Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/94/a31ddb-1fd2-461c-bfeb-82ee2d2b4289/1/4ndTjewu_NLxHMY3GX0dmm_a6dk.mft
File:                     4ndTjewu_NLxHMY3GX0dmm_a6dk.mft (raw, json)
Hash identifier:          Ncx5UQvqLMMO/UJ2pp66gIHtNodSDlgT2pvlDmF8jlA=
Subject key identifier:   8A:BF:5C:FD:32:0A:4C:1E:94:E5:14:ED:A7:8B:B1:7E:25:10:53:C3
Authority key identifier: E2:77:53:8D:EC:2E:FC:D2:F1:1C:C6:37:19:7D:1D:9A:6F:DA:E9:D9
Certificate issuer:       /CN=e277538dec2efcd2f11cc637197d1d9a6fdae9d9
Certificate serial:       01962E98D91936EE170C0C98DEF83A0BB575
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/4ndTjewu_NLxHMY3GX0dmm_a6dk.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/94/a31ddb-1fd2-461c-bfeb-82ee2d2b4289/1/4ndTjewu_NLxHMY3GX0dmm_a6dk.mft
Manifest number:          119E
Signing time:             Sun 13 Apr 2025 10:01:30 +0000
Manifest this update:     Sun 13 Apr 2025 10:01:30 +0000
Manifest next update:     Mon 14 Apr 2025 10:01:30 +0000
Files and hashes:         1: 4ndTjewu_NLxHMY3GX0dmm_a6dk.crl (hash: +xDq/CIfIYAJ1krRX1PGWRw4ZCx69Z9WaaH4C/h4SUY=)
                          2: Yc_s1uEQU3LAE6G4fkBk8Gok6CI.roa (hash: fdoGqzcyq0doKgpvX55kY45aKOwDTDyxb1UE8P+KUuU=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2e:98:d9:19:36:ee:17:0c:0c:98:de:f8:3a:0b:b5:75
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e277538dec2efcd2f11cc637197d1d9a6fdae9d9
        Validity
            Not Before: Apr 13 10:01:30 2025 GMT
            Not After : Apr 14 10:01:30 2025 GMT
        Subject: CN=8abf5cfd320a4c1e94e514eda78bb17e251053c3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c4:2b:20:50:cd:d4:26:cd:f3:f2:5a:41:d8:f1:
                    44:d2:e5:57:7f:19:7b:2c:89:04:4b:f2:1b:64:32:
                    a5:2e:fd:2b:25:9f:c8:a6:2a:a8:3a:84:df:0f:23:
                    c7:8c:fc:f5:b0:35:b5:0b:f2:41:f2:5a:de:45:49:
                    51:2c:ee:0b:30:04:4c:d1:18:61:d2:f4:fa:d6:cf:
                    76:ce:92:b3:3b:68:9a:55:f9:36:f3:b6:3d:7a:b5:
                    ee:46:be:e9:55:f6:7b:c9:8e:15:25:31:6b:91:72:
                    c6:f5:40:ce:f9:7b:f3:73:89:1b:ba:0d:b4:60:ae:
                    16:bc:5c:4e:ef:4a:81:bf:bc:0c:05:a6:61:32:17:
                    3f:e6:7a:f0:8c:22:25:d6:ef:73:42:c8:f6:ba:af:
                    83:44:40:31:e8:6d:43:f3:6b:f8:4c:b9:ed:13:77:
                    ff:dc:e4:2e:f9:80:a2:ff:34:4f:39:8d:37:1e:4d:
                    89:d5:18:ca:ca:2a:9e:fe:61:1c:63:20:d5:22:ee:
                    20:fa:ae:77:2b:f0:99:72:54:ce:0e:22:22:0b:02:
                    3f:60:97:b6:21:9f:75:a3:ce:e0:68:aa:33:a3:8d:
                    67:a3:66:50:42:a3:97:52:da:62:c8:b1:c8:2f:a3:
                    3d:e8:62:da:be:4c:f8:9f:57:17:58:56:3d:83:e6:
                    3a:f7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8A:BF:5C:FD:32:0A:4C:1E:94:E5:14:ED:A7:8B:B1:7E:25:10:53:C3
            X509v3 Authority Key Identifier:
                keyid:E2:77:53:8D:EC:2E:FC:D2:F1:1C:C6:37:19:7D:1D:9A:6F:DA:E9:D9

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/4ndTjewu_NLxHMY3GX0dmm_a6dk.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/94/a31ddb-1fd2-461c-bfeb-82ee2d2b4289/1/4ndTjewu_NLxHMY3GX0dmm_a6dk.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/94/a31ddb-1fd2-461c-bfeb-82ee2d2b4289/1/4ndTjewu_NLxHMY3GX0dmm_a6dk.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         68:d5:f4:41:8a:86:15:8d:3c:15:38:fc:35:ae:3f:f4:ea:98:
         8a:4f:70:4d:83:98:04:36:a9:e1:f1:50:e7:77:c8:0e:bd:8b:
         1b:4b:45:8a:a5:75:68:28:6b:bc:7b:a6:d7:7b:9f:4f:0b:5b:
         17:5d:a1:be:b0:ea:a5:8f:d5:c1:fc:f2:c6:c1:d6:f8:4d:3b:
         30:6d:49:4b:48:09:9f:ba:2c:1b:b5:11:be:0a:89:62:8d:47:
         74:81:52:c8:68:3a:f8:77:e9:fe:08:ad:46:48:ce:0e:ba:af:
         e5:57:fd:59:c9:48:4d:d9:b5:0d:8b:0d:93:ed:dd:fe:5f:f3:
         34:5e:be:f5:c1:68:d3:43:dd:df:6f:5d:de:a7:e2:60:e6:fd:
         2a:22:10:a9:21:8a:cc:99:58:dd:d1:c3:29:13:aa:8c:05:9d:
         93:60:0e:28:a9:41:90:ce:4b:35:3d:8f:58:14:99:15:68:cb:
         78:28:3d:3e:4b:ca:c1:bc:9f:e7:09:59:e4:86:33:cb:3c:e6:
         54:a0:3f:04:92:7a:a7:dd:e1:fd:9e:cc:5a:49:1f:6a:7e:4b:
         c3:01:0c:35:2d:de:cc:e8:4b:6c:3b:d9:0e:2f:54:b3:b4:f6:
         25:19:bd:26:20:5e:06:50:55:9a:b4:5f:d1:b7:9b:55:48:82:
         05:27:26:1a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----