Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a7/61b73b-f265-43d4-b5b3-946fdafe2ec6/1/aPBj7S4KJnS8RxAQGJ_HetsxwX8.mft
File:                     aPBj7S4KJnS8RxAQGJ_HetsxwX8.mft (raw, json)
Hash identifier:          dXmjzg+eFFfFVcUL4xTi37hhoJN8n20FQftBU4k6HHM=
Subject key identifier:   E2:E4:D2:F5:24:24:A4:1E:DA:2D:0D:B0:D6:14:C1:88:86:E4:19:55
Authority key identifier: 68:F0:63:ED:2E:0A:26:74:BC:47:10:10:18:9F:C7:7A:DB:31:C1:7F
Certificate issuer:       /CN=68f063ed2e0a2674bc471010189fc77adb31c17f
Certificate serial:       01962ECFC786DF57877B89BC1E01A6E53ED6
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/aPBj7S4KJnS8RxAQGJ_HetsxwX8.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/a7/61b73b-f265-43d4-b5b3-946fdafe2ec6/1/aPBj7S4KJnS8RxAQGJ_HetsxwX8.mft
Manifest number:          13E8
Signing time:             Sun 13 Apr 2025 11:01:30 +0000
Manifest this update:     Sun 13 Apr 2025 11:01:30 +0000
Manifest next update:     Mon 14 Apr 2025 11:01:30 +0000
Files and hashes:         1: aPBj7S4KJnS8RxAQGJ_HetsxwX8.crl (hash: 0xMHkLM5rVeEszAC+sCTVsASK7uICklBULxGGd+WsY0=)
                          2: cMnqdtCxCnyUSWOfUxTVBWPspak.roa (hash: OOJ4v4cc4LujDvo5fdL7b0ZauPjg9CekPa/sj+wo+LE=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2e:cf:c7:86:df:57:87:7b:89:bc:1e:01:a6:e5:3e:d6
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=68f063ed2e0a2674bc471010189fc77adb31c17f
        Validity
            Not Before: Apr 13 11:01:30 2025 GMT
            Not After : Apr 14 11:01:30 2025 GMT
        Subject: CN=e2e4d2f52424a41eda2d0db0d614c18886e41955
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cd:88:67:67:cf:0c:c1:2f:c3:9a:8c:25:14:4f:
                    ee:d4:bc:58:24:26:94:3f:02:f4:83:99:63:a8:d3:
                    00:96:02:06:2e:d7:65:b7:00:e6:ab:fb:ba:aa:d3:
                    0b:92:db:77:f8:f2:ff:d1:bd:09:35:31:02:88:43:
                    9f:68:1e:e8:ac:32:3f:47:0c:74:92:e6:6b:2b:00:
                    98:92:0b:59:5b:3d:07:03:0b:a3:72:89:4a:d3:e8:
                    19:2d:1b:78:f1:be:18:d4:ab:1a:d0:29:65:e9:03:
                    19:75:1b:73:03:40:ac:56:73:8f:58:0e:c7:69:bd:
                    86:a1:dd:c6:2c:18:71:ca:71:4e:55:ca:cd:76:64:
                    ff:55:7a:47:e3:af:60:c9:0f:47:5d:bd:09:17:9b:
                    6b:28:39:d4:76:fa:ee:95:04:25:28:3c:d8:a7:06:
                    9c:4b:b9:b4:54:90:58:57:cc:98:63:cb:45:17:b7:
                    34:52:7a:fb:23:e1:5b:bb:a8:89:6f:87:c6:11:ae:
                    1f:2f:c9:18:0e:e1:25:05:5d:21:9b:05:2f:bb:2a:
                    b8:89:e5:99:59:7d:70:e9:5a:d4:12:5b:87:4b:67:
                    83:f8:8d:10:48:51:cb:d4:34:19:df:75:62:55:92:
                    5e:bc:1f:01:0b:8c:d0:4b:8c:15:a4:fe:20:5b:ab:
                    0f:8d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E2:E4:D2:F5:24:24:A4:1E:DA:2D:0D:B0:D6:14:C1:88:86:E4:19:55
            X509v3 Authority Key Identifier:
                keyid:68:F0:63:ED:2E:0A:26:74:BC:47:10:10:18:9F:C7:7A:DB:31:C1:7F

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/aPBj7S4KJnS8RxAQGJ_HetsxwX8.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a7/61b73b-f265-43d4-b5b3-946fdafe2ec6/1/aPBj7S4KJnS8RxAQGJ_HetsxwX8.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/a7/61b73b-f265-43d4-b5b3-946fdafe2ec6/1/aPBj7S4KJnS8RxAQGJ_HetsxwX8.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         37:82:c0:7e:05:f2:a7:55:fa:69:93:35:d5:a7:db:84:6f:72:
         b3:df:12:23:3a:e2:b7:4f:10:64:cd:84:51:36:24:19:0a:be:
         dd:d8:66:f4:7e:e5:78:d5:b9:1b:a3:72:fc:a2:59:fe:c1:8c:
         2f:ed:49:2b:58:30:9f:fc:2d:29:61:76:bb:bb:81:0f:cb:ae:
         21:0f:9c:26:fa:ab:a4:7a:0b:15:82:ee:49:63:7d:5f:39:c7:
         a6:58:0d:e4:e8:bb:c9:68:e7:e4:1a:2e:e7:af:d4:b8:04:e9:
         58:67:b6:07:58:43:32:df:f7:de:b4:c9:93:71:b6:f6:de:07:
         41:89:e5:cd:5c:39:62:76:ee:32:49:c1:0c:5b:98:12:ee:ff:
         be:bd:18:22:91:c2:08:87:45:42:7b:40:32:89:f4:ad:6c:90:
         67:42:a0:42:a5:24:6c:6b:1e:36:6d:42:6c:2c:59:59:75:ff:
         4e:9a:ff:72:3d:59:fa:12:8c:7f:d7:92:e5:82:b5:17:61:48:
         1f:c9:01:25:28:93:02:aa:97:26:3e:c0:d9:61:20:d7:66:c6:
         93:eb:46:cd:14:75:25:26:e2:d8:27:18:46:1b:60:7f:9a:2f:
         db:84:12:42:a7:4e:ca:68:83:dd:52:47:69:c8:5a:35:82:dc:
         ae:f5:20:f0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----