Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c2/11af42-d3ed-43cd-8274-742dc0c970c0/1/4crcikIcHyLx4pBMz9u87F2-GxE.mft
File:                     4crcikIcHyLx4pBMz9u87F2-GxE.mft (raw, json)
Hash identifier:          t77Jkl/HZCvXp0VomuLMHdHcLvOBKYzz15R1ZzbAb1U=
Subject key identifier:   CB:35:14:93:B9:B7:FC:4A:65:AF:CB:4E:A2:13:ED:A3:93:2F:D5:D6
Authority key identifier: E1:CA:DC:8A:42:1C:1F:22:F1:E2:90:4C:CF:DB:BC:EC:5D:BE:1B:11
Certificate issuer:       /CN=e1cadc8a421c1f22f1e2904ccfdbbcec5dbe1b11
Certificate serial:       01962F065FBF380FCD54BB10A034064E35AA
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/4crcikIcHyLx4pBMz9u87F2-GxE.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/c2/11af42-d3ed-43cd-8274-742dc0c970c0/1/4crcikIcHyLx4pBMz9u87F2-GxE.mft
Manifest number:          14F1
Signing time:             Sun 13 Apr 2025 12:01:08 +0000
Manifest this update:     Sun 13 Apr 2025 12:01:08 +0000
Manifest next update:     Mon 14 Apr 2025 12:01:08 +0000
Files and hashes:         1: 4crcikIcHyLx4pBMz9u87F2-GxE.crl (hash: l0E/tpG1q45QcYq/avuoopfUahy3dbisZxF/ZehylCA=)
                          2: PjnPc92Q2V1HGAF2zMcKnf8EY3s.roa (hash: oJHQplo1wgSYzbHd7U3NabjFZf8l2Xl3wzFPd6jcOa8=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2f:06:5f:bf:38:0f:cd:54:bb:10:a0:34:06:4e:35:aa
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e1cadc8a421c1f22f1e2904ccfdbbcec5dbe1b11
        Validity
            Not Before: Apr 13 12:01:08 2025 GMT
            Not After : Apr 14 12:01:08 2025 GMT
        Subject: CN=cb351493b9b7fc4a65afcb4ea213eda3932fd5d6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ad:2a:a0:71:de:ed:07:58:13:1e:8c:e5:66:86:
                    33:b9:6c:b9:80:35:a9:2a:69:72:1e:41:55:87:d2:
                    a3:b8:15:ea:d1:49:c2:fc:25:aa:97:ab:53:ff:c1:
                    f4:7a:fb:2e:34:cc:6d:d8:2e:33:60:4a:bc:bc:83:
                    04:96:cf:d1:b5:ea:ba:01:4e:96:c8:b1:58:da:09:
                    60:cd:d6:8d:a4:99:1f:4f:8f:d3:78:29:38:d4:f7:
                    cf:04:b0:24:b2:2b:00:b4:04:f3:1c:fa:ec:61:08:
                    89:ed:3f:ae:64:7b:04:1e:b3:84:02:b5:69:be:33:
                    c0:17:45:a0:4a:b5:f9:26:70:07:d1:f7:63:9a:49:
                    f0:01:e8:62:ee:18:3f:64:c4:e3:f2:f1:a0:39:2c:
                    27:3f:f7:e2:2e:3b:91:b2:0e:aa:5e:65:c7:a2:b4:
                    77:39:08:54:1b:7d:29:ba:3d:92:e9:cd:c9:c4:82:
                    ca:f2:0c:af:56:16:6f:a2:78:e5:23:65:00:9f:8f:
                    4c:94:79:71:e0:ed:b1:87:e0:2b:5d:3e:ac:40:60:
                    48:91:82:4b:7b:81:af:e5:8c:c2:00:d7:d7:20:f5:
                    bc:4f:6c:bb:51:55:c7:68:a5:90:d3:d4:3e:f0:75:
                    8f:63:65:cc:eb:cd:74:0e:b8:c7:86:ab:5d:96:13:
                    63:3f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CB:35:14:93:B9:B7:FC:4A:65:AF:CB:4E:A2:13:ED:A3:93:2F:D5:D6
            X509v3 Authority Key Identifier:
                keyid:E1:CA:DC:8A:42:1C:1F:22:F1:E2:90:4C:CF:DB:BC:EC:5D:BE:1B:11

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/4crcikIcHyLx4pBMz9u87F2-GxE.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c2/11af42-d3ed-43cd-8274-742dc0c970c0/1/4crcikIcHyLx4pBMz9u87F2-GxE.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/c2/11af42-d3ed-43cd-8274-742dc0c970c0/1/4crcikIcHyLx4pBMz9u87F2-GxE.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         96:01:be:dd:bc:61:8d:69:69:20:5c:aa:b6:6d:3c:aa:b4:05:
         24:d8:57:cf:02:66:cc:b8:32:3d:bd:76:98:7b:89:8b:69:d9:
         56:21:a6:cf:1d:6d:7a:1c:7f:c6:45:93:58:3c:f6:4e:d8:b4:
         02:1a:68:0b:64:c7:09:2a:6c:70:93:80:ca:ab:7b:91:ce:f6:
         75:0c:2f:97:fc:c2:b1:b3:e2:c9:25:61:df:b8:cf:3d:b7:42:
         a0:e0:2e:d3:38:62:dd:02:8a:9a:25:ac:c7:3b:8e:a4:1f:95:
         e8:25:f7:3e:99:ef:48:5c:21:9d:3d:f4:43:ea:46:cd:c8:0c:
         83:36:00:04:33:15:f5:4d:bc:0a:25:10:3b:17:b7:93:6e:3f:
         d5:19:b0:e7:ea:d8:85:42:4a:c8:29:32:f4:46:05:f3:1a:37:
         b1:24:43:55:d0:1b:bc:26:8f:55:e2:f8:a8:df:4d:22:a4:d9:
         07:1e:48:5e:cf:de:40:d0:ed:87:83:3e:83:0b:03:c2:82:6e:
         b8:d6:ba:09:c7:ce:9d:b3:2d:db:b0:eb:d7:cc:e5:f6:b4:64:
         74:eb:9d:9a:c8:96:25:03:70:85:02:55:6a:57:06:8b:47:af:
         38:e5:c6:6f:ef:35:f9:42:68:28:c5:61:65:2a:7e:e0:b8:60:
         c4:0e:e8:f3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----