Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/be/2fc167-b357-4394-b4e8-c825be2813bc/1/C4TqVJ-IIRBYs0v8qwZAwwMDk8M.mft
File:                     C4TqVJ-IIRBYs0v8qwZAwwMDk8M.mft (raw, json)
Hash identifier:          /D0nt5r2SxxTV+iQSklZNz0lr7liE5ip8fhz7n8RxMk=
Subject key identifier:   4E:B4:23:52:3E:3B:31:43:D2:2D:4C:60:73:78:2E:C7:36:85:78:09
Authority key identifier: 0B:84:EA:54:9F:88:21:10:58:B3:4B:FC:AB:06:40:C3:03:03:93:C3
Certificate issuer:       /CN=0b84ea549f88211058b34bfcab0640c3030393c3
Certificate serial:       01962E61CABEC3528765002ED8433F900792
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/C4TqVJ-IIRBYs0v8qwZAwwMDk8M.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/be/2fc167-b357-4394-b4e8-c825be2813bc/1/C4TqVJ-IIRBYs0v8qwZAwwMDk8M.mft
Manifest number:          14EA
Signing time:             Sun 13 Apr 2025 09:01:22 +0000
Manifest this update:     Sun 13 Apr 2025 09:01:22 +0000
Manifest next update:     Mon 14 Apr 2025 09:01:22 +0000
Files and hashes:         1: C4TqVJ-IIRBYs0v8qwZAwwMDk8M.crl (hash: 1B2wM3ZwlzVLH16PhkM4+JJsPHvb9asHGAVjSi1m+Wc=)
                          2: P-Dx0ihfKx4UBeNlSrnWTMyyfvY.roa (hash: viXxvbgM6fcm3+uNTvobtmlKGENasOgtCzi4bFmu9u0=)
                          3: VjB61y70CykGJrI1joYA_LZs7BQ.roa (hash: 0fdGzWqdSh6FPKMh+lErtdFv9hP3dlRfbAfCokMP6HQ=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2e:61:ca:be:c3:52:87:65:00:2e:d8:43:3f:90:07:92
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0b84ea549f88211058b34bfcab0640c3030393c3
        Validity
            Not Before: Apr 13 09:01:22 2025 GMT
            Not After : Apr 14 09:01:22 2025 GMT
        Subject: CN=4eb423523e3b3143d22d4c6073782ec736857809
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b2:38:9e:38:17:dc:5d:1d:15:e7:d0:4d:fd:c1:
                    ee:20:ec:0d:6f:f5:c0:bb:58:41:ea:1c:a3:ea:91:
                    da:e7:ec:99:62:23:fd:ee:67:7e:66:82:f7:5e:bd:
                    fc:a0:db:9d:d5:69:c3:b9:e5:6a:0d:47:a0:62:a2:
                    9f:8a:96:7c:36:c4:00:38:fc:b9:3c:4d:1d:b5:b7:
                    c5:3e:92:16:5d:47:9f:bf:23:13:a3:57:3a:f9:4d:
                    0a:b2:8d:e1:19:77:3a:48:82:81:26:17:d0:82:8c:
                    62:a7:17:82:1d:e5:03:33:c6:1b:4f:08:fa:ef:f9:
                    0d:ed:56:c9:3c:75:13:2f:06:39:68:61:5f:14:d4:
                    be:a5:ec:79:94:3e:94:8d:34:96:8d:c0:52:9d:6c:
                    ad:9a:8e:a1:29:f8:75:88:42:79:e3:54:35:e8:44:
                    d1:18:7c:4f:91:fc:a3:bc:58:6a:16:2d:13:dd:0d:
                    65:d9:ec:1d:da:35:f4:31:4c:cd:03:9d:46:65:79:
                    09:5f:82:46:29:e3:74:a7:85:6f:81:1a:b8:22:e9:
                    39:1a:2c:fa:e3:18:b8:f6:a4:94:09:15:40:8a:e5:
                    24:77:4e:cf:a6:57:a0:ae:d3:6f:1a:f1:3e:5c:8a:
                    f8:ad:5a:e6:f7:7f:1a:97:3a:2a:bf:90:49:e0:79:
                    b4:c9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4E:B4:23:52:3E:3B:31:43:D2:2D:4C:60:73:78:2E:C7:36:85:78:09
            X509v3 Authority Key Identifier:
                keyid:0B:84:EA:54:9F:88:21:10:58:B3:4B:FC:AB:06:40:C3:03:03:93:C3

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/C4TqVJ-IIRBYs0v8qwZAwwMDk8M.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/be/2fc167-b357-4394-b4e8-c825be2813bc/1/C4TqVJ-IIRBYs0v8qwZAwwMDk8M.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/be/2fc167-b357-4394-b4e8-c825be2813bc/1/C4TqVJ-IIRBYs0v8qwZAwwMDk8M.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         77:46:73:00:48:d9:6c:c0:2b:af:35:45:61:0a:c2:ca:f7:ce:
         e4:e8:57:30:5e:bf:d3:93:46:36:d6:76:e6:94:c0:44:46:b2:
         5a:50:1b:5a:35:3a:0c:8a:e7:0d:a6:21:e7:31:5f:3e:f2:5c:
         c1:25:40:7e:5f:5c:33:15:82:9a:4e:d3:33:52:22:05:e6:e8:
         89:8d:d2:97:bf:ab:6f:e2:a6:05:4f:b5:af:84:c3:fb:26:e8:
         dc:f4:15:cf:4a:75:f6:66:fa:28:87:53:c3:17:b8:00:a8:49:
         07:41:97:45:42:e0:f5:02:7c:97:a7:01:a7:db:63:1e:cf:fa:
         49:cd:21:bd:91:86:92:53:04:93:dc:be:c2:14:d6:fd:b5:06:
         29:a1:c4:d8:93:4e:20:0c:9d:09:40:a0:fc:21:55:a7:40:20:
         af:81:5e:44:d3:49:a7:1a:72:e0:73:ef:04:d6:a2:07:2c:4c:
         28:e4:81:e6:85:ca:f4:fa:3e:84:37:c2:b3:20:b8:58:6a:17:
         a1:39:08:2d:ce:79:50:f2:37:ae:09:3c:86:92:5f:00:99:6a:
         e4:19:05:0a:a3:f2:f3:2b:be:6b:ee:54:a3:96:dd:59:64:91:
         b2:4d:c3:34:b9:8d:e6:99:b9:31:aa:29:2f:13:ee:a0:b8:ca:
         dc:94:18:6e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----