Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b2/563afc-b194-41fb-a7a1-6aeae63ed8fe/1/44qr6o7im_fJFbw-8Luswn0Ozt4.mft
File:                     44qr6o7im_fJFbw-8Luswn0Ozt4.mft (raw, json)
Hash identifier:          KdEK4rG6nOVKxggqeYOJIHC5U/1+fcuJ9OJxwC6Qobc=
Subject key identifier:   49:E2:61:00:36:13:09:5E:E9:21:78:40:03:B7:7E:6A:BA:08:63:B6
Authority key identifier: E3:8A:AB:EA:8E:E2:9B:F7:C9:15:BC:3E:F0:BB:AC:C2:7D:0E:CE:DE
Certificate issuer:       /CN=e38aabea8ee29bf7c915bc3ef0bbacc27d0ecede
Certificate serial:       01962DF39AF6AEE2E5F72D10A7E891C925E1
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/44qr6o7im_fJFbw-8Luswn0Ozt4.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/b2/563afc-b194-41fb-a7a1-6aeae63ed8fe/1/44qr6o7im_fJFbw-8Luswn0Ozt4.mft
Manifest number:          1196
Signing time:             Sun 13 Apr 2025 07:01:01 +0000
Manifest this update:     Sun 13 Apr 2025 07:01:01 +0000
Manifest next update:     Mon 14 Apr 2025 07:01:01 +0000
Files and hashes:         1: 44qr6o7im_fJFbw-8Luswn0Ozt4.crl (hash: AsOtmUilys1HVwjXgP7T/+/RVB1woO/f4ALnR+eVqGE=)
                          2: lZ_8Gy-p9dJBOR2jnQXGL1gKT24.roa (hash: gojO/FGnNBUfGiI8/IbdnMShaLKaR6WR/+GNSoRF7Bk=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2d:f3:9a:f6:ae:e2:e5:f7:2d:10:a7:e8:91:c9:25:e1
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e38aabea8ee29bf7c915bc3ef0bbacc27d0ecede
        Validity
            Not Before: Apr 13 07:01:01 2025 GMT
            Not After : Apr 14 07:01:01 2025 GMT
        Subject: CN=49e261003613095ee921784003b77e6aba0863b6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ac:2f:22:ad:99:47:06:6d:7c:fe:9a:02:92:97:
                    c2:bc:91:86:ed:30:63:c0:2d:5b:fd:d1:dc:d5:1e:
                    bc:30:82:a6:60:66:d2:fa:f7:85:53:81:32:c3:f7:
                    cd:4e:2b:b5:b2:cf:26:aa:e4:7d:be:ff:75:67:96:
                    35:8d:c9:42:9b:01:16:06:d4:1f:52:97:71:19:fc:
                    0a:68:dc:1e:22:e8:c9:6f:ba:5a:45:f7:57:70:ed:
                    e7:15:1a:5d:a6:ad:d9:93:85:c9:fd:8f:82:03:b4:
                    5d:be:f3:ee:a3:91:69:a4:6e:78:1a:0c:63:76:c8:
                    1b:6c:f4:45:d2:9a:87:9a:ad:ff:55:1d:0d:c8:dc:
                    57:c3:1e:7a:84:47:2a:52:ab:8c:5c:43:82:40:c1:
                    d9:09:b9:19:bc:b8:cf:c2:7f:c7:be:e2:f9:78:45:
                    0d:dd:db:18:e2:a6:a9:e3:29:63:a0:c6:77:e5:68:
                    d1:2c:00:a9:30:98:db:1b:cc:5c:f6:b5:48:9e:c0:
                    00:8d:62:e8:d3:8a:f9:02:e2:d0:8c:50:d4:22:ba:
                    af:a2:bd:c0:bf:29:b8:83:a9:4a:50:3c:74:21:5e:
                    7a:c4:d1:83:0c:ad:37:d5:a7:80:03:f0:42:5a:a6:
                    2e:6e:5c:2b:49:4e:27:a3:e3:6a:46:d7:25:ac:9a:
                    1c:17
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                49:E2:61:00:36:13:09:5E:E9:21:78:40:03:B7:7E:6A:BA:08:63:B6
            X509v3 Authority Key Identifier:
                keyid:E3:8A:AB:EA:8E:E2:9B:F7:C9:15:BC:3E:F0:BB:AC:C2:7D:0E:CE:DE

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/44qr6o7im_fJFbw-8Luswn0Ozt4.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b2/563afc-b194-41fb-a7a1-6aeae63ed8fe/1/44qr6o7im_fJFbw-8Luswn0Ozt4.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/b2/563afc-b194-41fb-a7a1-6aeae63ed8fe/1/44qr6o7im_fJFbw-8Luswn0Ozt4.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         78:20:7a:83:2c:b5:1b:03:dc:7a:fa:9a:1e:68:b2:59:21:88:
         18:16:fa:c9:cf:1e:b7:3f:3a:e8:d4:84:eb:47:87:67:62:50:
         a5:28:66:7f:be:ac:0e:a0:c7:14:14:35:0d:fc:44:4b:38:00:
         e7:15:d6:a6:20:6d:cc:ed:62:b6:81:f4:c1:ff:f1:9e:bb:3a:
         3f:53:25:53:30:cf:dd:0e:3b:a0:59:46:ca:98:a8:fe:3f:6e:
         8c:94:b7:c7:3f:be:10:6a:4e:18:a7:8b:79:42:a4:09:ce:e6:
         d4:9a:98:0f:d2:24:80:a2:aa:54:9d:3a:21:bb:3e:e2:31:15:
         ab:1e:4f:6d:4c:a1:b2:ef:35:b1:25:60:fe:ff:7e:37:94:46:
         c1:88:70:32:e8:25:fc:40:e4:eb:a8:2f:71:02:57:91:52:0e:
         0e:ea:d0:7f:ac:76:7b:ac:1c:0f:81:83:26:68:61:40:6c:5e:
         2b:c0:f8:bc:b1:9b:e1:9f:a3:47:16:47:6d:b5:1a:ee:2f:8a:
         da:c3:ff:aa:ef:9f:e6:f2:ce:8e:01:20:bf:8f:6a:d5:f8:1f:
         8c:1e:98:07:a6:29:72:ac:c3:7d:20:1d:50:e6:79:18:61:9d:
         cd:0b:bf:d2:e4:19:e8:e1:12:af:8a:fa:b8:c1:ea:00:6c:97:
         2b:c5:04:01
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----