Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d5/842046-3f5f-4f4e-930c-e3d0a0ace398/1/elVsGaRVbzb3YAAG2OrNH6P0OfI.mft
File:                     elVsGaRVbzb3YAAG2OrNH6P0OfI.mft (raw, json)
Hash identifier:          Kxk7UIZ7/Fh2vJphCVleGOT/+05q/O//S5hrEhH4C4A=
Subject key identifier:   7A:F5:04:FC:10:8B:A2:CD:94:1E:B0:5B:E2:4F:2E:A1:42:48:34:1A
Authority key identifier: 7A:55:6C:19:A4:55:6F:36:F7:60:00:06:D8:EA:CD:1F:A3:F4:39:F2
Certificate issuer:       /CN=7a556c19a4556f36f7600006d8eacd1fa3f439f2
Certificate serial:       01962F7478BC7966E21DADF6F5A9F5CA165E
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/elVsGaRVbzb3YAAG2OrNH6P0OfI.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/d5/842046-3f5f-4f4e-930c-e3d0a0ace398/1/elVsGaRVbzb3YAAG2OrNH6P0OfI.mft
Manifest number:          04A3
Signing time:             Sun 13 Apr 2025 14:01:24 +0000
Manifest this update:     Sun 13 Apr 2025 14:01:24 +0000
Manifest next update:     Mon 14 Apr 2025 14:01:24 +0000
Files and hashes:         1: Ei-k7RiW07sWpfPP67i23htmomc.roa (hash: NiFmAUaoToM3PE1q94mcr4KCSU+oRmSZyOhAcNpUk0I=)
                          2: elVsGaRVbzb3YAAG2OrNH6P0OfI.crl (hash: UHZeDMn+sSeaaXohu4ig195/q+PBWAfTUkFipKbiu1M=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2f:74:78:bc:79:66:e2:1d:ad:f6:f5:a9:f5:ca:16:5e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7a556c19a4556f36f7600006d8eacd1fa3f439f2
        Validity
            Not Before: Apr 13 14:01:24 2025 GMT
            Not After : Apr 14 14:01:24 2025 GMT
        Subject: CN=7af504fc108ba2cd941eb05be24f2ea14248341a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8d:bd:4c:86:a8:95:02:25:d6:60:3a:8b:4c:f8:
                    d2:8b:35:22:89:f8:65:2e:78:15:01:e9:82:d3:2a:
                    64:bd:f9:d9:e0:0a:8d:da:ad:7e:c9:86:5d:55:5b:
                    fe:5e:ed:55:fd:db:c9:90:ca:24:75:3a:ce:c8:56:
                    6b:f6:71:55:8a:8c:6e:9b:d4:f6:74:b3:18:5e:26:
                    7d:f1:a9:b5:a6:50:64:69:0d:99:5a:02:06:64:28:
                    61:ae:24:ef:3d:0d:c6:f0:1b:ed:d7:4e:6a:26:29:
                    71:58:e5:82:28:b5:26:08:b9:61:7a:54:d2:85:42:
                    e3:5b:98:fb:01:7e:e6:5b:80:ba:fc:db:e8:47:91:
                    c6:7a:4d:0f:48:97:8f:61:83:fb:1d:54:16:b5:19:
                    12:d1:42:91:0c:c8:a2:8d:c2:a2:15:b7:4c:63:b3:
                    aa:e0:89:f3:e3:41:f5:05:87:4e:08:fc:07:3c:d7:
                    72:06:3b:02:1f:f7:0c:47:f6:d6:2a:c8:69:09:17:
                    05:e2:f8:79:a8:41:94:86:e5:66:c6:43:d5:be:dd:
                    12:7d:07:20:6d:7f:6d:09:82:12:9b:eb:15:35:a0:
                    22:1d:80:7d:11:a0:5f:48:c5:57:62:c5:c5:a9:70:
                    81:0f:92:50:97:6d:28:c1:6f:dd:95:f5:fa:7d:f9:
                    c2:fd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7A:F5:04:FC:10:8B:A2:CD:94:1E:B0:5B:E2:4F:2E:A1:42:48:34:1A
            X509v3 Authority Key Identifier:
                keyid:7A:55:6C:19:A4:55:6F:36:F7:60:00:06:D8:EA:CD:1F:A3:F4:39:F2

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/elVsGaRVbzb3YAAG2OrNH6P0OfI.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d5/842046-3f5f-4f4e-930c-e3d0a0ace398/1/elVsGaRVbzb3YAAG2OrNH6P0OfI.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/d5/842046-3f5f-4f4e-930c-e3d0a0ace398/1/elVsGaRVbzb3YAAG2OrNH6P0OfI.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         28:25:5b:56:59:29:a5:28:5b:80:40:c5:db:00:4a:5b:2e:6c:
         88:61:8a:21:9e:d7:d1:ee:5b:09:df:8c:4b:d7:5f:43:f1:36:
         91:51:1e:84:ff:0b:f4:20:d9:3c:77:de:5e:ae:e8:07:85:a8:
         c5:99:90:97:9b:8b:25:d8:f6:5d:a0:7c:72:9c:83:c0:1f:57:
         fd:1d:41:86:bd:c6:0c:75:89:30:e5:e9:17:f3:b3:4f:88:0d:
         be:af:3b:01:e3:cb:48:6d:ac:be:21:c6:a4:94:63:2a:93:f0:
         30:c2:7a:63:72:7a:a9:23:fc:47:bb:49:a8:37:9a:d2:42:5d:
         d0:66:30:0e:92:17:c9:51:96:15:75:f8:b6:45:6f:3a:d8:f7:
         d5:b5:43:ea:7c:6c:d0:c8:c4:72:4b:3d:9c:23:7f:60:7f:f3:
         f9:fd:23:f4:b3:63:d0:4a:61:02:0e:fc:1b:6f:2c:22:15:ec:
         80:06:3e:54:97:74:ef:a4:6b:bb:07:2b:68:59:51:ac:43:a2:
         0b:98:bc:70:7a:c8:1e:74:ef:a5:ef:d2:5e:31:09:76:54:e2:
         49:d5:fd:63:75:c0:eb:43:04:75:81:62:26:38:9e:1b:fb:44:
         1e:40:9c:49:f8:d7:92:fa:bd:34:6f:22:e9:42:f1:18:ad:6c:
         16:b6:c1:a6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----