Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ab/27e031-1386-4fca-bbe1-8e9b511cac1a/1/clC6rf8sKGxguWEH0sZNU37ArKY.mft
File:                     clC6rf8sKGxguWEH0sZNU37ArKY.mft (raw, json)
Hash identifier:          639MMqcgPBjbFcFUDnRd7lDakmrSZid1n3HBj+ylltg=
Subject key identifier:   37:6E:88:68:ED:27:CD:07:36:67:02:33:9D:73:AD:9A:4A:18:D6:8B
Authority key identifier: 72:50:BA:AD:FF:2C:28:6C:60:B9:61:07:D2:C6:4D:53:7E:C0:AC:A6
Certificate issuer:       /CN=7250baadff2c286c60b96107d2c64d537ec0aca6
Certificate serial:       01962F06BD2579DC0F63AAF9F067A2121DDF
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/clC6rf8sKGxguWEH0sZNU37ArKY.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/ab/27e031-1386-4fca-bbe1-8e9b511cac1a/1/clC6rf8sKGxguWEH0sZNU37ArKY.mft
Manifest number:          14E7
Signing time:             Sun 13 Apr 2025 12:01:32 +0000
Manifest this update:     Sun 13 Apr 2025 12:01:32 +0000
Manifest next update:     Mon 14 Apr 2025 12:01:32 +0000
Files and hashes:         1: ElkjMSo_kXjP6q9aSDUGnZi_eU0.roa (hash: 7q4VbgFNWa3tnFNDab0oMeZop6uPRWY6PGIt1SoGlFs=)
                          2: clC6rf8sKGxguWEH0sZNU37ArKY.crl (hash: L/gUdZZTeXywD8nuY9PkjRX49HPLgi3Cf/Z/4dV/ENo=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2f:06:bd:25:79:dc:0f:63:aa:f9:f0:67:a2:12:1d:df
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7250baadff2c286c60b96107d2c64d537ec0aca6
        Validity
            Not Before: Apr 13 12:01:32 2025 GMT
            Not After : Apr 14 12:01:32 2025 GMT
        Subject: CN=376e8868ed27cd07366702339d73ad9a4a18d68b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e0:22:eb:95:f2:93:ec:23:f9:ae:47:c3:bb:a8:
                    89:00:1d:66:ad:73:03:1e:db:ba:19:09:45:2c:01:
                    f4:82:fc:a6:d8:64:0b:f5:8c:4f:33:66:bb:69:6e:
                    bf:e1:d4:65:e5:33:07:91:63:bd:ef:c4:94:11:82:
                    8f:6e:51:71:19:f0:9a:f0:73:e7:f4:8b:70:ed:b5:
                    85:13:6a:a6:fb:31:bb:37:d4:32:d1:d0:0c:0c:79:
                    47:a1:fd:64:0b:d4:63:b9:31:ef:63:a7:b4:ba:de:
                    99:3a:d9:fb:a4:76:e9:84:aa:b6:42:64:2f:81:9d:
                    62:6e:78:73:7f:d2:55:e2:4f:6a:ab:2d:2b:4b:71:
                    99:61:09:0f:1b:ac:83:74:51:e5:90:91:ad:1a:15:
                    e7:95:c4:4b:f6:7e:31:56:02:23:3e:2a:1b:07:5f:
                    fb:48:6b:f5:37:ae:41:dc:75:88:80:1b:8c:85:bb:
                    8a:07:20:06:e6:b1:c8:63:80:b5:99:5e:72:52:09:
                    ac:d6:39:89:07:7f:4c:29:4c:70:f0:09:52:9b:0f:
                    9a:40:69:1c:6a:a8:28:77:86:13:0a:5c:2d:d8:8a:
                    e7:4b:61:15:73:55:1f:5d:01:92:e3:07:56:78:59:
                    41:fc:e3:c7:0e:ff:48:3b:8a:f2:8a:b8:8d:41:22:
                    f9:ed
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                37:6E:88:68:ED:27:CD:07:36:67:02:33:9D:73:AD:9A:4A:18:D6:8B
            X509v3 Authority Key Identifier:
                keyid:72:50:BA:AD:FF:2C:28:6C:60:B9:61:07:D2:C6:4D:53:7E:C0:AC:A6

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/clC6rf8sKGxguWEH0sZNU37ArKY.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ab/27e031-1386-4fca-bbe1-8e9b511cac1a/1/clC6rf8sKGxguWEH0sZNU37ArKY.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/ab/27e031-1386-4fca-bbe1-8e9b511cac1a/1/clC6rf8sKGxguWEH0sZNU37ArKY.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         27:c8:0f:22:b0:e3:81:4c:89:c7:49:20:e4:fc:30:e6:6f:bd:
         e8:fe:40:ce:10:64:4f:2e:b4:62:ea:22:5e:04:2d:00:70:38:
         ce:4e:4d:4d:b6:c4:9d:27:e2:75:03:c0:a4:af:c5:43:5c:f4:
         b3:19:09:6f:16:06:d0:ec:24:7d:a3:fa:7e:ba:80:84:42:63:
         2d:e5:48:d2:63:fa:26:4f:1c:e9:1c:bf:c7:c6:c7:3d:93:27:
         cd:31:44:e8:6c:23:21:90:b8:a9:e3:7b:48:a5:0a:18:f2:29:
         8a:e0:37:ad:d1:92:2b:b4:2a:e4:85:44:00:b0:8e:93:08:c0:
         e0:ec:21:d1:ee:72:14:12:8d:93:aa:f3:23:ed:b1:7d:18:0e:
         46:00:6d:b5:4a:0c:93:e5:ca:c8:2b:e4:c5:cf:b3:6f:3f:72:
         94:35:05:59:06:03:95:a2:27:a9:88:44:06:d8:f1:68:51:c2:
         b9:5c:54:b6:1d:7b:d7:f4:53:30:b2:2a:22:96:b3:1b:26:aa:
         aa:05:b8:c8:a9:c7:a2:68:67:5e:b5:00:ce:01:41:1f:b3:b1:
         84:40:89:54:34:0e:dd:74:66:02:c1:20:c1:99:43:cd:1e:43:
         9a:e3:82:53:49:38:e9:89:51:77:e4:90:e4:b7:36:22:cb:51:
         c1:4e:4d:f1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----