Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c7/546a55-ddaa-4341-b8f9-3ec522771f40/1/4bUJZyudmYtGScw3aoKYeeb-rKc.mft
File:                     4bUJZyudmYtGScw3aoKYeeb-rKc.mft (raw, json)
Hash identifier:          xDyepRIZ7puijibChRxCGHzgOLjTR3qBwO6ufkbUrhQ=
Subject key identifier:   23:EE:55:2B:CC:FD:F4:E4:0C:9F:64:91:84:6A:72:07:FC:7C:62:6F
Authority key identifier: E1:B5:09:67:2B:9D:99:8B:46:49:CC:37:6A:82:98:79:E6:FE:AC:A7
Certificate issuer:       /CN=e1b509672b9d998b4649cc376a829879e6feaca7
Certificate serial:       01962E621ABF0382E418ACBB3067CF9645C6
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/4bUJZyudmYtGScw3aoKYeeb-rKc.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/c7/546a55-ddaa-4341-b8f9-3ec522771f40/1/4bUJZyudmYtGScw3aoKYeeb-rKc.mft
Manifest number:          03E6
Signing time:             Sun 13 Apr 2025 09:01:43 +0000
Manifest this update:     Sun 13 Apr 2025 09:01:43 +0000
Manifest next update:     Mon 14 Apr 2025 09:01:43 +0000
Files and hashes:         1: 4bUJZyudmYtGScw3aoKYeeb-rKc.crl (hash: RaX7xtQGDvtIzWn3xMUSVU1wxhC1IZApPZFSpnLqV0c=)
                          2: OQo7GpnulSOExhIEm_K7r3ad-fY.roa (hash: Ps91P3w11BS7K9Fm7RIorSRMZXeRo1jCwYGqQnSXpfM=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2e:62:1a:bf:03:82:e4:18:ac:bb:30:67:cf:96:45:c6
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e1b509672b9d998b4649cc376a829879e6feaca7
        Validity
            Not Before: Apr 13 09:01:43 2025 GMT
            Not After : Apr 14 09:01:43 2025 GMT
        Subject: CN=23ee552bccfdf4e40c9f6491846a7207fc7c626f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b8:e2:bd:51:29:a2:46:c8:5f:20:0e:77:59:24:
                    ec:57:e6:13:3c:95:ca:ea:7a:13:3f:ea:81:29:4f:
                    40:ac:83:b4:91:9b:1c:f1:c7:66:6f:e5:91:d2:58:
                    4d:b1:f4:c8:df:1a:5d:b8:a3:5f:dd:d0:b3:8a:40:
                    94:cb:6f:fe:90:28:5c:4c:64:65:b1:e6:c2:b7:6f:
                    aa:de:bd:ab:64:11:cc:8d:71:2e:5e:89:64:6c:30:
                    77:ac:a6:f6:e6:f6:59:ef:13:9a:06:6d:79:e3:c3:
                    48:ec:6b:04:15:b9:93:20:75:05:e3:9c:8d:c9:df:
                    ce:20:4f:ad:76:03:c3:d9:76:83:e5:58:7f:d3:de:
                    fa:28:73:e2:9f:4e:49:49:9d:57:3a:84:51:8b:b6:
                    fb:57:8c:40:13:e0:12:10:2e:ac:50:b2:9d:53:35:
                    a7:d1:7e:16:de:b9:89:26:91:f0:f9:9b:a3:96:06:
                    23:27:2c:84:15:5a:1b:e2:db:03:31:6a:64:c1:99:
                    61:eb:ed:81:84:b9:ba:69:2e:b7:fb:59:3d:42:95:
                    22:a5:ee:da:f0:81:24:5c:c7:fa:cf:b5:46:cf:85:
                    48:6a:f6:4b:8b:e1:ef:e7:9d:48:5b:22:7e:28:12:
                    b9:84:d0:90:9a:ba:fd:99:44:dd:65:39:4c:c2:b5:
                    8d:53
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                23:EE:55:2B:CC:FD:F4:E4:0C:9F:64:91:84:6A:72:07:FC:7C:62:6F
            X509v3 Authority Key Identifier:
                keyid:E1:B5:09:67:2B:9D:99:8B:46:49:CC:37:6A:82:98:79:E6:FE:AC:A7

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/4bUJZyudmYtGScw3aoKYeeb-rKc.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c7/546a55-ddaa-4341-b8f9-3ec522771f40/1/4bUJZyudmYtGScw3aoKYeeb-rKc.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/c7/546a55-ddaa-4341-b8f9-3ec522771f40/1/4bUJZyudmYtGScw3aoKYeeb-rKc.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         13:e7:60:50:d5:24:bc:26:a6:11:a3:51:d5:33:57:95:5b:f9:
         7c:bb:1a:62:5b:39:9e:e4:b2:68:c6:d6:55:74:19:25:1b:5b:
         01:d4:d9:04:b6:99:c9:c5:c9:19:ec:40:ac:15:86:84:4a:1a:
         da:f9:32:71:74:cf:e0:f6:0c:8d:3e:cf:f0:80:46:49:c2:7b:
         32:45:47:81:77:ea:89:34:a5:65:a3:98:4a:be:35:6a:97:a3:
         cb:13:5f:1a:68:9c:79:5e:2b:85:ae:c0:66:71:dc:dc:02:6f:
         5d:52:ad:1e:67:34:28:ad:aa:e7:b7:1b:29:9f:0a:2b:e8:6d:
         a4:72:1c:28:9b:5e:b9:4c:8a:93:ec:a1:ee:b3:54:81:60:a8:
         e6:1d:ae:ea:80:6a:c9:7e:08:eb:d4:4b:4d:f2:e3:ab:8c:1e:
         d5:7b:ee:9b:54:0c:83:07:24:44:10:5f:e5:e3:6e:7f:eb:b1:
         80:48:9f:7f:ff:fe:7d:08:eb:84:32:ef:a7:33:db:35:cf:1b:
         f6:85:fe:7d:6a:c0:17:49:53:9d:7c:e2:f1:12:b0:2e:00:ae:
         cf:04:c6:64:36:4e:a9:d3:c8:3e:11:e2:67:14:d5:1a:02:0c:
         6c:ea:8b:56:8b:a9:54:21:e6:c3:83:60:62:3e:34:72:5d:29:
         33:6b:8b:c0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----