Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ac/572ec8-7456-4e55-b776-d8ece26afec0/1/4-RuLEAWqNc5LIV0E0_UeTuUFaQ.mft
File:                     4-RuLEAWqNc5LIV0E0_UeTuUFaQ.mft (raw, json)
Hash identifier:          qJ4oBFo8+k5mf1D/QkTRmYJdxwKyy2aUE/5AVT7KRdg=
Subject key identifier:   3D:88:F0:83:AA:7C:FE:5D:44:F0:9D:FF:4E:67:6A:CB:24:44:44:00
Authority key identifier: E3:E4:6E:2C:40:16:A8:D7:39:2C:85:74:13:4F:D4:79:3B:94:15:A4
Certificate issuer:       /CN=e3e46e2c4016a8d7392c8574134fd4793b9415a4
Certificate serial:       01962E98E4BE3188B3727FEF2F2D14D1445C
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/4-RuLEAWqNc5LIV0E0_UeTuUFaQ.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/ac/572ec8-7456-4e55-b776-d8ece26afec0/1/4-RuLEAWqNc5LIV0E0_UeTuUFaQ.mft
Manifest number:          1058
Signing time:             Sun 13 Apr 2025 10:01:34 +0000
Manifest this update:     Sun 13 Apr 2025 10:01:34 +0000
Manifest next update:     Mon 14 Apr 2025 10:01:34 +0000
Files and hashes:         1: 4-RuLEAWqNc5LIV0E0_UeTuUFaQ.crl (hash: rwbGbdp3BaLxish2hOpExZuaapwAI7bN9szTHasQInA=)
                          2: rxnNIrhG3QldlOPtvjeA2wvjFbs.roa (hash: 2BblVg4dCI71TgTK0hUX2laI8AdtzWYFSV42O2qiwl4=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2e:98:e4:be:31:88:b3:72:7f:ef:2f:2d:14:d1:44:5c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e3e46e2c4016a8d7392c8574134fd4793b9415a4
        Validity
            Not Before: Apr 13 10:01:34 2025 GMT
            Not After : Apr 14 10:01:34 2025 GMT
        Subject: CN=3d88f083aa7cfe5d44f09dff4e676acb24444400
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9d:ea:d2:ce:30:0b:d5:25:e3:41:10:6d:d3:97:
                    ba:a1:b1:7c:6a:cf:6d:66:a0:76:b1:2f:49:ff:d2:
                    76:12:0b:15:7a:15:41:71:09:44:ca:a9:6c:aa:af:
                    47:36:9a:41:4d:5d:e0:5e:67:f4:0e:1c:c6:6c:1d:
                    55:55:17:ec:4f:15:64:b4:c8:d6:12:fe:6e:a8:c8:
                    af:59:00:36:6a:6b:61:80:60:ee:25:16:c9:e3:f2:
                    a9:0b:22:78:79:86:0d:ff:c6:43:dc:ea:8d:ad:cd:
                    91:62:8b:ba:30:09:26:77:3f:4d:81:e4:e0:d5:a7:
                    b7:57:15:fb:c0:16:16:6a:d7:a2:64:fb:74:17:41:
                    c8:bb:08:fd:27:26:cc:fe:a3:27:1d:d3:53:cc:12:
                    9c:92:15:30:77:f2:c4:df:b5:30:4a:21:30:d3:ab:
                    54:53:0b:ea:a2:a1:c0:05:33:84:1d:0e:7b:f6:04:
                    6e:b3:7c:b9:cb:60:af:5e:bf:36:be:48:2d:08:40:
                    42:0f:e3:f9:0e:57:35:93:b0:36:80:16:2e:25:c8:
                    70:a5:56:be:22:f0:c4:68:b2:70:bf:4a:e7:dd:f6:
                    be:b8:0e:0d:26:f5:d9:69:3c:e5:d6:0a:b7:c9:32:
                    ae:25:56:3d:9d:30:fb:ca:5a:1b:39:51:6b:74:b3:
                    19:bb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3D:88:F0:83:AA:7C:FE:5D:44:F0:9D:FF:4E:67:6A:CB:24:44:44:00
            X509v3 Authority Key Identifier:
                keyid:E3:E4:6E:2C:40:16:A8:D7:39:2C:85:74:13:4F:D4:79:3B:94:15:A4

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/4-RuLEAWqNc5LIV0E0_UeTuUFaQ.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ac/572ec8-7456-4e55-b776-d8ece26afec0/1/4-RuLEAWqNc5LIV0E0_UeTuUFaQ.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/ac/572ec8-7456-4e55-b776-d8ece26afec0/1/4-RuLEAWqNc5LIV0E0_UeTuUFaQ.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         58:98:ad:a4:a6:58:03:d0:eb:5c:af:e2:07:7c:c2:81:fa:ad:
         77:eb:13:8c:0a:af:39:b5:22:5c:b5:1d:9c:31:0a:06:8e:ac:
         e8:9b:46:5a:13:80:4f:c9:51:bd:da:09:15:ee:ca:ec:ff:96:
         b4:5b:b8:1b:8b:2d:e6:3b:fb:2f:65:52:24:8c:2b:4e:20:34:
         87:b6:13:f1:6f:1d:88:60:69:55:bb:15:97:4c:b4:d4:aa:55:
         ba:d4:15:bd:24:79:13:8c:1e:dc:93:ff:5f:52:68:f8:65:a0:
         ec:b9:fe:d4:2b:36:0c:7c:f7:2a:82:82:bc:59:e5:99:00:9f:
         03:b5:3e:62:03:0f:76:b9:9a:70:45:1c:47:73:d0:1a:88:40:
         a6:94:db:3d:83:ef:0f:c9:7f:54:49:e4:2e:36:a1:c4:c7:ec:
         28:37:77:f6:3a:74:c1:0e:91:25:1f:24:bb:21:43:a4:08:c2:
         54:e9:68:68:70:c6:77:c6:db:da:f5:92:16:aa:bf:33:09:ba:
         81:32:3d:c5:44:ca:c0:15:5b:8f:4b:6b:33:c1:5a:5a:35:3b:
         75:2d:92:c2:25:58:6f:32:18:b1:a2:a6:1e:e6:ab:9c:08:c9:
         5b:16:b0:5a:7a:ae:ed:c9:a0:a6:46:b0:4b:b3:6e:ea:96:48:
         be:61:b0:5c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----