Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/90/0582ff-7189-4c3c-a45f-b493a9df4f8f/1/x4JzWqmNRkXQQQk6dmKhI3lQOjE.mft
File:                     x4JzWqmNRkXQQQk6dmKhI3lQOjE.mft (raw, json)
Hash identifier:          748B//l2lfPd5hCZQ+sk1TrJ9piNYjwcvQuezIg0WAY=
Subject key identifier:   11:B1:EC:B0:24:2D:71:54:F4:36:07:1F:98:C0:99:EF:80:E2:65:BF
Authority key identifier: C7:82:73:5A:A9:8D:46:45:D0:41:09:3A:76:62:A1:23:79:50:3A:31
Certificate issuer:       /CN=c782735aa98d4645d041093a7662a12379503a31
Certificate serial:       01962E996EF63230B24E7F6FDC8775148493
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/x4JzWqmNRkXQQQk6dmKhI3lQOjE.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/90/0582ff-7189-4c3c-a45f-b493a9df4f8f/1/x4JzWqmNRkXQQQk6dmKhI3lQOjE.mft
Manifest number:          0CB5
Signing time:             Sun 13 Apr 2025 10:02:09 +0000
Manifest this update:     Sun 13 Apr 2025 10:02:09 +0000
Manifest next update:     Mon 14 Apr 2025 10:02:09 +0000
Files and hashes:         1: tjSYgzQ0bYjCtyMesUCoqcYRKAI.roa (hash: V0DKhUKbNvI4aOcWkxFt+dLkw7F0CNEt1KU67bvkMmI=)
                          2: x4JzWqmNRkXQQQk6dmKhI3lQOjE.crl (hash: xDT3VzVpxzHqwvmemKPkT4KaXR57DIksIMcOKTVW+fo=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2e:99:6e:f6:32:30:b2:4e:7f:6f:dc:87:75:14:84:93
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c782735aa98d4645d041093a7662a12379503a31
        Validity
            Not Before: Apr 13 10:02:09 2025 GMT
            Not After : Apr 14 10:02:09 2025 GMT
        Subject: CN=11b1ecb0242d7154f436071f98c099ef80e265bf
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:86:e9:30:8b:c2:88:6e:af:13:73:c7:82:5e:32:
                    ee:3b:f5:37:4d:23:7d:27:6a:d6:cc:e8:d9:31:0c:
                    8a:7f:2b:7e:1a:f1:fe:90:f6:77:06:41:8b:e8:22:
                    e8:f5:ad:ff:eb:c2:47:74:3a:72:04:00:ee:c0:3e:
                    07:94:b8:80:95:cd:25:b1:a1:d0:1d:11:00:8f:ce:
                    39:03:c5:28:1b:d2:f5:21:2b:dc:c1:d4:86:50:08:
                    86:e7:0c:52:fa:02:8b:d1:f9:81:e5:42:a9:a3:3a:
                    5b:50:f8:34:e8:b1:4d:6a:f8:af:85:05:43:8e:06:
                    da:95:5b:a7:93:f9:bc:b5:4a:34:12:a6:35:ce:30:
                    2b:9e:43:d8:20:b8:4d:18:1d:59:aa:b3:bb:7c:43:
                    33:4d:37:b1:35:6d:bc:18:9f:c5:fa:31:78:7c:eb:
                    51:58:3f:bd:7e:c6:6d:7e:a1:be:89:cf:b4:8f:2a:
                    91:33:53:93:48:a7:2d:e5:de:bd:0a:c1:89:9f:ee:
                    fa:47:4b:9a:11:73:9a:1b:67:25:d9:c5:e3:ac:11:
                    5e:dd:2d:8f:39:c9:58:c2:fc:e2:00:a1:b8:89:de:
                    77:2a:fe:71:07:2f:b3:66:94:31:bf:c8:61:6e:93:
                    4f:7c:16:2c:a4:1f:49:8e:74:38:c6:5e:d1:60:1a:
                    83:17
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                11:B1:EC:B0:24:2D:71:54:F4:36:07:1F:98:C0:99:EF:80:E2:65:BF
            X509v3 Authority Key Identifier:
                keyid:C7:82:73:5A:A9:8D:46:45:D0:41:09:3A:76:62:A1:23:79:50:3A:31

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/x4JzWqmNRkXQQQk6dmKhI3lQOjE.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/90/0582ff-7189-4c3c-a45f-b493a9df4f8f/1/x4JzWqmNRkXQQQk6dmKhI3lQOjE.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/90/0582ff-7189-4c3c-a45f-b493a9df4f8f/1/x4JzWqmNRkXQQQk6dmKhI3lQOjE.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         81:f7:d1:34:03:ff:04:c7:e8:55:e1:7a:9d:a6:df:af:ed:4b:
         b6:62:20:2d:60:a3:0d:30:34:ad:1b:ca:af:64:80:e7:2c:37:
         19:2f:01:85:df:80:de:31:37:d4:e3:fb:8e:15:c3:2b:6f:ce:
         7e:0f:96:f3:2d:9c:29:0d:6b:25:c6:18:37:bb:c4:af:d8:eb:
         77:b0:e9:f5:2a:6c:35:3a:73:04:5b:16:0a:02:2c:34:5d:ac:
         f7:29:7d:1d:06:09:f1:5d:f1:ff:e5:28:0a:54:bc:09:ee:ed:
         50:05:7c:31:ae:44:5f:14:55:57:db:39:10:ee:b0:6b:51:29:
         dd:67:d6:1c:25:00:e0:ae:ab:78:70:9e:79:fc:e8:cf:3f:fc:
         fb:7b:ca:74:9e:0b:06:2a:73:a9:05:85:c0:ee:f4:3b:4a:84:
         15:73:56:68:67:2f:54:f0:9d:10:ad:de:8e:0f:7f:12:48:a0:
         c7:5e:eb:64:08:31:88:cd:12:91:56:af:d2:6d:ca:42:67:0e:
         08:2f:bb:94:5b:91:43:63:8d:bf:b6:79:ff:9d:81:50:26:04:
         d0:b3:bb:a9:bd:17:0f:25:5e:36:34:8e:c4:07:fa:ac:d5:1a:
         9e:8d:6c:c2:34:60:f0:ba:66:27:55:64:75:7b:15:a8:c6:07:
         ab:b1:3f:40
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----