Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/80/b14193-f569-434a-aea4-f5deaa9bf0f7/1/evoTWyBy38xO87VBwTa8gAHvQwc.mft
File:                     evoTWyBy38xO87VBwTa8gAHvQwc.mft (raw, json)
Hash identifier:          +GZMAKH+jpulR+ske4lL93Pb4ICreTS0PxJipK2xRjQ=
Subject key identifier:   B2:59:8C:22:93:20:7B:16:A0:4C:70:BF:BC:80:A8:B1:3E:8F:67:83
Authority key identifier: 7A:FA:13:5B:20:72:DF:CC:4E:F3:B5:41:C1:36:BC:80:01:EF:43:07
Certificate issuer:       /CN=7afa135b2072dfcc4ef3b541c136bc8001ef4307
Certificate serial:       01962F3D9A8A8D3BF874867085EA1DD23EDB
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/evoTWyBy38xO87VBwTa8gAHvQwc.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/80/b14193-f569-434a-aea4-f5deaa9bf0f7/1/evoTWyBy38xO87VBwTa8gAHvQwc.mft
Manifest number:          0969
Signing time:             Sun 13 Apr 2025 13:01:28 +0000
Manifest this update:     Sun 13 Apr 2025 13:01:28 +0000
Manifest next update:     Mon 14 Apr 2025 13:01:28 +0000
Files and hashes:         1: evoTWyBy38xO87VBwTa8gAHvQwc.crl (hash: 8KHnPSi/PBkckBzRTFILrQ7u5VQDkGETTJzDOyslAys=)
                          2: wqEidlRd5h8mEbMuznDw8G5hJT8.roa (hash: ottFe6kNKLxVuyKxCrPheMgoItK6mcr1froPpXx13Sw=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2f:3d:9a:8a:8d:3b:f8:74:86:70:85:ea:1d:d2:3e:db
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7afa135b2072dfcc4ef3b541c136bc8001ef4307
        Validity
            Not Before: Apr 13 13:01:28 2025 GMT
            Not After : Apr 14 13:01:28 2025 GMT
        Subject: CN=b2598c2293207b16a04c70bfbc80a8b13e8f6783
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ab:cb:94:e5:fb:e8:ce:ad:77:5f:5e:41:70:54:
                    13:c8:77:50:66:16:5b:4e:0f:b2:02:6d:c4:01:16:
                    b3:fd:53:76:eb:5e:78:68:b6:72:79:38:40:66:f6:
                    cc:bf:16:4c:35:c7:19:74:34:d5:48:51:c4:55:e1:
                    7c:c9:e3:0c:20:94:4c:c7:61:97:21:ec:90:c1:f1:
                    4d:cb:0f:ef:90:c5:3e:34:1f:55:f0:74:d5:73:e0:
                    af:4f:11:51:41:a1:10:b7:62:05:ae:7d:f4:db:f3:
                    4b:0d:bc:8a:0a:07:f4:eb:36:3a:43:4b:bc:a2:f2:
                    08:67:03:29:44:9d:2f:15:07:24:bc:eb:cb:a0:32:
                    75:6e:23:aa:a2:91:48:e7:30:ba:2a:f3:bc:02:2f:
                    38:1d:9b:49:f6:e2:62:e6:f2:b0:87:39:ca:c4:a9:
                    22:e9:9b:d6:e8:9d:3d:6f:d9:c9:ad:ac:f2:b3:ba:
                    f2:70:31:e9:f8:fb:71:f1:3f:65:c5:cf:84:b2:61:
                    98:3d:a9:eb:05:c9:7b:51:5d:7b:5f:eb:0f:5b:e5:
                    cc:46:65:67:24:1d:b8:ea:62:a7:39:8e:27:89:6f:
                    c1:32:11:9b:e4:5f:46:e1:67:c9:59:3d:91:6b:30:
                    d2:b8:c8:23:c5:41:c5:82:50:09:eb:0c:9a:e1:6c:
                    1e:67
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B2:59:8C:22:93:20:7B:16:A0:4C:70:BF:BC:80:A8:B1:3E:8F:67:83
            X509v3 Authority Key Identifier:
                keyid:7A:FA:13:5B:20:72:DF:CC:4E:F3:B5:41:C1:36:BC:80:01:EF:43:07

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/evoTWyBy38xO87VBwTa8gAHvQwc.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/80/b14193-f569-434a-aea4-f5deaa9bf0f7/1/evoTWyBy38xO87VBwTa8gAHvQwc.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/80/b14193-f569-434a-aea4-f5deaa9bf0f7/1/evoTWyBy38xO87VBwTa8gAHvQwc.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         46:c0:62:18:36:a7:1b:36:fb:c9:66:25:ce:f0:78:1f:b3:cc:
         f2:b7:9a:6a:b4:24:50:8d:a0:76:44:42:59:f1:db:07:e8:3f:
         cf:a9:90:8d:ad:c5:40:78:16:0a:04:07:fe:4c:48:c0:21:61:
         d8:aa:5b:3e:ca:44:30:60:24:5d:e5:43:01:2e:64:fb:aa:1c:
         92:9b:d6:70:74:55:66:7b:62:2d:7e:6b:78:cb:ad:c4:29:be:
         29:92:3e:e3:ee:a0:3b:03:b7:b7:1c:c8:21:9e:e3:5d:98:64:
         4d:6f:db:06:e4:fe:48:50:1b:35:40:ae:94:3a:44:fc:a0:61:
         bf:b0:a1:3c:7b:bc:9a:4a:9d:bc:42:59:3d:b0:1b:58:94:bb:
         72:b5:ec:04:6c:fb:5f:09:46:c7:21:37:5e:02:3d:36:d9:51:
         ca:3d:92:5c:d6:0c:99:3d:78:c1:8a:44:38:b8:49:0d:79:65:
         e2:fe:c6:00:3f:e3:3e:6e:c2:64:f7:49:00:ac:d6:d9:7d:66:
         94:fe:16:37:7c:24:e7:72:93:1c:67:72:07:ee:e4:77:be:00:
         8e:02:6d:13:91:9e:93:a8:0b:b8:ad:b5:94:53:7a:38:b7:aa:
         ef:11:1d:b4:b2:23:22:a3:ec:22:54:f5:07:ab:03:7e:b2:37:
         5d:0d:2d:b9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----