Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d5/c4f6ee-00a8-4a4a-868c-35e027836ba3/1/SHJHQsP1ThebguavjjPg2dL71NU.mft
File:                     SHJHQsP1ThebguavjjPg2dL71NU.mft (raw, json)
Hash identifier:          U6xKYDKbGYJ3dXYxTMI7eWa2jmQ/WYyeKq+sWt+pc7M=
Subject key identifier:   91:23:F0:47:AD:3E:05:21:E8:D9:C7:79:D4:00:DF:B4:1A:BC:3E:44
Authority key identifier: 48:72:47:42:C3:F5:4E:17:9B:82:E6:AF:8E:33:E0:D9:D2:FB:D4:D5
Certificate issuer:       /CN=48724742c3f54e179b82e6af8e33e0d9d2fbd4d5
Certificate serial:       01962DF3C4EC10BCE65BED32F4095EB705CF
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/SHJHQsP1ThebguavjjPg2dL71NU.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/d5/c4f6ee-00a8-4a4a-868c-35e027836ba3/1/SHJHQsP1ThebguavjjPg2dL71NU.mft
Manifest number:          14EB
Signing time:             Sun 13 Apr 2025 07:01:12 +0000
Manifest this update:     Sun 13 Apr 2025 07:01:12 +0000
Manifest next update:     Mon 14 Apr 2025 07:01:12 +0000
Files and hashes:         1: SHJHQsP1ThebguavjjPg2dL71NU.crl (hash: HfRshU1vv6+wuehFdVbMFKlgoBftVnvGKbFrsl6wLeQ=)
                          2: fw6EErcKUkE6wVnp4BcQXOeheJE.roa (hash: X3Re7oVemXlG1F0GxrgY8aRLn+cfxjtelXf5RJOURd0=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2d:f3:c4:ec:10:bc:e6:5b:ed:32:f4:09:5e:b7:05:cf
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=48724742c3f54e179b82e6af8e33e0d9d2fbd4d5
        Validity
            Not Before: Apr 13 07:01:12 2025 GMT
            Not After : Apr 14 07:01:12 2025 GMT
        Subject: CN=9123f047ad3e0521e8d9c779d400dfb41abc3e44
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:99:02:03:b8:fc:ec:b6:f1:01:fc:ce:48:bb:d7:
                    0e:79:9b:6d:ca:f3:7f:8c:64:76:53:ed:4d:3c:38:
                    26:3f:4a:1e:d4:18:10:db:e5:c7:71:6c:e0:96:d2:
                    a8:ef:9c:ad:cc:17:78:c2:19:9e:27:2b:66:d0:c0:
                    f2:5a:fb:e6:f4:31:51:51:e4:f4:0b:15:45:26:f0:
                    84:11:b0:10:59:d2:93:39:3c:85:3e:21:98:1a:89:
                    58:08:ec:c3:86:c5:73:eb:16:7d:79:04:22:7c:f7:
                    c1:d6:ca:02:a6:cb:70:7d:e0:2b:d8:36:e6:0e:48:
                    60:75:d7:58:40:62:56:84:e7:f5:41:82:06:d4:e9:
                    37:df:a7:03:62:dc:00:03:ef:d3:bf:09:65:0f:d0:
                    ce:4c:07:24:34:ec:85:42:b1:33:5e:8e:85:e6:b9:
                    f3:85:ed:5b:e1:a2:ea:ad:7a:4a:94:11:51:a8:34:
                    78:93:97:9f:9e:31:56:69:dc:86:99:fb:56:fd:d1:
                    a6:b3:69:c7:b2:0a:56:d7:85:a9:5c:c6:7e:4c:e6:
                    0b:40:f2:0a:95:39:78:bc:67:d1:a6:49:8e:4c:22:
                    0c:49:37:29:5c:49:10:b3:9e:bd:7a:f9:fa:64:a7:
                    52:13:5a:5b:11:80:67:cf:24:95:88:84:a4:7e:09:
                    ff:73
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                91:23:F0:47:AD:3E:05:21:E8:D9:C7:79:D4:00:DF:B4:1A:BC:3E:44
            X509v3 Authority Key Identifier:
                keyid:48:72:47:42:C3:F5:4E:17:9B:82:E6:AF:8E:33:E0:D9:D2:FB:D4:D5

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/SHJHQsP1ThebguavjjPg2dL71NU.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d5/c4f6ee-00a8-4a4a-868c-35e027836ba3/1/SHJHQsP1ThebguavjjPg2dL71NU.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/d5/c4f6ee-00a8-4a4a-868c-35e027836ba3/1/SHJHQsP1ThebguavjjPg2dL71NU.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         b1:11:93:68:19:df:29:55:a0:56:6e:08:37:00:ca:b1:ef:de:
         b5:8c:ca:3a:93:1c:cf:e4:d6:fc:0a:b9:c3:3f:8f:8b:d2:f0:
         c6:cd:e3:5e:cd:a6:8e:84:26:dc:00:1d:46:28:ac:d9:e8:73:
         72:f4:9c:67:bd:eb:1c:31:c2:e3:e0:09:20:c8:26:88:3e:6d:
         7b:aa:0b:57:81:b8:de:92:20:08:e6:69:c6:98:ac:5c:5e:1f:
         05:c4:b6:ac:1e:7d:ac:3d:3a:aa:19:cc:e9:24:e4:f2:64:44:
         47:50:0f:d6:e8:d3:c8:e2:a5:ca:68:80:fb:07:f1:86:f8:cf:
         44:dc:90:6d:6a:6a:fa:7c:f4:95:dd:3f:4c:df:c9:e7:d7:fb:
         da:16:9f:99:59:cf:57:5d:75:82:bb:2c:7b:de:74:11:17:9e:
         ed:af:3a:09:81:8f:02:fe:12:5c:d4:b6:76:8a:f0:0b:78:3d:
         51:28:4f:31:bb:3b:03:b6:85:99:ac:55:81:0a:7e:09:9d:c7:
         db:e1:a6:21:ae:47:6f:d3:31:89:cb:a8:b3:10:0a:ed:c2:f6:
         11:a1:49:ba:33:00:e0:3f:c2:bd:51:ae:9e:c3:6f:d8:ec:00:
         8b:b7:be:7e:78:2b:2c:f8:60:c2:7b:f6:41:d3:ea:67:28:95:
         b2:d1:00:dd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----