Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c5/060222-5741-4e23-97d6-d63a23cf114c/1/_kWQZfcoEX0ccLjFTNqPRh24BHU.mft
File:                     _kWQZfcoEX0ccLjFTNqPRh24BHU.mft (raw, json)
Hash identifier:          b2jiyOkrzGZRm+OWUDvA0Em1njJX/8AVP4QTd70wToc=
Subject key identifier:   18:60:9F:8E:1E:A2:B8:B0:23:B6:B8:93:D6:C1:57:3E:0A:49:CB:0C
Authority key identifier: FE:45:90:65:F7:28:11:7D:1C:70:B8:C5:4C:DA:8F:46:1D:B8:04:75
Certificate issuer:       /CN=fe459065f728117d1c70b8c54cda8f461db80475
Certificate serial:       01962F3D83BD8D7763C0AD10A6ADDEA770B0
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/_kWQZfcoEX0ccLjFTNqPRh24BHU.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/c5/060222-5741-4e23-97d6-d63a23cf114c/1/_kWQZfcoEX0ccLjFTNqPRh24BHU.mft
Manifest number:          0410
Signing time:             Sun 13 Apr 2025 13:01:22 +0000
Manifest this update:     Sun 13 Apr 2025 13:01:22 +0000
Manifest next update:     Mon 14 Apr 2025 13:01:22 +0000
Files and hashes:         1: _kWQZfcoEX0ccLjFTNqPRh24BHU.crl (hash: VamFHAkZhJK4csVXn/qjvFrwWzR0T1/FMvrmP6zYQkw=)
                          2: j0TrgD1mMe4SCFwW2zXApzSjMys.roa (hash: A16AXZA8TA0369WZ1QSUTK6vpWpKMrbFHrcl2YyzIA8=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2f:3d:83:bd:8d:77:63:c0:ad:10:a6:ad:de:a7:70:b0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=fe459065f728117d1c70b8c54cda8f461db80475
        Validity
            Not Before: Apr 13 13:01:22 2025 GMT
            Not After : Apr 14 13:01:22 2025 GMT
        Subject: CN=18609f8e1ea2b8b023b6b893d6c1573e0a49cb0c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b2:98:9b:68:86:a7:12:cf:ce:4e:28:29:10:40:
                    ba:48:d4:a3:b7:fc:3d:5f:f1:0a:d3:bf:ab:09:27:
                    4e:09:90:4e:79:9e:6a:9c:01:cf:f5:71:f2:c4:ea:
                    69:f2:a4:ac:a5:ac:f5:0a:d1:62:5f:32:f7:0f:80:
                    5c:5f:14:bb:26:1f:e1:6f:e9:85:59:f4:f7:e6:73:
                    22:3a:7a:03:dd:c5:70:d5:da:e3:a1:be:02:11:df:
                    a0:3c:3a:30:b9:9f:e3:55:58:06:c6:0c:e3:de:49:
                    1c:0d:65:8d:db:95:2c:95:5b:a1:db:6e:31:d2:b4:
                    38:2d:e5:e2:28:b0:e3:b0:a9:c8:bb:f6:1f:3e:a7:
                    d3:7a:d4:29:cb:f0:71:e6:02:34:da:b1:b1:f4:02:
                    64:b3:75:5b:94:8a:60:ad:d8:35:6e:f4:d4:3c:69:
                    e3:5f:3b:28:54:b5:d2:dc:00:ec:ba:85:78:a8:01:
                    38:02:07:89:54:34:74:cf:14:2e:e1:14:e1:fe:77:
                    b2:e2:1c:57:70:e8:e8:a0:9d:33:c7:d4:2f:81:e0:
                    75:50:0b:82:18:e1:ca:d6:11:bb:c9:9f:57:f0:27:
                    56:39:bf:ff:18:66:74:4c:eb:b3:23:cd:41:14:d3:
                    3f:ff:ac:1c:22:c8:c4:e5:00:e7:f6:f9:13:28:14:
                    01:33
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                18:60:9F:8E:1E:A2:B8:B0:23:B6:B8:93:D6:C1:57:3E:0A:49:CB:0C
            X509v3 Authority Key Identifier:
                keyid:FE:45:90:65:F7:28:11:7D:1C:70:B8:C5:4C:DA:8F:46:1D:B8:04:75

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/_kWQZfcoEX0ccLjFTNqPRh24BHU.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c5/060222-5741-4e23-97d6-d63a23cf114c/1/_kWQZfcoEX0ccLjFTNqPRh24BHU.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/c5/060222-5741-4e23-97d6-d63a23cf114c/1/_kWQZfcoEX0ccLjFTNqPRh24BHU.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         88:7b:3b:6e:e7:94:20:1c:fd:bd:1e:81:52:d9:e9:d6:9d:b7:
         83:51:4e:32:a2:7a:2d:65:1b:8b:ab:ee:5e:26:1d:0e:5e:07:
         af:dc:b2:45:d7:5f:1b:d3:fd:98:2c:ca:0d:b8:67:9a:ee:41:
         0f:78:d4:12:c8:b2:74:36:d9:30:86:26:ac:37:08:77:68:f8:
         10:bf:39:c4:ce:97:2f:9d:ea:10:03:98:14:e2:0a:81:3c:7e:
         4a:db:37:07:8c:3c:76:90:08:88:5e:aa:be:de:9d:5e:45:de:
         49:9a:6f:e3:3c:12:39:e1:d1:79:fb:be:49:e9:03:6b:a0:10:
         2c:9c:d4:01:82:ba:be:e7:f5:59:0b:ab:a7:03:c1:50:26:b3:
         0b:83:f9:85:48:96:b0:c0:11:d5:c2:aa:f1:68:35:dd:4d:7d:
         de:55:8a:ee:05:99:ef:0c:72:e3:1f:d0:c7:79:70:b7:c7:6b:
         1d:d7:4f:cd:8f:ee:70:89:78:9c:a2:0d:0e:3e:55:2a:56:1d:
         93:67:39:82:f5:c6:ba:b8:fa:42:6f:59:08:fb:80:4a:81:ee:
         55:dd:38:3b:f8:07:18:ec:58:11:4a:0d:29:fc:fa:ac:85:b8:
         ad:cd:c2:e5:52:b6:14:c1:c5:cf:6e:3c:9a:34:fd:35:e6:3e:
         e2:e6:0b:a6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----