Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d0/e8cfb0-9568-4157-b802-f0ed9a2ab654/1/eLCxnVDWGn4zPz0wDxFJzv3ntk8.mft
File:                     eLCxnVDWGn4zPz0wDxFJzv3ntk8.mft (raw, json)
Hash identifier:          v2JZliOqFo7x6hgQxmV1P4R9mfYJVdXUYtYCQS1oBiQ=
Subject key identifier:   F4:F6:1B:DD:CB:1D:0A:06:74:12:33:39:B6:02:88:31:ED:3E:47:71
Authority key identifier: 78:B0:B1:9D:50:D6:1A:7E:33:3F:3D:30:0F:11:49:CE:FD:E7:B6:4F
Certificate issuer:       /CN=78b0b19d50d61a7e333f3d300f1149cefde7b64f
Certificate serial:       01962F3D2ABB491B9F026AFE5069D547859F
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/eLCxnVDWGn4zPz0wDxFJzv3ntk8.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/d0/e8cfb0-9568-4157-b802-f0ed9a2ab654/1/eLCxnVDWGn4zPz0wDxFJzv3ntk8.mft
Manifest number:          04C6
Signing time:             Sun 13 Apr 2025 13:00:59 +0000
Manifest this update:     Sun 13 Apr 2025 13:00:59 +0000
Manifest next update:     Mon 14 Apr 2025 13:00:59 +0000
Files and hashes:         1: eLCxnVDWGn4zPz0wDxFJzv3ntk8.crl (hash: C4jZDlcMoWl1uRmo8MsPe3xtqhYdsqjqQS2Uug1g5Ts=)
                          2: rDcpoyvrVBT_cWdGmT4H-hyPLg0.roa (hash: ZIVMbBVJwlrHJ75Ki0ODTTpJ9+ylEgTfPq67Cig5C+s=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2f:3d:2a:bb:49:1b:9f:02:6a:fe:50:69:d5:47:85:9f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=78b0b19d50d61a7e333f3d300f1149cefde7b64f
        Validity
            Not Before: Apr 13 13:00:59 2025 GMT
            Not After : Apr 14 13:00:59 2025 GMT
        Subject: CN=f4f61bddcb1d0a0674123339b6028831ed3e4771
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:aa:ae:fb:ae:24:58:82:18:58:4f:58:a0:bc:a8:
                    99:13:e2:c5:23:7a:25:06:88:47:78:f9:a4:a0:5d:
                    f8:9a:c5:8f:d2:94:7d:e7:98:ee:15:37:c2:46:e0:
                    58:0d:46:29:74:29:a2:22:55:79:f7:82:c1:ca:87:
                    c7:87:02:6e:96:15:49:df:5e:09:74:31:05:6b:3e:
                    c6:a4:2c:f6:3f:eb:d3:e1:e3:ac:09:25:04:17:81:
                    e6:17:84:63:e5:bb:c7:b9:97:8b:35:c5:9e:65:30:
                    95:52:f2:bf:43:54:e6:5b:ea:4e:16:38:9a:24:0f:
                    21:3a:6d:b4:26:46:18:c7:72:71:69:ee:40:3c:99:
                    08:f2:b0:c3:4c:fa:e9:71:35:bb:9a:55:b3:f9:b3:
                    66:f8:4b:90:56:84:74:27:e6:ea:20:b2:1f:ab:5d:
                    0c:af:67:08:6c:d9:e9:23:2b:2f:eb:7b:62:70:cc:
                    75:8c:e1:59:8d:ed:91:48:5f:cf:80:34:86:7e:30:
                    63:7c:b1:09:bb:39:84:8f:71:0e:2d:2f:c9:79:69:
                    56:e8:ce:4d:b3:be:07:6f:36:cc:a2:a4:17:49:a9:
                    e1:d9:5d:df:2f:c0:01:be:26:92:31:e1:c1:76:df:
                    ee:ac:7e:4b:23:41:1f:15:a6:7b:47:d2:30:47:5f:
                    31:11
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F4:F6:1B:DD:CB:1D:0A:06:74:12:33:39:B6:02:88:31:ED:3E:47:71
            X509v3 Authority Key Identifier:
                keyid:78:B0:B1:9D:50:D6:1A:7E:33:3F:3D:30:0F:11:49:CE:FD:E7:B6:4F

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/eLCxnVDWGn4zPz0wDxFJzv3ntk8.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d0/e8cfb0-9568-4157-b802-f0ed9a2ab654/1/eLCxnVDWGn4zPz0wDxFJzv3ntk8.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/d0/e8cfb0-9568-4157-b802-f0ed9a2ab654/1/eLCxnVDWGn4zPz0wDxFJzv3ntk8.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         9a:91:9e:ad:da:6c:53:eb:ae:86:3d:a3:fe:2b:b5:0b:1b:24:
         3c:a1:83:a8:bd:5f:27:1b:35:15:cf:3f:bd:1b:71:f6:92:60:
         0d:d7:64:b4:61:ab:2e:8c:e9:1d:31:5d:99:bd:c3:82:5a:c0:
         0d:96:ce:7f:75:28:38:a6:95:25:a0:83:85:fe:5a:06:18:72:
         9a:d4:5b:0d:8d:a2:bd:9e:73:94:bb:c2:44:31:33:17:99:b0:
         36:1d:37:11:19:8a:fc:b6:2b:71:22:27:25:8f:ce:90:11:e1:
         e6:8a:f3:28:6e:0b:d5:29:fa:26:10:94:a9:6e:01:15:e2:7c:
         9c:6b:1c:3b:c8:14:91:c9:16:07:66:f2:54:03:ee:0b:da:38:
         1c:9b:19:ab:bd:05:f2:6a:04:9a:0b:4a:9f:ea:16:9f:cf:6b:
         7b:9b:c0:c3:ab:9a:34:9e:37:04:f2:1a:78:5b:5e:75:22:63:
         1a:13:e0:43:6a:11:2f:b9:84:a3:1b:9f:8d:f4:b6:59:0a:69:
         18:40:ea:57:2e:23:31:ec:c8:3b:6f:49:20:b7:f8:7b:59:49:
         a5:5f:92:65:51:d1:a2:f7:65:73:de:7a:f2:58:27:54:24:a1:
         a9:80:d0:33:f9:59:aa:89:13:a7:62:51:70:c2:cf:0d:29:bf:
         26:93:55:1b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----