Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/84/235e61-42e4-4225-8fa6-0cadd847448b/1/5ozobUCegkN2Vg_jsaFo8roAguM.mft
File:                     5ozobUCegkN2Vg_jsaFo8roAguM.mft (raw, json)
Hash identifier:          nZg2NVMDaLee1EDhywWlKodOf8knMix8Ijex9GGm2mQ=
Subject key identifier:   92:B8:77:8B:6D:17:D0:96:9E:7D:CF:79:A4:BE:8F:D4:DC:01:48:24
Authority key identifier: E6:8C:E8:6D:40:9E:82:43:76:56:0F:E3:B1:A1:68:F2:BA:00:82:E3
Certificate issuer:       /CN=e68ce86d409e824376560fe3b1a168f2ba0082e3
Certificate serial:       01962E61E0383C363EA23F002D8CDA06FAFF
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/5ozobUCegkN2Vg_jsaFo8roAguM.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/84/235e61-42e4-4225-8fa6-0cadd847448b/1/5ozobUCegkN2Vg_jsaFo8roAguM.mft
Manifest number:          14E8
Signing time:             Sun 13 Apr 2025 09:01:28 +0000
Manifest this update:     Sun 13 Apr 2025 09:01:28 +0000
Manifest next update:     Mon 14 Apr 2025 09:01:28 +0000
Files and hashes:         1: 5ozobUCegkN2Vg_jsaFo8roAguM.crl (hash: xP1TOTIiw83TVbZHoiHivx1iWLNhDjwbKV+KV8C7h1I=)
                          2: LVNoSuA7vvTmvNpxT00E4lAvcp4.roa (hash: pPgdCp65TG7QIX5Sq2MoRLP/ea4UDwFHNBTpNrAcJN4=)
                          3: v3gPT9ihCRL0ZeNIouhjQbTxtd0.roa (hash: yHjYFG2kFwOSEQcA6CVX+o9if+OsdxgeiHLnGMf3Fqg=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2e:61:e0:38:3c:36:3e:a2:3f:00:2d:8c:da:06:fa:ff
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e68ce86d409e824376560fe3b1a168f2ba0082e3
        Validity
            Not Before: Apr 13 09:01:28 2025 GMT
            Not After : Apr 14 09:01:28 2025 GMT
        Subject: CN=92b8778b6d17d0969e7dcf79a4be8fd4dc014824
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d3:a7:04:1e:27:f5:18:6b:ca:bc:ce:24:59:65:
                    9d:c8:4f:f8:db:3b:8a:3c:44:10:26:2d:3f:86:c8:
                    51:be:71:01:66:e8:de:1d:2c:6a:25:37:db:6d:87:
                    2b:f3:9e:c3:90:df:2c:7d:35:fe:59:70:27:f8:52:
                    34:c1:62:e5:cf:96:92:1a:6e:9c:94:17:f1:47:ec:
                    43:fa:b7:2f:82:e5:36:6d:d7:94:7d:2a:4d:4c:35:
                    87:39:1e:00:ac:1e:95:65:3c:34:ab:20:83:b7:6b:
                    0e:ed:e7:89:f2:47:51:0b:a6:a9:22:f8:ce:61:c9:
                    51:b6:b6:60:c9:f8:88:fd:4a:7a:f4:f9:70:76:77:
                    c7:9e:bf:c2:75:4e:74:71:e0:3d:ce:b7:6a:8b:31:
                    05:e3:c7:0b:78:3a:e1:81:05:48:ed:6d:8b:ef:11:
                    61:8d:84:58:78:b9:b2:84:17:ce:05:ce:53:99:5f:
                    c1:53:35:e1:b9:5d:3c:bc:96:69:a6:ff:7c:6f:0f:
                    fa:5e:f9:ab:31:14:1b:3a:e6:1c:b9:d4:b0:f5:9c:
                    19:6d:86:1d:de:36:c9:b5:96:14:ce:21:1b:4e:73:
                    6c:55:f8:ee:23:ab:d2:81:5e:60:ff:d7:3f:81:b6:
                    15:f7:85:96:79:0e:b8:1a:e3:41:71:d6:9d:d6:94:
                    0a:79
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                92:B8:77:8B:6D:17:D0:96:9E:7D:CF:79:A4:BE:8F:D4:DC:01:48:24
            X509v3 Authority Key Identifier:
                keyid:E6:8C:E8:6D:40:9E:82:43:76:56:0F:E3:B1:A1:68:F2:BA:00:82:E3

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/5ozobUCegkN2Vg_jsaFo8roAguM.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/84/235e61-42e4-4225-8fa6-0cadd847448b/1/5ozobUCegkN2Vg_jsaFo8roAguM.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/84/235e61-42e4-4225-8fa6-0cadd847448b/1/5ozobUCegkN2Vg_jsaFo8roAguM.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         1c:51:c0:97:2e:01:0c:03:00:fd:7e:d8:fc:40:51:d8:cf:a1:
         92:3e:a0:b4:07:73:6f:6e:f8:50:19:0f:6b:0f:a6:13:2d:f4:
         76:c7:e4:d2:f2:66:50:51:2b:fa:49:61:16:03:b7:cf:fa:66:
         de:e8:9d:64:19:84:00:de:1d:15:b0:7c:d6:07:c4:66:50:03:
         e9:c0:01:be:9b:4a:e4:97:87:cf:39:fe:23:6b:9f:39:8c:fa:
         00:f0:fc:a2:ff:30:f6:83:6a:83:7c:8c:5f:83:6f:c9:b2:8b:
         9e:8f:ad:cd:e7:12:e3:49:91:4a:dd:78:50:d8:47:1b:80:0d:
         17:c2:a1:54:ca:54:6b:fd:e3:1f:80:5f:e9:9b:39:37:ff:bc:
         1d:98:74:2a:2f:f6:7e:8f:bc:83:75:f8:b8:7b:be:61:b2:33:
         f8:cd:1b:59:ff:80:b5:8f:52:d6:25:a5:de:4b:28:9e:f7:b7:
         a1:4f:81:5f:e0:10:78:7b:64:d2:23:0d:8d:c4:57:e8:97:92:
         68:4b:0b:f6:ee:5b:56:2e:0d:b6:25:fe:86:be:c2:b4:0f:64:
         40:9b:bc:84:42:5a:f3:9e:17:21:24:96:a1:58:70:66:3e:ba:
         75:f9:29:00:0d:9c:48:7e:87:9a:f0:25:6d:0e:ac:39:87:4d:
         f4:60:99:c3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----