Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c4/e5a629-8f68-432e-9e5a-c419e7129928/1/51hSRFn5E1C_OnC93qArt_GY9ic.mft
File:                     51hSRFn5E1C_OnC93qArt_GY9ic.mft (raw, json)
Hash identifier:          IL3qM8VBSTzbeNM6wvedvzKUBzNev9fAc7tbtAjcYsM=
Subject key identifier:   A0:B4:85:91:92:F9:91:06:56:D5:FE:04:B5:81:76:E1:6B:F0:F5:68
Authority key identifier: E7:58:52:44:59:F9:13:50:BF:3A:70:BD:DE:A0:2B:B7:F1:98:F6:27
Certificate issuer:       /CN=e758524459f91350bf3a70bddea02bb7f198f627
Certificate serial:       01962F7454A7EA47AE252801DCAEF6915AC2
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/51hSRFn5E1C_OnC93qArt_GY9ic.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/c4/e5a629-8f68-432e-9e5a-c419e7129928/1/51hSRFn5E1C_OnC93qArt_GY9ic.mft
Manifest number:          0816
Signing time:             Sun 13 Apr 2025 14:01:14 +0000
Manifest this update:     Sun 13 Apr 2025 14:01:14 +0000
Manifest next update:     Mon 14 Apr 2025 14:01:14 +0000
Files and hashes:         1: 51hSRFn5E1C_OnC93qArt_GY9ic.crl (hash: Uh1q6U6LcyUdkvdBVJABl1EWcpawsFCK489DfWl869A=)
                          2: u8kNkanORsDCeI7FqQBLJUQbyJw.roa (hash: UqvKDmRhZ+jIbQfoF72uxEu+VLwPbUG7YO497EELblU=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2f:74:54:a7:ea:47:ae:25:28:01:dc:ae:f6:91:5a:c2
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e758524459f91350bf3a70bddea02bb7f198f627
        Validity
            Not Before: Apr 13 14:01:14 2025 GMT
            Not After : Apr 14 14:01:14 2025 GMT
        Subject: CN=a0b4859192f9910656d5fe04b58176e16bf0f568
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a7:ce:c6:2e:fb:1f:c2:11:5f:72:55:dc:9d:e4:
                    7c:68:df:59:80:be:b8:dd:d4:2f:5b:f9:86:8b:6d:
                    e7:d5:4b:c0:62:0c:53:9d:8f:4b:2e:ae:89:f2:9c:
                    b3:bc:c9:6d:d8:0e:51:a7:9b:18:42:51:1c:99:b7:
                    6d:b9:ac:52:80:6c:41:8e:fc:49:b2:fb:13:46:32:
                    22:53:71:bd:93:21:16:32:87:a9:ab:7e:ad:46:f4:
                    2a:12:03:fc:7c:48:7d:25:ea:9c:0e:e9:ec:74:e8:
                    a7:29:1c:39:75:dd:31:20:64:59:58:f1:b3:20:92:
                    7d:2a:c1:34:9a:a4:e2:26:32:a2:a3:ff:64:f4:83:
                    45:a6:50:03:2b:70:1e:3e:7b:b1:c7:19:42:ba:08:
                    2c:5f:72:32:99:0e:ce:41:b8:9e:54:17:42:a9:b1:
                    15:f7:3f:0e:79:15:cf:76:96:33:a1:ae:ce:67:75:
                    10:32:a7:b5:31:96:a3:4e:fc:b0:91:16:90:03:1a:
                    bf:33:c1:73:5f:f7:c2:f1:7b:84:64:73:a2:f8:a6:
                    2c:d3:a1:0f:c5:e7:74:3d:ca:ec:f4:85:9a:d9:a9:
                    45:93:28:ff:a8:56:20:b2:80:5e:05:18:22:9d:2f:
                    8b:c1:83:81:62:41:0f:b1:92:3d:a9:8e:3c:8e:f0:
                    ef:f5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A0:B4:85:91:92:F9:91:06:56:D5:FE:04:B5:81:76:E1:6B:F0:F5:68
            X509v3 Authority Key Identifier:
                keyid:E7:58:52:44:59:F9:13:50:BF:3A:70:BD:DE:A0:2B:B7:F1:98:F6:27

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/51hSRFn5E1C_OnC93qArt_GY9ic.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c4/e5a629-8f68-432e-9e5a-c419e7129928/1/51hSRFn5E1C_OnC93qArt_GY9ic.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/c4/e5a629-8f68-432e-9e5a-c419e7129928/1/51hSRFn5E1C_OnC93qArt_GY9ic.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         4f:ba:86:dd:22:e7:c9:91:c1:18:7c:e1:c4:0a:cb:3b:81:ed:
         4d:02:38:ee:87:0d:46:e0:d3:a1:f4:bd:0a:a1:68:d4:b9:47:
         d0:1c:3b:c7:4d:85:e8:e7:30:a7:a0:25:ed:d9:9f:1b:64:bb:
         84:9a:3c:f5:5b:ad:8b:7f:6e:26:e1:e7:f5:c9:95:ce:2b:71:
         81:c4:52:5b:52:53:6a:e1:5c:d9:7e:93:76:23:39:3e:4f:b3:
         0b:66:f4:1c:9c:b5:17:29:ba:eb:b7:76:7c:fa:d1:3b:dc:86:
         64:12:9e:cf:fc:fd:8b:21:66:37:59:14:93:2d:9d:bc:f4:06:
         57:1e:78:58:9f:5b:3c:db:df:f9:6c:b8:61:7e:22:be:1e:a9:
         9d:01:d4:fa:4c:b8:a2:f9:96:7c:28:39:4f:b2:bb:09:46:7c:
         a7:59:2c:5b:ca:f9:c5:e5:ab:eb:65:af:93:ef:c2:58:ed:54:
         91:86:20:d5:55:8a:70:0c:3c:ff:08:6b:5f:d0:48:ce:c0:4e:
         99:dc:0d:e2:46:3f:aa:ac:5f:24:c2:2d:27:25:17:ec:4d:d3:
         6e:29:4c:e5:16:37:06:6d:b8:60:55:2d:82:4f:b5:0e:f4:90:
         4a:19:97:3b:fe:63:04:2b:ae:e9:44:22:49:61:69:22:18:fa:
         5f:97:16:ed
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----