6f:5b:0d:e0:91:7d:10:74:28:
         72:5a:71:23:3a:3c:08:e5:ee:15:c3:74:8c:13:5a:c7:0f:a8:
         43:1c:4c:d1:b7:5d:9b:bc:55:3b:20:54:a0:49:7e:8e:cd:ed:
         d2:2d:43:b7:60:d9:61:c0:62:4a:7b:3c:23:f0:59:4f:2b:46:
         e2:09:11:25:d9:74:e7:43:83:04:85:ab:ad:ff:f3:3f:89:37:
         c6:dd:f7:7a:d1:4b:38:ea:f1:56:87:ae:5b:4f:2a:46:df:f1:
         dc:5c:24:ac:6c:08:0c:1a:33:23:4c:78:c0:e5:40:e8:3d:7f:
         8f:fd:cf:1d:44:9f:20:8e:2a:48:19:61:56:6f:7b:da:0d:e1:
         5d:e1:94:e8:6c:ac:68:da:a4:75:6a:d7:cb:5e:4d:9f:81:3c:
         59:20:e3:3f:28:2c:91:7c:a0:9d:c5:92:68:81:f7:1e:65:ff:
         89:98:e3:73:55:25:f6:ac:d3:9d:51:ac:c2:11:10:fb:85:f8:
         8f:07:3a:e0:14:53:1f:68:5f:28:34:e8:5b:58:a5:39:b2:c0:
         1f:df:99:11
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----