Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a1/f2f1d3-f4c1-49df-9d41-bc76caf07860/1/r4jIvS2oviecF3KhEQqjiPDvEQI.mft
File:                     r4jIvS2oviecF3KhEQqjiPDvEQI.mft (raw, json)
Hash identifier:          vNwg5/5Pb3Ztj4oAgjebk3fGqv4C7KF+k30dbj5sKss=
Subject key identifier:   7D:E4:96:66:A7:8A:3C:92:54:05:9E:7C:8C:65:C5:05:66:96:5B:24
Authority key identifier: AF:88:C8:BD:2D:A8:BE:27:9C:17:72:A1:11:0A:A3:88:F0:EF:11:02
Certificate issuer:       /CN=af88c8bd2da8be279c1772a1110aa388f0ef1102
Certificate serial:       01962E61CB8C0E040A859DCF83CF4AE11003
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/r4jIvS2oviecF3KhEQqjiPDvEQI.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/a1/f2f1d3-f4c1-49df-9d41-bc76caf07860/1/r4jIvS2oviecF3KhEQqjiPDvEQI.mft
Manifest number:          14EA
Signing time:             Sun 13 Apr 2025 09:01:23 +0000
Manifest this update:     Sun 13 Apr 2025 09:01:23 +0000
Manifest next update:     Mon 14 Apr 2025 09:01:23 +0000
Files and hashes:         1: V6I7xtb-s540gCh7ELkbFAWWNm8.roa (hash: 4XfEuv+JUU8dRovsqOYBux0Sp8hqu4SxoGQivq4ciLk=)
                          2: r4jIvS2oviecF3KhEQqjiPDvEQI.crl (hash: R4rM35qdzGrDkZTmYRdgBg+VioLRsnSpDtNqZV4zYL4=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2e:61:cb:8c:0e:04:0a:85:9d:cf:83:cf:4a:e1:10:03
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=af88c8bd2da8be279c1772a1110aa388f0ef1102
        Validity
            Not Before: Apr 13 09:01:23 2025 GMT
            Not After : Apr 14 09:01:23 2025 GMT
        Subject: CN=7de49666a78a3c9254059e7c8c65c50566965b24
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e1:d4:dd:c2:8f:81:ca:fc:55:ff:39:e9:e5:00:
                    43:a1:fe:df:26:e5:12:74:1c:52:de:3f:9e:14:ea:
                    5e:4c:cd:1d:29:4f:b5:bb:4d:58:04:2a:8f:ae:51:
                    91:6a:5f:b2:fe:16:44:60:9e:38:e4:3c:2e:aa:14:
                    d1:37:ed:3c:12:c0:9f:ec:4e:b3:15:ef:f9:86:fc:
                    84:74:a2:cc:ee:61:33:a5:bd:91:1a:39:cd:8a:df:
                    76:48:e4:00:f1:84:80:7f:51:b6:dc:81:fc:3a:ef:
                    df:88:b6:b4:32:52:09:66:84:10:45:86:d2:bb:45:
                    3d:ed:05:ae:f2:af:90:b8:94:bb:ef:d1:9b:ec:8e:
                    57:87:54:6e:63:ed:d7:43:66:a4:76:c8:7a:ea:5c:
                    48:7c:7a:ba:e5:86:d7:99:b7:1e:c7:34:96:c2:eb:
                    f4:b6:cd:0c:71:fd:2f:7a:60:ee:09:8c:58:76:cc:
                    25:6e:8e:77:1d:a6:80:48:b7:c1:37:b3:bc:1a:58:
                    ed:68:6e:42:65:81:4a:7b:2c:91:df:99:23:da:3e:
                    45:22:92:f1:f0:c5:5c:be:dd:a2:42:56:00:93:cf:
                    e3:7e:ee:7f:0e:67:c3:b6:77:af:5c:35:a6:2a:5b:
                    8b:12:bb:b6:10:16:b7:d4:7b:07:9d:46:0a:db:a6:
                    f0:91
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7D:E4:96:66:A7:8A:3C:92:54:05:9E:7C:8C:65:C5:05:66:96:5B:24
            X509v3 Authority Key Identifier:
                keyid:AF:88:C8:BD:2D:A8:BE:27:9C:17:72:A1:11:0A:A3:88:F0:EF:11:02

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/r4jIvS2oviecF3KhEQqjiPDvEQI.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a1/f2f1d3-f4c1-49df-9d41-bc76caf07860/1/r4jIvS2oviecF3KhEQqjiPDvEQI.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/a1/f2f1d3-f4c1-49df-9d41-bc76caf07860/1/r4jIvS2oviecF3KhEQqjiPDvEQI.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         69:d6:98:24:f4:db:31:b4:18:96:5b:7b:85:81:1c:d0:08:be:
         94:0b:cb:37:13:eb:83:70:33:28:4d:8e:d3:ed:6f:c5:aa:e9:
         9f:c7:8d:cd:b7:33:41:44:3f:46:f9:da:bd:42:98:ed:b6:34:
         2d:37:0a:a7:00:e4:88:70:b9:c9:43:e7:46:b5:b2:08:9f:2e:
         9a:40:fa:7b:dd:40:5d:76:b9:79:68:6b:20:ad:66:0b:d6:78:
         12:28:50:97:57:d2:84:3a:e7:f8:5d:ff:82:93:6c:e9:f7:c7:
         d1:6b:00:0d:6d:ad:b7:e0:b8:6e:67:ad:08:49:c8:e6:30:5b:
         df:7a:57:97:55:ba:41:c1:91:4c:5b:00:d9:82:3e:c7:28:53:
         98:0a:c1:cd:0e:88:a3:21:81:2c:fb:be:42:71:9b:aa:35:83:
         d1:ba:69:20:50:0f:91:88:8c:d0:f5:92:25:21:2a:de:53:6e:
         7a:01:e5:d9:9b:d4:7d:eb:b3:fd:d0:34:dc:b2:44:0a:d0:f4:
         9a:09:66:40:77:ae:46:f2:95:a7:d4:83:59:8a:1e:e4:d1:ae:
         16:a4:18:69:8d:90:9b:c7:a0:b9:da:aa:f7:5a:c7:34:a2:8e:
         91:b9:d9:62:95:08:fd:cf:c5:ab:4a:5e:33:af:84:dd:2b:bb:
         ae:0f:74:c7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----