Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a2/ad1216-b71d-4557-a086-efea63d06f80/1/4Zy7iNKxqJZlhQZ3hmLnXHMqZ-c.mft
File:                     4Zy7iNKxqJZlhQZ3hmLnXHMqZ-c.mft (raw, json)
Hash identifier:          XNcCKfNSRT619BPqQYUJj7Xvweyet9vNllOUYzo/uWs=
Subject key identifier:   B8:F1:3A:F7:36:B6:35:F5:BA:36:E0:8F:D4:C6:C0:9D:1D:9D:E5:04
Authority key identifier: E1:9C:BB:88:D2:B1:A8:96:65:85:06:77:86:62:E7:5C:73:2A:67:E7
Certificate issuer:       /CN=e19cbb88d2b1a896658506778662e75c732a67e7
Certificate serial:       01962ECF9A0DC4DE139B46CF4D23E202FFCA
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/4Zy7iNKxqJZlhQZ3hmLnXHMqZ-c.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/a2/ad1216-b71d-4557-a086-efea63d06f80/1/4Zy7iNKxqJZlhQZ3hmLnXHMqZ-c.mft
Manifest number:          14EA
Signing time:             Sun 13 Apr 2025 11:01:19 +0000
Manifest this update:     Sun 13 Apr 2025 11:01:19 +0000
Manifest next update:     Mon 14 Apr 2025 11:01:19 +0000
Files and hashes:         1: 4Zy7iNKxqJZlhQZ3hmLnXHMqZ-c.crl (hash: neTQcexNKzwPRjlHmeQ129Gr+m04nqbNnb1gBs/GbrM=)
                          2: E3bOWVadiTMoov1haUFyRTwduJA.roa (hash: sxYsSioAFV3M4+urFT6FLkeq4ts+IfaNfTA80Mu3sng=)
                          3: qBf7Ld8e0ZEc7SC83qsc-EpQ6wo.roa (hash: 1F0G1lB8+dsYp3xA4GqGoykNUR9+r6OUzve6mTfWaFI=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2e:cf:9a:0d:c4:de:13:9b:46:cf:4d:23:e2:02:ff:ca
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e19cbb88d2b1a896658506778662e75c732a67e7
        Validity
            Not Before: Apr 13 11:01:19 2025 GMT
            Not After : Apr 14 11:01:19 2025 GMT
        Subject: CN=b8f13af736b635f5ba36e08fd4c6c09d1d9de504
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d1:a4:18:34:35:60:7b:b9:e3:a3:eb:44:40:a3:
                    26:0e:3b:c2:58:d0:61:46:22:80:63:da:75:54:34:
                    b0:06:33:84:9e:fb:c1:4e:c4:6a:a0:37:39:8e:d6:
                    54:4e:c3:95:9d:46:b8:8e:e3:c6:28:16:29:85:c2:
                    d2:d3:8a:68:3a:76:d3:25:ad:35:ad:46:0d:ba:07:
                    be:02:79:44:30:42:5f:0b:da:d6:02:a6:e9:f1:69:
                    79:52:a0:bb:db:ab:77:53:05:85:23:37:d4:34:17:
                    c9:fc:55:0f:d0:18:a9:cb:e4:57:d6:bb:72:a8:24:
                    09:ed:0c:60:92:a6:ff:ca:11:a8:e4:47:5d:97:13:
                    52:a3:bd:7c:08:b8:08:a8:49:f6:9b:30:cb:ca:a7:
                    79:66:3b:d1:a9:04:c9:e8:21:72:32:e2:e8:eb:52:
                    29:af:81:69:ea:06:83:b3:af:bb:58:84:85:ab:c7:
                    ac:34:9f:17:e2:71:96:ab:9a:14:19:2b:68:30:31:
                    21:80:66:a7:cd:05:7e:70:ea:4b:e8:f8:d3:39:2e:
                    54:cc:6e:96:13:c2:76:4b:69:d6:a1:45:f2:7f:2e:
                    54:c9:ec:38:0e:c9:65:83:8c:d9:03:9e:b9:2a:a0:
                    b5:cc:35:3d:c3:0c:4f:0e:a2:b6:1e:4f:ea:e1:27:
                    cd:19
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B8:F1:3A:F7:36:B6:35:F5:BA:36:E0:8F:D4:C6:C0:9D:1D:9D:E5:04
            X509v3 Authority Key Identifier:
                keyid:E1:9C:BB:88:D2:B1:A8:96:65:85:06:77:86:62:E7:5C:73:2A:67:E7

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/4Zy7iNKxqJZlhQZ3hmLnXHMqZ-c.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a2/ad1216-b71d-4557-a086-efea63d06f80/1/4Zy7iNKxqJZlhQZ3hmLnXHMqZ-c.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/a2/ad1216-b71d-4557-a086-efea63d06f80/1/4Zy7iNKxqJZlhQZ3hmLnXHMqZ-c.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         ae:20:97:b0:8e:72:c0:78:13:b0:31:26:a7:8e:f9:00:6e:b3:
         3f:67:8d:ee:fe:19:8f:49:b4:b8:b7:f4:18:14:18:d0:66:96:
         c9:20:fb:38:46:2a:16:62:ab:22:9f:fe:cd:f5:18:40:2c:85:
         ce:52:25:ea:51:61:92:de:dc:ae:ba:1d:cd:7b:ac:73:86:56:
         b7:2b:65:d7:7d:21:62:b3:65:12:0c:5a:a1:5b:b6:fb:52:3b:
         1c:d9:75:8d:2f:26:e4:71:74:86:af:2f:2a:77:b2:73:b9:ab:
         f8:d1:da:08:c6:84:0b:7f:04:f0:35:89:e4:0e:3c:f6:6a:b8:
         4a:55:a4:b6:d1:1b:8d:5c:ba:24:8b:f9:84:9b:3a:63:57:46:
         05:08:7f:ec:5b:1b:04:a8:9d:d1:9f:48:58:9a:61:e0:e3:10:
         c7:46:bc:9a:79:e3:33:a8:cb:b1:21:e6:8c:fd:0d:3c:81:91:
         ba:6a:6b:e4:19:1e:28:35:b9:e8:92:1d:33:21:54:82:21:77:
         cd:20:29:ba:52:32:09:25:90:54:7f:55:7d:6c:5b:76:29:69:
         d1:2e:cb:b3:0c:87:90:88:5a:3c:db:fb:4b:45:21:4e:43:54:
         6a:6d:2f:f2:94:25:da:00:c5:bc:c8:08:58:fe:b3:92:3e:08:
         9b:52:50:a1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----