Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d2/ac0950-2273-4ee1-a830-422e6d3fe93e/1/SZ8D5I7WKpaEDrLy15w-whon8c4.mft
File:                     SZ8D5I7WKpaEDrLy15w-whon8c4.mft (raw, json)
Hash identifier:          N4WxQNN6qtmXb76BYaXS8fB1KNw0tb1UdAWrJGFXnC8=
Subject key identifier:   6C:4D:CC:EE:25:DF:46:21:2F:01:39:A5:AC:57:BD:16:ED:C5:72:14
Authority key identifier: 49:9F:03:E4:8E:D6:2A:96:84:0E:B2:F2:D7:9C:3E:C2:1A:27:F1:CE
Certificate issuer:       /CN=499f03e48ed62a96840eb2f2d79c3ec21a27f1ce
Certificate serial:       01962F3DA275D19F10744744026F539A7ADE
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/SZ8D5I7WKpaEDrLy15w-whon8c4.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/d2/ac0950-2273-4ee1-a830-422e6d3fe93e/1/SZ8D5I7WKpaEDrLy15w-whon8c4.mft
Manifest number:          14EC
Signing time:             Sun 13 Apr 2025 13:01:30 +0000
Manifest this update:     Sun 13 Apr 2025 13:01:30 +0000
Manifest next update:     Mon 14 Apr 2025 13:01:30 +0000
Files and hashes:         1: SZ8D5I7WKpaEDrLy15w-whon8c4.crl (hash: qzJnGbBIc1pd7xJGGEzvjO6CaHYS9da6F7Ov5AQ9rBY=)
                          2: yzTNOCEQUyiIncYM071wY64qAlg.roa (hash: hLDsFeTn5OhhHpxN9Rt6KZxw/jMGMbLdQEqz1BHAxCk=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2f:3d:a2:75:d1:9f:10:74:47:44:02:6f:53:9a:7a:de
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=499f03e48ed62a96840eb2f2d79c3ec21a27f1ce
        Validity
            Not Before: Apr 13 13:01:30 2025 GMT
            Not After : Apr 14 13:01:30 2025 GMT
        Subject: CN=6c4dccee25df46212f0139a5ac57bd16edc57214
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b4:c6:3b:06:72:87:1a:c1:73:d4:fc:c3:dd:fe:
                    74:1b:f9:e7:95:85:85:d1:85:93:73:e6:03:a8:36:
                    45:3d:7f:65:ef:69:00:9b:7f:59:77:bc:2e:6e:e8:
                    11:b0:68:24:ae:6d:b0:ef:4d:f9:77:81:a1:3c:98:
                    dd:9b:1d:6c:65:52:61:c5:23:38:0b:50:af:e2:bd:
                    f6:d6:48:7b:40:bb:58:39:34:5e:97:74:fa:65:82:
                    bc:39:72:28:00:5c:82:51:c1:39:ea:41:6e:26:3b:
                    ed:b5:42:e6:0a:c7:20:8d:29:47:00:49:46:6a:77:
                    bb:ba:4f:46:f6:0f:ca:55:78:45:50:78:a1:d8:78:
                    b9:93:5b:9e:bc:80:51:ca:0f:7b:64:67:ae:c2:04:
                    69:74:6c:b1:3a:74:ab:7f:78:50:c4:15:a1:93:ad:
                    b1:8c:85:3f:b9:6d:bb:cc:8d:e8:66:78:b3:4a:8b:
                    75:34:6a:5d:90:46:23:d6:45:ac:80:58:b4:f2:83:
                    5b:58:85:62:f6:3a:32:14:a0:89:cb:fb:c6:02:e9:
                    77:95:56:20:15:c7:ff:d4:6e:0d:c7:9d:40:07:cb:
                    0d:a3:86:9c:04:40:12:55:f1:8b:9a:07:69:3b:7d:
                    b4:3f:33:c4:30:24:ad:09:ec:7c:0f:e3:a2:37:ae:
                    dd:ed
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6C:4D:CC:EE:25:DF:46:21:2F:01:39:A5:AC:57:BD:16:ED:C5:72:14
            X509v3 Authority Key Identifier:
                keyid:49:9F:03:E4:8E:D6:2A:96:84:0E:B2:F2:D7:9C:3E:C2:1A:27:F1:CE

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/SZ8D5I7WKpaEDrLy15w-whon8c4.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d2/ac0950-2273-4ee1-a830-422e6d3fe93e/1/SZ8D5I7WKpaEDrLy15w-whon8c4.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/d2/ac0950-2273-4ee1-a830-422e6d3fe93e/1/SZ8D5I7WKpaEDrLy15w-whon8c4.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         79:a9:3b:d3:cc:c4:29:72:88:2e:8e:b2:0d:87:97:dd:84:d3:
         f2:f4:49:9a:bb:1b:0a:59:48:09:82:94:58:e9:10:63:90:90:
         fa:f5:9c:14:80:0f:6e:44:96:7a:22:fa:b2:3a:93:9d:aa:56:
         3b:6a:39:fd:0b:e7:a9:49:53:e4:23:4e:bd:e9:8b:6d:40:be:
         76:e6:81:12:a1:80:d9:41:7a:65:92:fd:01:00:44:7e:4b:cd:
         ab:29:7b:54:d0:0b:07:12:8e:0e:a9:78:3a:e7:54:40:45:d6:
         52:12:78:b8:3b:4a:f9:b0:cd:1f:63:93:ae:39:26:f5:7a:06:
         d5:ad:e2:d6:bf:88:8d:e0:ad:ec:05:bb:81:d7:52:14:2e:49:
         69:68:16:58:db:26:dc:69:d6:ed:0f:76:d8:d5:2e:9a:6e:d8:
         83:5f:6b:09:2c:c5:7e:cc:26:1d:ba:e8:2a:5c:a6:5a:9d:e1:
         41:77:81:db:59:44:92:1e:8e:e9:ac:91:20:bf:4b:79:63:1b:
         fd:4e:36:b7:65:e2:78:d8:02:d9:4f:79:61:72:2a:8c:0e:9c:
         37:a6:71:fe:be:32:46:5b:ec:3c:1a:1a:a3:cb:56:d5:f6:29:
         f1:05:e3:fa:93:31:f2:c5:ac:39:7e:db:30:c2:50:1d:2f:ce:
         bb:a4:17:68
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----