Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8d/4b7c2e-089f-4708-9184-2a84acbe07ee/1/rNa-l7z-Er7L6Ct4QQR_V5cqk1o.mft
File:                     rNa-l7z-Er7L6Ct4QQR_V5cqk1o.mft (raw, json)
Hash identifier:          4odzrsUIMUH5o7/WUDDnYxFHDE8s9kk32YWLV1NV6h4=
Subject key identifier:   51:53:D3:CA:EA:13:96:17:1A:BE:4C:53:06:FD:C1:57:BC:96:85:17
Authority key identifier: AC:D6:BE:97:BC:FE:12:BE:CB:E8:2B:78:41:04:7F:57:97:2A:93:5A
Certificate issuer:       /CN=acd6be97bcfe12becbe82b7841047f57972a935a
Certificate serial:       01962E99A4A161D8672A5C3F0365F1DD9D30
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/rNa-l7z-Er7L6Ct4QQR_V5cqk1o.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/8d/4b7c2e-089f-4708-9184-2a84acbe07ee/1/rNa-l7z-Er7L6Ct4QQR_V5cqk1o.mft
Manifest number:          04BE
Signing time:             Sun 13 Apr 2025 10:02:23 +0000
Manifest this update:     Sun 13 Apr 2025 10:02:23 +0000
Manifest next update:     Mon 14 Apr 2025 10:02:23 +0000
Files and hashes:         1: 6wOJsAVY-euwnRWmrQyAWiR15SI.roa (hash: is8qHNDUGOGtnmeZTaDPuu15VlXH7W1zJ6ndggR7ME0=)
                          2: rNa-l7z-Er7L6Ct4QQR_V5cqk1o.crl (hash: j101+SVjGcgDKO9USpyXa1V2EEfWbyVDVwwMkviCtAM=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2e:99:a4:a1:61:d8:67:2a:5c:3f:03:65:f1:dd:9d:30
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=acd6be97bcfe12becbe82b7841047f57972a935a
        Validity
            Not Before: Apr 13 10:02:23 2025 GMT
            Not After : Apr 14 10:02:23 2025 GMT
        Subject: CN=5153d3caea1396171abe4c5306fdc157bc968517
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8e:fe:21:7c:96:1b:b5:76:fd:b0:ab:f0:c4:74:
                    1a:2e:62:a2:6a:23:e7:9c:00:2a:91:53:3f:8f:49:
                    47:9b:54:fa:57:40:7b:d6:96:4a:6f:2c:09:55:6e:
                    ed:8f:fd:d0:2e:ca:84:b8:e9:7c:f6:58:49:13:00:
                    21:2c:03:b3:72:48:75:66:ab:d9:23:63:1f:5c:8e:
                    8b:26:e2:4c:d7:0f:0c:13:b5:cd:e3:38:32:54:a4:
                    87:c1:c8:7d:13:7b:1d:97:c5:ba:23:d0:a4:50:c0:
                    b6:9b:93:7d:e5:b4:a8:5c:18:89:13:af:c7:dc:11:
                    47:2b:18:4c:01:58:02:8a:6f:21:1e:b5:be:b1:16:
                    1a:04:7f:76:f4:0d:0b:66:97:f7:e0:a9:d4:54:20:
                    21:62:b1:bd:b6:15:e6:9a:4b:e9:14:24:55:dd:ca:
                    82:90:da:da:60:d9:d9:64:d2:45:7c:ea:73:46:c8:
                    61:aa:e9:d9:68:62:b8:67:8e:53:22:81:a3:0e:5a:
                    44:2c:d0:48:e1:a5:ae:6f:7b:88:c5:09:02:08:81:
                    2b:f3:ec:73:23:f9:fa:72:73:20:41:15:fb:49:94:
                    13:04:3e:57:d8:ed:06:f0:fe:d1:bb:61:88:d3:2b:
                    87:e8:8f:b9:8c:51:f8:d1:98:ab:6e:d7:60:3c:c8:
                    29:77
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                51:53:D3:CA:EA:13:96:17:1A:BE:4C:53:06:FD:C1:57:BC:96:85:17
            X509v3 Authority Key Identifier:
                keyid:AC:D6:BE:97:BC:FE:12:BE:CB:E8:2B:78:41:04:7F:57:97:2A:93:5A

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/rNa-l7z-Er7L6Ct4QQR_V5cqk1o.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8d/4b7c2e-089f-4708-9184-2a84acbe07ee/1/rNa-l7z-Er7L6Ct4QQR_V5cqk1o.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/8d/4b7c2e-089f-4708-9184-2a84acbe07ee/1/rNa-l7z-Er7L6Ct4QQR_V5cqk1o.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         3e:11:4c:97:74:66:97:47:0f:09:7a:87:d4:0f:68:26:68:89:
         de:7a:e5:8d:0b:2e:bf:aa:6f:46:11:e4:b8:1a:55:b5:92:81:
         40:da:64:7e:1a:bd:49:7f:af:a8:c9:c1:2c:17:ee:b0:a3:92:
         02:9d:ba:74:f2:0d:a9:77:ca:66:5c:93:94:0e:e6:5f:c8:e2:
         1e:02:bd:f8:57:dc:6b:2f:44:57:f8:d1:1d:b6:98:3c:fa:1d:
         c7:09:85:ee:ee:64:01:68:b2:48:94:6f:77:8b:aa:5b:23:dc:
         5c:c2:f4:7f:57:71:48:9f:c3:bc:d8:57:25:51:b3:a2:7a:28:
         a8:7f:ab:13:60:77:5b:de:6c:43:1e:05:b0:4d:20:c8:98:f7:
         f7:92:24:9b:46:97:91:f0:70:88:54:5b:1a:ce:bc:c2:8e:c4:
         dd:20:da:5e:89:9e:c1:69:a5:a2:c4:bd:63:c7:f4:e1:54:58:
         64:63:7d:e8:ed:b8:7d:30:82:a5:db:0c:29:35:48:2b:b4:a9:
         38:eb:20:8e:00:39:71:90:8e:2e:63:31:cd:5a:6b:09:e1:d6:
         e0:17:76:ca:7b:6d:6c:e6:f8:31:ca:8a:c0:79:3b:7d:f1:02:
         d1:1d:96:65:a2:6e:95:9b:00:24:42:d1:5a:0d:83:e6:c4:26:
         c4:96:96:10
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----